Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/2o-2D3xQt9CnXXTgOlL2I1zaC2o.roa
File: 2o-2D3xQt9CnXXTgOlL2I1zaC2o.roa (raw, json)
Hash identifier: 6L4n3E/eMLvd5/YpI3qYeIn1TTNq1G1eJpV9vSYk5Ak=
Subject key identifier: DA:8F:B6:0F:7C:50:B7:D0:A7:5D:74:E0:3A:52:F6:23:5C:DA:0B:6A
Certificate issuer: /CN=44e888a76e99851b01fb86cec537d4d8e610de16
Certificate serial: 0197598C5258962906DA64B22F6518AA16AC
Authority key identifier: 44:E8:88:A7:6E:99:85:1B:01:FB:86:CE:C5:37:D4:D8:E6:10:DE:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/2o-2D3xQt9CnXXTgOlL2I1zaC2o.roa
Signing time: Tue 10 Jun 2025 11:14:17 +0000
ROA not before: Tue 10 Jun 2025 11:14:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48955
IP address blocks: 89.35.80.0/23 maxlen: 23
89.40.222.0/23 maxlen: 23
89.45.124.0/23 maxlen: 23
91.235.207.0/24 maxlen: 24
92.42.0.0/24 maxlen: 24
185.98.158.0/24 maxlen: 24
193.239.176.0/24 maxlen: 24
194.106.206.0/24 maxlen: 24
195.35.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:8c:52:58:96:29:06:da:64:b2:2f:65:18:aa:16:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44e888a76e99851b01fb86cec537d4d8e610de16
Validity
Not Before: Jun 10 11:14:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=da8fb60f7c50b7d0a75d74e03a52f6235cda0b6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:96:dc:25:9d:fc:cd:11:e7:2c:71:4b:fa:01:
9c:d5:78:48:fb:38:4a:c4:ca:7e:d7:7d:62:40:29:
92:f6:12:89:96:29:9a:f3:e0:26:c3:f0:a1:42:18:
38:1c:e9:17:a7:9e:33:f7:97:33:f9:15:6f:dd:6a:
92:77:da:85:16:b8:a7:4f:34:28:0f:58:05:01:fa:
16:60:79:35:99:ed:9d:8b:29:fb:53:69:b9:17:f1:
05:7a:c3:fb:d9:54:d9:12:35:db:6b:54:c2:40:1c:
c4:ac:ea:6a:77:42:fb:2b:fa:e2:11:b4:1b:61:42:
f9:3f:a6:07:13:85:22:22:31:0a:bb:61:be:80:8d:
dc:94:49:59:df:e8:4a:3b:ce:8f:49:64:ca:0e:f2:
9e:ed:62:ac:7a:ff:26:36:02:41:86:6a:86:75:70:
57:8e:dd:33:78:06:6f:82:a9:82:0f:eb:ee:e8:1d:
c9:d9:73:e7:85:85:7f:10:ab:31:ee:e1:e3:1e:6d:
52:b9:e3:ed:05:e7:65:95:88:67:1a:ad:f1:15:86:
f3:d5:60:9d:75:df:0d:d9:e8:51:79:ee:c7:19:09:
fa:da:f3:0e:ff:eb:7e:c9:fa:6c:63:76:e1:31:31:
7e:2e:5a:03:4e:b2:7f:85:4c:43:e9:30:1a:4b:dd:
33:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:8F:B6:0F:7C:50:B7:D0:A7:5D:74:E0:3A:52:F6:23:5C:DA:0B:6A
X509v3 Authority Key Identifier:
keyid:44:E8:88:A7:6E:99:85:1B:01:FB:86:CE:C5:37:D4:D8:E6:10:DE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/2o-2D3xQt9CnXXTgOlL2I1zaC2o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.35.80.0/23
89.40.222.0/23
89.45.124.0/23
91.235.207.0/24
92.42.0.0/24
185.98.158.0/24
193.239.176.0/24
194.106.206.0/24
195.35.100.0/24
Signature Algorithm: sha256WithRSAEncryption
44:18:70:89:dd:e6:04:04:c9:c5:09:7e:7b:9a:a6:38:fe:60:
5a:11:34:d0:8d:af:a1:99:55:2a:65:5c:6c:5e:fe:06:2f:2f:
a5:83:ff:c3:58:35:4a:d2:83:ab:05:f6:4b:a1:19:00:86:11:
10:d8:26:62:26:5a:d1:e0:9d:be:20:a3:ae:63:81:36:fb:93:
7a:27:19:7f:bc:57:ad:55:3e:ca:99:8a:2b:95:a9:47:cc:f2:
1a:a5:7c:f9:92:e7:6a:2a:f8:d4:15:c6:bd:cb:6c:6c:70:73:
27:fb:c9:27:22:de:4b:86:ca:f4:09:7d:0b:a8:77:16:9b:89:
41:fa:fa:de:5a:cd:8b:f3:16:a9:f8:fc:a8:21:3e:f2:f4:56:
cb:2e:9e:2a:3e:35:16:68:d0:74:9d:b4:f3:68:76:c8:63:1d:
83:73:e4:ba:3e:f2:0d:9b:ea:bf:31:6e:6b:b1:dd:36:4a:ee:
26:2e:b5:cf:a5:19:83:4b:f1:8b:49:cb:d7:dc:c3:2a:cf:24:
c3:8b:0b:71:e0:bc:f6:ea:d1:11:37:21:6c:52:c4:65:a7:d6:
86:41:5e:3b:d7:58:c5:48:de:6f:3c:68:e3:70:40:7d:a7:e4:
67:d3:6d:46:6d:bf:b7:54:7c:08:f1:b6:81:38:0c:3f:fc:73:
7d:79:a9:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:28:09 2025 by rpki-client