Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/vCn6Xtd1fIWYg9vJ71mrhGFnm3o.roa
File: vCn6Xtd1fIWYg9vJ71mrhGFnm3o.roa (raw, json)
Hash identifier: 6tzM5Isu4ob8ugZ855Z9pCfNeIx0Btd2QnwYIzfnkKE=
Subject key identifier: BC:29:FA:5E:D7:75:7C:85:98:83:DB:C9:EF:59:AB:84:61:67:9B:7A
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01977EC521C7648835BC4247A078A0383FAA
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/vCn6Xtd1fIWYg9vJ71mrhGFnm3o.roa
Signing time: Tue 17 Jun 2025 16:42:17 +0000
ROA not before: Tue 17 Jun 2025 16:42:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 174
IP address blocks: 205.237.92.0/23 maxlen: 24
205.237.94.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7e:c5:21:c7:64:88:35:bc:42:47:a0:78:a0:38:3f:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jun 17 16:42:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bc29fa5ed7757c859883dbc9ef59ab8461679b7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a0:08:e9:6e:0d:ca:16:a5:82:dd:bc:08:76:
36:b8:fc:11:b8:f0:ed:55:9f:a5:20:95:e4:74:5d:
6d:0e:39:da:90:5e:d0:dd:f9:94:a6:ed:26:15:d3:
bd:ed:00:c2:ca:38:d4:8e:f5:0c:91:b8:d8:5c:82:
0f:cf:4a:06:b2:59:9e:51:d1:84:72:64:30:41:0d:
7b:d7:2d:82:99:b5:af:45:13:95:b1:47:5f:c6:37:
d9:a2:7f:8f:a4:51:e1:14:27:64:8f:a4:41:4c:8f:
66:51:98:e8:0a:c2:36:fe:04:dc:ee:0f:7c:6a:05:
d2:de:60:41:b9:54:18:96:d0:9b:17:af:ca:f0:5c:
d2:a3:d3:c0:b6:6f:c9:f5:9a:91:16:66:69:c3:d4:
9d:97:a8:5b:1e:d5:ae:a3:61:f6:15:59:64:a1:21:
30:45:2b:40:1f:c4:f9:fd:b9:95:ab:dd:13:f5:8d:
12:99:cd:c3:27:4e:5f:6b:b1:fe:52:82:75:16:aa:
46:7f:e4:86:4f:2a:6e:bb:a9:39:94:54:03:19:78:
0e:e5:8f:c8:f2:0b:43:2a:21:0d:93:58:be:ab:a3:
97:55:c7:6e:9b:d4:0c:85:3e:58:11:ae:54:64:e9:
c5:47:bc:fd:eb:74:b7:ef:4d:d8:46:ff:5a:0b:ed:
c4:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:29:FA:5E:D7:75:7C:85:98:83:DB:C9:EF:59:AB:84:61:67:9B:7A
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/vCn6Xtd1fIWYg9vJ71mrhGFnm3o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
205.237.92.0/22
Signature Algorithm: sha256WithRSAEncryption
65:3e:1e:51:21:79:31:91:f3:20:15:50:98:ff:0d:00:ba:ed:
67:d3:38:0c:4c:01:15:3c:56:5d:cd:2a:bb:34:2c:03:f2:f4:
8c:e2:53:7f:3d:ea:53:81:69:35:d7:d5:9a:83:1c:78:55:da:
62:d5:cc:be:84:59:c0:62:32:f1:05:fa:8d:95:62:d3:a6:df:
fb:b2:4b:0f:67:39:c4:27:30:1a:7c:28:de:03:bf:81:16:70:
ec:1e:84:0b:4c:a2:02:1b:41:db:51:73:b4:b8:85:88:85:b0:
f0:ba:8d:c2:d2:82:01:ef:70:24:7e:09:2e:15:1b:47:2e:35:
fa:b0:ae:0c:52:73:cf:d6:66:58:6c:ea:e1:d9:25:42:64:24:
4f:ae:2c:37:db:9c:f5:30:29:a5:3f:7e:b3:7b:16:66:84:fb:
3b:bc:1e:82:bb:3e:a2:51:c0:65:53:84:25:5b:6d:be:fd:6a:
8e:53:0d:8a:2a:25:b7:90:b0:23:cd:c3:86:ec:7b:70:84:ff:
db:d3:7d:82:a9:dc:71:72:67:1b:2c:c0:82:dc:65:5c:1c:a2:
bd:48:2c:ed:aa:aa:13:db:a8:53:5b:ea:5f:e4:0e:4d:a1:9b:
1e:28:cf:53:22:23:eb:94:6f:b4:7f:2b:66:25:4c:82:80:cb:
9a:19:75:8d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZd+xSHHZIg1vEJHoHigOD+qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz
MGNiNjMwHhcNMjUwNjE3MTY0MjE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYzI5ZmE1ZWQ3NzU3Yzg1OTg4M2RiYzllZjU5YWI4NDYxNjc5YjdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqAI6W4Nyhalgt28CHY2uPwRuPDt
VZ+lIJXkdF1tDjnakF7Q3fmUpu0mFdO97QDCyjjUjvUMkbjYXIIPz0oGslmeUdGE
cmQwQQ171y2CmbWvRROVsUdfxjfZon+PpFHhFCdkj6RBTI9mUZjoCsI2/gTc7g98
agXS3mBBuVQYltCbF6/K8FzSo9PAtm/J9ZqRFmZpw9Sdl6hbHtWuo2H2FVlkoSEw
RStAH8T5/bmVq90T9Y0Smc3DJ05fa7H+UoJ1FqpGf+SGTypuu6k5lFQDGXgO5Y/I
8gtDKiENk1i+q6OXVcdum9QMhT5YEa5UZOnFR7z963S3703YRv9aC+3E7wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLwp+l7XdXyFmIPbye9Zq4RhZ5t6MB8GA1UdIwQY
MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt
YjRiOGRiMjBiMWZiLzEvdkNuNlh0ZDFmSVdZZzl2SjcxbXJoR0ZubTNvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi
LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCze1cMA0G
CSqGSIb3DQEBCwUAA4IBAQBlPh5RIXkxkfMgFVCY/w0Auu1n0zgMTAEVPFZdzSq7
NCwD8vSM4lN/PepTgWk119Wagxx4Vdpi1cy+hFnAYjLxBfqNlWLTpt/7sksPZznE
JzAafCjeA7+BFnDsHoQLTKICG0HbUXO0uIWIhbDwuo3C0oIB73AkfgkuFRtHLjX6
sK4MUnPP1mZYbOrh2SVCZCRPriw325z1MCmlP36zexZmhPs7vB6Cuz6iUcBlU4Ql
W22+/WqOUw2KKiW3kLAjzcOG7HtwhP/b032CqdxxcmcbLMCC3GVcHKK9SCztqqoT
26hTW+pf5A5NoZseKM9TIiPrlG+0fytmJUyCgMuaGXWN
-----END CERTIFICATE-----
Generated at Tue Jul 1 07:57:48 2025 by rpki-client