Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/xNMYEYWeSRysGA1egNd5UYXQ2iE.roa
File: xNMYEYWeSRysGA1egNd5UYXQ2iE.roa (raw, json)
Hash identifier: mNuWxiNJNgSqM1Q6Fj113QLftCPa1zUr2fYNqR8cc3Y=
Subject key identifier: C4:D3:18:11:85:9E:49:1C:AC:18:0D:5E:80:D7:79:51:85:D0:DA:21
Certificate issuer: /CN=7cb8b8730375c92853b99ae3af5797c123dd1507
Certificate serial: 0196F2F17B3E0DC21DF40C1A08312F419E89
Authority key identifier: 7C:B8:B8:73:03:75:C9:28:53:B9:9A:E3:AF:57:97:C1:23:DD:15:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fLi4cwN1yShTuZrjr1eXwSPdFQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/xNMYEYWeSRysGA1egNd5UYXQ2iE.roa
Signing time: Wed 21 May 2025 13:03:54 +0000
ROA not before: Wed 21 May 2025 13:03:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57630
IP address blocks: 185.18.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fLi4cwN1yShTuZrjr1eXwSPdFQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 19:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f2:f1:7b:3e:0d:c2:1d:f4:0c:1a:08:31:2f:41:9e:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cb8b8730375c92853b99ae3af5797c123dd1507
Validity
Not Before: May 21 13:03:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c4d31811859e491cac180d5e80d7795185d0da21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:d2:01:3f:6d:5b:1a:16:82:04:e9:cb:03:96:
4e:f9:86:45:6e:fc:b9:67:44:74:1f:af:1d:75:4f:
b6:f5:8f:90:e4:ed:37:92:45:28:a2:6c:bf:ea:37:
04:5a:3f:98:e2:36:ac:02:83:a9:7f:7e:17:1b:ca:
85:c0:b1:12:2f:4f:39:c4:ae:fa:d4:d8:70:59:17:
82:6c:49:85:c5:9b:27:15:4a:7e:b2:3b:93:4f:ca:
eb:1c:3d:a8:fa:f4:a8:cc:77:8d:7e:76:4b:a1:d6:
6b:22:33:17:a9:1d:0a:12:c3:12:1a:70:2e:6c:6a:
db:1a:a0:85:53:bf:ad:32:d2:44:18:11:92:57:8b:
fc:93:44:98:9c:fb:13:cd:27:40:38:c0:90:fc:da:
7b:e8:0a:4f:01:16:0f:1b:0e:93:d9:7c:35:b6:74:
35:d0:c8:50:15:3d:23:5b:ce:df:6b:bb:33:57:b0:
22:c4:6e:95:0a:51:c8:18:78:85:44:f8:ca:2c:2d:
53:04:dd:c6:b1:cc:bf:db:ba:59:51:03:f6:df:12:
e1:47:69:3a:b6:d3:6b:ea:20:f0:85:e1:c6:41:7f:
e8:bb:d1:74:4f:9b:ad:af:a5:0b:ab:d9:41:5e:b9:
2f:7e:64:89:b5:be:0d:66:41:fa:c4:3e:91:c0:e1:
f5:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:D3:18:11:85:9E:49:1C:AC:18:0D:5E:80:D7:79:51:85:D0:DA:21
X509v3 Authority Key Identifier:
keyid:7C:B8:B8:73:03:75:C9:28:53:B9:9A:E3:AF:57:97:C1:23:DD:15:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fLi4cwN1yShTuZrjr1eXwSPdFQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/xNMYEYWeSRysGA1egNd5UYXQ2iE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.18.195.0/24
