Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/JCWKZjA4zCmRM7sy6cZyYW71Em8.roa
File: JCWKZjA4zCmRM7sy6cZyYW71Em8.roa (raw, json)
Hash identifier: AVdMLzKfAWW2z8evrC6dCmlMyEMY87F4gH6C3tI4j+M=
Subject key identifier: 24:25:8A:66:30:38:CC:29:91:33:BB:32:E9:C6:72:61:6E:F5:12:6F
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01963327AB25B6815FC3356C150B3781D6FC
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/JCWKZjA4zCmRM7sy6cZyYW71Em8.roa
Signing time: Mon 14 Apr 2025 07:15:59 +0000
ROA not before: Mon 14 Apr 2025 07:15:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 82.152.8.0/24 maxlen: 24
82.152.98.0/24 maxlen: 24
82.153.205.0/24 maxlen: 24
82.153.217.0/24 maxlen: 24
89.213.50.0/24 maxlen: 24
109.176.244.0/24 maxlen: 24
212.38.79.0/24 maxlen: 24
213.218.234.0/24 maxlen: 24
213.218.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:33:27:ab:25:b6:81:5f:c3:35:6c:15:0b:37:81:d6:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Apr 14 07:15:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=24258a663038cc299133bb32e9c672616ef5126f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:dc:00:9a:4b:15:f6:0f:6d:fe:b8:89:2e:fe:
6c:fc:80:29:89:4d:41:00:1c:8a:97:83:fa:14:4f:
f6:7a:2b:33:b8:35:96:41:49:8f:94:22:93:97:b9:
d8:77:cc:d7:a9:9c:5c:8f:9e:0a:59:26:4d:04:0f:
1b:c7:a2:04:72:4c:bd:c6:ef:09:87:ab:32:9b:c4:
12:1f:2a:89:b5:d7:5f:8f:52:92:b6:68:da:01:7d:
56:f0:87:5a:5b:66:ec:1e:15:c7:dc:87:73:28:db:
76:c1:39:4a:31:73:37:b4:45:6d:92:76:b9:f8:12:
29:ef:66:94:62:97:07:1c:27:77:0b:44:c9:aa:59:
f2:cb:80:5c:a5:7a:23:17:35:74:70:a0:ee:18:46:
47:95:6d:3f:72:3f:25:a8:bd:43:76:c2:46:da:58:
d8:68:03:23:94:86:f3:e7:c8:6a:f6:b1:01:bf:7d:
3a:fa:90:08:61:fe:b8:98:17:83:75:04:02:a2:c1:
15:53:5f:10:fa:98:3d:5d:9e:71:23:d4:4a:ad:c1:
ff:56:43:a9:c3:d6:e2:35:20:32:24:38:e6:79:91:
a3:5c:15:49:be:a6:87:be:d8:db:54:55:2c:8e:49:
d2:e2:7e:d8:51:ee:2b:13:e2:22:84:19:e0:39:3c:
5d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:25:8A:66:30:38:CC:29:91:33:BB:32:E9:C6:72:61:6E:F5:12:6F
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/JCWKZjA4zCmRM7sy6cZyYW71Em8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.8.0/24
82.152.98.0/24
82.153.205.0/24
82.153.217.0/24
89.213.50.0/24
109.176.244.0/24
212.38.79.0/24
213.218.234.0/24
213.218.238.0/24
Signature Algorithm: sha256WithRSAEncryption
76:a8:4a:2c:a1:98:98:da:7e:b7:1d:ff:df:99:22:c7:fd:15:
f5:d3:44:db:86:cb:88:47:f3:58:94:85:65:ad:3c:97:86:a1:
27:fc:f2:86:ef:33:79:9e:39:a7:3c:fe:80:df:c3:ad:e7:3d:
9a:09:27:61:58:6c:8e:5c:94:24:20:8a:d5:fb:20:9e:fc:ac:
d9:db:0e:1f:2e:2d:cf:5a:53:5d:99:9f:c5:52:07:bf:ce:03:
8a:57:f2:9a:12:a9:bf:a7:0e:6b:4c:2c:9d:5c:b2:6d:c0:98:
e4:6f:62:02:15:b7:e0:bf:0c:0e:76:65:4c:2d:62:2f:51:47:
b1:2c:fa:cd:f6:58:98:7f:0c:49:8b:eb:b3:92:22:44:25:14:
9e:c6:64:d6:cc:59:4f:d2:ce:6e:3a:8f:16:64:9c:59:19:4b:
e2:d0:b8:27:eb:ab:53:32:c0:b8:72:8a:c0:86:16:a2:35:ec:
a3:9c:c0:da:3f:d9:c4:18:42:08:70:e6:2f:5b:f1:18:91:d4:
9e:6c:44:4e:b0:e7:ce:56:21:fe:c6:8c:82:91:94:37:b9:f2:
37:88:df:22:ba:31:23:58:91:d6:4f:bb:29:40:0f:24:12:33:
c1:06:f3:67:9c:a0:53:be:90:d6:3b:67:43:53:50:98:58:ec:
af:ae:4f:1a
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgISAZYzJ6sltoFfwzVsFQs3gdb8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjUwNDE0MDcxNTU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNDI1OGE2NjMwMzhjYzI5OTEzM2JiMzJlOWM2NzI2MTZlZjUxMjZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdwAmksV9g9t/riJLv5s/IApiU1B
AByKl4P6FE/2eiszuDWWQUmPlCKTl7nYd8zXqZxcj54KWSZNBA8bx6IEcky9xu8J
h6sym8QSHyqJtddfj1KStmjaAX1W8IdaW2bsHhXH3IdzKNt2wTlKMXM3tEVtkna5
+BIp72aUYpcHHCd3C0TJqlnyy4BcpXojFzV0cKDuGEZHlW0/cj8lqL1DdsJG2ljY
aAMjlIbz58hq9rEBv306+pAIYf64mBeDdQQCosEVU18Q+pg9XZ5xI9RKrcH/VkOp
w9biNSAyJDjmeZGjXBVJvqaHvtjbVFUsjknS4n7YUe4rE+IihBngOTxd6wIDAQAB
o4ICOTCCAjUwHQYDVR0OBBYEFCQlimYwOMwpkTO7MunGcmFu9RJvMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvSkNXS1pqQTR6Q21STTdzeTZjWnlZVzcxRW04LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQAUpgIAwQA
UphiAwQAUpnNAwQAUpnZAwQAWdUyAwQAbbD0AwQA1CZPAwQA1drqAwQA1druMA0G
CSqGSIb3DQEBCwUAA4IBAQB2qEosoZiY2n63Hf/fmSLH/RX100TbhsuIR/NYlIVl
rTyXhqEn/PKG7zN5njmnPP6A38Ot5z2aCSdhWGyOXJQkIIrV+yCe/KzZ2w4fLi3P
WlNdmZ/FUge/zgOKV/KaEqm/pw5rTCydXLJtwJjkb2ICFbfgvwwOdmVMLWIvUUex
LPrN9liYfwxJi+uzkiJEJRSexmTWzFlP0s5uOo8WZJxZGUvi0Lgn66tTMsC4corA
hhaiNeyjnMDaP9nEGEIIcOYvW/EYkdSebEROsOfOViH+xoyCkZQ3ufI3iN8iujEj
WJHWT7spQA8kEjPBBvNnnKBTvpDWO2dDU1CYWOyvrk8a
-----END CERTIFICATE-----
Generated at Sun Apr 27 13:45:22 2025 by rpki-client