Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ouzyNDQUjqMrmwqdjKzmyXMvkXw.roa
File: ouzyNDQUjqMrmwqdjKzmyXMvkXw.roa (raw, json)
Hash identifier: PbSij4zxciYnfV8utE9XV2x7RjENJUrGG8xQTQmqFEk=
Subject key identifier: A2:EC:F2:34:34:14:8E:A3:2B:9B:0A:9D:8C:AC:E6:C9:73:2F:91:7C
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019734D00768B09CA35A3767F86CD363B681
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ouzyNDQUjqMrmwqdjKzmyXMvkXw.roa
Signing time: Tue 03 Jun 2025 08:02:18 +0000
ROA not before: Tue 03 Jun 2025 08:02:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61317
IP address blocks: 82.152.248.0/24 maxlen: 24
82.152.251.0/24 maxlen: 24
82.152.254.0/24 maxlen: 24
82.153.34.0/24 maxlen: 24
82.153.37.0/24 maxlen: 24
82.153.132.0/24 maxlen: 24
89.213.4.0/24 maxlen: 24
89.213.7.0/24 maxlen: 24
89.213.130.0/24 maxlen: 24
89.213.190.0/24 maxlen: 24
89.213.215.0/24 maxlen: 24
109.176.247.0/24 maxlen: 24
109.176.251.0/24 maxlen: 24
213.210.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 15:40:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:34:d0:07:68:b0:9c:a3:5a:37:67:f8:6c:d3:63:b6:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jun 3 08:02:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a2ecf23434148ea32b9b0a9d8cace6c9732f917c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:10:d8:29:47:73:df:cf:91:b1:bf:b9:a6:64:
81:89:0e:ab:f7:ff:f1:1b:59:fc:44:03:26:ef:e6:
87:69:01:bb:ce:51:87:b3:3b:9a:23:e3:ee:1a:9b:
bd:0d:46:8c:93:d9:b7:7e:b2:5b:cf:ba:6f:04:f4:
0c:02:e9:97:78:04:05:0d:09:7b:73:f3:c4:ff:f7:
c5:40:6c:e3:83:1f:a7:57:a7:84:c9:c1:3c:06:52:
da:40:05:c7:bb:c1:00:30:e1:76:34:e2:57:a0:47:
4e:6a:99:a1:5e:76:f5:c0:ce:c1:a7:08:26:31:f0:
87:5c:b6:2a:d0:76:67:f0:d9:49:5a:24:f4:b4:78:
ac:b9:d3:f3:4f:bf:eb:93:99:7d:ff:15:36:8a:5f:
69:7a:b4:b3:71:f5:a4:39:87:43:81:68:0e:34:52:
b9:78:82:47:5b:0b:b5:4f:44:a0:fc:4f:14:8d:e8:
91:72:32:08:bd:e7:6d:65:75:40:9e:fc:4d:44:b5:
1f:a8:35:d7:31:7d:fe:d3:12:99:77:71:27:05:08:
2b:2b:1d:0e:8e:68:53:04:12:be:40:51:ce:41:b5:
73:ff:17:fa:5d:73:e3:82:51:01:48:6a:a7:bc:e4:
c6:d0:ae:e0:d7:eb:39:2d:71:a1:00:69:bc:09:d0:
04:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:EC:F2:34:34:14:8E:A3:2B:9B:0A:9D:8C:AC:E6:C9:73:2F:91:7C
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ouzyNDQUjqMrmwqdjKzmyXMvkXw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.248.0/24
82.152.251.0/24
82.152.254.0/24
82.153.34.0/24
82.153.37.0/24
82.153.132.0/24
89.213.4.0/24
89.213.7.0/24
89.213.130.0/24
89.213.190.0/24
89.213.215.0/24
109.176.247.0/24
109.176.251.0/24
213.210.62.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:07:52:6b:21:26:e0:95:a3:45:bc:23:51:c0:61:d0:2a:82:
93:52:ff:a1:3c:00:fc:06:b3:e1:cd:66:f7:80:b8:c3:54:ea:
03:0d:6a:0e:df:55:cc:6d:a9:15:4a:a9:fb:4e:f3:a1:21:28:
7a:73:af:47:59:fe:0d:ca:19:a7:54:d2:01:c6:33:6c:80:13:
ff:b4:05:d5:63:5d:b4:b1:d5:27:db:73:cd:99:68:26:c9:5b:
6a:6e:54:2b:cd:08:b4:8f:9d:51:9a:2c:7c:e6:ff:92:59:3d:
7b:7a:4c:e1:32:a2:53:d6:12:23:76:b1:76:cb:58:ad:10:bc:
88:11:e7:af:45:6a:91:38:a0:2d:8d:f1:ad:1c:66:9d:4e:d7:
8b:98:a5:e4:c2:95:03:f5:e1:fa:8d:8e:d9:31:ef:2d:32:0d:
be:b4:c5:45:6f:b4:82:33:e1:ee:5f:55:56:ec:c6:ff:27:9e:
95:67:20:ae:d1:dd:e8:0f:2e:05:dd:4c:62:08:03:24:cf:4d:
4a:e4:46:fe:dd:4f:99:8d:95:bc:02:e1:62:c1:cc:72:38:9d:
5d:40:8c:05:7f:b0:19:5e:e6:0b:2e:60:00:83:71:2c:5b:79:
e3:15:04:79:24:42:e9:99:67:09:05:0c:71:90:c8:ce:7f:c9:
09:b9:7a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 22:22:39 2025 by rpki-client