Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/SVRVY-q0OPWhiL6mBd92R9L5Zm4.roa
File: SVRVY-q0OPWhiL6mBd92R9L5Zm4.roa (raw, json)
Hash identifier: dI19F02QJ/eVSmcDcyQsUmklhiicL/qqyQKGyXmUBoc=
Subject key identifier: 49:54:55:63:EA:B4:38:F5:A1:88:BE:A6:05:DF:76:47:D2:F9:66:6E
Certificate issuer: /CN=5753c06290a371994d7577318685f5bc4a538d47
Certificate serial: 0197E36C1C665815B5512F880B786FBC57A5
Authority key identifier: 57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/SVRVY-q0OPWhiL6mBd92R9L5Zm4.roa
Signing time: Mon 07 Jul 2025 05:46:42 +0000
ROA not before: Mon 07 Jul 2025 05:46:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 52468
IP address blocks: 158.172.217.0/24 maxlen: 24
158.172.220.0/23 maxlen: 23
158.172.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:e3:6c:1c:66:58:15:b5:51:2f:88:0b:78:6f:bc:57:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5753c06290a371994d7577318685f5bc4a538d47
Validity
Not Before: Jul 7 05:46:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=49545563eab438f5a188bea605df7647d2f9666e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b3:de:bf:fa:23:55:8c:47:c3:86:1f:4f:3f:
69:36:af:e3:06:11:70:93:08:b1:00:7c:c7:42:25:
28:fb:04:66:46:f3:f5:8f:32:e1:5f:c3:e7:f5:d7:
19:03:ae:25:f4:fb:bf:ca:cb:2b:66:02:9f:42:05:
28:a1:0b:e7:f9:25:7b:4d:8c:0d:a2:c0:1c:4b:53:
c5:87:95:05:2c:45:98:4c:bf:62:83:f2:b5:eb:f6:
d4:1b:f1:3f:d6:c7:86:b8:4d:ba:a8:3d:b3:72:84:
20:f7:8c:29:41:de:d1:dd:3a:c5:7f:af:a7:f1:cc:
01:07:52:ac:30:c3:a3:a7:b7:07:ad:aa:0e:25:8e:
49:66:ca:01:d5:5a:4d:c4:dc:b4:40:37:c5:96:a3:
41:dc:c6:29:20:01:21:ff:04:f0:4a:f5:11:5d:3f:
0c:0d:8c:2a:cb:70:47:94:79:8d:ef:6a:21:df:b5:
0c:b0:b6:e6:bc:9b:da:33:5e:5a:00:df:7e:73:bb:
fd:23:c3:7d:0a:de:cc:0e:2f:6a:fc:08:9e:b4:f1:
98:58:4a:2e:8d:25:b6:f5:f6:00:56:ef:92:79:64:
ce:b9:a9:a8:a0:6a:46:0d:f0:0d:30:3b:f4:1a:36:
a6:68:05:71:c7:cb:e5:7f:07:93:a9:b2:a6:30:f0:
2b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:54:55:63:EA:B4:38:F5:A1:88:BE:A6:05:DF:76:47:D2:F9:66:6E
X509v3 Authority Key Identifier:
keyid:57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/SVRVY-q0OPWhiL6mBd92R9L5Zm4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.172.217.0/24
158.172.220.0-158.172.222.255
Signature Algorithm: sha256WithRSAEncryption
b6:5e:38:0b:5b:f1:3b:3b:72:6e:5e:57:7a:00:19:c5:06:2d:
b0:5c:e7:16:bc:50:47:90:3a:f5:7a:ca:3e:57:56:cf:87:b8:
db:f8:f4:6d:ec:0d:15:44:ac:49:ef:78:5d:77:25:f3:54:6a:
8f:d6:cd:15:7a:15:ae:16:e1:f1:ce:e1:6e:3b:ae:93:60:a1:
7c:9f:b5:0d:05:56:f5:e0:74:04:ea:86:d7:77:f7:18:b9:01:
4a:28:75:4c:36:44:04:1c:06:8b:aa:91:45:fe:ff:1c:09:62:
e3:4a:31:fc:1e:43:ea:a8:ea:4e:d3:10:0a:cb:b7:9d:d5:9b:
e2:0a:1b:b2:0a:c8:f8:0b:3c:50:39:f6:02:03:e7:86:5e:2e:
bb:6c:d8:0f:aa:57:f8:7f:aa:02:81:79:16:2a:94:9d:06:33:
35:ec:d2:23:db:4d:9e:8d:32:5d:80:08:9d:71:73:3c:d9:94:
66:0e:eb:3f:97:c6:f9:d9:43:b5:21:7b:fb:d2:87:5c:4a:c5:
9f:42:8f:77:76:76:46:d5:12:39:ed:e3:6c:51:e6:81:39:6f:
54:ab:88:54:ea:08:eb:37:2a:5f:aa:d0:1b:93:6d:7d:cc:89:
de:0c:38:35:98:b6:81:3c:9b:7e:53:53:33:ec:b3:9b:76:2e:
04:43:7c:1c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jul 26 11:32:51 2025 by rpki-client