Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/XAEAjNcvfpGlcHno17w5pO0l1FU.roa
File: XAEAjNcvfpGlcHno17w5pO0l1FU.roa (raw, json)
Hash identifier: VP7JE7O3DWdGHWvZc3FDtjvnDDKIjq1Pt5VFBcShqSE=
Subject key identifier: 5C:01:00:8C:D7:2F:7E:91:A5:70:79:E8:D7:BC:39:A4:ED:25:D4:55
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 01971B6E2DC4404C3A180129DCC8A8E87DA9
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/XAEAjNcvfpGlcHno17w5pO0l1FU.roa
Signing time: Thu 29 May 2025 09:44:54 +0000
ROA not before: Thu 29 May 2025 09:44:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214003
IP address blocks: 202.71.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 20:42:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:1b:6e:2d:c4:40:4c:3a:18:01:29:dc:c8:a8:e8:7d:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: May 29 09:44:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5c01008cd72f7e91a57079e8d7bc39a4ed25d455
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:ad:5f:79:c6:6e:5f:be:c9:a4:09:f7:53:cf:
fd:bb:58:e7:23:83:be:83:58:7c:81:d3:1e:77:18:
56:76:84:5c:7d:2e:36:ba:f7:37:00:34:7e:7b:3c:
3e:92:01:fa:8c:e1:60:6c:53:bd:65:36:5b:69:6a:
4f:75:4c:ce:1d:5a:e6:fb:12:2f:f0:f2:ee:f6:fb:
2f:2b:2e:5c:8d:d5:d9:82:3e:66:86:b1:bc:18:c0:
a7:57:3f:c6:92:d7:a8:56:57:85:63:91:9a:3b:3d:
5e:16:72:16:5d:a8:9e:77:01:bf:e1:0b:4a:1c:53:
de:3e:63:40:a2:f1:f2:30:31:58:29:76:6b:ee:3c:
72:82:c2:4b:0c:31:83:e2:cb:64:e0:0d:87:8e:17:
42:b8:4c:18:5a:7f:ba:cf:5a:29:3a:5e:2b:a4:8e:
eb:0e:8e:83:34:66:be:0b:2a:5c:35:67:b2:24:27:
7a:67:3f:7e:27:26:d8:62:8b:1d:f5:05:7a:30:17:
b5:de:80:59:83:46:e1:23:21:38:ce:07:dd:78:cc:
01:bc:ba:fd:d1:87:dc:44:33:1e:ee:b9:92:14:c9:
41:2d:d0:fd:c6:33:2a:db:35:db:e6:48:ac:a2:48:
67:3f:d3:48:62:de:41:28:c5:15:ae:dd:1a:11:b3:
1a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:01:00:8C:D7:2F:7E:91:A5:70:79:E8:D7:BC:39:A4:ED:25:D4:55
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/XAEAjNcvfpGlcHno17w5pO0l1FU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.71.11.0/24
Signature Algorithm: sha256WithRSAEncryption
91:d8:b8:7b:d8:47:ab:99:88:c8:aa:be:e2:97:54:72:17:53:
bd:a3:40:85:22:0b:2b:19:9e:bb:24:78:71:fc:35:9b:33:31:
c1:63:02:bf:81:c4:d6:f0:15:6b:fb:1c:3e:92:c1:ca:ee:85:
69:c6:8c:84:1d:66:9a:e7:a0:e5:60:c1:9a:71:65:21:d8:d9:
5d:f7:d8:7c:e1:f8:18:2c:c9:52:a2:44:1e:26:58:6c:19:c7:
7c:9e:b4:ce:60:8f:6e:e2:c8:a6:23:9a:af:51:81:09:da:ca:
86:9f:61:c4:4d:1e:7c:1f:4b:d1:dd:cd:6e:b2:09:e0:7c:dc:
6a:9c:bf:93:7e:ef:2e:c9:50:74:07:dc:c7:21:62:cb:d0:cc:
0f:b0:0d:a4:af:a5:ec:44:48:38:92:39:f2:b6:ff:e4:ad:75:
90:ff:8c:89:0f:02:bc:db:e8:66:38:26:a2:00:51:fb:6c:6a:
f6:50:45:5f:97:20:3a:3d:e2:d5:38:82:4c:8e:b4:f6:50:1e:
94:7c:f3:8d:09:22:87:b0:99:f4:0b:8e:bb:c1:6a:39:6d:67:
dc:8a:f3:30:79:b3:26:d5:ea:32:22:96:ce:a0:c7:8e:f0:5d:
40:89:b5:a8:76:c9:20:91:52:55:e7:08:c8:d4:04:da:68:9a:
9f:a1:b6:f9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZcbbi3EQEw6GAEp3Mio6H2pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3ZDAzZjI5ODE4MGNjMTA5ZjE5ZDRiMTk5MmM3ZDcxYzU2
YzhkY2MwHhcNMjUwNTI5MDk0NDU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YzAxMDA4Y2Q3MmY3ZTkxYTU3MDc5ZThkN2JjMzlhNGVkMjVkNDU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5a1fecZuX77JpAn3U8/9u1jnI4O+
g1h8gdMedxhWdoRcfS42uvc3ADR+ezw+kgH6jOFgbFO9ZTZbaWpPdUzOHVrm+xIv
8PLu9vsvKy5cjdXZgj5mhrG8GMCnVz/GkteoVleFY5GaOz1eFnIWXaiedwG/4QtK
HFPePmNAovHyMDFYKXZr7jxygsJLDDGD4stk4A2HjhdCuEwYWn+6z1opOl4rpI7r
Do6DNGa+CypcNWeyJCd6Zz9+JybYYosd9QV6MBe13oBZg0bhIyE4zgfdeMwBvLr9
0YfcRDMe7rmSFMlBLdD9xjMq2zXb5kisokhnP9NIYt5BKMUVrt0aEbMajwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFwBAIzXL36RpXB56Ne8OaTtJdRVMB8GA1UdIwQY
MBaAFBfQPymBgMwQnxnUsZksfXHFbI3MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUt
OTE4YWM2NDYyNjc5LzEvWEFFQWpOY3ZmcEdsY0hubzE3dzVwTzBsMUZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUtOTE4YWM2NDYyNjc5
LzEvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAykcLMA0G
CSqGSIb3DQEBCwUAA4IBAQCR2Lh72EermYjIqr7il1RyF1O9o0CFIgsrGZ67JHhx
/DWbMzHBYwK/gcTW8BVr+xw+ksHK7oVpxoyEHWaa56DlYMGacWUh2Nld99h84fgY
LMlSokQeJlhsGcd8nrTOYI9u4simI5qvUYEJ2sqGn2HETR58H0vR3c1usgngfNxq
nL+Tfu8uyVB0B9zHIWLL0MwPsA2kr6XsREg4kjnytv/krXWQ/4yJDwK82+hmOCai
AFH7bGr2UEVflyA6PeLVOIJMjrT2UB6UfPONCSKHsJn0C467wWo5bWfcivMwebMm
1eoyIpbOoMeO8F1AibWodskgkVJV5wjI1ATaaJqfobb5
-----END CERTIFICATE-----
Generated at Fri Jun 6 07:02:46 2025 by rpki-client