Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/slCeTj4D2gr7k3BHjAwZ5kjaObA.roa
File: slCeTj4D2gr7k3BHjAwZ5kjaObA.roa (raw, json)
Hash identifier: BewhTx6SHIOfxB0pAPNIbUEqLENRzIjOeRywSybsMG4=
Subject key identifier: B2:50:9E:4E:3E:03:DA:0A:FB:93:70:47:8C:0C:19:E6:48:DA:39:B0
Certificate issuer: /CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Certificate serial: 019786EE2574E44723F49FFF34C57A5B961F
Authority key identifier: 8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/slCeTj4D2gr7k3BHjAwZ5kjaObA.roa
Signing time: Thu 19 Jun 2025 06:44:03 +0000
ROA not before: Thu 19 Jun 2025 06:44:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200195
IP address blocks: 46.151.181.0/24 maxlen: 24
46.151.182.0/24 maxlen: 24
83.142.209.0/24 maxlen: 24
83.142.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 19:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:86:ee:25:74:e4:47:23:f4:9f:ff:34:c5:7a:5b:96:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Validity
Not Before: Jun 19 06:44:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b2509e4e3e03da0afb9370478c0c19e648da39b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d3:03:ed:09:75:8e:8a:84:b1:02:0f:60:f6:
26:aa:34:77:da:f8:59:e9:2d:51:b8:93:49:30:e2:
28:c5:3f:2a:d9:b9:bd:e8:b9:e7:49:23:9d:43:eb:
63:e7:8a:f2:6b:0c:80:b9:a8:83:ab:a3:24:ee:8d:
3b:d8:92:36:d5:89:ab:e1:d5:18:02:4f:85:98:38:
67:37:1f:76:27:61:f5:c1:36:12:f9:9d:17:22:2f:
1a:f8:bf:ac:e8:6e:e0:90:ff:cb:8e:83:ae:a6:21:
7c:a1:f3:94:95:bc:ce:8b:19:ce:5a:4c:3e:f8:99:
fd:af:f8:a3:6a:43:ad:5e:f0:22:61:6e:b0:38:2f:
39:df:80:2b:44:87:3f:3e:70:84:9b:9e:4c:93:7b:
52:19:55:fd:23:24:b2:6f:e8:ef:fb:b5:6c:a5:63:
e1:8c:83:88:1d:87:fa:59:82:b7:e4:bf:25:c5:5c:
28:58:f2:d1:4d:30:2f:fa:7b:6f:ae:58:b2:b9:30:
f2:ad:ed:af:79:1d:93:49:62:95:51:84:30:ca:e3:
50:21:94:03:97:14:c5:f9:6b:c9:1a:d2:0a:1e:d6:
54:61:6b:4f:34:67:e0:48:c0:bd:98:70:95:39:44:
17:24:04:cd:a4:0c:b3:0f:b4:3c:b4:f9:96:68:1a:
47:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:50:9E:4E:3E:03:DA:0A:FB:93:70:47:8C:0C:19:E6:48:DA:39:B0
X509v3 Authority Key Identifier:
keyid:8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/slCeTj4D2gr7k3BHjAwZ5kjaObA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.151.181.0-46.151.182.255
83.142.209.0/24
83.142.214.0/24
Signature Algorithm: sha256WithRSAEncryption
38:10:42:22:3a:a0:37:1f:dd:8d:7d:8f:30:4b:48:dd:ca:44:
3c:e0:4b:74:5c:ca:fc:69:4c:02:54:51:be:a1:f3:ee:51:82:
