Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7bed63-406e-405c-a7f0-7cd9c3baba25/1/jZbpJpit-Lsd4dvBv-eijT1tPzY.roa
File: jZbpJpit-Lsd4dvBv-eijT1tPzY.roa (raw, json)
Hash identifier: 4vmUiP1P84jE5ddsRzTqHbpq5+SB2pApAR6uzAQoPmA=
Subject key identifier: 8D:96:E9:26:98:AD:F8:BB:1D:E1:DB:C1:BF:E7:A2:8D:3D:6D:3F:36
Certificate issuer: /CN=24c96d386d7cf59a990d3994f0df8493dfca49b3
Certificate serial: 01977726270766EF9EF791ED23540543E698
Authority key identifier: 24:C9:6D:38:6D:7C:F5:9A:99:0D:39:94:F0:DF:84:93:DF:CA:49:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JMltOG189ZqZDTmU8N-Ek9_KSbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7bed63-406e-405c-a7f0-7cd9c3baba25/1/jZbpJpit-Lsd4dvBv-eijT1tPzY.roa
Signing time: Mon 16 Jun 2025 05:11:18 +0000
ROA not before: Mon 16 Jun 2025 05:11:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202660
IP address blocks: 185.74.4.0/22 maxlen: 22
2a05:45c7:e000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/7bed63-406e-405c-a7f0-7cd9c3baba25/1/JMltOG189ZqZDTmU8N-Ek9_KSbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/7bed63-406e-405c-a7f0-7cd9c3baba25/1/JMltOG189ZqZDTmU8N-Ek9_KSbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/JMltOG189ZqZDTmU8N-Ek9_KSbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 23:47:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:26:27:07:66:ef:9e:f7:91:ed:23:54:05:43:e6:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24c96d386d7cf59a990d3994f0df8493dfca49b3
Validity
Not Before: Jun 16 05:11:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8d96e92698adf8bb1de1dbc1bfe7a28d3d6d3f36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fd:ce:29:19:a8:7a:a6:a0:cc:ce:00:3a:16:
22:45:9d:61:9c:c8:b0:c2:52:32:db:6f:e9:69:a7:
a8:45:e5:d6:e9:f4:3a:93:57:17:61:5a:ba:2b:24:
b3:bf:01:e4:d0:b9:40:b3:ec:5d:3e:da:e9:6a:71:
65:1f:1f:63:5b:03:2b:fd:82:a9:0d:52:83:7c:fc:
a8:af:d4:ec:73:fe:ab:da:0c:e1:95:b3:23:35:d8:
32:97:58:7a:7b:3c:a8:60:44:54:b0:92:a8:3b:4e:
78:c8:ad:8f:d3:e2:69:80:d5:80:a7:bd:b8:09:1a:
79:24:ae:13:94:43:a4:3d:a5:63:ec:82:c6:0b:a1:
22:00:02:85:64:6b:a5:84:2e:68:0a:b6:c2:4c:02:
2f:7c:36:9b:4e:54:d8:5e:43:4c:6a:05:16:55:4c:
08:f7:5b:2c:84:2d:7a:3e:d1:19:93:23:4c:26:3a:
df:b3:09:c6:b2:3a:25:1a:50:66:49:c7:03:64:e0:
c3:a9:17:ca:8b:22:9a:10:a6:c1:0e:8a:83:1a:69:
cb:31:92:52:24:28:dd:86:ed:50:85:b4:32:bb:1a:
19:c5:94:6d:91:3a:b3:e6:ac:5e:b3:d7:a9:1b:46:
3d:bd:9f:8a:50:99:c9:80:cc:9e:bb:e5:ad:84:77:
73:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:96:E9:26:98:AD:F8:BB:1D:E1:DB:C1:BF:E7:A2:8D:3D:6D:3F:36
X509v3 Authority Key Identifier:
