Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/b6af9d-47ba-4b92-b41a-838a4505735a/1/VRgzvsIGyVGSMvCfEEXMwDue8MA.roa
File: VRgzvsIGyVGSMvCfEEXMwDue8MA.roa (raw, json)
Hash identifier: PsTu4TZ4HzWVeuIcWadKHbXlWOA/8zFocM48RCXa9/k=
Subject key identifier: 55:18:33:BE:C2:06:C9:51:92:32:F0:9F:10:45:CC:C0:3B:9E:F0:C0
Certificate issuer: /CN=69737c6e0602be3804e277580bab7e21e6e33474
Certificate serial: 0196C92337B3C42B02F69CBB0B8748CF249F
Authority key identifier: 69:73:7C:6E:06:02:BE:38:04:E2:77:58:0B:AB:7E:21:E6:E3:34:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aXN8bgYCvjgE4ndYC6t-IebjNHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/b6af9d-47ba-4b92-b41a-838a4505735a/1/VRgzvsIGyVGSMvCfEEXMwDue8MA.roa
Signing time: Tue 13 May 2025 10:14:10 +0000
ROA not before: Tue 13 May 2025 10:14:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62207
IP address blocks: 212.52.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/b6af9d-47ba-4b92-b41a-838a4505735a/1/aXN8bgYCvjgE4ndYC6t-IebjNHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/b6af9d-47ba-4b92-b41a-838a4505735a/1/aXN8bgYCvjgE4ndYC6t-IebjNHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aXN8bgYCvjgE4ndYC6t-IebjNHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:23:37:b3:c4:2b:02:f6:9c:bb:0b:87:48:cf:24:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69737c6e0602be3804e277580bab7e21e6e33474
Validity
Not Before: May 13 10:14:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=551833bec206c9519232f09f1045ccc03b9ef0c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:42:5e:cf:75:c8:b2:0b:c6:e5:4c:2c:fa:97:
5e:9b:60:e4:3a:31:cf:d2:b5:11:43:14:3a:ca:b8:
98:cf:67:8f:d7:82:3e:db:26:df:22:ed:89:ff:e3:
f8:33:f8:97:0b:dc:6d:d0:2d:1c:ab:ee:15:30:93:
a1:d6:16:c4:4b:ec:5b:22:ce:a8:b6:1d:8d:75:0e:
39:ca:22:ee:7e:89:4d:c1:d6:b5:1f:37:8a:ec:f5:
c2:63:b9:35:46:d6:33:14:91:07:fd:31:9e:9e:65:
bc:81:b7:67:df:25:39:96:d7:d1:d8:b1:e1:b7:6b:
b4:42:31:47:76:b8:64:6f:e9:f9:b7:39:c6:5c:0d:
93:35:2e:8c:bc:4a:52:31:0d:9d:a5:f1:d5:32:b4:
cc:b1:a6:3c:ba:ea:24:3e:06:f4:d0:ac:5e:47:5f:
ad:92:b2:0f:ad:3c:12:c5:a0:2b:9a:96:be:50:fd:
d8:cd:27:91:c6:c9:ed:52:d0:79:93:ae:9c:da:9f:
62:f4:ef:42:87:36:e2:0e:61:d1:af:0f:71:46:0e:
6a:4c:e9:f9:33:82:4d:df:85:42:99:cf:9d:a2:57:
46:ba:83:51:1f:35:2a:08:97:93:53:c1:9f:73:a5:
73:c0:a3:40:3a:32:9f:df:94:b1:8e:16:4a:ea:40:
8e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:18:33:BE:C2:06:C9:51:92:32:F0:9F:10:45:CC:C0:3B:9E:F0:C0
X509v3 Authority Key Identifier:
keyid:69:73:7C:6E:06:02:BE:38:04:E2:77:58:0B:AB:7E:21:E6:E3:34:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXN8bgYCvjgE4ndYC6t-IebjNHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/b6af9d-47ba-4b92-b41a-838a4505735a/1/VRgzvsIGyVGSMvCfEEXMwDue8MA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/b6af9d-47ba-4b92-b41a-838a4505735a/1/aXN8bgYCvjgE4ndYC6t-IebjNHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.52.7.0/24
