Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/2024e2-4a49-491a-b082-d775c0021b60/1/PRnE6qJLXu--qHqmEaaawZPaMRw.roa
File: PRnE6qJLXu--qHqmEaaawZPaMRw.roa (raw, json)
Hash identifier: JZBMrYwyQ5gAIyYxMGZPjRANfDCXB1r4XoWIqBWtSzs=
Subject key identifier: 3D:19:C4:EA:A2:4B:5E:EF:BE:A8:7A:A6:11:A6:9A:C1:93:DA:31:1C
Certificate issuer: /CN=8d630b89d0b22f2ebd9e84de83511c94e3874f0b
Certificate serial: 0196EDA26DA765358C63590FB19EB482382C
Authority key identifier: 8D:63:0B:89:D0:B2:2F:2E:BD:9E:84:DE:83:51:1C:94:E3:87:4F:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jWMLidCyLy69noTeg1EclOOHTws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/2024e2-4a49-491a-b082-d775c0021b60/1/PRnE6qJLXu--qHqmEaaawZPaMRw.roa
Signing time: Tue 20 May 2025 12:19:26 +0000
ROA not before: Tue 20 May 2025 12:19:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47290
IP address blocks: 195.182.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/2024e2-4a49-491a-b082-d775c0021b60/1/jWMLidCyLy69noTeg1EclOOHTws.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/2024e2-4a49-491a-b082-d775c0021b60/1/jWMLidCyLy69noTeg1EclOOHTws.mft
rsync://rpki.ripe.net/repository/DEFAULT/jWMLidCyLy69noTeg1EclOOHTws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 06:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ed:a2:6d:a7:65:35:8c:63:59:0f:b1:9e:b4:82:38:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d630b89d0b22f2ebd9e84de83511c94e3874f0b
Validity
Not Before: May 20 12:19:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3d19c4eaa24b5eefbea87aa611a69ac193da311c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8c:3c:9f:d2:d3:d2:9b:07:a1:2c:27:ff:9e:
d6:1b:b0:3f:87:46:bf:23:15:a2:15:bb:16:6c:52:
e3:08:cb:37:13:66:f0:2b:d5:8b:b1:6f:ce:1b:03:
9a:da:a8:d8:d3:a4:14:33:77:21:61:43:bd:c4:24:
b1:89:b5:6c:15:ec:af:d6:30:c8:8b:2c:8c:9c:24:
8c:af:eb:12:f4:2e:85:a1:58:cf:9e:6e:9f:25:2f:
72:86:3b:b0:1a:2f:24:18:85:99:00:05:18:57:c4:
e7:db:82:c0:34:18:77:48:0f:0b:f6:38:28:cd:a6:
98:55:d4:de:0b:bd:cf:0f:7d:39:e1:20:44:49:87:
b7:f4:5c:49:f5:96:a2:39:ea:e0:42:df:b8:67:cf:
2e:b2:30:4e:91:ee:f5:3c:30:c9:4f:07:1a:03:11:
5b:8a:7b:ca:05:0e:b1:ec:ad:0a:be:f9:ea:6f:c8:
84:73:ee:21:fa:58:7f:6d:5c:c6:bf:a6:89:10:5d:
49:ea:bd:79:2e:2e:92:05:b6:44:c2:7b:0e:d0:fe:
e3:51:f0:a5:0e:1d:4f:ef:1c:fa:d0:8b:d2:2f:4b:
0d:b2:11:5a:a2:aa:b3:fb:39:37:db:33:e3:02:e6:
fa:b4:4c:c9:31:b3:07:34:d8:68:4a:ea:cc:11:ff:
55:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:19:C4:EA:A2:4B:5E:EF:BE:A8:7A:A6:11:A6:9A:C1:93:DA:31:1C
X509v3 Authority Key Identifier:
keyid:8D:63:0B:89:D0:B2:2F:2E:BD:9E:84:DE:83:51:1C:94:E3:87:4F:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWMLidCyLy69noTeg1EclOOHTws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/2024e2-4a49-491a-b082-d775c0021b60/1/PRnE6qJLXu--qHqmEaaawZPaMRw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/2024e2-4a49-491a-b082-d775c0021b60/1/jWMLidCyLy69noTeg1EclOOHTws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.182.35.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:c4:39:a0:2a:dd:1f:b8:03:a1:df:a7:e3:04:8a:90:26:2f:
d7:da:b4:f1:b7:10:be:2d:eb:91:99:ae:d1:ac:7a:45:a5:e9:
ba:86:e3:e2:81:62:56:be:4f:e9:48:87:31:7b:08:7a:fd:b9:
d3:9a:7d:1f:3d:8e:f3:a4:47:55:e0:01:9d:ea:47:8a:b2:3f:
a8:91:90:55:cd:77:77:81:6e:73:c7:52:d2:d1:8d:2d:36:83:
b2:28:77:a2:60:7d:c9:42:08:f2:e9:35:3f:ed:3d:50:ac:1e:
93:b3:03:94:f9:d5:85:8c:68:45:af:f4:0e:13:fe:b2:f2:3f:
1d:72:d8:96:e7:39:32:cd:da:3a:3c:af:de:00:31:df:54:27:
8a:42:48:b0:ae:18:32:d5:fc:ce:d5:e8:be:b6:95:90:0e:53:
e7:67:aa:1f:b0:f0:d1:ee:f3:1b:64:91:c8:3f:1a:55:6a:68:
8f:0e:f9:cc:12:93:e1:c3:46:bf:de:83:bc:08:9a:eb:c5:96:
df:b4:37:a6:b5:c6:56:be:2e:c2:c2:90:1b:ea:17:16:17:13:
39:e0:1e:54:28:93:59:16:e9:e4:2b:a0:4c:bd:a1:3b:01:b9:
fb:8e:e5:f8:66:97:1a:35:6d:27:b3:5d:93:16:61:ba:ab:ae:
6c:8c:aa:2f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZbtom2nZTWMY1kPsZ60gjgsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkNjMwYjg5ZDBiMjJmMmViZDllODRkZTgzNTExYzk0ZTM4
NzRmMGIwHhcNMjUwNTIwMTIxOTI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZDE5YzRlYWEyNGI1ZWVmYmVhODdhYTYxMWE2OWFjMTkzZGEzMTFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4w8n9LT0psHoSwn/57WG7A/h0a/
IxWiFbsWbFLjCMs3E2bwK9WLsW/OGwOa2qjY06QUM3chYUO9xCSxibVsFeyv1jDI
iyyMnCSMr+sS9C6FoVjPnm6fJS9yhjuwGi8kGIWZAAUYV8Tn24LANBh3SA8L9jgo
zaaYVdTeC73PD3054SBESYe39FxJ9ZaiOergQt+4Z88usjBOke71PDDJTwcaAxFb
invKBQ6x7K0Kvvnqb8iEc+4h+lh/bVzGv6aJEF1J6r15Li6SBbZEwnsO0P7jUfCl
Dh1P7xz60IvSL0sNshFaoqqz+zk32zPjAub6tEzJMbMHNNhoSurMEf9VwwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFD0ZxOqiS17vvqh6phGmmsGT2jEcMB8GA1UdIwQY
MBaAFI1jC4nQsi8uvZ6E3oNRHJTjh08LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaldNTGlkQ3lMeTY5bm9UZWcxRWNsT09IVHdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy8yMDI0ZTItNGE0OS00OTFhLWIwODIt
ZDc3NWMwMDIxYjYwLzEvUFJuRTZxSkxYdS0tcUhxbUVhYWF3WlBhTVJ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy8yMDI0ZTItNGE0OS00OTFhLWIwODItZDc3NWMwMDIxYjYw
LzEvaldNTGlkQ3lMeTY5bm9UZWcxRWNsT09IVHdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw7YjMA0G
CSqGSIb3DQEBCwUAA4IBAQBvxDmgKt0fuAOh36fjBIqQJi/X2rTxtxC+LeuRma7R
rHpFpem6huPigWJWvk/pSIcxewh6/bnTmn0fPY7zpEdV4AGd6keKsj+okZBVzXd3
gW5zx1LS0Y0tNoOyKHeiYH3JQgjy6TU/7T1QrB6TswOU+dWFjGhFr/QOE/6y8j8d
ctiW5zkyzdo6PK/eADHfVCeKQkiwrhgy1fzO1ei+tpWQDlPnZ6ofsPDR7vMbZJHI
PxpVamiPDvnMEpPhw0a/3oO8CJrrxZbftDemtcZWvi7CwpAb6hcWFxM54B5UKJNZ
FunkK6BMvaE7Abn7juX4ZpcaNW0ns12TFmG6q65sjKov
-----END CERTIFICATE-----
Generated at Wed Jun 11 12:17:58 2025 by rpki-client