Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/3AOOtYTWHUkwb_ukWlmm-pchoVc.roa
File: 3AOOtYTWHUkwb_ukWlmm-pchoVc.roa (raw, json)
Hash identifier: dLeS8pBtm5oY4QvpEAkbul72HIrvSThofwAjFyamsOo=
Subject key identifier: DC:03:8E:B5:84:D6:1D:49:30:6F:FB:A4:5A:59:A6:FA:97:21:A1:57
Certificate issuer: /CN=1e5b334965788794d6f147a2f004d13be3257dc4
Certificate serial: 0197628ADFD0329A15AE417E53112B8CC9D5
Authority key identifier: 1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/3AOOtYTWHUkwb_ukWlmm-pchoVc.roa
Signing time: Thu 12 Jun 2025 05:09:17 +0000
ROA not before: Thu 12 Jun 2025 05:09:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 135402
IP address blocks: 89.28.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:62:8a:df:d0:32:9a:15:ae:41:7e:53:11:2b:8c:c9:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e5b334965788794d6f147a2f004d13be3257dc4
Validity
Not Before: Jun 12 05:09:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dc038eb584d61d49306ffba45a59a6fa9721a157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0d:6c:8a:32:41:61:bd:43:d1:1f:83:7c:2c:
10:e3:f5:c9:9c:9d:f9:1b:69:29:46:35:82:4c:7e:
59:0d:70:b6:67:7b:3e:3b:7b:15:72:2d:5e:af:5a:
dd:09:77:0b:90:e4:50:58:dc:da:2c:02:af:6a:9e:
85:c4:d4:f5:be:d2:ba:1b:23:81:96:4a:f9:78:e4:
b6:97:91:92:66:4a:8a:66:c9:ec:fd:af:35:6a:97:
8a:7f:3c:47:b8:a9:76:f4:e2:e6:d2:86:98:be:97:
81:9b:3c:ad:3f:bc:47:0f:67:4e:22:63:54:32:ff:
7a:02:6e:af:9e:20:7c:7e:3d:dd:f1:74:e2:a1:2a:
dc:66:07:15:0b:57:27:a0:dd:d3:da:f3:d9:ab:24:
64:00:15:ef:08:69:1f:92:88:14:61:9c:d1:1b:2f:
68:7c:cf:c5:9f:33:15:d7:4b:77:bb:de:3f:d4:6b:
07:45:64:7e:0e:bc:43:f3:36:c9:ca:93:9c:f3:5c:
5c:d7:30:db:7d:43:52:e5:1e:18:59:f4:57:ad:a1:
0c:98:70:8c:b3:04:7e:c1:e3:72:5e:aa:4b:d7:87:
a7:b5:f0:27:77:24:91:89:37:bc:78:7a:9d:48:67:
a6:3d:0b:77:97:5a:fa:4b:69:68:4c:1c:3d:29:cb:
66:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:03:8E:B5:84:D6:1D:49:30:6F:FB:A4:5A:59:A6:FA:97:21:A1:57
X509v3 Authority Key Identifier:
keyid:1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/3AOOtYTWHUkwb_ukWlmm-pchoVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.28.202.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:48:a7:56:01:ce:0d:0b:b4:1e:9f:79:97:64:a3:21:e2:24:
72:49:fc:99:0f:91:8e:28:b2:9b:7c:ec:4c:8c:a3:f1:d7:ce:
b0:d6:05:46:06:3d:17:ec:92:75:22:f6:24:93:f8:3b:51:79:
6a:4c:8c:48:3f:db:5b:39:2b:bc:81:2d:9f:ea:68:7f:14:5c:
47:ba:9c:24:8e:22:86:f8:56:31:57:c0:43:8d:0c:f8:9e:e5:
4a:aa:4c:22:4f:5b:50:df:70:e4:d6:53:00:3f:21:70:9f:51:
f3:10:d2:5d:2a:c7:fe:f0:37:9a:5b:44:63:fe:9b:87:8f:48:
39:65:00:d1:f3:b5:aa:e9:ff:39:85:b3:93:4d:6c:98:8e:99:
c3:ad:21:f1:b2:36:c5:33:1b:06:97:8a:96:46:63:4d:ed:0b:
cf:f1:51:6a:96:19:54:5d:e3:30:17:97:bd:3d:90:7c:8f:21:
60:de:a8:94:aa:e0:ce:7e:f7:8c:a1:91:bf:21:10:8f:ab:52:
e0:92:bc:d2:87:ae:5e:9d:f8:d8:c9:12:87:7b:cc:8f:11:d4:
e6:97:3c:91:e4:88:71:3e:da:d1:35:5e:68:46:88:92:35:d8:
34:24:e5:97:f9:4b:58:9c:d4:b4:50:0a:a4:be:d8:91:07:2d:
4d:d5:df:78
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZdiit/QMpoVrkF+UxErjMnVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlNWIzMzQ5NjU3ODg3OTRkNmYxNDdhMmYwMDRkMTNiZTMy
NTdkYzQwHhcNMjUwNjEyMDUwOTE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYzAzOGViNTg0ZDYxZDQ5MzA2ZmZiYTQ1YTU5YTZmYTk3MjFhMTU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvw1sijJBYb1D0R+DfCwQ4/XJnJ35
G2kpRjWCTH5ZDXC2Z3s+O3sVci1er1rdCXcLkORQWNzaLAKvap6FxNT1vtK6GyOB
lkr5eOS2l5GSZkqKZsns/a81apeKfzxHuKl29OLm0oaYvpeBmzytP7xHD2dOImNU
Mv96Am6vniB8fj3d8XTioSrcZgcVC1cnoN3T2vPZqyRkABXvCGkfkogUYZzRGy9o
fM/FnzMV10t3u94/1GsHRWR+DrxD8zbJypOc81xc1zDbfUNS5R4YWfRXraEMmHCM
swR+weNyXqpL14entfAndySRiTe8eHqdSGemPQt3l1r6S2loTBw9KctmIwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNwDjrWE1h1JMG/7pFpZpvqXIaFXMB8GA1UdIwQY
MBaAFB5bM0lleIeU1vFHovAE0TvjJX3EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGxzelNXVjRoNVRXOFVlaThBVFJPLU1sZmNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC85YmEzOGEtNDg1Mi00MTNkLTljZDIt
OTk5MGUyZDllYWZlLzEvM0FPT3RZVFdIVWt3Yl91a1dsbW0tcGNob1ZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC85YmEzOGEtNDg1Mi00MTNkLTljZDItOTk5MGUyZDllYWZl
LzEvSGxzelNXVjRoNVRXOFVlaThBVFJPLU1sZmNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWRzKMA0G
CSqGSIb3DQEBCwUAA4IBAQBPSKdWAc4NC7Qen3mXZKMh4iRySfyZD5GOKLKbfOxM
jKPx186w1gVGBj0X7JJ1IvYkk/g7UXlqTIxIP9tbOSu8gS2f6mh/FFxHupwkjiKG
+FYxV8BDjQz4nuVKqkwiT1tQ33Dk1lMAPyFwn1HzENJdKsf+8DeaW0Rj/puHj0g5
ZQDR87Wq6f85hbOTTWyYjpnDrSHxsjbFMxsGl4qWRmNN7QvP8VFqlhlUXeMwF5e9
PZB8jyFg3qiUquDOfveMoZG/IRCPq1LgkrzSh65enfjYyRKHe8yPEdTmlzyR5Ihx
PtrRNV5oRoiSNdg0JOWX+UtYnNS0UAqkvtiRBy1N1d94
-----END CERTIFICATE-----
Generated at Sun Jun 15 11:45:32 2025 by rpki-client