Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/yanb0vbB0Vl_V4Od_5rDYCcWg-s.roa
File: yanb0vbB0Vl_V4Od_5rDYCcWg-s.roa (raw, json)
Hash identifier: GGC2GFce9kFBGM5zAOhPfD+LQbMUQnjRP2BhppWz95M=
Subject key identifier: C9:A9:DB:D2:F6:C1:D1:59:7F:57:83:9D:FF:9A:C3:60:27:16:83:EB
Certificate issuer: /CN=3ee770f47fd903925d80ac58e05e076f3baa110b
Certificate serial: 01977DCC1BF15FAD4A4FDFC91960A38A65F8
Authority key identifier: 3E:E7:70:F4:7F:D9:03:92:5D:80:AC:58:E0:5E:07:6F:3B:AA:11:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/yanb0vbB0Vl_V4Od_5rDYCcWg-s.roa
Signing time: Tue 17 Jun 2025 12:10:17 +0000
ROA not before: Tue 17 Jun 2025 12:10:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 45.136.39.0/24 maxlen: 24
185.38.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 09:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7d:cc:1b:f1:5f:ad:4a:4f:df:c9:19:60:a3:8a:65:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ee770f47fd903925d80ac58e05e076f3baa110b
Validity
Not Before: Jun 17 12:10:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c9a9dbd2f6c1d1597f57839dff9ac360271683eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d6:9e:c4:06:f0:c7:98:ef:d5:7d:e4:6c:37:
1b:66:65:24:82:72:e0:10:ce:fa:96:46:d0:a5:20:
b4:75:af:65:a6:27:02:92:ed:2b:d6:6c:ad:1d:c8:
33:50:15:96:55:07:0c:64:b8:d4:cf:82:5d:52:4e:
98:11:e7:4a:11:7a:d5:36:51:dc:87:58:15:54:76:
db:20:4f:88:3d:3a:97:4d:a1:46:14:c8:2f:3f:da:
6e:be:ab:db:26:81:53:ae:57:31:20:7e:21:dc:d7:
47:36:ce:e4:f9:44:85:43:cb:e3:1f:5a:a4:19:bf:
83:02:60:12:84:1f:42:20:f0:99:da:35:fc:a4:e3:
f3:af:79:86:d8:71:4f:83:5a:a3:27:34:19:37:9a:
44:10:fd:57:9a:d2:cd:c0:93:a5:68:b9:f7:0e:b2:
8c:5e:b4:1c:7f:a0:d0:e6:70:35:f3:68:51:27:f7:
f5:46:a7:18:d5:9c:c2:4b:9e:08:4c:8d:9b:41:b0:
2a:83:a2:b1:fc:29:22:c3:d3:b1:b1:32:92:f6:ee:
f0:78:2a:4c:ae:ee:9b:96:2e:01:c1:99:95:f9:e8:
9c:5c:1c:16:4f:99:f9:28:a6:df:fa:a5:19:a6:74:
2d:78:f6:39:a6:93:cb:00:9c:ff:09:ab:b4:08:b0:
a2:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:A9:DB:D2:F6:C1:D1:59:7F:57:83:9D:FF:9A:C3:60:27:16:83:EB
X509v3 Authority Key Identifier:
keyid:3E:E7:70:F4:7F:D9:03:92:5D:80:AC:58:E0:5E:07:6F:3B:AA:11:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/yanb0vbB0Vl_V4Od_5rDYCcWg-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.39.0/24
185.38.26.0/24
Signature Algorithm: sha256WithRSAEncryption
21:68:2c:1d:3a:ed:40:60:01:f5:67:79:de:7e:82:a1:51:df:
1e:87:7b:23:66:8c:30:1c:43:4d:41:df:9e:b2:e6:58:27:b1:
58:53:8c:b5:20:88:3b:c3:ea:09:09:83:5b:9a:20:17:f6:0d:
f7:19:8d:28:0d:c9:8b:f8:2b:0c:07:7b:6a:42:bc:8c:ed:62:
e3:b1:dd:c5:a1:e6:a4:1f:a2:07:da:50:f9:60:07:dd:f3:c3:
22:7b:4f:45:ae:2a:84:d6:3a:3a:e2:c2:0d:73:37:4f:6d:61:
34:36:2a:ee:ce:ef:40:32:a1:e3:6c:50:45:b5:ca:90:76:5e:
d2:df:c7:fa:c5:74:aa:8d:52:a4:22:12:f4:d4:ab:05:c6:0b:
40:b2:21:4c:e5:9a:bd:91:ea:9e:71:0b:54:ed:2a:ee:bc:11:
0e:70:06:93:ad:1f:71:cb:1f:64:cc:0f:8c:ae:31:da:8f:bf:
2d:01:98:a1:0c:1e:88:4b:89:ed:62:1d:b7:53:be:e0:97:1c:
4d:b6:84:de:ab:ba:23:8d:96:c6:53:bd:19:2d:e4:af:13:93:
08:c0:0d:a5:27:89:5b:94:15:50:35:03:b1:21:ad:6c:59:52:
2b:25:85:63:e3:fe:90:2f:5c:d4:46:3c:4a:92:11:50:0b:e9:
1a:0d:46:c7
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZd9zBvxX61KT9/JGWCjimX4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlZTc3MGY0N2ZkOTAzOTI1ZDgwYWM1OGUwNWUwNzZmM2Jh
YTExMGIwHhcNMjUwNjE3MTIxMDE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOWE5ZGJkMmY2YzFkMTU5N2Y1NzgzOWRmZjlhYzM2MDI3MTY4M2ViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNaexAbwx5jv1X3kbDcbZmUkgnLg
EM76lkbQpSC0da9lpicCku0r1mytHcgzUBWWVQcMZLjUz4JdUk6YEedKEXrVNlHc
h1gVVHbbIE+IPTqXTaFGFMgvP9puvqvbJoFTrlcxIH4h3NdHNs7k+USFQ8vjH1qk
Gb+DAmAShB9CIPCZ2jX8pOPzr3mG2HFPg1qjJzQZN5pEEP1XmtLNwJOlaLn3DrKM
XrQcf6DQ5nA182hRJ/f1RqcY1ZzCS54ITI2bQbAqg6Kx/Ckiw9OxsTKS9u7weCpM
ru6bli4BwZmV+eicXBwWT5n5KKbf+qUZpnQtePY5ppPLAJz/Cau0CLCiCwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMmp29L2wdFZf1eDnf+aw2AnFoPrMB8GA1UdIwQY
MBaAFD7ncPR/2QOSXYCsWOBeB287qhELMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHVkdzlIX1pBNUpkZ0t4WTRGNEhienVxRVFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi80MzQzNDQtMzIzZS00OGY4LWFkZTIt
NjI0ZjgzNjgyMTY5LzEveWFuYjB2YkIwVmxfVjRPZF81ckRZQ2NXZy1zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi80MzQzNDQtMzIzZS00OGY4LWFkZTItNjI0ZjgzNjgyMTY5
LzEvUHVkdzlIX1pBNUpkZ0t4WTRGNEhienVxRVFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALYgnAwQA
uSYaMA0GCSqGSIb3DQEBCwUAA4IBAQAhaCwdOu1AYAH1Z3nefoKhUd8eh3sjZoww
HENNQd+esuZYJ7FYU4y1IIg7w+oJCYNbmiAX9g33GY0oDcmL+CsMB3tqQryM7WLj
sd3FoeakH6IH2lD5YAfd88Mie09FriqE1jo64sINczdPbWE0Niruzu9AMqHjbFBF
tcqQdl7S38f6xXSqjVKkIhL01KsFxgtAsiFM5Zq9keqecQtU7SruvBEOcAaTrR9x
yx9kzA+MrjHaj78tAZihDB6IS4ntYh23U77glxxNtoTeq7ojjZbGU70ZLeSvE5MI
wA2lJ4lblBVQNQOxIa1sWVIrJYVj4/6QL1zURjxKkhFQC+kaDUbH
-----END CERTIFICATE-----
Generated at Tue Jul 1 19:07:36 2025 by rpki-client