Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/ayQxlZuqd_JNaMOwRZZJymE0wSU.roa
File: ayQxlZuqd_JNaMOwRZZJymE0wSU.roa (raw, json)
Hash identifier: 9Z/rGyPUhdNN/DWnxklvMg/pSMn9lElpfjWZ/LCyIB0=
Subject key identifier: 6B:24:31:95:9B:AA:77:F2:4D:68:C3:B0:45:96:49:CA:61:34:C1:25
Certificate issuer: /CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Certificate serial: 0197EF40284716916A646252EC8A0D7AF292
Authority key identifier: C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/ayQxlZuqd_JNaMOwRZZJymE0wSU.roa
Signing time: Wed 09 Jul 2025 12:54:08 +0000
ROA not before: Wed 09 Jul 2025 12:54:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62000
IP address blocks: 93.127.158.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 12:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ef:40:28:47:16:91:6a:64:62:52:ec:8a:0d:7a:f2:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Validity
Not Before: Jul 9 12:54:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6b2431959baa77f24d68c3b0459649ca6134c125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:14:4f:c8:5f:22:68:5f:af:1b:15:27:f9:a5:
e2:f0:b3:97:fc:f2:4f:79:6c:75:3a:d9:b2:c9:3d:
ec:ad:ed:a1:29:54:a8:fe:53:b0:d3:53:f4:7b:12:
1c:72:84:3a:ce:cc:ad:ba:32:9d:bc:b8:1b:45:64:
6c:f4:88:49:d3:04:f1:d2:1c:74:82:b3:b1:7d:f2:
a7:ec:d2:59:e9:ed:bf:ba:b2:a7:78:be:34:1d:c7:
cd:d9:b3:17:8e:6a:78:b5:d4:ce:0e:f1:ce:3f:90:
f0:4c:e1:d3:fe:5e:18:88:05:03:d5:7e:05:b2:6c:
c1:91:6b:16:5e:79:9a:07:67:62:ba:03:e0:9a:fe:
12:cc:95:82:5f:02:5f:99:52:d4:ae:63:14:70:80:
59:9a:c6:a7:61:2a:97:4f:81:d2:e7:7e:e6:02:89:
ba:78:2c:0c:41:4f:a6:d1:33:04:bc:fa:63:d8:15:
42:b8:3d:eb:f4:b6:ba:f0:0a:61:1d:a4:71:0f:51:
9a:59:56:fd:b9:ac:f8:0d:66:14:65:64:c9:38:74:
85:34:89:e6:96:a2:2f:2d:99:48:57:74:aa:5e:12:
e3:16:39:18:14:ec:c9:2e:1f:13:bc:cb:c5:1c:82:
52:7f:37:d6:58:e8:28:c1:7e:14:65:9d:d4:c6:f1:
62:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:24:31:95:9B:AA:77:F2:4D:68:C3:B0:45:96:49:CA:61:34:C1:25
X509v3 Authority Key Identifier:
keyid:C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/ayQxlZuqd_JNaMOwRZZJymE0wSU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.127.158.0/23
Signature Algorithm: sha256WithRSAEncryption
c2:bf:af:66:3c:d3:bd:f0:f4:68:8d:cc:4b:07:07:54:bb:66:
c0:f2:41:ca:b2:0f:b4:b6:c3:f0:c2:0b:b5:6e:73:4a:5b:ae:
cc:25:dd:bb:96:11:62:7c:91:60:d0:a0:cd:1b:27:b1:9c:81:
c9:8d:25:44:94:ab:03:7e:6e:be:16:f8:7f:b1:26:12:63:cb:
26:2b:10:17:3f:3d:95:5b:3d:0d:8f:0f:b9:9b:3d:80:2d:6c:
b9:3a:2f:a5:b2:31:6e:31:43:06:4c:47:5a:84:13:f8:05:ba:
c3:c8:18:e4:bb:00:ad:7c:ae:07:dc:18:25:5d:17:9f:21:2e:
45:dd:22:d0:f1:97:de:6c:5c:46:d6:92:b0:d4:43:74:9d:18:
cc:da:6b:67:c1:53:f1:7a:e0:0a:6e:a5:62:9d:3a:71:0a:9f:
a2:fd:98:90:e3:92:a9:05:84:a8:d3:6a:c6:e4:40:80:48:24:
e9:a0:f4:4c:3a:d8:0a:38:2f:2a:8b:b5:ce:3a:eb:15:8c:54:
e7:ec:97:0c:2c:e8:76:3a:56:34:44:07:ee:d5:b6:47:cc:3c:
2a:d1:37:90:1d:f1:1f:64:7c:c9:54:c7:c9:5e:c6:44:87:c6:
9c:d2:c0:74:a1:6d:f2:eb:7e:39:a4:b4:17:ae:b7:7f:71:6c:
be:85:cd:1d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZfvQChHFpFqZGJS7IoNevKSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzNzhiYzNiZDM1MGVlZGM0ZjM3N2MyMjQ1NTZiMjUwZGE2
ZGRlNmYwHhcNMjUwNzA5MTI1NDA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YjI0MzE5NTliYWE3N2YyNGQ2OGMzYjA0NTk2NDljYTYxMzRjMTI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRRPyF8iaF+vGxUn+aXi8LOX/PJP
eWx1OtmyyT3sre2hKVSo/lOw01P0exIccoQ6zsytujKdvLgbRWRs9IhJ0wTx0hx0
grOxffKn7NJZ6e2/urKneL40HcfN2bMXjmp4tdTODvHOP5DwTOHT/l4YiAUD1X4F
smzBkWsWXnmaB2diugPgmv4SzJWCXwJfmVLUrmMUcIBZmsanYSqXT4HS537mAom6
eCwMQU+m0TMEvPpj2BVCuD3r9La68AphHaRxD1GaWVb9uaz4DWYUZWTJOHSFNInm
lqIvLZlIV3SqXhLjFjkYFOzJLh8TvMvFHIJSfzfWWOgowX4UZZ3UxvFiZwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGskMZWbqnfyTWjDsEWWScphNMElMB8GA1UdIwQY
MBaAFMN4vDvTUO7cTzd8IkVWslDabd5vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzNpOE85TlE3dHhQTjN3aVJWYXlVTnB0M204LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iZTY2ZTQtZjE0Yi00YjMxLWJkYWYt
NDQxNDU1OGZkY2JiLzEvYXlReGxadXFkX0pOYU1Pd1JaWkp5bUUwd1NVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9iZTY2ZTQtZjE0Yi00YjMxLWJkYWYtNDQxNDU1OGZkY2Ji
LzEvdzNpOE85TlE3dHhQTjN3aVJWYXlVTnB0M204LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBXX+eMA0G
CSqGSIb3DQEBCwUAA4IBAQDCv69mPNO98PRojcxLBwdUu2bA8kHKsg+0tsPwwgu1
bnNKW67MJd27lhFifJFg0KDNGyexnIHJjSVElKsDfm6+Fvh/sSYSY8smKxAXPz2V
Wz0Njw+5mz2ALWy5Oi+lsjFuMUMGTEdahBP4BbrDyBjkuwCtfK4H3BglXRefIS5F
3SLQ8ZfebFxG1pKw1EN0nRjM2mtnwVPxeuAKbqVinTpxCp+i/ZiQ45KpBYSo02rG
5ECASCTpoPRMOtgKOC8qi7XOOusVjFTn7JcMLOh2OlY0RAfu1bZHzDwq0TeQHfEf
ZHzJVMfJXsZEh8ac0sB0oW3y6345pLQXrrd/cWy+hc0d
-----END CERTIFICATE-----
Generated at Wed Jul 23 17:07:04 2025 by rpki-client