Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/2tJn_jA_Mhz2PVpLMQwgdbmwjCc.roa
File: 2tJn_jA_Mhz2PVpLMQwgdbmwjCc.roa (raw, json)
Hash identifier: J+tviQaEGw7OCcsEGRg0qUjPFT7PE00z2TgOqHpgCD8=
Subject key identifier: DA:D2:67:FE:30:3F:32:1C:F6:3D:5A:4B:31:0C:20:75:B9:B0:8C:27
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 0196DA1E245AA0A118F5F02397F874841A81
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/2tJn_jA_Mhz2PVpLMQwgdbmwjCc.roa
Signing time: Fri 16 May 2025 17:22:10 +0000
ROA not before: Fri 16 May 2025 17:22:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213021
IP address blocks: 80.64.19.0/24 maxlen: 24
185.39.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 16:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:da:1e:24:5a:a0:a1:18:f5:f0:23:97:f8:74:84:1a:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: May 16 17:22:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dad267fe303f321cf63d5a4b310c2075b9b08c27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4b:23:0e:28:73:b1:19:b1:68:3e:aa:e8:f9:
00:f5:ef:8a:12:16:4e:34:3d:b5:8f:46:b1:22:47:
ff:ae:65:3d:8f:0f:cd:73:42:97:15:c9:46:bf:05:
3c:94:55:71:58:3b:7f:4a:82:10:64:c8:37:f0:31:
0e:e3:84:38:6c:c1:97:58:4b:84:be:ef:39:3f:97:
7a:30:39:79:8a:9c:3c:fb:71:55:6a:a9:64:a8:33:
21:fd:d8:9d:bc:bd:7d:cc:ef:cd:b9:ab:47:b7:79:
3f:c2:1c:22:4c:30:cf:22:fc:70:24:a4:06:06:3c:
e4:af:25:2f:45:ae:e3:ea:c4:dd:29:44:12:d9:0b:
54:f7:b7:22:18:7a:2a:14:fb:97:ba:41:6e:6b:4b:
e6:22:1a:bd:9e:83:66:79:e1:2a:ca:2d:4c:88:55:
34:35:1f:ac:bd:9f:d1:8c:08:2e:ad:40:7d:83:ec:
cd:07:31:df:d8:b4:ba:5c:2e:57:7c:bb:ba:39:0f:
e9:b4:e1:ae:6d:85:82:6d:7a:df:70:aa:ec:d3:1a:
0d:9c:45:9d:b9:94:f9:22:be:14:41:db:b1:ec:12:
df:cb:2f:9b:44:75:a2:dd:4a:f5:08:ff:c3:7b:a6:
a9:8c:4c:44:50:db:af:9d:ec:ea:71:1b:55:0f:19:
80:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:D2:67:FE:30:3F:32:1C:F6:3D:5A:4B:31:0C:20:75:B9:B0:8C:27
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/2tJn_jA_Mhz2PVpLMQwgdbmwjCc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.64.19.0/24
185.39.19.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:33:65:5b:69:94:02:97:ac:c0:c2:e4:2d:9a:99:16:cb:d9:
7e:4a:12:50:6c:84:e8:96:da:2a:71:32:31:b4:02:32:a9:cf:
0d:56:84:60:3e:c8:6e:59:17:4e:27:1c:69:e5:a0:8a:61:fa:
0e:16:b4:61:0d:8b:7f:77:be:4e:e5:aa:77:02:cd:3b:7f:86:
8d:30:7e:d4:78:86:96:d5:c1:cc:4f:95:83:1d:18:93:b4:dc:
34:1f:32:c0:f4:59:cc:59:4b:e7:6e:ed:b7:3c:b6:fa:34:ff:
3b:cb:dc:4f:48:90:6f:53:7c:20:d4:37:63:d3:cd:ac:3c:5e:
8a:59:3f:54:d9:da:ff:d3:e9:83:f2:d4:e6:58:74:bf:0a:35:
e9:e8:6b:5d:94:55:aa:cf:df:43:11:be:84:d9:53:83:4b:a0:
fe:ca:7a:b0:ac:14:61:73:a5:61:bc:59:e3:30:05:e7:be:6c:
c1:f4:dc:99:45:30:9e:06:80:3e:3c:b2:a2:06:da:42:1c:08:
8d:22:40:2a:1c:2b:7b:cf:14:cf:9e:59:40:a3:e5:9a:2c:c3:
12:c1:7b:26:12:cd:f6:46:78:60:98:4a:a7:c8:fb:c6:b5:d7:
3d:79:0b:79:13:32:d4:ce:6b:4e:ba:9b:47:42:b7:6f:5d:bd:
c5:b5:53:a3
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZbaHiRaoKEY9fAjl/h0hBqBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxODQ3OGYxOThmZTU2OTAxMGMzZGY2MjE5MTQyZjUzMGM0
ZjVlNTYwHhcNMjUwNTE2MTcyMjEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYWQyNjdmZTMwM2YzMjFjZjYzZDVhNGIzMTBjMjA3NWI5YjA4YzI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0sjDihzsRmxaD6q6PkA9e+KEhZO
ND21j0axIkf/rmU9jw/Nc0KXFclGvwU8lFVxWDt/SoIQZMg38DEO44Q4bMGXWEuE
vu85P5d6MDl5ipw8+3FVaqlkqDMh/didvL19zO/NuatHt3k/whwiTDDPIvxwJKQG
BjzkryUvRa7j6sTdKUQS2QtU97ciGHoqFPuXukFua0vmIhq9noNmeeEqyi1MiFU0
NR+svZ/RjAgurUB9g+zNBzHf2LS6XC5XfLu6OQ/ptOGubYWCbXrfcKrs0xoNnEWd
uZT5Ir4UQdux7BLfyy+bRHWi3Ur1CP/De6apjExEUNuvnezqcRtVDxmA/wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFNrSZ/4wPzIc9j1aSzEMIHW5sIwnMB8GA1UdIwQY
MBaAFGGEePGY/laQEMPfYhkUL1MMT15WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEt
YmE5OGYxMTIyMTIxLzEvMnRKbl9qQV9NaHoyUFZwTE1Rd2dkYm13akNjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEtYmE5OGYxMTIyMTIx
LzEvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUEATAwQA
uScTMA0GCSqGSIb3DQEBCwUAA4IBAQBbM2VbaZQCl6zAwuQtmpkWy9l+ShJQbITo
ltoqcTIxtAIyqc8NVoRgPshuWRdOJxxp5aCKYfoOFrRhDYt/d75O5ap3As07f4aN
MH7UeIaW1cHMT5WDHRiTtNw0HzLA9FnMWUvnbu23PLb6NP87y9xPSJBvU3wg1Ddj
082sPF6KWT9U2dr/0+mD8tTmWHS/CjXp6GtdlFWqz99DEb6E2VODS6D+ynqwrBRh
c6VhvFnjMAXnvmzB9NyZRTCeBoA+PLKiBtpCHAiNIkAqHCt7zxTPnllAo+WaLMMS
wXsmEs32RnhgmEqnyPvGtdc9eQt5EzLUzmtOuptHQrdvXb3FtVOj
-----END CERTIFICATE-----
Generated at Mon Jun 9 01:29:30 2025 by rpki-client