Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/568728-4c56-4a8f-afb3-c44f9d7ffdf6/1/GYq7npqDI9nx5r20ZgfqjJ8jCBE.roa
File: GYq7npqDI9nx5r20ZgfqjJ8jCBE.roa (raw, json)
Hash identifier: ohpsx6f/3RHy+wstuJFR07y68Swe9+64PHH/6mRDCMM=
Subject key identifier: 19:8A:BB:9E:9A:83:23:D9:F1:E6:BD:B4:66:07:EA:8C:9F:23:08:11
Certificate issuer: /CN=597218c925e76e1e9809875f7ed1afa97ef6f79d
Certificate serial: 0197F37C78C91A1236BED9FBB74FD986D311
Authority key identifier: 59:72:18:C9:25:E7:6E:1E:98:09:87:5F:7E:D1:AF:A9:7E:F6:F7:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXIYySXnbh6YCYdfftGvqX72950.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/568728-4c56-4a8f-afb3-c44f9d7ffdf6/1/GYq7npqDI9nx5r20ZgfqjJ8jCBE.roa
Signing time: Thu 10 Jul 2025 08:38:30 +0000
ROA not before: Thu 10 Jul 2025 08:38:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213677
IP address blocks: 185.57.20.0/24 maxlen: 24
185.57.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/568728-4c56-4a8f-afb3-c44f9d7ffdf6/1/WXIYySXnbh6YCYdfftGvqX72950.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/568728-4c56-4a8f-afb3-c44f9d7ffdf6/1/WXIYySXnbh6YCYdfftGvqX72950.mft
rsync://rpki.ripe.net/repository/DEFAULT/WXIYySXnbh6YCYdfftGvqX72950.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:f3:7c:78:c9:1a:12:36:be:d9:fb:b7:4f:d9:86:d3:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=597218c925e76e1e9809875f7ed1afa97ef6f79d
Validity
Not Before: Jul 10 08:38:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=198abb9e9a8323d9f1e6bdb46607ea8c9f230811
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7c:0c:1e:b4:81:cb:9b:f3:09:e1:d0:03:63:
47:75:11:53:f3:6b:f5:1f:31:20:ce:68:6a:b0:8a:
48:62:0a:2f:7c:ed:41:30:97:86:8a:2b:2d:7b:11:
61:82:60:3e:be:33:c7:ba:01:d5:f2:4b:73:e0:a0:
1f:31:12:8c:c4:f1:4d:08:ff:a2:07:71:44:bd:1b:
2d:37:68:dc:ea:f1:b6:1c:9e:6b:81:92:5e:5c:51:
87:a3:f1:33:0e:57:f5:e6:50:8d:0c:fe:d1:3f:51:
7d:c4:62:45:ec:56:09:bd:fb:55:bb:38:69:94:07:
e3:9e:36:a3:db:46:7f:c4:e1:b1:34:0f:b4:4e:8f:
3b:e8:77:6a:1c:88:35:ca:32:06:8e:ca:e6:bc:b9:
73:50:c7:ba:45:f4:5c:9a:35:13:e4:d2:28:79:15:
a4:ac:68:0d:a7:d5:09:70:f9:75:7b:fe:da:84:9b:
98:97:79:f3:19:70:c2:95:38:d7:75:eb:c4:35:cc:
d3:79:2e:8c:ea:c7:20:98:c6:16:91:d4:80:ef:01:
dc:f7:86:8a:bf:b2:63:09:7f:64:f3:f2:4d:e4:c1:
fc:54:d1:ee:02:ea:1d:ec:04:05:54:83:91:a0:71:
fd:07:05:09:10:09:96:1c:44:c1:f4:e7:9c:e8:aa:
af:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:8A:BB:9E:9A:83:23:D9:F1:E6:BD:B4:66:07:EA:8C:9F:23:08:11
X509v3 Authority Key Identifier:
keyid:59:72:18:C9:25:E7:6E:1E:98:09:87:5F:7E:D1:AF:A9:7E:F6:F7:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXIYySXnbh6YCYdfftGvqX72950.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/568728-4c56-4a8f-afb3-c44f9d7ffdf6/1/GYq7npqDI9nx5r20ZgfqjJ8jCBE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/568728-4c56-4a8f-afb3-c44f9d7ffdf6/1/WXIYySXnbh6YCYdfftGvqX72950.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.57.20.0/23
