Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/JQJmD49tR8jandeFHJ1IkrOGoDQ.roa
File: JQJmD49tR8jandeFHJ1IkrOGoDQ.roa (raw, json)
Hash identifier: qBRt18tQW7myUfjqyk6Za7F1LghK7qoZn+vndFJYSpM=
Subject key identifier: 25:02:66:0F:8F:6D:47:C8:DA:9D:D7:85:1C:9D:48:92:B3:86:A0:34
Certificate issuer: /CN=a92e5d979e0325399946b2390822d30f1d2f35e1
Certificate serial: 0196EE73D36B9A7C3C4B6B7564CF1B0BA283
Authority key identifier: A9:2E:5D:97:9E:03:25:39:99:46:B2:39:08:22:D3:0F:1D:2F:35:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qS5dl54DJTmZRrI5CCLTDx0vNeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/JQJmD49tR8jandeFHJ1IkrOGoDQ.roa
Signing time: Tue 20 May 2025 16:08:10 +0000
ROA not before: Tue 20 May 2025 16:08:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34977
IP address blocks: 176.126.196.0/23 maxlen: 24
185.216.52.0/22 maxlen: 24
185.252.172.0/22 maxlen: 24
188.208.28.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/qS5dl54DJTmZRrI5CCLTDx0vNeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/qS5dl54DJTmZRrI5CCLTDx0vNeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qS5dl54DJTmZRrI5CCLTDx0vNeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ee:73:d3:6b:9a:7c:3c:4b:6b:75:64:cf:1b:0b:a2:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a92e5d979e0325399946b2390822d30f1d2f35e1
Validity
Not Before: May 20 16:08:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2502660f8f6d47c8da9dd7851c9d4892b386a034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:44:cf:98:99:89:d6:b0:6b:2d:9c:41:a8:01:
48:7e:d4:18:3e:53:64:e8:50:47:d2:a7:b7:3d:1f:
3c:6c:cd:64:f6:06:50:32:d3:5d:63:18:55:12:f2:
26:b2:97:7a:bc:b6:3f:1d:55:0e:8e:bd:eb:21:fa:
16:b3:ce:d5:2e:54:82:bc:de:f2:6d:e2:d4:e9:2e:
84:f6:93:d3:76:7b:71:8d:28:cd:3b:90:56:e7:0f:
e8:9d:51:8c:17:ed:d7:ae:98:17:a7:c3:95:f7:8b:
f0:56:09:4e:b1:ad:48:2b:6a:b9:11:71:80:78:4e:
96:3f:e0:f5:10:8f:78:3d:58:45:1a:ec:02:12:cd:
f9:88:19:de:0f:3f:4e:d9:6e:df:60:f9:f3:e9:fe:
01:f5:3e:31:98:5c:54:42:25:d1:cb:be:65:b7:95:
80:b5:cb:08:88:de:d4:17:80:c6:63:b2:8b:41:70:
7e:3c:29:28:26:b2:c4:dd:f5:80:0c:84:56:b7:61:
88:26:f6:ff:2d:1d:1e:fa:ac:21:b1:ec:7f:7b:0c:
9d:ee:fd:71:cb:ea:da:c5:6e:63:60:a7:0c:72:c5:
54:b6:76:da:d1:fc:ae:fc:ea:d7:94:e1:37:4f:58:
39:d4:1f:83:2c:a4:03:ab:e9:67:84:31:e0:96:0f:
52:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:02:66:0F:8F:6D:47:C8:DA:9D:D7:85:1C:9D:48:92:B3:86:A0:34
X509v3 Authority Key Identifier:
keyid:A9:2E:5D:97:9E:03:25:39:99:46:B2:39:08:22:D3:0F:1D:2F:35:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qS5dl54DJTmZRrI5CCLTDx0vNeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/JQJmD49tR8jandeFHJ1IkrOGoDQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/qS5dl54DJTmZRrI5CCLTDx0vNeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.126.196.0/23
