Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Riasb48JJOvt52SMWzuD2d4m0uk.roa
File: Riasb48JJOvt52SMWzuD2d4m0uk.roa (raw, json)
Hash identifier: YIzpKxeAir9zcZqeQuuIs/7phUp3JRu4QgPuIwqgJIs=
Subject key identifier: 46:26:AC:6F:8F:09:24:EB:ED:E7:64:8C:5B:3B:83:D9:DE:26:D2:E9
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 019717456BB8AD70A988BA548D9005097FEE
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Riasb48JJOvt52SMWzuD2d4m0uk.roa
Signing time: Wed 28 May 2025 14:21:54 +0000
ROA not before: Wed 28 May 2025 14:21:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207700
IP address blocks: 195.58.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:17:45:6b:b8:ad:70:a9:88:ba:54:8d:90:05:09:7f:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: May 28 14:21:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4626ac6f8f0924ebede7648c5b3b83d9de26d2e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ce:97:22:76:fd:df:6a:87:cd:aa:0a:27:a0:
e2:ac:75:54:08:f7:21:05:69:99:93:ea:e1:f7:01:
ca:37:db:f6:b1:04:78:be:ff:2a:8a:27:f3:73:50:
73:ec:c2:3b:0f:16:60:64:e8:f9:1d:10:af:f5:0d:
e2:a7:4e:ba:eb:f2:c4:07:c4:a8:62:80:5f:12:9e:
d9:1c:a3:10:51:ca:f0:aa:af:cf:65:08:f3:39:2d:
24:1f:4c:d1:a2:6b:cd:eb:df:b3:0d:66:86:cd:f4:
0c:99:70:6f:59:85:2d:77:be:83:15:ff:f0:14:4c:
87:c0:1d:01:35:3f:c8:bb:39:62:b5:47:fa:f2:dd:
cf:64:8a:b8:65:5a:0d:42:4d:a3:d8:41:59:9e:d3:
db:e2:26:76:3c:6e:72:dd:27:11:fe:49:78:38:7f:
1a:eb:79:ed:80:76:86:b5:18:e9:9d:ca:77:09:7a:
5f:4c:06:0b:67:6d:fc:59:98:1f:76:ae:ef:06:cb:
18:69:0f:93:41:68:99:6e:5a:2c:e4:09:0f:42:a1:
6d:78:85:96:4e:c8:da:ee:7b:23:e3:1e:c6:16:bf:
af:28:b9:0d:e2:30:7b:e4:22:99:47:f0:86:00:0e:
af:cd:8a:d1:3b:95:bb:68:46:3e:9d:9d:10:8f:c2:
bb:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:26:AC:6F:8F:09:24:EB:ED:E7:64:8C:5B:3B:83:D9:DE:26:D2:E9
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Riasb48JJOvt52SMWzuD2d4m0uk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.58.33.0/24
Signature Algorithm: sha256WithRSAEncryption
01:20:f3:14:55:f5:8c:03:e6:fd:b0:73:23:ad:48:7e:9e:d3:
ea:3b:f6:6e:94:bf:b8:7a:fd:11:6a:76:b4:c5:94:68:80:ef:
a3:bb:2c:73:c4:48:07:fd:29:67:d7:d9:ee:6b:d9:74:84:29:
71:6c:06:74:86:f1:b1:d8:e5:19:f1:a7:7b:67:34:7a:c2:2e:
36:56:b5:0c:65:48:e2:6f:4f:2e:14:d8:ef:56:6a:69:e2:55:
34:4b:01:1f:7a:b8:90:29:74:10:df:e6:ca:50:11:7d:84:e7:
4f:ce:84:f4:05:ad:2d:f3:44:44:bf:20:5c:f8:7c:5a:1a:dd:
1c:94:e3:77:d9:4c:d1:82:c6:cc:08:fb:11:25:bd:90:89:3e:
cc:03:15:6b:08:dd:57:3f:d4:e6:63:7d:51:65:53:31:ad:7e:
2e:d3:8a:ca:9a:80:82:42:d1:71:ee:6c:2d:99:40:96:47:8b:
43:7f:ce:08:49:dd:3b:06:f0:1d:a4:b4:bf:e9:90:56:98:79:
c9:69:b9:18:40:95:f8:3d:85:b2:91:18:d4:8e:14:84:b8:0b:
ca:4f:7b:d3:83:c6:15:b2:82:29:dd:86:b6:df:da:a4:2d:2c:
df:6d:a3:4c:99:e5:0e:42:fc:e9:fd:22:f1:71:c9:c9:62:f0:
99:60:51:9d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZcXRWu4rXCpiLpUjZAFCX/uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjUwNTI4MTQyMTU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NjI2YWM2ZjhmMDkyNGViZWRlNzY0OGM1YjNiODNkOWRlMjZkMmU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAws6XInb932qHzaoKJ6DirHVUCPch
BWmZk+rh9wHKN9v2sQR4vv8qiifzc1Bz7MI7DxZgZOj5HRCv9Q3ip0666/LEB8So
YoBfEp7ZHKMQUcrwqq/PZQjzOS0kH0zRomvN69+zDWaGzfQMmXBvWYUtd76DFf/w
FEyHwB0BNT/IuzlitUf68t3PZIq4ZVoNQk2j2EFZntPb4iZ2PG5y3ScR/kl4OH8a
63ntgHaGtRjpncp3CXpfTAYLZ238WZgfdq7vBssYaQ+TQWiZblos5AkPQqFteIWW
Tsja7nsj4x7GFr+vKLkN4jB75CKZR/CGAA6vzYrRO5W7aEY+nZ0Qj8K7VwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEYmrG+PCSTr7edkjFs7g9neJtLpMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvUmlhc2I0OEpKT3Z0NTJTTVd6dUQyZDRtMHVrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwzohMA0G
CSqGSIb3DQEBCwUAA4IBAQABIPMUVfWMA+b9sHMjrUh+ntPqO/ZulL+4ev0Rana0
xZRogO+juyxzxEgH/Sln19nua9l0hClxbAZ0hvGx2OUZ8ad7ZzR6wi42VrUMZUji
b08uFNjvVmpp4lU0SwEferiQKXQQ3+bKUBF9hOdPzoT0Ba0t80REvyBc+HxaGt0c
lON32UzRgsbMCPsRJb2QiT7MAxVrCN1XP9TmY31RZVMxrX4u04rKmoCCQtFx7mwt
mUCWR4tDf84ISd07BvAdpLS/6ZBWmHnJabkYQJX4PYWykRjUjhSEuAvKT3vTg8YV
soIp3Ya239qkLSzfbaNMmeUOQvzp/SLxccnJYvCZYFGd
-----END CERTIFICATE-----
Generated at Sun Jun 15 05:16:24 2025 by rpki-client