Signature Algorithm: sha256WithRSAEncryption
73:e2:fa:2b:11:27:7c:40:e2:08:40:20:a5:6e:62:3a:31:19:
eb:2d:17:d2:d2:8e:56:76:19:0e:15:97:95:3c:db:ef:67:d6:
ab:76:ee:2b:60:b0:94:3f:aa:d4:5b:62:45:b6:19:61:aa:0b:
ae:03:a6:aa:8a:14:26:27:f5:cd:92:24:60:b7:a6:25:48:d4:
51:bd:bf:44:95:75:a1:89:b0:09:57:4b:c0:ab:77:f3:16:a0:
31:77:cb:f0:1d:f8:0c:44:5f:bd:58:61:89:75:2e:2d:09:61:
f6:58:e8:79:38:b0:6a:fd:ed:ef:f3:9e:03:85:bd:04:19:9f:
a3:b5:a5:b1:63:6b:e0:3e:c1:b9:94:4b:24:0d:e0:91:bb:a7:
9f:cc:aa:70:ba:27:69:00:f8:b7:32:82:b5:2b:99:dd:a2:64:
f1:57:3a:dd:61:a0:7d:97:78:a3:9e:0e:eb:75:96:0a:60:ff:
62:5b:e1:d4:4a:bf:59:a0:ee:ca:df:83:f7:dc:b9:de:f4:d3:
f9:a2:c4:f1:41:8e:6a:04:48:8c:52:cb:13:b6:96:f8:d2:ca:
db:64:ca:8e:2c:15:65:09:5f:54:59:06:bf:0c:06:ee:49:20:
dd:1a:9c:af:b2:b1:2d:56:eb:49:16:0e:8e:72:c8:86:49:06:
a6:de:ef:bb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZfzfHjJGhI2vtn7t0/ZhtMRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5NzIxOGM5MjVlNzZlMWU5ODA5ODc1ZjdlZDFhZmE5N2Vm
NmY3OWQwHhcNMjUwNzEwMDgzODMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOThhYmI5ZTlhODMyM2Q5ZjFlNmJkYjQ2NjA3ZWE4YzlmMjMwODExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHwMHrSBy5vzCeHQA2NHdRFT82v1
HzEgzmhqsIpIYgovfO1BMJeGiistexFhgmA+vjPHugHV8ktz4KAfMRKMxPFNCP+i
B3FEvRstN2jc6vG2HJ5rgZJeXFGHo/EzDlf15lCNDP7RP1F9xGJF7FYJvftVuzhp
lAfjnjaj20Z/xOGxNA+0To876HdqHIg1yjIGjsrmvLlzUMe6RfRcmjUT5NIoeRWk
rGgNp9UJcPl1e/7ahJuYl3nzGXDClTjXdevENczTeS6M6scgmMYWkdSA7wHc94aK
v7JjCX9k8/JN5MH8VNHuAuod7AQFVIORoHH9BwUJEAmWHETB9Oec6KqvdQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBmKu56agyPZ8ea9tGYH6oyfIwgRMB8GA1UdIwQY
MBaAFFlyGMkl524emAmHX37Rr6l+9vedMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1hJWXlTWG5iaDZZQ1lkZmZ0R3ZxWDcyOTUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC81Njg3MjgtNGM1Ni00YThmLWFmYjMt
YzQ0ZjlkN2ZmZGY2LzEvR1lxN25wcURJOW54NXIyMFpnZnFqSjhqQ0JFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC81Njg3MjgtNGM1Ni00YThmLWFmYjMtYzQ0ZjlkN2ZmZGY2
LzEvV1hJWXlTWG5iaDZZQ1lkZmZ0R3ZxWDcyOTUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuTkUMA0G
CSqGSIb3DQEBCwUAA4IBAQBz4vorESd8QOIIQCClbmI6MRnrLRfS0o5WdhkOFZeV
PNvvZ9ardu4rYLCUP6rUW2JFthlhqguuA6aqihQmJ/XNkiRgt6YlSNRRvb9ElXWh
ibAJV0vAq3fzFqAxd8vwHfgMRF+9WGGJdS4tCWH2WOh5OLBq/e3v854Dhb0EGZ+j
taWxY2vgPsG5lEskDeCRu6efzKpwuidpAPi3MoK1K5ndomTxVzrdYaB9l3ijng7r
dZYKYP9iW+HUSr9ZoO7K34P33Lne9NP5osTxQY5qBEiMUssTtpb40srbZMqOLBVl
CV9UWQa/DAbuSSDdGpyvsrEtVutJFg6OcsiGSQam3u+7
-----END CERTIFICATE-----
Generated at Sun Jul 20 20:30:42 2025 by rpki-client