Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/N1BQNnOlB_L4IcY2nTO4Nll-BSM.roa
File: N1BQNnOlB_L4IcY2nTO4Nll-BSM.roa (raw, json)
Hash identifier: 43i1GeNUI7OSo9laADEtvVyUbVsin7l8KToC84GBNQU=
Subject key identifier: 37:50:50:36:73:A5:07:F2:F8:21:C6:36:9D:33:B8:36:59:7E:05:23
Certificate issuer: /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial: 0197EE018DD494A7C401106F99B4317D6FE3
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/N1BQNnOlB_L4IcY2nTO4Nll-BSM.roa
Signing time: Wed 09 Jul 2025 07:06:08 +0000
ROA not before: Wed 09 Jul 2025 07:06:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 194.238.40.0/23 maxlen: 24
194.238.42.0/23 maxlen: 24
217.179.4.0/23 maxlen: 24
217.179.50.0/23 maxlen: 24
217.179.58.0/23 maxlen: 24
217.179.72.0/23 maxlen: 24
217.179.228.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 06:21:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ee:01:8d:d4:94:a7:c4:01:10:6f:99:b4:31:7d:6f:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Validity
Not Before: Jul 9 07:06:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3750503673a507f2f821c6369d33b836597e0523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e5:47:7c:4c:d5:01:cc:6a:fd:24:54:fe:cf:
03:88:28:3c:0d:ff:49:ef:cf:80:ec:95:dd:74:85:
31:ca:29:e2:a7:63:2c:51:b6:f0:83:95:50:fe:77:
38:3a:32:3a:14:84:1e:d3:bd:55:92:7a:8c:f0:85:
ee:13:34:af:34:e5:73:5d:46:d7:8c:6a:32:17:43:
67:d1:b0:b8:73:1c:35:6f:00:0a:c3:3d:43:fd:e4:
c6:a7:54:2d:05:6b:b9:54:d2:03:45:b0:59:d9:e0:
8f:e5:22:f0:e9:96:e7:07:d8:55:ae:5a:6d:be:a0:
56:75:73:98:71:8f:b4:20:cc:1a:83:b1:76:50:20:
a8:91:3f:a2:dd:c8:31:ea:33:4d:84:e3:ac:26:18:
07:7a:b5:a2:21:12:41:de:42:a2:8b:1e:bb:f5:de:
0d:2d:68:0c:8d:ad:03:1c:25:a2:fd:8a:b3:95:db:
5c:be:30:f0:45:90:8e:13:0d:6b:96:2e:f2:ed:9b:
a4:97:0e:48:df:af:45:81:48:32:06:39:c5:87:60:
17:d4:75:a4:ce:cd:dd:9f:17:21:86:b6:23:b5:82:
c6:13:61:29:8c:6e:48:ed:91:d0:bd:a6:5e:e5:00:
60:e0:e5:df:c1:77:62:bc:22:e1:05:ae:09:c8:d7:
d1:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:50:50:36:73:A5:07:F2:F8:21:C6:36:9D:33:B8:36:59:7E:05:23
X509v3 Authority Key Identifier:
keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/N1BQNnOlB_L4IcY2nTO4Nll-BSM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.238.40.0/22
217.179.4.0/23
217.179.50.0/23
217.179.58.0/23
217.179.72.0/23
217.179.228.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:2a:17:68:81:ae:d8:17:9b:70:37:21:d6:0d:06:5c:e4:25:
d3:ec:e0:80:58:5f:1c:6f:f1:a8:c5:dc:29:4e:8a:6f:6a:b4:
8d:80:d8:93:b9:56:50:de:eb:df:6d:4d:c6:04:ce:10:ac:7f:
43:a7:36:c4:19:90:c4:7b:3b:81:56:c4:93:3d:e6:52:d6:67:
0e:aa:b3:eb:2a:d1:b5:96:ce:ee:e0:58:f3:23:46:be:52:da:
fd:ea:38:dc:9f:55:73:aa:49:4f:c2:71:a4:56:d1:91:ff:f2:
cc:c6:90:65:81:48:a7:c1:10:0b:0f:51:1a:6e:42:87:d6:6f:
cb:ba:1e:e2:25:ab:56:51:a0:8f:ee:d9:d2:59:72:ba:21:36:
3d:27:ec:ed:a3:49:2b:0a:e3:36:4d:e9:48:d2:1b:2b:29:92:
97:77:47:82:9e:8c:de:ea:f3:57:76:db:cf:e3:28:33:70:ba:
75:75:d0:10:2a:aa:1d:44:db:92:4e:a6:ff:62:61:e2:02:a1:
1b:e0:74:51:af:78:94:d4:4b:8c:95:ea:f6:c4:b6:7f:65:ce:
4d:48:24:d4:42:ff:29:68:b7:37:06:17:0f:d0:2a:bf:c7:85:
84:00:39:c7:6d:2e:41:d8:41:1b:5f:14:4d:5d:8c:1c:a5:cf:
f3:7c:fd:46
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAZfuAY3UlKfEARBvmbQxfW/jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhNTgzNmRkZTliOWRhZWYzNWE4YTdmNzRkNjMyNmY2YjQy
ZGE3NGQwHhcNMjUwNzA5MDcwNjA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNzUwNTAzNjczYTUwN2YyZjgyMWM2MzY5ZDMzYjgzNjU5N2UwNTIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkeVHfEzVAcxq/SRU/s8DiCg8Df9J
78+A7JXddIUxyinip2MsUbbwg5VQ/nc4OjI6FIQe071VknqM8IXuEzSvNOVzXUbX
jGoyF0Nn0bC4cxw1bwAKwz1D/eTGp1QtBWu5VNIDRbBZ2eCP5SLw6ZbnB9hVrlpt
vqBWdXOYcY+0IMwag7F2UCCokT+i3cgx6jNNhOOsJhgHerWiIRJB3kKiix679d4N
LWgMja0DHCWi/YqzldtcvjDwRZCOEw1rli7y7Zuklw5I369FgUgyBjnFh2AX1HWk
zs3dnxchhrYjtYLGE2EpjG5I7ZHQvaZe5QBg4OXfwXdivCLhBa4JyNfRXQIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFDdQUDZzpQfy+CHGNp0zuDZZfgUjMB8GA1UdIwQY
MBaAFGpYNt3pudrvNain901jJva0LadNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWxnMjNlbTUydTgxcUtmM1RXTW05clF0cDAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi84MzgwMzItZGI5Ny00OTdmLThjOTUt
YzE5OTQyNzM3ZTZkLzEvTjFCUU5uT2xCX0w0SWNZMm5UTzRObGwtQlNNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi84MzgwMzItZGI5Ny00OTdmLThjOTUtYzE5OTQyNzM3ZTZk
LzEvYWxnMjNlbTUydTgxcUtmM1RXTW05clF0cDAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQCwu4oAwQB
2bMEAwQB2bMyAwQB2bM6AwQB2bNIAwQC2bPkMA0GCSqGSIb3DQEBCwUAA4IBAQAe
Khdoga7YF5twNyHWDQZc5CXT7OCAWF8cb/GoxdwpTopvarSNgNiTuVZQ3uvfbU3G
BM4QrH9DpzbEGZDEezuBVsSTPeZS1mcOqrPrKtG1ls7u4FjzI0a+Utr96jjcn1Vz
qklPwnGkVtGR//LMxpBlgUinwRALD1EabkKH1m/Luh7iJatWUaCP7tnSWXK6ITY9
J+zto0krCuM2TelI0hsrKZKXd0eCnoze6vNXdtvP4ygzcLp1ddAQKqodRNuSTqb/
YmHiAqEb4HRRr3iU1EuMler2xLZ/Zc5NSCTUQv8paLc3BhcP0Cq/x4WEADnHbS5B
2EEbXxRNXYwcpc/zfP1G
-----END CERTIFICATE-----
Generated at Sun Jul 20 14:10:55 2025 by rpki-client