Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/2WiO1f5EhQssmjwts2keHMtxp_0.roa
File: 2WiO1f5EhQssmjwts2keHMtxp_0.roa (raw, json)
Hash identifier: NWrqOovHfICNJCyHQiM+ZP3uBBl6rhRnwWtyhVM14Ks=
Subject key identifier: D9:68:8E:D5:FE:44:85:0B:2C:9A:3C:2D:B3:69:1E:1C:CB:71:A7:FD
Certificate issuer: /CN=1e5b334965788794d6f147a2f004d13be3257dc4
Certificate serial: 01975647AE68C050213612A394BDF8F1A0FE
Authority key identifier: 1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/2WiO1f5EhQssmjwts2keHMtxp_0.roa
Signing time: Mon 09 Jun 2025 20:00:27 +0000
ROA not before: Mon 09 Jun 2025 20:00:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 33487
IP address blocks: 89.28.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 19:35:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:56:47:ae:68:c0:50:21:36:12:a3:94:bd:f8:f1:a0:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e5b334965788794d6f147a2f004d13be3257dc4
Validity
Not Before: Jun 9 20:00:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d9688ed5fe44850b2c9a3c2db3691e1ccb71a7fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:0f:4c:e3:8a:13:94:5c:0c:81:66:1a:c6:3c:
fe:7c:b2:3e:95:8e:5f:27:98:3a:cf:f2:4b:b3:7c:
dd:b7:3a:cd:6c:75:87:22:74:ed:52:96:f2:b9:5f:
87:43:ed:67:99:f9:6a:ca:5e:dc:35:e9:47:1f:c1:
cd:44:dc:d8:e4:e2:b0:a2:13:dd:69:ff:60:7f:2f:
3e:80:19:ea:ea:e0:c0:a2:87:dc:f3:89:4e:18:a4:
09:79:75:e4:ec:db:e4:09:4d:18:89:31:05:2b:7f:
ff:31:21:c2:e4:94:fd:e7:d3:19:59:04:1f:12:1d:
35:0c:27:66:db:41:c8:50:28:3a:a7:8f:3a:33:af:
48:b0:37:a5:21:76:02:77:5e:25:2e:65:e7:35:03:
d6:b2:f5:35:e1:12:e4:25:06:36:e5:9b:9b:54:1c:
cd:4b:50:ff:ef:e8:ba:71:bd:03:91:7f:64:49:e4:
7a:e0:15:e9:f1:9c:42:eb:6b:da:ce:d5:39:18:03:
e6:9b:d0:56:68:58:b5:63:1d:77:3a:b8:7f:e1:ee:
d7:7d:e2:a6:3a:35:a6:c5:16:02:19:aa:7d:40:aa:
2a:c4:63:e9:8e:cc:a8:68:f1:b9:65:12:35:5d:c9:
d2:b4:12:a1:6e:24:f7:e1:5d:d7:95:65:a4:a3:14:
2e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:68:8E:D5:FE:44:85:0B:2C:9A:3C:2D:B3:69:1E:1C:CB:71:A7:FD
X509v3 Authority Key Identifier:
keyid:1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/2WiO1f5EhQssmjwts2keHMtxp_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.28.205.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:80:b1:f5:1c:cc:98:2f:7c:e1:e5:f3:bd:86:f4:a9:f9:98:
e4:b1:2d:9a:47:eb:80:bc:b7:0b:7f:c9:c4:f1:25:7e:ab:14:
9b:e5:8e:7a:f5:25:14:61:8c:51:84:e8:9f:51:ba:9d:65:dc:
54:00:4f:cf:41:1c:a5:89:53:19:a6:20:45:be:28:c2:ca:59:
bc:ab:49:e2:9a:6b:34:69:82:21:96:fc:73:f5:a9:9f:92:49:
74:8f:ed:48:51:06:f4:93:18:20:f7:27:36:e5:2f:4b:ad:50:
e5:a1:9b:e4:a6:e5:40:1b:aa:5f:b3:5f:03:a0:77:de:8a:fd:
7e:5b:74:5f:fe:d8:7b:0d:bf:70:24:85:fb:f6:53:46:c1:a1:
b9:ff:fb:e9:68:ee:84:d2:16:bd:bf:a0:ac:19:61:92:c8:bc:
8f:b1:0a:1e:6e:bd:30:37:cf:38:8d:bc:9c:46:f9:a2:b0:be:
20:36:2e:d6:05:fa:bd:f5:cd:f4:0d:bb:1d:6f:3f:15:cf:a2:
6f:37:db:19:33:71:24:09:f8:fb:38:17:dd:cb:2c:23:e7:c3:
ba:cc:d2:2c:48:cd:0a:d4:1a:9d:4e:17:64:a7:86:f0:84:8d:
6d:8a:ec:3b:b2:e8:d2:5d:40:c6:d4:3f:0a:f6:f7:d0:4c:ac:
de:09:6d:3d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZdWR65owFAhNhKjlL348aD+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlNWIzMzQ5NjU3ODg3OTRkNmYxNDdhMmYwMDRkMTNiZTMy
NTdkYzQwHhcNMjUwNjA5MjAwMDI3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOTY4OGVkNWZlNDQ4NTBiMmM5YTNjMmRiMzY5MWUxY2NiNzFhN2ZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmA9M44oTlFwMgWYaxjz+fLI+lY5f
J5g6z/JLs3zdtzrNbHWHInTtUpbyuV+HQ+1nmflqyl7cNelHH8HNRNzY5OKwohPd
af9gfy8+gBnq6uDAoofc84lOGKQJeXXk7NvkCU0YiTEFK3//MSHC5JT959MZWQQf
Eh01DCdm20HIUCg6p486M69IsDelIXYCd14lLmXnNQPWsvU14RLkJQY25ZubVBzN
S1D/7+i6cb0DkX9kSeR64BXp8ZxC62vaztU5GAPmm9BWaFi1Yx13Orh/4e7XfeKm
OjWmxRYCGap9QKoqxGPpjsyoaPG5ZRI1XcnStBKhbiT34V3XlWWkoxQuQwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNlojtX+RIULLJo8LbNpHhzLcaf9MB8GA1UdIwQY
MBaAFB5bM0lleIeU1vFHovAE0TvjJX3EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGxzelNXVjRoNVRXOFVlaThBVFJPLU1sZmNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC85YmEzOGEtNDg1Mi00MTNkLTljZDIt
OTk5MGUyZDllYWZlLzEvMldpTzFmNUVoUXNzbWp3dHMya2VITXR4cF8wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC85YmEzOGEtNDg1Mi00MTNkLTljZDItOTk5MGUyZDllYWZl
LzEvSGxzelNXVjRoNVRXOFVlaThBVFJPLU1sZmNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWRzNMA0G
CSqGSIb3DQEBCwUAA4IBAQALgLH1HMyYL3zh5fO9hvSp+ZjksS2aR+uAvLcLf8nE
8SV+qxSb5Y569SUUYYxRhOifUbqdZdxUAE/PQRyliVMZpiBFvijCylm8q0nimms0
aYIhlvxz9amfkkl0j+1IUQb0kxgg9yc25S9LrVDloZvkpuVAG6pfs18DoHfeiv1+
W3Rf/th7Db9wJIX79lNGwaG5//vpaO6E0ha9v6CsGWGSyLyPsQoebr0wN884jbyc
RvmisL4gNi7WBfq99c30Dbsdbz8Vz6JvN9sZM3EkCfj7OBfdyywj58O6zNIsSM0K
1BqdThdkp4bwhI1tiuw7sujSXUDG1D8K9vfQTKzeCW09
-----END CERTIFICATE-----
Generated at Sun Jun 15 23:58:00 2025 by rpki-client