Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/032d8b-4881-46fa-b674-7733bd888e28/1/k29cbE30TGhu-1q8rRu7-jpqTg4.roa
File: k29cbE30TGhu-1q8rRu7-jpqTg4.roa (raw, json)
Hash identifier: 9mQL8HUgIQzEZ7MXmoS/sUavd/K/UaaalJ5/ztoLSTk=
Subject key identifier: 93:6F:5C:6C:4D:F4:4C:68:6E:FB:5A:BC:AD:1B:BB:FA:3A:6A:4E:0E
Certificate issuer: /CN=da0b33cddb799b7bcf5d3dce004fdba8c3e864ff
Certificate serial: 01955B1FB6F26C9032CB0494D835D851BEAD
Authority key identifier: DA:0B:33:CD:DB:79:9B:7B:CF:5D:3D:CE:00:4F:DB:A8:C3:E8:64:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gszzdt5m3vPXT3OAE_bqMPoZP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/032d8b-4881-46fa-b674-7733bd888e28/1/k29cbE30TGhu-1q8rRu7-jpqTg4.roa
Signing time: Mon 03 Mar 2025 08:29:19 +0000
ROA not before: Mon 03 Mar 2025 08:29:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57630
IP address blocks: 80.88.126.0/24 maxlen: 24
81.8.212.0/24 maxlen: 24
81.8.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/032d8b-4881-46fa-b674-7733bd888e28/1/2gszzdt5m3vPXT3OAE_bqMPoZP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/032d8b-4881-46fa-b674-7733bd888e28/1/2gszzdt5m3vPXT3OAE_bqMPoZP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gszzdt5m3vPXT3OAE_bqMPoZP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 20:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:5b:1f:b6:f2:6c:90:32:cb:04:94:d8:35:d8:51:be:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0b33cddb799b7bcf5d3dce004fdba8c3e864ff
Validity
Not Before: Mar 3 08:29:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=936f5c6c4df44c686efb5abcad1bbbfa3a6a4e0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:11:fb:e3:41:ff:81:cc:56:b3:91:c4:db:6c:
7b:62:7b:e5:33:52:f0:b6:6b:fa:e4:1d:c7:66:d9:
0a:4d:04:f8:13:b0:7a:d7:0a:c1:d8:2c:14:c3:a7:
4c:aa:50:44:4f:a6:e3:26:6e:24:f1:ec:6c:86:2d:
bd:0e:d4:12:1b:5f:5f:08:69:fc:13:58:34:36:99:
db:1f:19:ed:fe:15:5b:4d:a6:11:11:06:d3:3a:f4:
75:bd:45:60:3e:30:5a:bd:98:61:bd:0c:82:c6:cd:
16:cb:2c:87:48:6b:c2:03:cc:37:23:20:44:4f:50:
c9:fe:0f:6d:74:69:bc:45:f7:a3:64:24:22:23:90:
cf:93:83:db:cf:a3:b2:8c:81:b4:9b:bd:ca:95:4d:
0d:0f:4d:00:03:1f:d3:1e:82:a0:e3:40:f5:de:f3:
1b:60:db:c3:8a:51:b4:34:50:9a:a0:7f:e3:c1:28:
16:0e:00:98:09:35:be:da:0a:b1:a0:d2:ba:32:9f:
cb:cd:61:b0:d6:e0:dd:c4:16:87:59:61:41:27:8b:
86:8c:40:ca:91:a5:d4:60:5d:7d:9c:de:6f:96:11:
4c:7c:90:f3:dd:5d:63:d1:75:af:48:98:68:a1:b0:
fd:64:1f:34:e0:6f:2a:de:f0:41:51:59:57:6a:e0:
bb:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:6F:5C:6C:4D:F4:4C:68:6E:FB:5A:BC:AD:1B:BB:FA:3A:6A:4E:0E
X509v3 Authority Key Identifier:
keyid:DA:0B:33:CD:DB:79:9B:7B:CF:5D:3D:CE:00:4F:DB:A8:C3:E8:64:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gszzdt5m3vPXT3OAE_bqMPoZP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/032d8b-4881-46fa-b674-7733bd888e28/1/k29cbE30TGhu-1q8rRu7-jpqTg4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/032d8b-4881-46fa-b674-7733bd888e28/1/2gszzdt5m3vPXT3OAE_bqMPoZP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.88.126.0/24
81.8.212.0/24
81.8.245.0/24
Signature Algorithm: sha256WithRSAEncryption
71:56:7e:ea:f1:3d:d0:ef:95:56:8c:e9:ca:23:83:cf:67:16:
bb:b0:eb:5d:c8:fe:48:c5:52:0e:58:24:7c:62:10:31:0b:e0:
71:97:c8:5c:57:22:d2:01:c8:09:11:4f:1e:8a:6f:87:80:f0:
15:28:b8:f2:97:ed:29:d3:99:c8:a4:71:b7:59:e9:3a:5e:c5:
4e:87:17:82:7d:18:69:5d:a5:bd:a3:3e:55:89:f8:6c:9f:88:
9a:79:81:61:c4:17:1f:1e:e3:10:4d:e6:94:60:b9:f9:9c:6e:
a5:9a:b9:75:e1:20:d3:f3:28:df:5e:35:e4:22:b6:ba:8a:bd:
ee:f3:97:fd:f2:30:ec:25:cc:d3:1e:6b:1e:a9:2e:82:be:36:
b5:20:83:22:16:84:ac:2e:7d:2c:18:b0:ee:d9:f6:c0:ce:6e:
fc:69:b7:52:a9:1e:16:41:82:71:92:d3:29:d6:28:c4:16:35:
ce:7a:ad:89:f7:b1:89:0d:2b:0c:cb:e1:df:01:71:cc:55:8c:
4d:8f:ae:27:f6:17:2e:e8:e6:75:6e:fa:0d:f8:34:e0:4a:cd:
ec:f8:26:74:a6:39:a1:96:90:d4:e9:af:0b:c1:85:51:0d:27:
e1:67:16:77:02:b7:63:f8:4d:84:70:7c:82:58:bd:31:89:56:
26:38:5f:53
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZVbH7bybJAyywSU2DXYUb6tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhMGIzM2NkZGI3OTliN2JjZjVkM2RjZTAwNGZkYmE4YzNl
ODY0ZmYwHhcNMjUwMzAzMDgyOTE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MzZmNWM2YzRkZjQ0YzY4NmVmYjVhYmNhZDFiYmJmYTNhNmE0ZTBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4hH740H/gcxWs5HE22x7YnvlM1Lw
tmv65B3HZtkKTQT4E7B61wrB2CwUw6dMqlBET6bjJm4k8exshi29DtQSG19fCGn8
E1g0NpnbHxnt/hVbTaYREQbTOvR1vUVgPjBavZhhvQyCxs0WyyyHSGvCA8w3IyBE
T1DJ/g9tdGm8RfejZCQiI5DPk4Pbz6OyjIG0m73KlU0ND00AAx/THoKg40D13vMb
YNvDilG0NFCaoH/jwSgWDgCYCTW+2gqxoNK6Mp/LzWGw1uDdxBaHWWFBJ4uGjEDK
kaXUYF19nN5vlhFMfJDz3V1j0XWvSJhoobD9ZB804G8q3vBBUVlXauC7EQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFJNvXGxN9ExobvtavK0bu/o6ak4OMB8GA1UdIwQY
MBaAFNoLM83beZt7z109zgBP26jD6GT/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmdzenpkdDVtM3ZQWFQzT0FFX2JxTVBvWlA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8wMzJkOGItNDg4MS00NmZhLWI2NzQt
NzczM2JkODg4ZTI4LzEvazI5Y2JFMzBUR2h1LTFxOHJSdTctanBxVGc0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS8wMzJkOGItNDg4MS00NmZhLWI2NzQtNzczM2JkODg4ZTI4
LzEvMmdzenpkdDVtM3ZQWFQzT0FFX2JxTVBvWlA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAUFh+AwQA
UQjUAwQAUQj1MA0GCSqGSIb3DQEBCwUAA4IBAQBxVn7q8T3Q75VWjOnKI4PPZxa7
sOtdyP5IxVIOWCR8YhAxC+Bxl8hcVyLSAcgJEU8eim+HgPAVKLjyl+0p05nIpHG3
Wek6XsVOhxeCfRhpXaW9oz5Vifhsn4iaeYFhxBcfHuMQTeaUYLn5nG6lmrl14SDT
8yjfXjXkIra6ir3u85f98jDsJczTHmseqS6Cvja1IIMiFoSsLn0sGLDu2fbAzm78
abdSqR4WQYJxktMp1ijEFjXOeq2J97GJDSsMy+HfAXHMVYxNj64n9hcu6OZ1bvoN
+DTgSs3s+CZ0pjmhlpDU6a8LwYVRDSfhZxZ3Ardj+E2EcHyCWL0xiVYmOF9T
-----END CERTIFICATE-----
Generated at Sat Apr 19 06:24:44 2025 by rpki-client