185.216.52.0/22
185.252.172.0/22
188.208.28.0/23
Signature Algorithm: sha256WithRSAEncryption
74:36:c4:bc:00:64:54:d0:e6:32:e7:5b:cc:c4:75:37:5c:d1:
67:3b:fa:53:c3:d6:80:b7:87:41:eb:e2:ac:6f:41:22:43:60:
88:10:77:15:5c:48:df:df:f3:46:d2:e3:d5:99:ea:32:88:15:
81:45:b8:64:5c:55:5d:39:8f:92:ec:1e:36:03:2d:58:99:b5:
e7:db:9d:a4:0c:01:41:4f:e8:98:7a:73:ce:8f:e3:c1:d6:48:
c9:68:38:fd:7c:2d:af:de:1a:30:33:70:ec:14:4c:63:8a:fe:
76:88:06:28:67:37:4b:f6:ff:41:3e:51:74:78:8a:db:e6:2e:
50:9b:bd:12:4f:cc:a9:84:fc:8a:d0:01:42:e2:14:8b:fe:b4:
f5:85:c4:ab:41:7a:c5:91:a7:f2:0c:30:fe:39:c3:96:ea:ff:
70:0d:ff:01:c1:1e:66:84:2d:53:d6:31:eb:74:25:9d:a4:60:
c1:c3:00:94:95:ec:28:a1:3d:47:0e:58:56:4d:ed:84:bc:46:
b8:a4:af:b9:94:4d:4a:0b:09:d2:8e:d4:04:8a:35:96:ca:49:
1b:b9:56:f5:50:e5:7c:cb:2f:75:21:0b:6f:22:85:03:54:3d:
56:78:a7:76:ff:91:39:1d:8f:97:7d:9e:06:c1:bd:7a:7f:d8:
12:a8:11:2c
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZbuc9Nrmnw8S2t1ZM8bC6KDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5MmU1ZDk3OWUwMzI1Mzk5OTQ2YjIzOTA4MjJkMzBmMWQy
ZjM1ZTEwHhcNMjUwNTIwMTYwODEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNTAyNjYwZjhmNmQ0N2M4ZGE5ZGQ3ODUxYzlkNDg5MmIzODZhMDM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkTPmJmJ1rBrLZxBqAFIftQYPlNk
6FBH0qe3PR88bM1k9gZQMtNdYxhVEvImspd6vLY/HVUOjr3rIfoWs87VLlSCvN7y
beLU6S6E9pPTdntxjSjNO5BW5w/onVGMF+3XrpgXp8OV94vwVglOsa1IK2q5EXGA
eE6WP+D1EI94PVhFGuwCEs35iBneDz9O2W7fYPnz6f4B9T4xmFxUQiXRy75lt5WA
tcsIiN7UF4DGY7KLQXB+PCkoJrLE3fWADIRWt2GIJvb/LR0e+qwhsex/ewyd7v1x
y+raxW5jYKcMcsVUtnba0fyu/OrXlOE3T1g51B+DLKQDq+lnhDHglg9SDwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFCUCZg+PbUfI2p3XhRydSJKzhqA0MB8GA1UdIwQY
MBaAFKkuXZeeAyU5mUayOQgi0w8dLzXhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVM1ZGw1NERKVG1aUnJJNUNDTFREeDB2TmVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC84MTExNWUtYmNhMS00Mzc1LTgxMDAt
YTQ3ZDE0MWNmYzVhLzEvSlFKbUQ0OXRSOGphbmRlRkhKMUlrck9Hb0RRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC84MTExNWUtYmNhMS00Mzc1LTgxMDAtYTQ3ZDE0MWNmYzVh
LzEvcVM1ZGw1NERKVG1aUnJJNUNDTFREeDB2TmVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBsH7EAwQC
udg0AwQCufysAwQBvNAcMA0GCSqGSIb3DQEBCwUAA4IBAQB0NsS8AGRU0OYy51vM
xHU3XNFnO/pTw9aAt4dB6+Ksb0EiQ2CIEHcVXEjf3/NG0uPVmeoyiBWBRbhkXFVd
OY+S7B42Ay1YmbXn252kDAFBT+iYenPOj+PB1kjJaDj9fC2v3howM3DsFExjiv52
iAYoZzdL9v9BPlF0eIrb5i5Qm70ST8yphPyK0AFC4hSL/rT1hcSrQXrFkafyDDD+
OcOW6v9wDf8BwR5mhC1T1jHrdCWdpGDBwwCUlewooT1HDlhWTe2EvEa4pK+5lE1K
CwnSjtQEijWWykkbuVb1UOV8yy91IQtvIoUDVD1WeKd2/5E5HY+XfZ4Gwb16f9gS
qBEs
-----END CERTIFICATE-----
Generated at Sun Jun 8 13:44:22 2025 by rpki-client