Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/utcJG43CmOUW4bspUTwRCwjrhl0.roa
File: utcJG43CmOUW4bspUTwRCwjrhl0.roa (raw, json)
Hash identifier: 1TyK/oFvsBz86IZuDAuBDZQXxx3SSixaVqDTYI8e6k8=
Subject key identifier: BA:D7:09:1B:8D:C2:98:E5:16:E1:BB:29:51:3C:11:0B:08:EB:86:5D
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01975D55E020EACE3AC9E68A3527176F529B
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/utcJG43CmOUW4bspUTwRCwjrhl0.roa
Signing time: Wed 11 Jun 2025 04:53:18 +0000
ROA not before: Wed 11 Jun 2025 04:53:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34577
IP address blocks: 87.120.0.0/22 maxlen: 32
87.120.12.0/24 maxlen: 32
87.120.14.0/23 maxlen: 32
87.120.44.0/23 maxlen: 32
87.120.45.119/32 maxlen: 32
87.120.178.0/23 maxlen: 32
87.120.180.0/22 maxlen: 32
87.120.184.0/23 maxlen: 32
87.120.190.0/24 maxlen: 32
87.121.48.0/22 maxlen: 32
93.123.40.0/22 maxlen: 32
93.123.40.0/24 maxlen: 32
93.123.41.0/24 maxlen: 32
93.123.42.0/24 maxlen: 32
93.123.43.0/24 maxlen: 32
93.123.44.0/24 maxlen: 32
93.123.66.0/24 maxlen: 32
93.123.67.0/24 maxlen: 32
93.123.96.0/22 maxlen: 32
94.156.123.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 14:23:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5d:55:e0:20:ea:ce:3a:c9:e6:8a:35:27:17:6f:52:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jun 11 04:53:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bad7091b8dc298e516e1bb29513c110b08eb865d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d4:a6:1a:34:6a:6a:1d:34:11:64:65:03:cf:
72:07:93:10:0f:50:37:6e:77:06:d3:66:56:ae:2e:
5c:e6:aa:cc:9d:ed:4d:df:ec:d4:c4:4a:f3:95:ab:
6c:b8:51:01:30:5e:42:a8:92:b5:d9:53:09:10:02:
1f:b2:bb:6b:28:78:c8:b9:9d:75:5f:50:da:43:d5:
50:13:9c:a1:7b:b0:10:35:88:95:f3:e2:2a:4e:41:
41:4f:25:29:b9:42:1b:8d:12:6d:cb:30:98:5b:48:
a7:c4:f6:cc:de:0e:0a:98:67:70:aa:ce:db:0b:02:
fc:fd:b9:d6:a8:f4:90:63:04:04:bd:76:a7:75:c8:
d9:9c:c0:2d:97:2e:22:e3:1d:6a:26:64:a1:77:66:
8d:a5:dd:c9:a4:05:3d:2b:28:c1:ee:1b:33:b6:2a:
0f:5f:49:eb:a7:93:3e:c3:f9:3a:e0:f3:68:47:59:
64:05:ab:09:c3:bc:71:38:ab:cf:b7:8a:d8:c0:42:
3a:4c:e5:32:07:dc:dc:2e:16:36:a8:09:b4:b7:4d:
ad:10:07:c5:ce:04:f1:52:ad:4b:5f:62:ca:a6:77:
10:71:b3:89:c2:08:62:3f:27:bc:b1:05:f8:19:31:
86:d7:b7:23:8c:f3:36:e4:26:07:0d:13:4a:07:bb:
d4:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:D7:09:1B:8D:C2:98:E5:16:E1:BB:29:51:3C:11:0B:08:EB:86:5D
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/utcJG43CmOUW4bspUTwRCwjrhl0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.0.0/22
