Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/IL1-VfzXKjMdnRwOeHWRvCba6do.roa
File: IL1-VfzXKjMdnRwOeHWRvCba6do.roa (raw, json)
Hash identifier: R10MoKh5uMX0ghVEju60HL0CXkolK6vBA+Z5a/naeA8=
Subject key identifier: 20:BD:7E:55:FC:D7:2A:33:1D:9D:1C:0E:78:75:91:BC:26:DA:E9:DA
Certificate issuer: /CN=ed6da82dbc7d7e2818f96680b66efcedb1087947
Certificate serial: 0197D86BF2897F4CA6331B8810EB9F16C837
Authority key identifier: ED:6D:A8:2D:BC:7D:7E:28:18:F9:66:80:B6:6E:FC:ED:B1:08:79:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/IL1-VfzXKjMdnRwOeHWRvCba6do.roa
Signing time: Sat 05 Jul 2025 02:30:42 +0000
ROA not before: Sat 05 Jul 2025 02:30:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29551
IP address blocks: 46.253.112.0/20 maxlen: 24
80.66.204.0/22 maxlen: 24
82.149.224.0/19 maxlen: 24
83.141.0.0/18 maxlen: 24
109.71.24.0/21 maxlen: 24
178.19.64.0/20 maxlen: 24
185.37.16.0/22 maxlen: 24
195.225.196.0/22 maxlen: 24
2a00:f520::/32 maxlen: 48
2a01:440::/29 maxlen: 48
2a01:440:1509::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d8:6b:f2:89:7f:4c:a6:33:1b:88:10:eb:9f:16:c8:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed6da82dbc7d7e2818f96680b66efcedb1087947
Validity
Not Before: Jul 5 02:30:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=20bd7e55fcd72a331d9d1c0e787591bc26dae9da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:98:31:97:60:17:0a:f5:18:58:92:f4:77:e2:
98:44:3e:d7:0f:25:6d:c9:6f:c3:75:b8:d3:07:05:
bb:7a:3d:be:e1:f5:64:21:01:33:91:41:9c:98:4b:
50:4b:0f:d3:99:6e:a3:d1:5b:06:40:ce:c9:56:02:
22:e2:84:28:3f:1f:5b:b7:e3:4f:5a:7f:1c:1f:98:
5a:57:b8:c2:48:18:b8:6a:66:a7:33:c8:bb:a0:e0:
db:ca:b7:ff:3c:3a:31:ed:50:a4:d7:65:9a:95:88:
43:6d:8b:bf:7a:5f:f9:cb:28:93:61:a5:67:f2:42:
93:55:d7:32:1b:42:d7:5c:2d:30:84:34:f1:13:b6:
3b:99:0b:b4:92:ca:69:32:09:d1:eb:28:e3:73:ae:
ea:fb:ae:54:92:ab:29:50:94:49:63:fe:90:e8:43:
ed:d5:f1:8b:4d:68:6b:27:88:b2:3e:6e:a8:d4:91:
69:d3:7f:e0:30:cb:0d:41:5c:71:e1:4f:ee:ad:fb:
a1:e0:8c:e7:13:3b:4c:6c:56:da:f0:4f:6a:37:d3:
05:d6:8e:98:7d:30:86:92:55:6d:85:75:80:07:9c:
6a:28:45:29:e4:5a:68:9b:e4:70:d9:2c:00:e4:61:
20:55:7f:c0:70:05:9e:8f:6d:1d:ba:a4:77:4b:2d:
d4:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:BD:7E:55:FC:D7:2A:33:1D:9D:1C:0E:78:75:91:BC:26:DA:E9:DA
X509v3 Authority Key Identifier:
keyid:ED:6D:A8:2D:BC:7D:7E:28:18:F9:66:80:B6:6E:FC:ED:B1:08:79:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/IL1-VfzXKjMdnRwOeHWRvCba6do.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.253.112.0/20
80.66.204.0/22
82.149.224.0/19
83.141.0.0/18
109.71.24.0/21
178.19.64.0/20
185.37.16.0/22
195.225.196.0/22
IPv6:
2a00:f520::/32
2a01:440::/29
