Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/AaeTZJ_Mx4pF3TF16wEEVAdeKg4.roa
File: AaeTZJ_Mx4pF3TF16wEEVAdeKg4.roa (raw, json)
Hash identifier: uC6UcXyt2Kmfls1QdacCrz5Tf6o/T5Y+fDQ00/99ycM=
Subject key identifier: 01:A7:93:64:9F:CC:C7:8A:45:DD:31:75:EB:01:04:54:07:5E:2A:0E
Certificate issuer: /CN=44c0f2a2a56007e4c45ccc71e7da092861305b20
Certificate serial: 019777B14DCF1DD5F5FCCFFAE7A908CA0E57
Authority key identifier: 44:C0:F2:A2:A5:60:07:E4:C4:5C:CC:71:E7:DA:09:28:61:30:5B:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RMDyoqVgB-TEXMxx59oJKGEwWyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/AaeTZJ_Mx4pF3TF16wEEVAdeKg4.roa
Signing time: Mon 16 Jun 2025 07:43:17 +0000
ROA not before: Mon 16 Jun 2025 07:43:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31027
IP address blocks: 37.25.64.0/21 maxlen: 21
185.19.232.0/22 maxlen: 22
185.29.168.0/22 maxlen: 22
213.146.64.0/19 maxlen: 19
2a00:4960::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/RMDyoqVgB-TEXMxx59oJKGEwWyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/RMDyoqVgB-TEXMxx59oJKGEwWyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RMDyoqVgB-TEXMxx59oJKGEwWyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 13:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:b1:4d:cf:1d:d5:f5:fc:cf:fa:e7:a9:08:ca:0e:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44c0f2a2a56007e4c45ccc71e7da092861305b20
Validity
Not Before: Jun 16 07:43:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=01a793649fccc78a45dd3175eb010454075e2a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a4:76:92:2b:d4:76:e3:86:33:98:ed:24:79:
d0:2b:ab:b5:c7:53:3f:57:13:22:b5:e4:b2:fa:f9:
94:1d:a5:c3:5b:f7:ff:8a:e7:21:97:2a:9d:47:6a:
42:7e:62:cb:76:4b:5a:af:fa:f1:b4:c7:09:03:d0:
cd:a4:ee:81:2f:0f:ac:e0:00:91:49:92:9e:62:c2:
f8:15:96:e4:a2:10:24:19:17:3d:16:1d:f1:7a:9a:
af:11:ba:06:8d:c4:a9:8e:0c:c1:e0:8f:31:fc:a7:
7c:5b:84:57:6f:ad:87:ee:1e:ee:67:18:9a:89:5f:
a4:21:57:5d:9a:48:35:41:75:ba:01:cd:6e:35:96:
7b:1a:53:f7:25:c2:bc:07:de:44:32:2f:1d:ec:b0:
b8:c9:99:50:f8:33:f2:e1:1e:44:9b:2e:1c:b5:a6:
65:c3:e1:bc:2d:db:28:ec:c3:1a:63:ae:ef:05:d1:
68:d1:65:ad:2d:a2:75:03:0d:f4:8e:59:63:45:24:
2b:2f:cf:4b:a3:10:e4:3e:1b:72:74:e3:c9:d1:60:
f2:cb:76:de:4a:bf:b8:cb:0a:35:e2:02:de:6a:7d:
30:e7:38:1c:46:e4:fe:11:3f:ef:26:c5:34:d0:e1:
52:86:1e:ac:1c:fd:52:12:f6:a3:3c:7e:a3:f8:65:
ba:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:A7:93:64:9F:CC:C7:8A:45:DD:31:75:EB:01:04:54:07:5E:2A:0E
X509v3 Authority Key Identifier:
keyid:44:C0:F2:A2:A5:60:07:E4:C4:5C:CC:71:E7:DA:09:28:61:30:5B:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RMDyoqVgB-TEXMxx59oJKGEwWyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/AaeTZJ_Mx4pF3TF16wEEVAdeKg4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/RMDyoqVgB-TEXMxx59oJKGEwWyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.25.64.0/21