Signature Algorithm: sha256WithRSAEncryption
29:1e:e4:78:7f:a1:97:68:6f:a3:e6:47:0d:65:3f:91:a5:61:
4a:f0:ea:11:94:7f:23:22:30:0d:32:f0:da:84:f8:65:27:29:
61:21:90:93:a1:bd:98:f9:ae:af:d3:5b:26:80:9a:19:4e:17:
56:9a:17:43:d7:d6:14:a5:9d:34:48:18:08:19:bc:82:aa:49:
03:87:f5:be:67:d3:e9:70:13:84:ef:c1:23:34:f2:aa:1a:4d:
27:91:d6:3d:c1:6b:f3:0f:96:15:5f:4a:4b:6a:84:c7:46:80:
4b:b1:61:f4:4e:ee:4c:c0:23:9c:af:c2:d0:2f:25:88:fa:10:
d0:a9:f7:32:52:2c:66:10:49:34:61:7a:c3:a1:42:d3:4c:2c:
92:88:0f:c0:91:6a:77:58:45:49:64:61:a2:33:81:ca:da:0b:
59:0b:6f:9c:47:dc:db:db:9d:a6:32:f5:6d:96:c9:11:c6:1b:
5a:18:f0:66:6c:05:45:94:2a:98:7c:3b:5b:71:f2:05:16:2c:
f3:5a:a0:52:5d:a3:21:4d:8f:65:04:b9:7a:77:61:dc:c4:4b:
15:1f:db:8f:30:40:ef:99:18:52:0d:2c:63:eb:d6:9a:6e:5b:
8b:34:5e:06:8b:a1:e3:fd:4c:89:e0:80:35:d9:8b:c2:a7:62:
20:41:84:41
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZby8Xs+DcId9AwaCDEvQZ6JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjYjhiODczMDM3NWM5Mjg1M2I5OWFlM2FmNTc5N2MxMjNk
ZDE1MDcwHhcNMjUwNTIxMTMwMzU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNGQzMTgxMTg1OWU0OTFjYWMxODBkNWU4MGQ3Nzk1MTg1ZDBkYTIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9tIBP21bGhaCBOnLA5ZO+YZFbvy5
Z0R0H68ddU+29Y+Q5O03kkUoomy/6jcEWj+Y4jasAoOpf34XG8qFwLESL085xK76
1NhwWReCbEmFxZsnFUp+sjuTT8rrHD2o+vSozHeNfnZLodZrIjMXqR0KEsMSGnAu
bGrbGqCFU7+tMtJEGBGSV4v8k0SYnPsTzSdAOMCQ/Np76ApPARYPGw6T2Xw1tnQ1
0MhQFT0jW87fa7szV7AixG6VClHIGHiFRPjKLC1TBN3Gscy/27pZUQP23xLhR2k6
ttNr6iDwheHGQX/ou9F0T5utr6ULq9lBXrkvfmSJtb4NZkH6xD6RwOH1swIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMTTGBGFnkkcrBgNXoDXeVGF0NohMB8GA1UdIwQY
MBaAFHy4uHMDdckoU7ma469Xl8Ej3RUHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkxpNGN3TjF5U2hUdVpyanIxZVh3U1BkRlFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9hOWNlZDItM2ZhNC00NmVkLTg4ZTAt
Mzg0MTFhMzEyZDg2LzEveE5NWUVZV2VTUnlzR0ExZWdOZDVVWVhRMmlFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9hOWNlZDItM2ZhNC00NmVkLTg4ZTAtMzg0MTFhMzEyZDg2
LzEvZkxpNGN3TjF5U2hUdVpyanIxZVh3U1BkRlFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuRLDMA0G
CSqGSIb3DQEBCwUAA4IBAQApHuR4f6GXaG+j5kcNZT+RpWFK8OoRlH8jIjANMvDa
hPhlJylhIZCTob2Y+a6v01smgJoZThdWmhdD19YUpZ00SBgIGbyCqkkDh/W+Z9Pp
cBOE78EjNPKqGk0nkdY9wWvzD5YVX0pLaoTHRoBLsWH0Tu5MwCOcr8LQLyWI+hDQ
qfcyUixmEEk0YXrDoULTTCySiA/AkWp3WEVJZGGiM4HK2gtZC2+cR9zb252mMvVt
lskRxhtaGPBmbAVFlCqYfDtbcfIFFizzWqBSXaMhTY9lBLl6d2HcxEsVH9uPMEDv
mRhSDSxj69aabluLNF4Gi6Hj/UyJ4IA12YvCp2IgQYRB
-----END CERTIFICATE-----
Generated at Sun Jun 8 06:33:47 2025 by rpki-client