Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/Jq_-6ch9suqaxJvUXK5CzXV34vI.roa
File: Jq_-6ch9suqaxJvUXK5CzXV34vI.roa (raw, json)
Hash identifier: a37/xNaBvQkWy3ZjkCxmZa6bwv4ViVqrO0N4ZcM7NRY=
Subject key identifier: 26:AF:FE:E9:C8:7D:B2:EA:9A:C4:9B:D4:5C:AE:42:CD:75:77:E2:F2
Certificate issuer: /CN=38b78c8eef9ad257d690d77dc9ae3fe9a624b28d
Certificate serial: 0197A0B9D770AB792D6B58C451D90FF6855E
Authority key identifier: 38:B7:8C:8E:EF:9A:D2:57:D6:90:D7:7D:C9:AE:3F:E9:A6:24:B2:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLeMju-a0lfWkNd9ya4_6aYkso0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/Jq_-6ch9suqaxJvUXK5CzXV34vI.roa
Signing time: Tue 24 Jun 2025 06:57:03 +0000
ROA not before: Tue 24 Jun 2025 06:57:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44133
IP address blocks: 37.252.184.0/21 maxlen: 21
89.39.64.0/23 maxlen: 23
93.189.24.0/21 maxlen: 21
185.119.116.0/22 maxlen: 22
2a00:63c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OLeMju-a0lfWkNd9ya4_6aYkso0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:a0:b9:d7:70:ab:79:2d:6b:58:c4:51:d9:0f:f6:85:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b78c8eef9ad257d690d77dc9ae3fe9a624b28d
Validity
Not Before: Jun 24 06:57:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=26affee9c87db2ea9ac49bd45cae42cd7577e2f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:07:94:c8:2b:46:da:19:ac:16:c0:8a:85:04:
60:5b:32:ac:7c:39:39:ac:4e:1c:8b:5a:73:9c:d7:
c5:ee:1a:7d:5b:ac:a9:2f:da:97:12:29:a9:3b:39:
64:16:08:a7:29:05:6d:fb:5f:f8:10:57:81:4b:eb:
b5:19:21:cf:33:7b:3c:27:93:90:eb:3b:3c:57:2a:
d1:11:65:5c:4d:7e:35:19:3d:fa:25:3f:40:6f:8b:
f2:db:8f:a8:e3:71:fe:a3:05:18:e5:59:d3:15:09:
8d:ff:e2:9f:ab:aa:1c:56:d3:af:c5:62:17:4e:4c:
44:a2:bb:87:ba:73:de:df:4c:ad:43:98:dc:8b:78:
d0:c7:fb:06:91:07:b8:a6:97:ff:d6:f7:d3:18:07:
0d:53:56:31:a1:30:dc:56:28:0a:4c:95:70:f9:a8:
ca:a7:7c:e0:f0:1d:dc:c8:45:cb:6f:28:3e:ac:e7:
1d:34:d7:19:fc:fa:16:b8:3d:ce:24:5b:58:b2:86:
38:09:9c:2d:be:30:68:23:4e:92:fb:d7:dc:70:43:
aa:27:9b:3a:b3:ee:ad:95:77:eb:45:0d:10:6b:90:
56:4d:95:33:9b:50:2e:b3:1b:ee:5d:9e:c4:f5:43:
7b:9a:51:c4:50:85:4b:82:73:e5:61:e5:7f:bb:fa:
f5:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:AF:FE:E9:C8:7D:B2:EA:9A:C4:9B:D4:5C:AE:42:CD:75:77:E2:F2
X509v3 Authority Key Identifier:
keyid:38:B7:8C:8E:EF:9A:D2:57:D6:90:D7:7D:C9:AE:3F:E9:A6:24:B2:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLeMju-a0lfWkNd9ya4_6aYkso0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/Jq_-6ch9suqaxJvUXK5CzXV34vI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.252.184.0/21
89.39.64.0/23
93.189.24.0/21
