Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/1-TaCRcgr21TvpQXP2txBwhS56hA.roa
File: 1-TaCRcgr21TvpQXP2txBwhS56hA.roa (raw, json)
Hash identifier: KHZjR7WUZNhVQwflclEipajJ/Wn9iLr+1LQGG1l2CNw=
Subject key identifier: F9:36:82:45:C8:2B:DB:54:EF:A5:05:CF:DA:DC:41:C2:14:B9:EA:10
Certificate issuer: /CN=ea46963cc479dadbe3c52234ab9fabaa8122d25b
Certificate serial: 01978195A80470464C628CFCEEB767F45586
Authority key identifier: EA:46:96:3C:C4:79:DA:DB:E3:C5:22:34:AB:9F:AB:AA:81:22:D2:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/1-TaCRcgr21TvpQXP2txBwhS56hA.roa
Signing time: Wed 18 Jun 2025 05:49:18 +0000
ROA not before: Wed 18 Jun 2025 05:49:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212794
IP address blocks: 194.11.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.mft
rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 15:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:81:95:a8:04:70:46:4c:62:8c:fc:ee:b7:67:f4:55:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea46963cc479dadbe3c52234ab9fabaa8122d25b
Validity
Not Before: Jun 18 05:49:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f9368245c82bdb54efa505cfdadc41c214b9ea10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a5:b4:ef:c5:d9:8d:b7:6f:20:76:bb:b4:30:
3c:6f:d4:8b:b2:63:ef:fd:67:8d:11:8b:16:aa:5a:
e6:dd:ae:ad:86:f3:66:9d:86:68:52:c2:0d:1e:fa:
75:19:6e:b9:44:49:8e:13:5b:9b:25:b9:d4:17:1e:
25:15:71:1a:ea:74:30:44:a7:bb:69:fc:98:de:5b:
68:2b:50:f5:f1:7c:f3:22:b5:67:aa:53:11:c9:f2:
ef:c0:ac:8f:75:93:3d:84:33:e0:3a:4c:31:3d:77:
c8:f3:3f:ca:38:90:a0:f7:db:ef:dc:53:9c:59:64:
2f:ad:c3:d1:87:5e:e3:2a:46:5a:34:52:ff:3d:36:
1d:d6:2e:bf:07:90:e4:39:75:2b:47:05:48:fe:f2:
d8:06:41:e6:ec:c2:4b:62:bd:6f:8d:2e:ae:46:17:
88:c2:53:21:75:d5:8c:f9:dd:12:4f:f7:9d:06:9a:
2c:54:c5:40:c1:83:88:b8:1d:f6:f0:41:87:21:35:
3c:ee:93:f4:e9:d2:28:58:91:8d:84:c0:5d:41:ad:
e7:d4:e2:f6:83:63:6a:83:f4:3f:64:9f:52:45:90:
dd:ca:4d:00:a9:8d:b4:f2:79:9c:32:68:58:4a:36:
ca:fd:14:0d:f4:37:fd:d0:6f:57:7a:4c:13:fd:a3:
3f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:36:82:45:C8:2B:DB:54:EF:A5:05:CF:DA:DC:41:C2:14:B9:EA:10
X509v3 Authority Key Identifier:
keyid:EA:46:96:3C:C4:79:DA:DB:E3:C5:22:34:AB:9F:AB:AA:81:22:D2:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/1-TaCRcgr21TvpQXP2txBwhS56hA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.11.242.0/24
Signature Algorithm: sha256WithRSAEncryption
78:cc:d9:5c:80:29:b9:49:38:31:5d:e7:c7:7c:a5:7b:62:57:
ba:42:82:a5:ef:e1:27:79:b0:aa:37:7a:7e:7e:e4:ca:94:1b:
d4:bb:a9:ba:fd:bd:db:b4:f5:88:6f:b9:89:7f:f6:a8:03:0d:
47:72:94:de:34:a6:81:52:18:9b:ae:b6:54:64:aa:a7:e4:7a:
0d:39:08:06:ec:84:02:fc:b1:9c:b8:c8:ce:2f:68:7f:35:4c:
f8:6c:13:e9:01:61:8b:97:ad:57:13:8e:f8:47:35:6d:a7:16:
a4:26:30:5a:37:46:c8:6b:90:51:55:3b:87:94:d1:52:2b:47:
19:18:46:e2:32:9d:f5:8a:1c:ac:19:cc:3b:92:8e:b0:8c:e5:
47:61:43:3c:5f:e2:16:4c:8e:6a:3b:c6:06:3f:84:09:0d:b9:
bf:a3:14:c6:db:65:f9:d7:8a:84:4a:1c:65:38:41:1c:8f:ac:
e2:30:eb:7b:a1:82:26:9f:df:62:02:6b:e7:72:75:76:50:f9:
25:e8:94:13:dc:96:1e:69:5b:c0:c5:51:e1:07:13:af:f3:e3:
48:e2:d9:94:02:d3:2b:7d:0d:f5:61:c5:eb:74:c4:b4:58:27:
77:cc:b2:a5:5a:57:38:af:19:5b:e6:e5:8b:40:d3:72:34:39:
49:0f:45:bf
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZeBlagEcEZMYoz87rdn9FWGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhNDY5NjNjYzQ3OWRhZGJlM2M1MjIzNGFiOWZhYmFhODEy
MmQyNWIwHhcNMjUwNjE4MDU0OTE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOTM2ODI0NWM4MmJkYjU0ZWZhNTA1Y2ZkYWRjNDFjMjE0YjllYTEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqW078XZjbdvIHa7tDA8b9SLsmPv
/WeNEYsWqlrm3a6thvNmnYZoUsINHvp1GW65REmOE1ubJbnUFx4lFXEa6nQwRKe7
afyY3ltoK1D18XzzIrVnqlMRyfLvwKyPdZM9hDPgOkwxPXfI8z/KOJCg99vv3FOc
WWQvrcPRh17jKkZaNFL/PTYd1i6/B5DkOXUrRwVI/vLYBkHm7MJLYr1vjS6uRheI
wlMhddWM+d0ST/edBposVMVAwYOIuB328EGHITU87pP06dIoWJGNhMBdQa3n1OL2
g2Nqg/Q/ZJ9SRZDdyk0AqY208nmcMmhYSjbK/RQN9Df90G9XekwT/aM/zwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPk2gkXIK9tU76UFz9rcQcIUueoQMB8GA1UdIwQY
MBaAFOpGljzEedrb48UiNKufq6qBItJbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmthV1BNUjUydHZqeFNJMHE1LXJxb0VpMGxzLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9lODYyZGUtYzQ2Yy00ZjIxLWIzOGUt
ZWI1YmM3ZDk3YWEwLzEvMS1UYUNSY2dyMjFUdnBRWFAydHhCd2hTNTZoQS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvN2IvZTg2MmRlLWM0NmMtNGYyMS1iMzhlLWViNWJjN2Q5N2Fh
MC8xLzZrYVdQTVI1MnR2anhTSTBxNS1ycW9FaTBscy5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMIL8jAN
BgkqhkiG9w0BAQsFAAOCAQEAeMzZXIApuUk4MV3nx3yle2JXukKCpe/hJ3mwqjd6
fn7kypQb1Lupuv2927T1iG+5iX/2qAMNR3KU3jSmgVIYm662VGSqp+R6DTkIBuyE
AvyxnLjIzi9ofzVM+GwT6QFhi5etVxOO+Ec1bacWpCYwWjdGyGuQUVU7h5TRUitH
GRhG4jKd9YocrBnMO5KOsIzlR2FDPF/iFkyOajvGBj+ECQ25v6MUxttl+deKhEoc
ZThBHI+s4jDre6GCJp/fYgJr53J1dlD5JeiUE9yWHmlbwMVR4QcTr/PjSOLZlALT
K30N9WHF63TEtFgnd8yypVpXOK8ZW+bli0DTcjQ5SQ9Fvw==
-----END CERTIFICATE-----
Generated at Tue Jul 1 23:24:29 2025 by rpki-client