Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/9e1d5b-de61-4d9a-84bd-02792f9cf07b/1/E3s7OhtGyrgIjjo12EIie1mXMmw.roa
File: E3s7OhtGyrgIjjo12EIie1mXMmw.roa (raw, json)
Hash identifier: 4Cmbw0eTd+X80C9DMxxbHj0mIwfhVE0v3GIUD2Q+CsM=
Subject key identifier: 13:7B:3B:3A:1B:46:CA:B8:08:8E:3A:35:D8:42:22:7B:59:97:32:6C
Certificate issuer: /CN=c3042f5c4789c97c4f92ef2177e7b8938c8dd5c4
Certificate serial: 01975A5A5189B0811DA709281CE747D42066
Authority key identifier: C3:04:2F:5C:47:89:C9:7C:4F:92:EF:21:77:E7:B8:93:8C:8D:D5:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wwQvXEeJyXxPku8hd-e4k4yN1cQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/9e1d5b-de61-4d9a-84bd-02792f9cf07b/1/E3s7OhtGyrgIjjo12EIie1mXMmw.roa
Signing time: Tue 10 Jun 2025 14:59:17 +0000
ROA not before: Tue 10 Jun 2025 14:59:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2856
IP address blocks: 89.145.172.0/23 maxlen: 23
185.177.64.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/9e1d5b-de61-4d9a-84bd-02792f9cf07b/1/wwQvXEeJyXxPku8hd-e4k4yN1cQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/9e1d5b-de61-4d9a-84bd-02792f9cf07b/1/wwQvXEeJyXxPku8hd-e4k4yN1cQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/wwQvXEeJyXxPku8hd-e4k4yN1cQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 20:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5a:5a:51:89:b0:81:1d:a7:09:28:1c:e7:47:d4:20:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3042f5c4789c97c4f92ef2177e7b8938c8dd5c4
Validity
Not Before: Jun 10 14:59:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=137b3b3a1b46cab8088e3a35d842227b5997326c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:27:74:64:8c:d3:70:06:fc:c2:47:3c:80:12:
78:4f:4d:59:1c:21:b3:d7:e6:f7:fb:9c:39:59:e2:
c6:c9:2c:0b:22:82:c2:5d:67:8d:05:bf:79:50:f6:
b9:20:ec:d0:c7:4e:c4:74:56:69:e6:58:af:81:aa:
ce:31:93:96:3d:4b:8f:2e:8b:a7:68:69:07:2f:50:
36:b0:6d:17:c8:28:ec:a9:fb:52:13:d1:5a:7b:cf:
b8:f0:ae:3a:af:b3:8b:6a:9f:7f:70:f4:21:1d:48:
99:b3:09:cb:c9:0d:28:23:a4:d9:18:03:04:b0:72:
a5:99:34:9c:1f:0c:9b:04:c3:e3:02:90:dd:ad:37:
f6:68:b4:bb:16:d3:ea:34:48:98:b9:10:b2:78:fa:
c6:74:42:a5:df:d0:4f:18:92:0a:7d:56:9b:b1:b4:
0d:cb:ab:73:2c:2b:66:12:31:9a:7f:32:11:91:67:
8d:a8:d3:95:51:b5:0b:d9:80:dd:59:b0:b9:21:76:
5e:05:77:6d:4c:0f:6c:e0:41:34:63:80:26:1d:1f:
c4:0f:cd:64:bf:52:7c:be:aa:21:de:06:74:11:ca:
49:8a:6c:fb:6d:3a:db:b8:90:64:5b:5f:e7:5d:40:
f2:74:46:0a:ac:a2:88:42:8b:9b:69:a0:30:73:df:
ad:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:7B:3B:3A:1B:46:CA:B8:08:8E:3A:35:D8:42:22:7B:59:97:32:6C
X509v3 Authority Key Identifier:
keyid:C3:04:2F:5C:47:89:C9:7C:4F:92:EF:21:77:E7:B8:93:8C:8D:D5:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wwQvXEeJyXxPku8hd-e4k4yN1cQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/9e1d5b-de61-4d9a-84bd-02792f9cf07b/1/E3s7OhtGyrgIjjo12EIie1mXMmw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/9e1d5b-de61-4d9a-84bd-02792f9cf07b/1/wwQvXEeJyXxPku8hd-e4k4yN1cQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.145.172.0/23
185.177.64.0/23
Signature Algorithm: sha256WithRSAEncryption
32:df:51:fe:a8:d4:dc:f2:54:8f:fa:58:55:18:87:07:fa:97:
22:92:fc:08:14:86:1d:63:e8:bb:21:7b:d9:e5:b3:98:74:c1:
c7:af:07:71:43:41:e5:e0:1a:a2:6f:49:21:ad:64:5b:fe:5d:
74:8a:f7:88:ff:b9:c5:ff:38:44:b6:76:b5:4d:f3:0a:22:e2:
cd:33:44:a1:d6:fd:bd:bd:b0:c6:2e:2c:7d:19:13:88:b7:9d:
1d:ab:71:ae:fd:03:f3:8a:5d:12:b7:86:87:7f:4c:ad:d8:73:
67:3c:17:68:dd:4a:de:e2:b7:8a:38:f8:9c:58:eb:ca:4b:a8:
ec:20:66:a3:db:a8:a9:fc:55:ae:3b:9c:d9:17:c6:58:96:34:
47:44:c7:9b:ce:53:9d:5f:aa:20:c1:7b:b5:dd:da:13:d4:4a:
4f:bb:94:5b:e5:71:42:59:1e:8b:08:91:dd:03:6e:d5:01:30:
f4:e9:ce:ac:0b:87:db:34:b1:f8:19:1c:10:cd:34:29:da:4f:
50:3b:8d:1c:d5:5a:8f:36:53:c7:b7:d3:36:8e:fb:fe:35:93:
de:6f:35:49:57:6a:cf:53:54:c0:8e:04:0b:57:59:b7:48:e1:
5e:a7:96:12:43:0c:71:5b:51:ba:9f:6e:1c:e1:5d:a1:c8:3d:
b9:da:13:1b
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZdaWlGJsIEdpwkoHOdH1CBmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzMDQyZjVjNDc4OWM5N2M0ZjkyZWYyMTc3ZTdiODkzOGM4
ZGQ1YzQwHhcNMjUwNjEwMTQ1OTE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMzdiM2IzYTFiNDZjYWI4MDg4ZTNhMzVkODQyMjI3YjU5OTczMjZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Sd0ZIzTcAb8wkc8gBJ4T01ZHCGz
1+b3+5w5WeLGySwLIoLCXWeNBb95UPa5IOzQx07EdFZp5livgarOMZOWPUuPLoun
aGkHL1A2sG0XyCjsqftSE9Fae8+48K46r7OLap9/cPQhHUiZswnLyQ0oI6TZGAME
sHKlmTScHwybBMPjApDdrTf2aLS7FtPqNEiYuRCyePrGdEKl39BPGJIKfVabsbQN
y6tzLCtmEjGafzIRkWeNqNOVUbUL2YDdWbC5IXZeBXdtTA9s4EE0Y4AmHR/ED81k
v1J8vqoh3gZ0EcpJimz7bTrbuJBkW1/nXUDydEYKrKKIQoubaaAwc9+t9QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBN7OzobRsq4CI46NdhCIntZlzJsMB8GA1UdIwQY
MBaAFMMEL1xHicl8T5LvIXfnuJOMjdXEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3dRdlhFZUp5WHhQa3U4aGQtZTRrNHlOMWNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy85ZTFkNWItZGU2MS00ZDlhLTg0YmQt
MDI3OTJmOWNmMDdiLzEvRTNzN09odEd5cmdJampvMTJFSWllMW1YTW13LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy85ZTFkNWItZGU2MS00ZDlhLTg0YmQtMDI3OTJmOWNmMDdi
LzEvd3dRdlhFZUp5WHhQa3U4aGQtZTRrNHlOMWNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBWZGsAwQB
ubFAMA0GCSqGSIb3DQEBCwUAA4IBAQAy31H+qNTc8lSP+lhVGIcH+pcikvwIFIYd
Y+i7IXvZ5bOYdMHHrwdxQ0Hl4Bqib0khrWRb/l10iveI/7nF/zhEtna1TfMKIuLN
M0Sh1v29vbDGLix9GROIt50dq3Gu/QPzil0St4aHf0yt2HNnPBdo3Ure4reKOPic
WOvKS6jsIGaj26ip/FWuO5zZF8ZYljRHRMebzlOdX6ogwXu13doT1EpPu5Rb5XFC
WR6LCJHdA27VATD06c6sC4fbNLH4GRwQzTQp2k9QO40c1VqPNlPHt9M2jvv+NZPe
bzVJV2rPU1TAjgQLV1m3SOFep5YSQwxxW1G6n24c4V2hyD252hMb
-----END CERTIFICATE-----
Generated at Thu Jun 19 06:00:02 2025 by rpki-client