Signature Algorithm: sha256WithRSAEncryption
24:8f:a5:92:6e:19:90:90:b5:1f:c5:07:37:8f:d8:1a:ef:a2:
76:ab:3d:10:42:25:9a:d5:bc:00:e8:31:f7:da:6c:e2:9f:5c:
3f:e6:23:42:94:36:96:24:0e:4b:43:63:01:7d:1b:b8:8a:07:
21:d3:77:65:45:5c:d8:26:bc:72:04:96:0f:4e:31:3d:d0:0a:
d3:3d:4b:90:36:33:d4:f9:32:01:b8:6b:d1:72:cf:74:5e:48:
fd:3f:9f:93:b0:4f:64:ea:25:e2:c1:22:6e:14:b2:6e:f3:21:
9c:0c:89:06:a4:89:b7:28:6d:69:52:57:e5:a0:54:f0:75:66:
a9:c0:82:96:ba:61:a4:b1:5e:a1:08:fe:45:f9:a6:c0:19:1c:
a8:8c:a1:73:24:d6:23:9d:4a:c5:89:4d:56:d7:eb:81:b5:f7:
01:38:0b:dc:3b:7a:b7:ab:c6:0b:73:23:25:2f:06:49:53:e0:
4a:20:70:b1:b2:ca:74:8a:80:fc:24:80:40:b0:af:c5:f5:34:
21:88:b3:fb:01:e0:fe:4d:27:93:32:46:90:d5:0f:37:03:1e:
d7:a1:c3:73:fa:1d:61:26:ea:84:aa:f6:9d:4a:d2:de:63:63:
24:f9:dc:30:05:5e:6a:37:b8:e5:63:7d:7d:b6:10:64:71:65:
92:01:19:ce
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgISAZfYa/KJf0ymMxuIEOufFsg3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkNmRhODJkYmM3ZDdlMjgxOGY5NjY4MGI2NmVmY2VkYjEw
ODc5NDcwHhcNMjUwNzA1MDIzMDQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMGJkN2U1NWZjZDcyYTMzMWQ5ZDFjMGU3ODc1OTFiYzI2ZGFlOWRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJgxl2AXCvUYWJL0d+KYRD7XDyVt
yW/DdbjTBwW7ej2+4fVkIQEzkUGcmEtQSw/TmW6j0VsGQM7JVgIi4oQoPx9bt+NP
Wn8cH5haV7jCSBi4amanM8i7oODbyrf/PDox7VCk12WalYhDbYu/el/5yyiTYaVn
8kKTVdcyG0LXXC0whDTxE7Y7mQu0ksppMgnR6yjjc67q+65UkqspUJRJY/6Q6EPt
1fGLTWhrJ4iyPm6o1JFp03/gMMsNQVxx4U/urfuh4IznEztMbFba8E9qN9MF1o6Y
fTCGklVthXWAB5xqKEUp5Fpom+Rw2SwA5GEgVX/AcAWej20duqR3Sy3U9QIDAQAB
o4ICSTCCAkUwHQYDVR0OBBYEFCC9flX81yozHZ0cDnh1kbwm2unaMB8GA1UdIwQY
MBaAFO1tqC28fX4oGPlmgLZu/O2xCHlHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1cyb0xieDlmaWdZLVdhQXRtNzg3YkVJZVVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8zNTQ5ZmItZTNhMy00MTI0LWIzYjAt
NTk5NTc3ODdiMDE1LzEvSUwxLVZmelhLak1kblJ3T2VIV1J2Q2JhNmRvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS8zNTQ5ZmItZTNhMy00MTI0LWIzYjAtNTk5NTc3ODdiMDE1
LzEvN1cyb0xieDlmaWdZLVdhQXRtNzg3YkVJZVVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMF8GCCsGAQUFBwEHAQH/BFAwTjA2BAIAATAwAwQELv1wAwQC
UELMAwQFUpXgAwQGU40AAwQDbUcYAwQEshNAAwQCuSUQAwQCw+HEMBQEAgACMA4D
BQAqAPUgAwUDKgEEQDANBgkqhkiG9w0BAQsFAAOCAQEAJI+lkm4ZkJC1H8UHN4/Y
Gu+idqs9EEIlmtW8AOgx99ps4p9cP+YjQpQ2liQOS0NjAX0buIoHIdN3ZUVc2Ca8
cgSWD04xPdAK0z1LkDYz1PkyAbhr0XLPdF5I/T+fk7BPZOol4sEibhSybvMhnAyJ
BqSJtyhtaVJX5aBU8HVmqcCClrphpLFeoQj+RfmmwBkcqIyhcyTWI51KxYlNVtfr
gbX3ATgL3Dt6t6vGC3MjJS8GSVPgSiBwsbLKdIqA/CSAQLCvxfU0IYiz+wHg/k0n
kzJGkNUPNwMe16HDc/odYSbqhKr2nUrS3mNjJPncMAVeaje45WN9fbYQZHFlkgEZ
zg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 09:10:53 2025 by rpki-client