Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/VWnNozLNLO8FMYfLyZ3YJhfSbzY.roa
File: VWnNozLNLO8FMYfLyZ3YJhfSbzY.roa (raw, json)
Hash identifier: SjSEE0PuBFfDvTboDsp5V2YW8oht9uN4XdTRTe4vGl8=
Subject key identifier: 55:69:CD:A3:32:CD:2C:EF:05:31:87:CB:C9:9D:D8:26:17:D2:6F:36
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 0197D4B68CED6493D0953D12626EFBC949D1
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/VWnNozLNLO8FMYfLyZ3YJhfSbzY.roa
Signing time: Fri 04 Jul 2025 09:13:42 +0000
ROA not before: Fri 04 Jul 2025 09:13:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207483
IP address blocks: 188.132.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 10:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d4:b6:8c:ed:64:93:d0:95:3d:12:62:6e:fb:c9:49:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jul 4 09:13:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5569cda332cd2cef053187cbc99dd82617d26f36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4d:47:be:83:5c:ec:30:d0:37:77:a7:c6:1e:
90:87:d6:56:36:68:70:ed:cc:cf:a4:08:1a:de:1c:
f4:d0:01:d5:31:76:e7:5c:85:f6:cb:79:09:e9:8f:
e4:c0:a3:f6:e7:72:b1:8b:12:6b:40:88:72:02:eb:
ea:ed:54:bd:6c:d5:16:b9:77:ee:a3:0d:65:a5:f8:
24:b2:ff:1f:3d:ec:f1:b0:3e:14:90:7f:fb:37:e6:
bb:8a:47:5f:eb:22:d2:82:ba:27:16:b9:2a:98:40:
bd:d7:47:47:73:fe:8e:ba:7e:6e:a1:f6:cc:20:8d:
f3:44:56:4b:92:90:08:46:de:4e:cf:88:c4:e4:8a:
da:c4:bd:1a:12:44:db:54:e2:c8:16:88:38:7e:a7:
da:61:36:10:0b:e8:00:c9:2b:82:9d:31:94:f8:fc:
98:b1:87:e9:b5:62:34:93:49:35:78:0d:69:eb:27:
3d:b2:41:f7:c6:4e:be:5d:d2:fc:f5:b9:cc:7b:a2:
58:78:d2:f7:a5:12:63:1e:a1:f7:3f:a1:f8:59:7c:
8f:7d:e2:8e:ee:1c:db:34:4f:20:93:93:db:c7:27:
e6:6f:85:d7:52:01:37:94:b1:19:10:a9:c3:53:7d:
3b:1d:fc:25:2c:10:d3:2c:ad:1c:7b:98:7f:9a:b3:
f4:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:69:CD:A3:32:CD:2C:EF:05:31:87:CB:C9:9D:D8:26:17:D2:6F:36
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/VWnNozLNLO8FMYfLyZ3YJhfSbzY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.132.141.0/24
Signature Algorithm: sha256WithRSAEncryption
30:8f:98:bc:b7:f3:92:3e:4a:04:3b:83:a5:4b:1b:a0:62:fc:
de:db:60:f6:1e:85:01:e2:72:33:15:5e:1e:7b:63:6c:68:9e:
2b:ec:ef:a9:c8:52:e4:92:64:43:96:20:0a:74:98:fb:cf:8d:
39:04:b9:36:90:50:1c:0e:0a:8b:1b:8a:32:2e:5d:ff:22:2f:
77:6f:4e:ec:5b:7e:1b:13:0b:52:45:7e:b7:e2:2e:6f:d0:53:
b4:f8:87:04:d9:6a:04:17:be:75:ca:94:64:7c:3b:91:fe:22:
d4:be:14:a9:05:8f:84:2f:32:a9:30:12:d0:74:1b:73:0f:28:
bd:90:30:29:67:72:ba:5b:4a:f2:ff:fa:80:f7:a0:ad:17:3f:
19:78:26:22:81:fc:13:69:12:26:9d:99:fa:69:e2:76:98:3f:
26:33:12:ba:d5:f9:62:b9:f5:91:c5:4d:c9:ff:9a:84:11:1d:
01:06:fe:34:af:0f:ff:e3:22:c0:23:75:a9:02:af:72:ae:29:
7f:84:c1:7e:56:dc:96:ff:03:67:bc:5b:80:d4:e7:39:73:92:
6a:e7:1e:21:39:f6:9c:6a:fb:5b:41:f9:ae:22:78:d7:7a:27:
94:83:2b:e5:ef:e2:cb:e1:e3:1e:fc:2e:53:a7:b3:bf:99:b8:
e0:46:91:ba
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZfUtoztZJPQlT0SYm77yUnRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx
OTJjYTIwHhcNMjUwNzA0MDkxMzQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NTY5Y2RhMzMyY2QyY2VmMDUzMTg3Y2JjOTlkZDgyNjE3ZDI2ZjM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs01HvoNc7DDQN3enxh6Qh9ZWNmhw
7czPpAga3hz00AHVMXbnXIX2y3kJ6Y/kwKP253KxixJrQIhyAuvq7VS9bNUWuXfu
ow1lpfgksv8fPezxsD4UkH/7N+a7ikdf6yLSgronFrkqmEC910dHc/6Oun5uofbM
II3zRFZLkpAIRt5Oz4jE5IraxL0aEkTbVOLIFog4fqfaYTYQC+gAySuCnTGU+PyY
sYfptWI0k0k1eA1p6yc9skH3xk6+XdL89bnMe6JYeNL3pRJjHqH3P6H4WXyPfeKO
7hzbNE8gk5Pbxyfmb4XXUgE3lLEZEKnDU307HfwlLBDTLK0ce5h/mrP0vQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFVpzaMyzSzvBTGHy8md2CYX0m82MB8GA1UdIwQY
MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt
NGUxOThmMGE2MDEzLzEvVlduTm96TE5MTzhGTVlmTHlaM1lKaGZTYnpZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz
LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvISNMA0G
CSqGSIb3DQEBCwUAA4IBAQAwj5i8t/OSPkoEO4OlSxugYvze22D2HoUB4nIzFV4e
e2NsaJ4r7O+pyFLkkmRDliAKdJj7z405BLk2kFAcDgqLG4oyLl3/Ii93b07sW34b
EwtSRX634i5v0FO0+IcE2WoEF751ypRkfDuR/iLUvhSpBY+ELzKpMBLQdBtzDyi9
kDApZ3K6W0ry//qA96CtFz8ZeCYigfwTaRImnZn6aeJ2mD8mMxK61fliufWRxU3J
/5qEER0BBv40rw//4yLAI3WpAq9yril/hMF+VtyW/wNnvFuA1Oc5c5Jq5x4hOfac
avtbQfmuInjXeieUgyvl7+LL4eMe/C5Tp7O/mbjgRpG6
-----END CERTIFICATE-----
Generated at Mon Jul 21 18:09:30 2025 by rpki-client