185.119.116.0/22
IPv6:
2a00:63c0::/29
Signature Algorithm: sha256WithRSAEncryption
45:52:5b:7a:e0:9a:94:6d:44:f5:7d:14:fc:31:93:3b:4d:07:
88:10:85:2e:b9:4e:d1:c2:d9:fd:57:7c:3d:73:cb:37:2a:5e:
c4:38:ea:7c:53:4a:89:00:29:80:4a:55:f7:a4:81:24:ec:32:
5d:f6:8e:b3:33:4d:ec:d8:de:31:82:bc:48:68:7e:f6:c3:09:
3e:67:f0:b5:79:b9:6a:94:50:38:d5:2a:1f:e3:c5:69:98:6e:
96:1d:2a:f0:eb:52:d4:16:1a:c2:57:07:e3:5d:2f:70:18:14:
63:f6:05:df:ef:f7:dd:c2:11:42:60:81:07:cf:dc:48:06:5a:
d4:cb:f2:36:b9:c5:62:59:80:34:55:e5:cc:48:44:81:bd:98:
2a:5d:b6:32:2f:94:37:fc:b6:7f:c0:69:58:46:d2:2d:d0:9d:
a3:01:f8:8e:76:71:25:ac:67:ac:f5:fd:9a:fd:52:c5:c5:ad:
f6:35:55:64:7f:b9:ff:2f:3b:a0:94:4e:d4:68:45:a3:e3:6a:
79:d9:17:4a:77:95:0f:6d:be:38:27:a3:84:21:51:36:74:7e:
d2:41:e9:b5:72:8c:64:de:e3:8e:6e:91:8b:ba:32:77:a2:d1:
42:e4:ff:59:56:39:69:d8:e4:b3:4a:c5:15:b4:e6:45:f7:08:
fe:2d:c4:16
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAZeguddwq3kta1jEUdkP9oVeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4Yjc4YzhlZWY5YWQyNTdkNjkwZDc3ZGM5YWUzZmU5YTYy
NGIyOGQwHhcNMjUwNjI0MDY1NzAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNmFmZmVlOWM4N2RiMmVhOWFjNDliZDQ1Y2FlNDJjZDc1NzdlMmYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQeUyCtG2hmsFsCKhQRgWzKsfDk5
rE4ci1pznNfF7hp9W6ypL9qXEimpOzlkFginKQVt+1/4EFeBS+u1GSHPM3s8J5OQ
6zs8VyrREWVcTX41GT36JT9Ab4vy24+o43H+owUY5VnTFQmN/+Kfq6ocVtOvxWIX
TkxEoruHunPe30ytQ5jci3jQx/sGkQe4ppf/1vfTGAcNU1YxoTDcVigKTJVw+ajK
p3zg8B3cyEXLbyg+rOcdNNcZ/PoWuD3OJFtYsoY4CZwtvjBoI06S+9fccEOqJ5s6
s+6tlXfrRQ0Qa5BWTZUzm1AusxvuXZ7E9UN7mlHEUIVLgnPlYeV/u/r1PwIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFCav/unIfbLqmsSb1FyuQs11d+LyMB8GA1UdIwQY
MBaAFDi3jI7vmtJX1pDXfcmuP+mmJLKNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0xlTWp1LWEwbGZXa05kOXlhNF82YVlrc28wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8yMjVmZDYtY2FmMy00Y2FmLWIzMTEt
ZjUxOGE5Zjc5NzkwLzEvSnFfLTZjaDlzdXFheEp2VVhLNUN6WFYzNHZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi8yMjVmZDYtY2FmMy00Y2FmLWIzMTEtZjUxOGE5Zjc5Nzkw
LzEvT0xlTWp1LWEwbGZXa05kOXlhNF82YVlrc28wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQDJfy4AwQB
WSdAAwQDXb0YAwQCuXd0MA0EAgACMAcDBQMqAGPAMA0GCSqGSIb3DQEBCwUAA4IB
AQBFUlt64JqUbUT1fRT8MZM7TQeIEIUuuU7Rwtn9V3w9c8s3Kl7EOOp8U0qJACmA
SlX3pIEk7DJd9o6zM03s2N4xgrxIaH72wwk+Z/C1eblqlFA41Sof48VpmG6WHSrw
61LUFhrCVwfjXS9wGBRj9gXf7/fdwhFCYIEHz9xIBlrUy/I2ucViWYA0VeXMSESB
vZgqXbYyL5Q3/LZ/wGlYRtIt0J2jAfiOdnElrGes9f2a/VLFxa32NVVkf7n/Lzug
lE7UaEWj42p52RdKd5UPbb44J6OEIVE2dH7SQem1coxk3uOObpGLujJ3otFC5P9Z
Vjlp2OSzSsUVtOZF9wj+LcQW
-----END CERTIFICATE-----
Generated at Thu Jul 3 09:20:44 2025 by rpki-client