Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/qxfLmTQopqsZI-bUWa8dA8ADi_E.roa
File: qxfLmTQopqsZI-bUWa8dA8ADi_E.roa (raw, json)
Hash identifier: KxzLUhI34uxwz7cggIoagQSs04HNB8+9Wy0qky0AQ+U=
Subject key identifier: AB:17:CB:99:34:28:A6:AB:19:23:E6:D4:59:AF:1D:03:C0:03:8B:F1
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 0196BEC25AF2271F54A76E5CF1E867DD1797
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/qxfLmTQopqsZI-bUWa8dA8ADi_E.roa
Signing time: Sun 11 May 2025 09:52:10 +0000
ROA not before: Sun 11 May 2025 09:52:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213643
IP address blocks: 84.21.11.0/24 maxlen: 24
84.21.15.0/24 maxlen: 24
217.113.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 22:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:c2:5a:f2:27:1f:54:a7:6e:5c:f1:e8:67:dd:17:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: May 11 09:52:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ab17cb993428a6ab1923e6d459af1d03c0038bf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:89:20:89:7b:56:d1:0c:34:de:1b:d9:78:92:
4a:ef:7d:bf:0f:26:a0:f5:20:91:82:14:bf:0a:bd:
94:42:f8:2c:fd:d8:7f:a9:5a:8a:d3:da:d9:02:f3:
6b:5c:0f:59:48:57:bc:39:10:6f:52:7f:b3:b6:ff:
33:c9:29:c5:ad:8c:de:84:fa:86:2d:8b:b8:75:b5:
c2:f2:a7:4b:52:ca:ec:c4:37:3e:b3:e3:44:dd:e4:
cb:ad:24:58:11:b5:7b:df:97:a8:cf:75:a6:e8:0c:
6a:ef:58:1a:ad:7b:5b:9c:48:7b:1e:a4:37:5e:e6:
39:96:cc:3a:88:aa:25:b1:51:83:dc:d4:03:fd:5f:
56:d6:11:e3:08:dc:e7:8f:57:46:89:a3:b3:de:e2:
0b:47:e8:a7:4f:84:b9:f6:fa:e1:2e:78:f4:80:6c:
c3:a8:83:fb:8f:aa:11:f9:97:4f:dd:aa:e9:1b:83:
a7:08:02:fe:5c:e9:98:20:fe:0d:9b:ca:93:8f:bb:
c1:cf:e0:52:c1:da:c9:10:af:49:48:59:24:b7:f7:
8b:27:a6:5f:c1:40:5a:4b:92:6f:4e:88:85:64:0c:
8f:46:39:2d:6a:e4:fd:85:33:fa:25:5a:ee:9a:fa:
17:d8:fb:31:84:39:ec:95:b9:b3:89:dd:5c:ab:ca:
49:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:17:CB:99:34:28:A6:AB:19:23:E6:D4:59:AF:1D:03:C0:03:8B:F1
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/qxfLmTQopqsZI-bUWa8dA8ADi_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.21.11.0/24
84.21.15.0/24
217.113.53.0/24
Signature Algorithm: sha256WithRSAEncryption
93:08:69:8a:cf:8f:be:3e:ae:e3:65:ff:a2:01:c9:41:bc:29:
f1:bd:d1:e9:55:83:4d:c3:77:50:9c:8b:2f:0c:eb:9e:e3:95:
52:9f:8f:fb:ee:8c:5a:83:72:4b:bd:bc:a8:05:fa:53:12:64:
e3:4b:2e:89:e8:d8:21:e7:41:90:a2:a5:bb:5d:c3:8b:ca:d5:
0f:2b:78:9c:11:97:f8:a4:12:05:67:c7:8d:6a:8f:66:b7:86:
76:cd:45:06:1e:77:aa:8e:93:89:02:2c:4e:59:58:13:ef:20:
ee:4c:3d:10:ce:93:61:50:ae:1f:ea:70:99:f8:39:b4:80:90:
4a:a2:9f:c6:b5:70:5a:f6:77:c4:0d:62:b0:52:8d:d9:48:9b:
31:21:2b:a8:98:7e:76:86:fc:c4:26:41:39:bc:cb:4e:41:09:
ff:85:f4:46:5b:de:dc:be:7f:67:3b:cf:23:0a:82:68:9b:2d:
d0:78:eb:d3:19:91:b3:1c:83:08:80:bc:f6:c3:8c:aa:59:56:
46:0e:9c:79:5b:84:c0:64:1d:ae:ad:e2:f8:45:5c:ae:96:e8:
0b:ad:63:cd:4e:6b:d1:88:f9:47:44:70:7d:93:35:9c:58:3b:
fe:63:d1:dd:fa:f3:e8:5f:07:ff:04:b3:21:52:82:a7:94:c2:
51:9b:80:f2
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZa+wlryJx9Up25c8ehn3ReXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2
NDI0OTcwHhcNMjUwNTExMDk1MjEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYjE3Y2I5OTM0MjhhNmFiMTkyM2U2ZDQ1OWFmMWQwM2MwMDM4YmYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYkgiXtW0Qw03hvZeJJK732/Dyag
9SCRghS/Cr2UQvgs/dh/qVqK09rZAvNrXA9ZSFe8ORBvUn+ztv8zySnFrYzehPqG
LYu4dbXC8qdLUsrsxDc+s+NE3eTLrSRYEbV735eoz3Wm6Axq71garXtbnEh7HqQ3
XuY5lsw6iKolsVGD3NQD/V9W1hHjCNznj1dGiaOz3uILR+inT4S59vrhLnj0gGzD
qIP7j6oR+ZdP3arpG4OnCAL+XOmYIP4Nm8qTj7vBz+BSwdrJEK9JSFkkt/eLJ6Zf
wUBaS5JvToiFZAyPRjktauT9hTP6JVrumvoX2PsxhDnslbmzid1cq8pJqQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFKsXy5k0KKarGSPm1FmvHQPAA4vxMB8GA1UdIwQY
MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt
OTU5M2E0ODhhZmNjLzEvcXhmTG1UUW9wcXNaSS1iVVdhOGRBOEFEaV9FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj
LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAVBULAwQA
VBUPAwQA2XE1MA0GCSqGSIb3DQEBCwUAA4IBAQCTCGmKz4++Pq7jZf+iAclBvCnx
vdHpVYNNw3dQnIsvDOue45VSn4/77oxag3JLvbyoBfpTEmTjSy6J6Ngh50GQoqW7
XcOLytUPK3icEZf4pBIFZ8eNao9mt4Z2zUUGHneqjpOJAixOWVgT7yDuTD0QzpNh
UK4f6nCZ+Dm0gJBKop/GtXBa9nfEDWKwUo3ZSJsxISuomH52hvzEJkE5vMtOQQn/
hfRGW97cvn9nO88jCoJomy3QeOvTGZGzHIMIgLz2w4yqWVZGDpx5W4TAZB2ureL4
RVyulugLrWPNTmvRiPlHRHB9kzWcWDv+Y9Hd+vPoXwf/BLMhUoKnlMJRm4Dy
-----END CERTIFICATE-----
Generated at Sun Jun 8 07:44:30 2025 by rpki-client