Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/x6seRwBOq_CRZGJqhRd1EBp_kiI.roa
File: x6seRwBOq_CRZGJqhRd1EBp_kiI.roa (raw, json)
Hash identifier: rR2gIHJRwQudNQFzsP+C+tD9iC/4YNN6FWVD4AJ320s=
Subject key identifier: C7:AB:1E:47:00:4E:AB:F0:91:64:62:6A:85:17:75:10:1A:7F:92:22
Certificate issuer: /CN=0735daa8cfe25dd12a2c26e0ffcce97636748ebd
Certificate serial: 0195A92ACEB89631002697433CE80B1875F7
Authority key identifier: 07:35:DA:A8:CF:E2:5D:D1:2A:2C:26:E0:FF:CC:E9:76:36:74:8E:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/x6seRwBOq_CRZGJqhRd1EBp_kiI.roa
Signing time: Tue 18 Mar 2025 12:11:49 +0000
ROA not before: Tue 18 Mar 2025 12:11:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209255
IP address blocks: 92.119.52.0/22 maxlen: 22
2a09:b640::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 09:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a9:2a:ce:b8:96:31:00:26:97:43:3c:e8:0b:18:75:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0735daa8cfe25dd12a2c26e0ffcce97636748ebd
Validity
Not Before: Mar 18 12:11:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c7ab1e47004eabf09164626a851775101a7f9222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:6a:d8:df:f5:70:89:03:56:4f:9e:a4:e8:9c:
93:40:9e:49:38:18:f0:12:ad:ab:a0:84:d4:1b:dd:
8e:11:fc:f8:83:9e:a9:de:d2:d2:95:73:1e:96:59:
a0:9d:b8:57:15:a6:9f:b2:a2:db:e8:d8:02:1e:0c:
4e:31:f6:a1:c2:75:29:69:64:98:51:bb:09:45:52:
8a:56:bc:7e:9d:54:d1:d6:59:39:3d:a5:63:fa:3b:
99:f1:2a:fb:0a:cc:02:8d:02:37:fc:f3:19:b3:cf:
aa:0b:ad:0b:34:7c:ad:8b:6a:e5:dd:84:bf:26:7b:
73:65:9b:c5:a1:7c:2a:99:56:c3:fb:45:d5:45:51:
ec:3e:a5:0f:06:33:3c:f9:df:37:99:92:e9:d1:62:
c0:7f:16:26:55:6e:05:5b:03:68:a2:d1:c8:93:91:
74:a8:f1:0b:53:24:14:8f:ab:ae:6b:89:75:a9:ff:
c1:07:73:03:c8:c8:78:29:1d:0b:fb:61:d2:a5:2a:
d7:03:39:48:74:40:a7:3c:d5:c9:a5:99:9f:b2:21:
97:ab:15:f9:a1:13:33:29:dd:45:02:6a:17:2a:4e:
a8:44:7a:31:3e:7f:4b:5a:e2:89:ba:bc:a0:a3:fb:
bb:e4:71:09:9a:a0:85:92:d4:44:7c:ce:79:bd:51:
b6:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:AB:1E:47:00:4E:AB:F0:91:64:62:6A:85:17:75:10:1A:7F:92:22
X509v3 Authority Key Identifier:
keyid:07:35:DA:A8:CF:E2:5D:D1:2A:2C:26:E0:FF:CC:E9:76:36:74:8E:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/x6seRwBOq_CRZGJqhRd1EBp_kiI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.52.0/22
IPv6:
2a09:b640::/29
Signature Algorithm: sha256WithRSAEncryption
73:d0:38:e2:87:b2:84:04:7b:5d:e5:c9:1b:05:06:9d:3a:da:
47:d6:95:a0:d1:b5:89:ef:9c:84:bf:6c:7f:87:25:01:99:16:
56:88:10:84:ce:a5:01:e6:88:56:98:4e:47:4d:4e:a4:1b:0f:
13:a6:c7:64:d1:e3:b0:c5:6b:25:24:a2:e4:c7:13:9f:90:d2:
73:38:5c:68:3a:d4:58:e3:74:1c:dc:1d:81:fd:8a:e2:ce:a5:
4c:da:5c:58:fa:b8:b7:da:d3:e2:b3:a2:af:25:90:e8:fa:4b:
c4:1d:e0:05:ed:ea:f9:a6:2e:fb:7f:05:b2:5c:72:a1:25:20:
a8:bf:7f:4d:f1:3f:c7:b7:72:e9:29:02:eb:2b:3f:be:e0:02:
75:ce:e4:e8:c8:e6:0e:d7:21:da:ce:b0:39:c8:2c:de:1d:88:
4a:81:47:97:ce:f7:a0:96:ad:0a:98:6c:15:66:07:dd:a9:15:
28:c8:38:89:e2:ea:38:ab:24:d4:22:f3:b3:2d:82:cc:b2:e3:
e6:18:1e:6b:88:7b:fc:67:38:f5:88:e4:07:f4:49:91:7b:2f:
a0:65:fc:27:6b:95:07:d3:7f:8b:28:02:84:6f:ef:a7:87:a5:
b3:ee:10:9e:b4:b7:7a:9a:1c:31:46:f2:7f:20:15:8a:64:a3:
b1:66:74:8c
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZWpKs64ljEAJpdDPOgLGHX3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3MzVkYWE4Y2ZlMjVkZDEyYTJjMjZlMGZmY2NlOTc2MzY3
NDhlYmQwHhcNMjUwMzE4MTIxMTQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjN2FiMWU0NzAwNGVhYmYwOTE2NDYyNmE4NTE3NzUxMDFhN2Y5MjIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2WrY3/VwiQNWT56k6JyTQJ5JOBjw
Eq2roITUG92OEfz4g56p3tLSlXMellmgnbhXFaafsqLb6NgCHgxOMfahwnUpaWSY
UbsJRVKKVrx+nVTR1lk5PaVj+juZ8Sr7CswCjQI3/PMZs8+qC60LNHyti2rl3YS/
JntzZZvFoXwqmVbD+0XVRVHsPqUPBjM8+d83mZLp0WLAfxYmVW4FWwNootHIk5F0
qPELUyQUj6uua4l1qf/BB3MDyMh4KR0L+2HSpSrXAzlIdECnPNXJpZmfsiGXqxX5
oRMzKd1FAmoXKk6oRHoxPn9LWuKJurygo/u75HEJmqCFktREfM55vVG2wwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFMerHkcATqvwkWRiaoUXdRAaf5IiMB8GA1UdIwQY
MBaAFAc12qjP4l3RKiwm4P/M6XY2dI69MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnpYYXFNX2lYZEVxTENiZ184enBkalowanIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS8yYTRiZjUtNDBjZi00NDdhLTk3ZTAt
Njc5Y2YwMjEwZDQ5LzEveDZzZVJ3Qk9xX0NSWkdKcWhSZDFFQnBfa2lJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS8yYTRiZjUtNDBjZi00NDdhLTk3ZTAtNjc5Y2YwMjEwZDQ5
LzEvQnpYYXFNX2lYZEVxTENiZ184enBkalowanIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCXHc0MA0E
AgACMAcDBQMqCbZAMA0GCSqGSIb3DQEBCwUAA4IBAQBz0Djih7KEBHtd5ckbBQad
OtpH1pWg0bWJ75yEv2x/hyUBmRZWiBCEzqUB5ohWmE5HTU6kGw8Tpsdk0eOwxWsl
JKLkxxOfkNJzOFxoOtRY43Qc3B2B/YrizqVM2lxY+ri32tPis6KvJZDo+kvEHeAF
7er5pi77fwWyXHKhJSCov39N8T/Ht3LpKQLrKz++4AJ1zuToyOYO1yHazrA5yCze
HYhKgUeXzveglq0KmGwVZgfdqRUoyDiJ4uo4qyTUIvOzLYLMsuPmGB5riHv8Zzj1
iOQH9EmRey+gZfwna5UH03+LKAKEb++nh6Wz7hCetLd6mhwxRvJ/IBWKZKOxZnSM
-----END CERTIFICATE-----
Generated at Tue Apr 22 17:01:13 2025 by rpki-client