Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/n_fySMb2KYofNdbrb087aj1eYn8.roa
File: n_fySMb2KYofNdbrb087aj1eYn8.roa (raw, json)
Hash identifier: 77dWHMesUhSClZQyjFlFJHiSjQfgTnJaM+uBOMHku1Q=
Subject key identifier: 9F:F7:F2:48:C6:F6:29:8A:1F:35:D6:EB:6F:4F:3B:6A:3D:5E:62:7F
Certificate issuer: /CN=1bf268175c5a09a7afd0d87851824e1db73f7e7b
Certificate serial: 0196D93DD50AA5F2ADA73243BA0366A0F77D
Authority key identifier: 1B:F2:68:17:5C:5A:09:A7:AF:D0:D8:78:51:82:4E:1D:B7:3F:7E:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_JoF1xaCaev0Nh4UYJOHbc_fns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/n_fySMb2KYofNdbrb087aj1eYn8.roa
Signing time: Fri 16 May 2025 13:17:10 +0000
ROA not before: Fri 16 May 2025 13:17:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43581
IP address blocks: 46.253.143.0/24 maxlen: 24
91.211.115.0/24 maxlen: 24
193.17.92.0/24 maxlen: 24
2a11:1940::/29 maxlen: 29
2a13:a500::/32 maxlen: 32
2a13:a502::/32 maxlen: 32
2a13:a503::/32 maxlen: 32
2a13:a504::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.mft
rsync://rpki.ripe.net/repository/DEFAULT/G_JoF1xaCaev0Nh4UYJOHbc_fns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d9:3d:d5:0a:a5:f2:ad:a7:32:43:ba:03:66:a0:f7:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bf268175c5a09a7afd0d87851824e1db73f7e7b
Validity
Not Before: May 16 13:17:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9ff7f248c6f6298a1f35d6eb6f4f3b6a3d5e627f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7c:8c:3f:38:9b:de:0d:00:05:a5:3d:f3:cd:
34:aa:71:c9:8c:2f:fb:85:bb:5d:91:61:80:59:92:
cc:4d:1f:4a:45:33:13:07:11:06:8e:16:92:56:fe:
cc:de:b7:6e:f8:0a:01:67:3c:a5:ff:cf:34:49:73:
dd:f0:f9:d8:36:ad:c5:08:42:fa:32:a1:62:e9:a8:
8e:ca:d8:92:5b:d4:66:36:b9:56:88:13:04:10:13:
04:90:ab:4a:a5:8b:8c:37:7e:47:79:29:78:ae:85:
b3:fc:42:46:b2:35:f9:c2:8b:56:21:a9:de:a7:73:
8a:ba:c2:ed:42:9a:bf:49:9a:82:bf:20:cd:e4:1b:
35:3e:5d:9f:8f:76:d2:ba:bd:9a:e0:50:40:2e:3e:
bc:1a:d2:3f:fc:31:96:3c:b5:b7:2f:f5:75:b8:11:
58:ff:fc:d7:2d:19:8d:a2:3d:99:31:6e:78:23:31:
43:da:6a:6f:59:eb:26:2d:d7:b2:75:32:82:1b:cc:
54:b6:63:54:1b:2e:ae:c4:bb:77:1f:07:61:97:1e:
3d:da:1b:17:a0:7a:d6:1e:58:79:9d:c9:02:2a:1d:
5a:e2:f5:4c:6b:13:9e:01:80:7a:e4:e3:20:30:bf:
a6:0e:19:86:1d:70:a0:d6:81:c4:b5:c5:1a:7b:49:
89:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:F7:F2:48:C6:F6:29:8A:1F:35:D6:EB:6F:4F:3B:6A:3D:5E:62:7F
X509v3 Authority Key Identifier:
keyid:1B:F2:68:17:5C:5A:09:A7:AF:D0:D8:78:51:82:4E:1D:B7:3F:7E:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_JoF1xaCaev0Nh4UYJOHbc_fns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/n_fySMb2KYofNdbrb087aj1eYn8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.253.143.0/24