185.19.232.0/22
185.29.168.0/22
213.146.64.0/19
IPv6:
2a00:4960::/32
Signature Algorithm: sha256WithRSAEncryption
19:11:c3:b3:e9:07:42:af:63:c5:01:c9:ca:e6:34:b5:d0:7a:
d2:59:a4:92:c1:e7:fe:20:b3:eb:0b:8f:c2:5a:96:26:4d:2e:
22:e3:45:2d:29:ed:59:c1:37:d9:71:27:26:7d:2a:12:a4:2e:
89:4c:e2:b5:d2:39:45:9d:4a:4b:48:4d:b8:5f:a4:c3:12:0d:
07:c5:14:b6:90:cb:7d:d9:2e:3e:ec:b1:c9:ef:c5:df:9e:08:
bd:cb:db:ca:b9:d7:98:22:aa:66:e0:86:a4:c9:63:6e:8e:9e:
18:fa:65:4d:c6:74:62:e2:76:7d:82:0a:ce:7c:03:2f:f0:76:
a6:cc:3c:63:4d:05:36:2e:03:84:ee:7f:5f:1f:ce:26:46:cc:
98:d5:48:4c:a6:87:9c:0c:63:18:65:d0:d1:f0:f5:52:55:c7:
8d:c5:bb:81:45:16:ab:09:6f:c6:23:6e:0f:27:d4:1f:d2:13:
70:1b:8d:4b:a1:30:88:cd:24:2f:b6:4c:7c:63:b0:ba:d8:6e:
41:0b:38:d4:00:74:75:44:40:93:cc:46:23:01:7f:ea:55:46:
08:ef:f1:52:82:f0:1f:42:a4:16:13:09:fe:b9:13:e9:09:d3:
c2:9d:4a:5c:b9:01:4f:05:15:a0:7e:f1:fd:4a:ad:72:1f:ea:
77:41:e6:75
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAZd3sU3PHdX1/M/656kIyg5XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0YzBmMmEyYTU2MDA3ZTRjNDVjY2M3MWU3ZGEwOTI4NjEz
MDViMjAwHhcNMjUwNjE2MDc0MzE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMWE3OTM2NDlmY2NjNzhhNDVkZDMxNzVlYjAxMDQ1NDA3NWUyYTBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA16R2kivUduOGM5jtJHnQK6u1x1M/
VxMiteSy+vmUHaXDW/f/iuchlyqdR2pCfmLLdktar/rxtMcJA9DNpO6BLw+s4ACR
SZKeYsL4FZbkohAkGRc9Fh3xepqvEboGjcSpjgzB4I8x/Kd8W4RXb62H7h7uZxia
iV+kIVddmkg1QXW6Ac1uNZZ7GlP3JcK8B95EMi8d7LC4yZlQ+DPy4R5Emy4ctaZl
w+G8Ldso7MMaY67vBdFo0WWtLaJ1Aw30jlljRSQrL89LoxDkPhtydOPJ0WDyy3be
Sr+4ywo14gLean0w5zgcRuT+ET/vJsU00OFShh6sHP1SEvajPH6j+GW6WwIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFAGnk2SfzMeKRd0xdesBBFQHXioOMB8GA1UdIwQY
MBaAFETA8qKlYAfkxFzMcefaCShhMFsgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUk1EeW9xVmdCLVRFWE14eDU5b0pLR0V3V3lBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9iODA1OGUtNGViYS00Y2M0LThjMWQt
OWM4NGYyZmRkOGYwLzEvQWFlVFpKX014NHBGM1RGMTZ3RUVWQWRlS2c0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC9iODA1OGUtNGViYS00Y2M0LThjMWQtOWM4NGYyZmRkOGYw
LzEvUk1EeW9xVmdCLVRFWE14eDU5b0pLR0V3V3lBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQDJRlAAwQC
uRPoAwQCuR2oAwQF1ZJAMA0EAgACMAcDBQAqAElgMA0GCSqGSIb3DQEBCwUAA4IB
AQAZEcOz6QdCr2PFAcnK5jS10HrSWaSSwef+ILPrC4/CWpYmTS4i40UtKe1ZwTfZ
cScmfSoSpC6JTOK10jlFnUpLSE24X6TDEg0HxRS2kMt92S4+7LHJ78Xfngi9y9vK
udeYIqpm4IakyWNujp4Y+mVNxnRi4nZ9ggrOfAMv8HamzDxjTQU2LgOE7n9fH84m
RsyY1UhMpoecDGMYZdDR8PVSVceNxbuBRRarCW/GI24PJ9Qf0hNwG41LoTCIzSQv
tkx8Y7C62G5BCzjUAHR1RECTzEYjAX/qVUYI7/FSgvAfQqQWEwn+uRPpCdPCnUpc
uQFPBRWgfvH9Sq1yH+p3QeZ1
-----END CERTIFICATE-----
Generated at Sun Jun 29 20:29:36 2025 by rpki-client