Signature Algorithm: sha256WithRSAEncryption
42:4f:ab:e1:ce:b6:1c:32:32:f9:94:39:09:0c:7e:9f:11:56:
b8:a9:e3:6c:82:49:92:66:3f:c6:d4:e0:23:0b:5d:28:b7:10:
37:70:3d:b0:4b:a9:e6:c7:50:c5:b2:91:7e:a3:b2:c6:e8:82:
f9:6a:11:3f:e7:55:85:c5:cd:30:93:35:a4:46:a9:01:5b:27:
31:d1:70:cb:28:1a:e5:af:e5:2e:76:38:f4:e1:f0:57:07:60:
64:3a:25:4c:cb:44:2c:f9:a0:b2:fe:64:8f:b9:59:5f:7f:df:
1b:c3:83:9c:48:0f:9e:92:28:3b:13:35:c3:fb:96:38:8d:ac:
45:c9:70:ad:94:79:70:3a:d6:f0:c0:48:d0:b7:a8:59:38:34:
02:aa:f4:a9:83:41:54:07:52:1c:ab:63:fe:93:31:44:a4:40:
0e:5b:e5:50:9a:7c:b6:87:31:64:78:86:47:cb:c2:f4:d5:eb:
c1:37:f3:07:a3:d4:d2:97:55:7d:ff:7b:47:4a:2f:99:92:bb:
d3:cf:7c:5f:e2:11:9d:3e:5f:3a:83:c5:25:2e:78:15:82:46:
5b:ff:15:db:0e:05:0b:af:cd:c1:65:87:45:1c:02:29:6c:92:
4f:f6:10:e8:60:20:c4:d8:76:b5:f5:e5:c6:47:87:76:83:72:
0c:57:57:dc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZbJIzezxCsC9py7C4dIzySfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5NzM3YzZlMDYwMmJlMzgwNGUyNzc1ODBiYWI3ZTIxZTZl
MzM0NzQwHhcNMjUwNTEzMTAxNDEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NTE4MzNiZWMyMDZjOTUxOTIzMmYwOWYxMDQ1Y2NjMDNiOWVmMGMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUJez3XIsgvG5Uws+pdem2DkOjHP
0rURQxQ6yriYz2eP14I+2ybfIu2J/+P4M/iXC9xt0C0cq+4VMJOh1hbES+xbIs6o
th2NdQ45yiLufolNwda1HzeK7PXCY7k1RtYzFJEH/TGenmW8gbdn3yU5ltfR2LHh
t2u0QjFHdrhkb+n5tznGXA2TNS6MvEpSMQ2dpfHVMrTMsaY8uuokPgb00KxeR1+t
krIPrTwSxaArmpa+UP3YzSeRxsntUtB5k66c2p9i9O9ChzbiDmHRrw9xRg5qTOn5
M4JN34VCmc+doldGuoNRHzUqCJeTU8Gfc6VzwKNAOjKf35SxjhZK6kCOxQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFUYM77CBslRkjLwnxBFzMA7nvDAMB8GA1UdIwQY
MBaAFGlzfG4GAr44BOJ3WAurfiHm4zR0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVhOOGJnWUN2amdFNG5kWUM2dC1JZWJqTkhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9iNmFmOWQtNDdiYS00YjkyLWI0MWEt
ODM4YTQ1MDU3MzVhLzEvVlJnenZzSUd5VkdTTXZDZkVFWE13RHVlOE1BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9iNmFmOWQtNDdiYS00YjkyLWI0MWEtODM4YTQ1MDU3MzVh
LzEvYVhOOGJnWUN2amdFNG5kWUM2dC1JZWJqTkhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1DQHMA0G
CSqGSIb3DQEBCwUAA4IBAQBCT6vhzrYcMjL5lDkJDH6fEVa4qeNsgkmSZj/G1OAj
C10otxA3cD2wS6nmx1DFspF+o7LG6IL5ahE/51WFxc0wkzWkRqkBWycx0XDLKBrl
r+Uudjj04fBXB2BkOiVMy0Qs+aCy/mSPuVlff98bw4OcSA+ekig7EzXD+5Y4jaxF
yXCtlHlwOtbwwEjQt6hZODQCqvSpg0FUB1Icq2P+kzFEpEAOW+VQmny2hzFkeIZH
y8L01evBN/MHo9TSl1V9/3tHSi+ZkrvTz3xf4hGdPl86g8UlLngVgkZb/xXbDgUL
r83BZYdFHAIpbJJP9hDoYCDE2Ha19eXGR4d2g3IMV1fc
-----END CERTIFICATE-----
Generated at Sat Jun 7 13:53:01 2025 by rpki-client