91.211.115.0/24
193.17.92.0/24
IPv6:
2a11:1940::/29
2a13:a500::/32
2a13:a502::-2a13:a504:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
87:cc:1b:c2:ac:77:33:7e:13:f2:c2:79:77:e9:c9:c3:c4:13:
34:40:a7:c9:ef:fb:5a:66:38:0c:da:b6:74:4e:cb:46:c0:ec:
46:b8:af:79:c4:be:bb:3b:8f:45:8c:c2:bb:68:8e:fb:52:ac:
43:0b:d7:f3:63:e4:25:48:ed:cf:92:09:70:f7:d4:f1:58:69:
3f:da:9a:91:de:b3:07:b1:2f:be:69:d8:eb:2e:cb:e9:39:01:
3d:fc:ba:2d:50:a3:2a:21:b2:fd:d4:fd:da:42:c1:16:b6:55:
1e:dc:55:1c:64:a6:c6:5e:cd:7a:48:69:ec:2c:e9:ba:d9:af:
ae:35:ea:e2:9e:ef:aa:5d:24:35:c6:7f:7f:69:d5:55:40:2f:
aa:d7:3d:eb:ae:22:10:d0:c1:80:7f:db:6c:0e:7d:a9:e3:9f:
ba:11:96:92:4a:2b:a2:82:44:49:f0:4a:1d:5c:04:21:c2:e1:
c8:76:44:73:dc:9f:74:96:fa:0b:2d:d8:06:00:1a:27:81:59:
4d:b7:38:a8:9b:0d:bb:6f:d2:ac:74:20:22:dd:71:b1:75:c3:
76:d2:c8:60:ba:1a:61:7c:b4:40:37:99:e4:0c:37:84:8a:52:
2b:f3:1a:82:0c:b6:d5:52:57:c3:a7:d5:ed:cf:87:96:ed:0f:
4b:9f:ad:41
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgISAZbZPdUKpfKtpzJDugNmoPd9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiZjI2ODE3NWM1YTA5YTdhZmQwZDg3ODUxODI0ZTFkYjcz
ZjdlN2IwHhcNMjUwNTE2MTMxNzEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZmY3ZjI0OGM2ZjYyOThhMWYzNWQ2ZWI2ZjRmM2I2YTNkNWU2MjdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3yMPzib3g0ABaU98800qnHJjC/7
hbtdkWGAWZLMTR9KRTMTBxEGjhaSVv7M3rdu+AoBZzyl/880SXPd8PnYNq3FCEL6
MqFi6aiOytiSW9RmNrlWiBMEEBMEkKtKpYuMN35HeSl4roWz/EJGsjX5wotWIane
p3OKusLtQpq/SZqCvyDN5Bs1Pl2fj3bSur2a4FBALj68GtI//DGWPLW3L/V1uBFY
//zXLRmNoj2ZMW54IzFD2mpvWesmLdeydTKCG8xUtmNUGy6uxLt3Hwdhlx492hsX
oHrWHlh5nckCKh1a4vVMaxOeAYB65OMgML+mDhmGHXCg1oHEtcUae0mJeQIDAQAB
o4ICOzCCAjcwHQYDVR0OBBYEFJ/38kjG9imKHzXW629PO2o9XmJ/MB8GA1UdIwQY
MBaAFBvyaBdcWgmnr9DYeFGCTh23P357MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR19Kb0YxeGFDYWV2ME5oNFVZSk9IYmNfZm5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni82NjY1MGEtNTk4YS00Mzg5LTk0MWYt
NTM0YjhjZDY1MmU5LzEvbl9meVNNYjJLWW9mTmRicmIwODdhajFlWW44LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni82NjY1MGEtNTk4YS00Mzg5LTk0MWYtNTM0YjhjZDY1MmU5
LzEvR19Kb0YxeGFDYWV2ME5oNFVZSk9IYmNfZm5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFEGCCsGAQUFBwEHAQH/BEIwQDAYBAIAATASAwQALv2PAwQA
W9NzAwQAwRFcMCQEAgACMB4DBQMqERlAAwUAKhOlADAOAwUBKhOlAgMFACoTpQQw
DQYJKoZIhvcNAQELBQADggEBAIfMG8KsdzN+E/LCeXfpycPEEzRAp8nv+1pmOAza
tnROy0bA7Ea4r3nEvrs7j0WMwrtojvtSrEML1/Nj5CVI7c+SCXD31PFYaT/ampHe
swexL75p2Osuy+k5AT38ui1Qoyohsv3U/dpCwRa2VR7cVRxkpsZezXpIaews6brZ
r6416uKe76pdJDXGf39p1VVAL6rXPeuuIhDQwYB/22wOfanjn7oRlpJKK6KCREnw
Sh1cBCHC4ch2RHPcn3SW+gst2AYAGieBWU23OKibDbtv0qx0ICLdcbF1w3bSyGC6
GmF8tEA3meQMN4SKUivzGoIMttVSV8On1e3Ph5btD0ufrUE=
-----END CERTIFICATE-----
Generated at Sat Jun 7 16:11:37 2025 by rpki-client