8d:43:43:0d:64:ce:e3:28:49:02:de:9b:19:68:09:af:6f:82:
d3:40:e5:54:09:4e:b6:dc:d6:c4:d1:ca:7f:5f:6d:00:5a:50:
df:7e:90:5f:8a:3f:48:8b:e0:b1:2d:9d:79:ac:da:d7:9c:80:
af:ca:66:12:9f:ab:64:9a:22:81:16:c0:52:81:16:43:df:93:
38:f9:f6:56:20:b0:96:bb:40:db:f3:c9:ae:87:e9:60:a1:e4:
6e:13:ba:de:9e:16:07:ff:ff:eb:3b:cc:b4:cf:47:16:35:b3:
dc:a2:7f:2c:8a:42:46:28:eb:af:88:2e:4a:c8:f2:22:13:6d:
dd:98:6d:ca:4c:b3:b0:9a:1c:f8:96:6f:36:f1:fd:3e:4d:4c:
90:98:2b:40:83:16:5a:fe:61:19:76:79:b0:de:10:27:07:0c:
02:fd:d4:0f:81:7e:54:91:b0:3e:7c:5f:90:97:01:2f:7d:2a:
33:42:96:03:06:d1:bf:92:03:03:2d:74:ed:6f:7a:0f:29:ec:
0e:18:94:83:ab:bf:4e:5c:62:1c:1f:e3:c1:95:8a:c1:ae:7b:
1d:9a:17:a2
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAZeG7iV05Ecj9J//NMV6W5YfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlYjQ0MWRhZGJiZWNiNjk2NWQ0ZWExZjA0NmNjNWM4ZTI4
ODE3ZmMwHhcNMjUwNjE5MDY0NDAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMjUwOWU0ZTNlMDNkYTBhZmI5MzcwNDc4YzBjMTllNjQ4ZGEzOWIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9MD7Ql1joqEsQIPYPYmqjR32vhZ
6S1RuJNJMOIoxT8q2bm96LnnSSOdQ+tj54ryawyAuaiDq6Mk7o072JI21Ymr4dUY
Ak+FmDhnNx92J2H1wTYS+Z0XIi8a+L+s6G7gkP/LjoOupiF8ofOUlbzOixnOWkw+
+Jn9r/ijakOtXvAiYW6wOC8534ArRIc/PnCEm55Mk3tSGVX9IySyb+jv+7VspWPh
jIOIHYf6WYK35L8lxVwoWPLRTTAv+ntvrliyuTDyre2veR2TSWKVUYQwyuNQIZQD
lxTF+WvJGtIKHtZUYWtPNGfgSMC9mHCVOUQXJATNpAyzD7Q8tPmWaBpHuQIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFLJQnk4+A9oK+5NwR4wMGeZI2jmwMB8GA1UdIwQY
MBaAFI60QdrbvstpZdTqHwRsxcjiiBf8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanJSQjJ0dS15MmxsMU9vZkJHekZ5T0tJRl93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS85NzhkMGYtOTI5Ny00YzcxLTljZmIt
NDZiOTQ5MDkyY2JlLzEvc2xDZVRqNEQyZ3I3azNCSGpBd1o1a2phT2JBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS85NzhkMGYtOTI5Ny00YzcxLTljZmItNDZiOTQ5MDkyY2Jl
LzEvanJSQjJ0dS15MmxsMU9vZkJHekZ5T0tJRl93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBAAul7UD
BAAul7YDBABTjtEDBABTjtYwDQYJKoZIhvcNAQELBQADggEBADgQQiI6oDcf3Y19
jzBLSN3KRDzgS3RcyvxpTAJUUb6h8+5Rgo1DQw1kzuMoSQLemxloCa9vgtNA5VQJ
Trbc1sTRyn9fbQBaUN9+kF+KP0iL4LEtnXms2tecgK/KZhKfq2SaIoEWwFKBFkPf
kzj59lYgsJa7QNvzya6H6WCh5G4Tut6eFgf//+s7zLTPRxY1s9yifyyKQkYo66+I
LkrI8iITbd2YbcpMs7CaHPiWbzbx/T5NTJCYK0CDFlr+YRl2ebDeECcHDAL91A+B
flSRsD58X5CXAS99KjNClgMG0b+SAwMtdO1veg8p7A4YlIOrv05cYhwf48GVisGu
ex2aF6I=
-----END CERTIFICATE-----
Generated at Fri Jun 20 05:28:06 2025 by rpki-client