Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/NP_pD2wBqXC93YKF66fo2PesMqk.roa
File: NP_pD2wBqXC93YKF66fo2PesMqk.roa (raw, json)
Hash identifier: HGL/VieBplx0MtRNwcGWbAFtZGxNzjqGMRlalKhmJcY=
Subject key identifier: 34:FF:E9:0F:6C:01:A9:70:BD:DD:82:85:EB:A7:E8:D8:F7:AC:32:A9
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0196693B85F0EB71D7FE5CB565AD569366ED
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/NP_pD2wBqXC93YKF66fo2PesMqk.roa
Signing time: Thu 24 Apr 2025 19:17:10 +0000
ROA not before: Thu 24 Apr 2025 19:17:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 26548
IP address blocks: 89.144.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 10:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:69:3b:85:f0:eb:71:d7:fe:5c:b5:65:ad:56:93:66:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 24 19:17:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=34ffe90f6c01a970bddd8285eba7e8d8f7ac32a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c3:7e:ef:95:fd:e4:39:10:57:0d:99:d1:df:
ab:5a:68:9d:38:f5:6e:92:25:68:c6:6a:7a:22:58:
50:2b:45:ef:7e:d1:01:2a:28:0b:1e:4c:7c:c6:3c:
46:79:d0:06:c7:df:08:3e:6e:6a:20:6b:73:0d:ce:
72:ac:5f:1b:85:0b:ee:51:e5:1e:a2:98:7c:70:5f:
08:47:df:af:e8:7d:b4:46:55:6a:e4:1a:8e:7a:bb:
a7:f1:a5:2a:62:9a:5b:95:b9:27:2b:91:d8:cc:04:
d8:ad:86:bb:49:b7:61:59:e1:6e:2c:fa:37:4e:29:
ff:e4:8f:5a:f5:22:f9:8e:3f:a5:d5:ff:9c:b6:6a:
21:65:81:6a:47:19:5a:68:e9:c9:02:26:38:e0:4c:
f8:50:32:2a:2f:6f:8c:4c:3f:ea:32:0c:0c:22:c5:
f7:67:eb:5b:6e:77:ca:95:03:dc:08:c5:2b:96:86:
11:9d:30:da:96:35:43:71:15:a4:d0:94:f7:ef:50:
b5:63:60:24:3f:99:c1:3b:61:2d:c2:d6:0b:28:7b:
e8:d0:7a:cf:9a:9d:7d:5a:10:89:86:da:a1:3e:00:
a7:54:d1:ee:e8:56:7e:15:42:af:27:86:ef:ea:3f:
05:de:06:86:3e:c4:86:65:7f:3f:6e:19:53:f5:87:
2d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:FF:E9:0F:6C:01:A9:70:BD:DD:82:85:EB:A7:E8:D8:F7:AC:32:A9
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/NP_pD2wBqXC93YKF66fo2PesMqk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.144.22.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:29:56:33:3b:2a:42:bc:82:1a:c0:9b:0b:92:d8:0c:12:b1:
e4:90:19:67:c4:36:41:75:2f:8d:79:0b:d7:49:14:c1:dc:c6:
c5:f0:d7:ed:3e:df:18:4e:e3:04:5e:7a:43:32:6e:32:fc:39:
9c:19:29:73:09:6e:ec:76:fb:9a:12:2a:4b:4d:e2:35:c6:b6:
da:d7:9e:aa:34:28:79:7b:e6:c1:3a:eb:36:e5:4d:27:b2:c1:
4d:a8:0e:c7:2b:cf:26:cf:11:d5:95:8c:c0:d1:e5:0c:ba:be:
e1:df:68:d9:9b:06:12:af:b9:1c:58:e9:52:f0:23:80:6f:b7:
60:7a:fb:53:0d:82:3d:13:51:44:48:63:11:54:d2:69:39:bf:
d5:e4:9c:3c:0d:86:96:b3:84:51:69:ed:bb:00:ce:20:01:77:
b0:7f:6c:8c:97:72:f7:ef:17:24:2f:90:79:9f:fb:96:7a:da:
dd:ef:a9:dd:64:0f:4f:a7:66:b3:36:2a:a9:e4:37:ee:ce:fe:
13:ee:17:dd:97:7a:07:d6:1e:31:e1:d0:55:07:d8:58:86:4b:
81:76:1c:f4:d6:a4:e3:65:1d:fd:e9:8b:ef:61:20:99:a6:55:
ba:bc:fa:7d:b5:d4:8e:0b:78:12:8d:07:ca:3e:7c:74:61:c6:
99:66:e1:c8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZZpO4Xw63HX/ly1Za1Wk2btMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjUwNDI0MTkxNzEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNGZmZTkwZjZjMDFhOTcwYmRkZDgyODVlYmE3ZThkOGY3YWMzMmE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMN+75X95DkQVw2Z0d+rWmidOPVu
kiVoxmp6IlhQK0XvftEBKigLHkx8xjxGedAGx98IPm5qIGtzDc5yrF8bhQvuUeUe
oph8cF8IR9+v6H20RlVq5BqOerun8aUqYppblbknK5HYzATYrYa7SbdhWeFuLPo3
Tin/5I9a9SL5jj+l1f+ctmohZYFqRxlaaOnJAiY44Ez4UDIqL2+MTD/qMgwMIsX3
Z+tbbnfKlQPcCMUrloYRnTDaljVDcRWk0JT371C1Y2AkP5nBO2EtwtYLKHvo0HrP
mp19WhCJhtqhPgCnVNHu6FZ+FUKvJ4bv6j8F3gaGPsSGZX8/bhlT9Yct5QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDT/6Q9sAalwvd2Cheun6Nj3rDKpMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvTlBfcEQyd0JxWEM5M1lLRjY2Zm8yUGVzTXFrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWZAWMA0G
CSqGSIb3DQEBCwUAA4IBAQC3KVYzOypCvIIawJsLktgMErHkkBlnxDZBdS+NeQvX
SRTB3MbF8NftPt8YTuMEXnpDMm4y/DmcGSlzCW7sdvuaEipLTeI1xrba156qNCh5
e+bBOus25U0nssFNqA7HK88mzxHVlYzA0eUMur7h32jZmwYSr7kcWOlS8COAb7dg
evtTDYI9E1FESGMRVNJpOb/V5Jw8DYaWs4RRae27AM4gAXewf2yMl3L37xckL5B5
n/uWetrd76ndZA9Pp2azNiqp5Dfuzv4T7hfdl3oH1h4x4dBVB9hYhkuBdhz01qTj
ZR396YvvYSCZplW6vPp9tdSOC3gSjQfKPnx0YcaZZuHI
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:24:06 2025 by rpki-client