Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/q20mEX2k0Q1hZal5Q1kksGWeAjk.roa
File: q20mEX2k0Q1hZal5Q1kksGWeAjk.roa (raw, json)
Hash identifier: e2eoMLeL9wQzccKlBmZTCdyj1zxtljcCdEHoRdoO+bU=
Subject key identifier: AB:6D:26:11:7D:A4:D1:0D:61:65:A9:79:43:59:24:B0:65:9E:02:39
Certificate issuer: /CN=db1d6eba463b7564abfae938b46ed47187de0ec0
Certificate serial: 01969A1B1DE402A64695F6CE1CB6DF6EA668
Authority key identifier: DB:1D:6E:BA:46:3B:75:64:AB:FA:E9:38:B4:6E:D4:71:87:DE:0E:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/q20mEX2k0Q1hZal5Q1kksGWeAjk.roa
Signing time: Sun 04 May 2025 07:03:10 +0000
ROA not before: Sun 04 May 2025 07:03:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 26042
IP address blocks: 91.221.190.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9a:1b:1d:e4:02:a6:46:95:f6:ce:1c:b6:df:6e:a6:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db1d6eba463b7564abfae938b46ed47187de0ec0
Validity
Not Before: May 4 07:03:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ab6d26117da4d10d6165a979435924b0659e0239
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1d:9c:c3:58:86:6f:ba:b0:fd:1f:c3:55:e2:
72:c0:2d:04:5a:f4:c5:ce:20:68:07:24:37:29:93:
8a:d3:8c:f6:10:40:70:32:55:15:7f:c1:8f:39:cc:
1f:a2:64:07:4b:56:de:2a:ea:2d:e7:cd:d0:2b:29:
16:11:16:f2:f5:0f:f5:3a:1d:9b:d1:b0:d0:23:60:
13:c6:25:b8:8c:0c:43:e4:bd:e8:60:e9:41:e3:e7:
8d:bf:58:0d:e0:50:e1:7a:a9:ce:7e:23:05:ea:21:
e6:ac:3c:fc:f8:80:16:77:7c:c7:18:b3:39:bd:10:
ae:22:3d:3c:9b:33:1b:99:77:a7:84:06:7f:b4:a8:
07:11:fa:ec:b0:08:23:d2:92:b8:61:05:4a:89:51:
54:e7:ac:28:33:cd:b8:4a:12:be:cb:90:73:19:2b:
f2:25:32:19:0d:a1:05:f8:31:0e:af:9d:d8:f8:9f:
61:e4:95:75:b6:8b:09:4a:cf:38:8a:f9:37:0a:7e:
fa:36:ee:8f:7e:4c:65:42:0e:84:95:34:1f:aa:21:
c8:3a:02:e2:20:93:57:91:b5:99:51:fb:c0:90:02:
13:65:0f:06:98:3c:44:a1:ff:16:01:6a:42:db:bb:
ca:47:ce:5c:52:90:44:9e:d9:ab:0c:85:ac:bd:7e:
e4:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:6D:26:11:7D:A4:D1:0D:61:65:A9:79:43:59:24:B0:65:9E:02:39
X509v3 Authority Key Identifier:
keyid:DB:1D:6E:BA:46:3B:75:64:AB:FA:E9:38:B4:6E:D4:71:87:DE:0E:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/q20mEX2k0Q1hZal5Q1kksGWeAjk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.221.190.0/23
Signature Algorithm: sha256WithRSAEncryption
03:f2:01:14:9a:6e:b5:c9:c4:cd:8d:56:14:ac:ff:be:00:7f:
0f:1e:0e:d9:4d:cc:4a:16:ec:ed:71:aa:e2:75:4c:1f:1e:0e:
65:22:86:66:b7:22:52:aa:66:ad:34:42:58:94:a8:2e:c6:3c:
13:6e:c3:d1:9b:f3:65:e6:ee:b1:63:8f:80:d4:74:cb:28:f3:
0e:b4:8b:b9:1e:89:7b:54:a3:ad:ba:57:c9:bb:f4:a8:80:c6:
0d:0c:2a:54:96:d6:69:bc:de:2a:9f:9c:35:60:e4:a8:2d:3e:
62:c7:4f:fa:36:ac:50:2e:93:2e:0c:23:86:fc:5d:4d:70:09:
f8:41:cd:67:b0:47:b9:d0:9f:7c:22:c6:52:07:b3:ae:7a:3f:
d5:11:30:ac:f7:c6:9d:ff:94:3f:31:7e:1a:3d:41:7f:f3:44:
eb:b6:03:03:65:00:5d:08:1d:d8:77:5f:5d:22:20:45:a0:d4:
25:da:50:81:4e:7b:3b:2e:63:22:b5:9e:0c:63:63:a2:70:9f:
7f:b4:a9:c1:fa:a5:a3:fd:9a:ab:e6:02:44:bb:c6:83:53:30:
bf:61:76:ee:6e:b9:0b:2e:c6:0a:dd:9c:75:24:7d:35:d3:41:
2b:2d:2e:94:20:c5:90:4f:2a:2e:aa:e5:d8:f1:89:0e:f2:55:
ee:a5:18:18
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZaaGx3kAqZGlfbOHLbfbqZoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiMWQ2ZWJhNDYzYjc1NjRhYmZhZTkzOGI0NmVkNDcxODdk
ZTBlYzAwHhcNMjUwNTA0MDcwMzEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYjZkMjYxMTdkYTRkMTBkNjE2NWE5Nzk0MzU5MjRiMDY1OWUwMjM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuh2cw1iGb7qw/R/DVeJywC0EWvTF
ziBoByQ3KZOK04z2EEBwMlUVf8GPOcwfomQHS1beKuot583QKykWERby9Q/1Oh2b
0bDQI2ATxiW4jAxD5L3oYOlB4+eNv1gN4FDheqnOfiMF6iHmrDz8+IAWd3zHGLM5
vRCuIj08mzMbmXenhAZ/tKgHEfrssAgj0pK4YQVKiVFU56woM824ShK+y5BzGSvy
JTIZDaEF+DEOr53Y+J9h5JV1tosJSs84ivk3Cn76Nu6PfkxlQg6ElTQfqiHIOgLi
IJNXkbWZUfvAkAITZQ8GmDxEof8WAWpC27vKR85cUpBEntmrDIWsvX7k5QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKttJhF9pNENYWWpeUNZJLBlngI5MB8GA1UdIwQY
MBaAFNsdbrpGO3Vkq/rpOLRu1HGH3g7AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMngxdXVrWTdkV1NyLXVrNHRHN1VjWWZlRHNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC80ZjY5ODUtYjk0YS00N2NjLWEzMDAt
NmYyY2Y0ZjAzY2ViLzEvcTIwbUVYMmswUTFoWmFsNVExa2tzR1dlQWprLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC80ZjY5ODUtYjk0YS00N2NjLWEzMDAtNmYyY2Y0ZjAzY2Vi
LzEvMngxdXVrWTdkV1NyLXVrNHRHN1VjWWZlRHNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW92+MA0G
CSqGSIb3DQEBCwUAA4IBAQAD8gEUmm61ycTNjVYUrP++AH8PHg7ZTcxKFuztcari
dUwfHg5lIoZmtyJSqmatNEJYlKguxjwTbsPRm/Nl5u6xY4+A1HTLKPMOtIu5Hol7
VKOtulfJu/SogMYNDCpUltZpvN4qn5w1YOSoLT5ix0/6NqxQLpMuDCOG/F1NcAn4
Qc1nsEe50J98IsZSB7Ouej/VETCs98ad/5Q/MX4aPUF/80TrtgMDZQBdCB3Yd19d
IiBFoNQl2lCBTns7LmMitZ4MY2OicJ9/tKnB+qWj/Zqr5gJEu8aDUzC/YXbubrkL
LsYK3Zx1JH0100ErLS6UIMWQTyouquXY8YkO8lXupRgY
-----END CERTIFICATE-----
Generated at Thu May 8 07:21:15 2025 by rpki-client