87.120.12.0/24
87.120.14.0/23
87.120.44.0/23
87.120.178.0-87.120.185.255
87.120.190.0/24
87.121.48.0/22
93.123.40.0-93.123.44.255
93.123.66.0/23
93.123.96.0/22
94.156.123.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:a6:9e:c4:48:11:82:f3:3a:28:c4:f7:84:61:c3:37:94:60:
8f:98:56:25:8e:b3:09:d7:f8:9a:29:ef:25:78:47:79:7d:9c:
31:87:92:c4:c8:7b:b7:28:16:0a:35:b0:0e:f4:c4:98:82:91:
3b:cc:59:c0:60:f6:76:b1:30:a3:75:d9:72:af:ad:69:29:ea:
0b:65:21:d2:a3:7c:8f:a1:88:0d:74:0c:6e:55:02:76:bb:32:
e2:19:df:5c:d5:d2:bc:c6:40:1a:c6:69:32:57:91:a4:4f:ad:
60:ac:59:c6:19:67:d5:72:b4:16:ac:cc:f1:c8:70:f6:ed:80:
be:c2:7f:1c:6e:c0:ad:0b:10:58:82:ab:9b:41:f4:96:aa:31:
99:29:21:23:12:25:32:54:5d:dd:c2:98:e1:0b:e5:89:d8:29:
3e:3d:a8:4f:18:e3:ad:c9:90:47:c3:4a:94:39:88:27:b0:68:
eb:f4:a7:29:07:76:51:39:4a:84:40:e3:94:78:75:1d:5b:f4:
33:80:b3:98:38:d5:58:14:38:b3:18:6f:ad:16:6b:52:9c:a5:
01:a9:fd:af:4a:31:54:8b:b3:66:ff:af:d9:6f:55:f2:22:00:
45:f1:a9:bd:19:96:eb:fa:8e:51:72:1c:2f:36:08:4e:10:ef:
45:92:f2:b6
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgISAZddVeAg6s46yeaKNScXb1KbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjUwNjExMDQ1MzE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYWQ3MDkxYjhkYzI5OGU1MTZlMWJiMjk1MTNjMTEwYjA4ZWI4NjVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdSmGjRqah00EWRlA89yB5MQD1A3
bncG02ZWri5c5qrMne1N3+zUxErzlatsuFEBMF5CqJK12VMJEAIfsrtrKHjIuZ11
X1DaQ9VQE5yhe7AQNYiV8+IqTkFBTyUpuUIbjRJtyzCYW0inxPbM3g4KmGdwqs7b
CwL8/bnWqPSQYwQEvXandcjZnMAtly4i4x1qJmShd2aNpd3JpAU9KyjB7hsztioP
X0nrp5M+w/k64PNoR1lkBasJw7xxOKvPt4rYwEI6TOUyB9zcLhY2qAm0t02tEAfF
zgTxUq1LX2LKpncQcbOJwghiPye8sQX4GTGG17cjjPM25CYHDRNKB7vUHwIDAQAB
o4ICVTCCAlEwHQYDVR0OBBYEFLrXCRuNwpjlFuG7KVE8EQsI64ZdMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvdXRjSkc0M0NtT1VXNGJzcFVUd1JDd2pyaGwwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGsGCCsGAQUFBwEHAQH/BFwwWjBYBAIAATBSAwQCV3gAAwQA
V3gMAwQBV3gOAwQBV3gsMAwDBAFXeLIDBAFXeLgDBABXeL4DBAJXeTAwDAMEA117
KAMEAF17LAMEAV17QgMEAl17YAMEAF6cezANBgkqhkiG9w0BAQsFAAOCAQEAs6ae
xEgRgvM6KMT3hGHDN5Rgj5hWJY6zCdf4minvJXhHeX2cMYeSxMh7tygWCjWwDvTE
mIKRO8xZwGD2drEwo3XZcq+taSnqC2Uh0qN8j6GIDXQMblUCdrsy4hnfXNXSvMZA
GsZpMleRpE+tYKxZxhln1XK0FqzM8chw9u2AvsJ/HG7ArQsQWIKrm0H0lqoxmSkh
IxIlMlRd3cKY4QvlidgpPj2oTxjjrcmQR8NKlDmIJ7Bo6/SnKQd2UTlKhEDjlHh1
HVv0M4CzmDjVWBQ4sxhvrRZrUpylAan9r0oxVIuzZv+v2W9V8iIARfGpvRmW6/qO
UXIcLzYIThDvRZLytg==
-----END CERTIFICATE-----
Generated at Mon Jun 30 18:39:10 2025 by rpki-client