keyid:24:C9:6D:38:6D:7C:F5:9A:99:0D:39:94:F0:DF:84:93:DF:CA:49:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JMltOG189ZqZDTmU8N-Ek9_KSbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7bed63-406e-405c-a7f0-7cd9c3baba25/1/jZbpJpit-Lsd4dvBv-eijT1tPzY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7bed63-406e-405c-a7f0-7cd9c3baba25/1/JMltOG189ZqZDTmU8N-Ek9_KSbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.74.4.0/22
IPv6:
2a05:45c7:e000::/36
Signature Algorithm: sha256WithRSAEncryption
25:5c:08:fe:37:47:52:23:7e:47:d6:68:fd:15:28:df:25:a7:
b5:3b:fa:14:4c:b4:af:c1:e7:f0:e4:87:17:6b:ef:e7:c6:56:
18:ee:10:1f:9e:b6:d0:dd:e9:b8:c7:ea:dc:34:87:d0:d5:ce:
3a:96:35:32:98:91:49:9b:f1:1f:c1:0e:25:ec:07:1e:da:0b:
c3:d9:9d:da:bd:5e:5e:d1:d3:f0:f0:a0:99:ae:38:e9:55:04:
b5:23:3f:58:07:5c:53:a6:d0:d7:a0:53:c2:92:da:48:b3:85:
5b:1b:3e:a4:d2:92:e1:e7:bf:b1:a1:b4:e5:3e:c1:ca:8b:89:
1d:4f:44:14:d0:56:b6:46:0c:aa:3c:b1:b7:68:0b:c8:0e:df:
04:60:3c:f7:09:e5:cb:b5:dc:52:bb:0b:2a:4f:81:c5:60:54:
0c:a5:2e:4a:3a:5f:76:cf:0f:ae:0a:37:ab:fb:9b:e1:5f:47:
8a:54:ba:62:b2:8f:4a:5e:36:63:7d:ce:64:77:29:77:56:97:
81:7a:1e:81:5b:a7:56:e5:fd:ce:c4:50:fe:fd:2d:9a:18:a7:
0c:29:70:47:27:a2:46:ca:bf:11:8a:03:05:16:a9:9b:9b:06:
06:ec:06:3c:84:8d:2b:de:e5:d3:67:94:e8:da:8e:52:50:50:
dc:04:d9:ae
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgISAZd3JicHZu+e95HtI1QFQ+aYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0Yzk2ZDM4NmQ3Y2Y1OWE5OTBkMzk5NGYwZGY4NDkzZGZj
YTQ5YjMwHhcNMjUwNjE2MDUxMTE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZDk2ZTkyNjk4YWRmOGJiMWRlMWRiYzFiZmU3YTI4ZDNkNmQzZjM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuv3OKRmoeqagzM4AOhYiRZ1hnMiw
wlIy22/paaeoReXW6fQ6k1cXYVq6KySzvwHk0LlAs+xdPtrpanFlHx9jWwMr/YKp
DVKDfPyor9Tsc/6r2gzhlbMjNdgyl1h6ezyoYERUsJKoO054yK2P0+JpgNWAp724
CRp5JK4TlEOkPaVj7ILGC6EiAAKFZGulhC5oCrbCTAIvfDabTlTYXkNMagUWVUwI
91sshC16PtEZkyNMJjrfswnGsjolGlBmSccDZODDqRfKiyKaEKbBDoqDGmnLMZJS
JCjdhu1QhbQyuxoZxZRtkTqz5qxes9epG0Y9vZ+KUJnJgMyeu+WthHdzMQIDAQAB
o4ICGTCCAhUwHQYDVR0OBBYEFI2W6SaYrfi7HeHbwb/noo09bT82MB8GA1UdIwQY
MBaAFCTJbThtfPWamQ05lPDfhJPfykmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSk1sdE9HMTg5WnFaRFRtVThOLUVrOV9LU2JNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy83YmVkNjMtNDA2ZS00MDVjLWE3ZjAt
N2NkOWMzYmFiYTI1LzEvalpicEpwaXQtTHNkNGR2QnYtZWlqVDF0UHpZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy83YmVkNjMtNDA2ZS00MDVjLWE3ZjAtN2NkOWMzYmFiYTI1
LzEvSk1sdE9HMTg5WnFaRFRtVThOLUVrOV9LU2JNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQCuUoEMA4E
AgACMAgDBgQqBUXH4DANBgkqhkiG9w0BAQsFAAOCAQEAJVwI/jdHUiN+R9Zo/RUo
3yWntTv6FEy0r8Hn8OSHF2vv58ZWGO4QH5620N3puMfq3DSH0NXOOpY1MpiRSZvx
H8EOJewHHtoLw9md2r1eXtHT8PCgma446VUEtSM/WAdcU6bQ16BTwpLaSLOFWxs+
pNKS4ee/saG05T7ByouJHU9EFNBWtkYMqjyxt2gLyA7fBGA89wnly7XcUrsLKk+B
xWBUDKUuSjpfds8Prgo3q/ub4V9HilS6YrKPSl42Y33OZHcpd1aXgXoegVunVuX9
zsRQ/v0tmhinDClwRyeiRsq/EYoDBRapm5sGBuwGPISNK97l02eU6NqOUlBQ3ATZ
rg==
-----END CERTIFICATE-----
Generated at Thu Jun 19 09:16:09 2025 by rpki-client