Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/MyvFwW74ILGZMvl1SRaFZj85s-w.roa
File: MyvFwW74ILGZMvl1SRaFZj85s-w.roa (raw, json)
Hash identifier: tRsFoOFuyf7lXTV2fjiuire+SiXoxRJxt/4CiSI2cKU=
Subject key identifier: 33:2B:C5:C1:6E:F8:20:B1:99:32:F9:75:49:16:85:66:3F:39:B3:EC
Certificate issuer: /CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
Certificate serial: 01973E7E9B5558F5858B77D93B41F426BCE7
Authority key identifier: 1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/MyvFwW74ILGZMvl1SRaFZj85s-w.roa
Signing time: Thu 05 Jun 2025 05:09:34 +0000
ROA not before: Thu 05 Jun 2025 05:09:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49505
IP address blocks: 185.246.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:3e:7e:9b:55:58:f5:85:8b:77:d9:3b:41:f4:26:bc:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
Validity
Not Before: Jun 5 05:09:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=332bc5c16ef820b19932f975491685663f39b3ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5b:8c:1b:ad:f8:11:1d:73:3b:bc:eb:9a:b8:
c7:3b:12:80:20:04:47:d3:94:00:69:37:52:7f:ef:
14:77:cd:50:16:a8:30:c7:f3:5f:b1:8c:48:b8:3f:
b0:6c:91:22:30:11:87:b6:40:65:4f:ec:1b:b3:4c:
f8:6b:c1:23:a5:ed:96:0d:75:05:d5:36:6a:84:80:
e5:3e:05:84:09:80:92:2d:9d:57:ee:aa:7f:d9:1f:
1c:9b:f2:e8:de:ef:46:9f:bc:a8:0d:1e:4c:81:d8:
a9:19:e2:ac:a3:a4:e9:9b:cc:0a:1b:f1:57:09:8f:
5e:cd:9e:73:cc:58:28:a7:59:11:40:e8:e5:42:db:
1e:b4:79:ab:59:34:87:86:8d:bc:b5:20:5a:a1:bd:
2a:fe:df:75:2f:6b:f3:83:8a:fd:47:13:a5:9f:71:
79:89:65:3c:d6:ee:d7:d0:cb:01:0d:aa:ea:13:a8:
11:d0:d4:0b:e4:42:88:1b:4c:69:d3:e9:6a:0b:3f:
0a:dc:ca:1a:f0:b7:4b:9e:28:2a:14:51:fc:3e:64:
7b:37:e7:2c:e5:de:b0:65:2d:6b:fd:51:54:64:10:
93:49:f4:3b:a7:80:d7:d2:69:55:7d:24:22:2a:f9:
4e:b4:68:30:36:97:c9:98:eb:11:a8:37:a1:38:4d:
31:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:2B:C5:C1:6E:F8:20:B1:99:32:F9:75:49:16:85:66:3F:39:B3:EC
X509v3 Authority Key Identifier:
keyid:1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/MyvFwW74ILGZMvl1SRaFZj85s-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.246.216.0/24
Signature Algorithm: sha256WithRSAEncryption
24:6a:de:67:e4:2e:7c:2f:73:51:61:82:7f:11:d2:ce:5f:49:
a3:9f:fe:4a:ad:69:b0:f9:e5:cc:f2:b1:99:0e:47:4b:79:5b:
71:00:16:61:b5:c9:51:ae:ce:ef:30:16:bd:82:cc:19:09:43:
c3:69:17:24:9f:fc:30:c2:0d:2a:3d:0a:54:c4:68:fd:ac:06:
80:d5:eb:38:9f:35:96:a6:ae:76:97:d3:05:57:d9:5c:36:dd:
65:b8:48:a5:3e:51:dc:89:2d:ec:6e:6d:d4:6f:27:3c:64:42:
12:d0:fd:1f:ba:2c:d8:72:64:25:bf:de:c8:17:fd:e7:c5:91:
5f:de:f5:0a:0e:fc:76:13:f2:49:09:1f:01:4c:f9:46:82:74:
db:70:e8:fb:79:f3:07:8b:ac:6d:9c:c0:b2:d7:45:0f:eb:4c:
53:85:4f:42:a2:b5:59:a6:76:b6:c0:0a:fe:25:76:99:ba:ac:
f2:0d:1b:43:ad:4e:14:b7:a5:7e:15:59:39:66:b9:0e:5a:41:
2d:a9:5f:77:b1:f2:8c:6a:a5:65:c7:bf:ee:ee:a4:e0:88:67:
ec:b8:aa:a2:4f:e1:5c:3b:88:c6:95:1d:d5:6b:48:0e:4a:73:
a3:91:9a:c0:72:e0:2a:18:78:1c:a7:ff:b6:66:20:3b:02:0b:
e6:27:60:4f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZc+fptVWPWFi3fZO0H0JrznMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlOWZkYzdmYjM5ZWJiYmVkNGVlNTRmNzAzZDNhYzYxNTNk
ZGVlNjkwHhcNMjUwNjA1MDUwOTM0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMzJiYzVjMTZlZjgyMGIxOTkzMmY5NzU0OTE2ODU2NjNmMzliM2VjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFuMG634ER1zO7zrmrjHOxKAIARH
05QAaTdSf+8Ud81QFqgwx/NfsYxIuD+wbJEiMBGHtkBlT+wbs0z4a8Ejpe2WDXUF
1TZqhIDlPgWECYCSLZ1X7qp/2R8cm/Lo3u9Gn7yoDR5MgdipGeKso6Tpm8wKG/FX
CY9ezZ5zzFgop1kRQOjlQtsetHmrWTSHho28tSBaob0q/t91L2vzg4r9RxOln3F5
iWU81u7X0MsBDarqE6gR0NQL5EKIG0xp0+lqCz8K3Moa8LdLnigqFFH8PmR7N+cs
5d6wZS1r/VFUZBCTSfQ7p4DX0mlVfSQiKvlOtGgwNpfJmOsRqDehOE0xSwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDMrxcFu+CCxmTL5dUkWhWY/ObPsMB8GA1UdIwQY
MBaAFB6f3H+znru+1O5U9wPTrGFT3e5pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHBfY2Y3T2V1NzdVN2xUM0E5T3NZVlBkN21rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS80MGZkZDEtMTA5Mi00ZjY5LWI2NDgt
NjkxZmY1YjQ0YjAxLzEvTXl2RndXNzRJTEdaTXZsMVNSYUZaajg1cy13LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS80MGZkZDEtMTA5Mi00ZjY5LWI2NDgtNjkxZmY1YjQ0YjAx
LzEvSHBfY2Y3T2V1NzdVN2xUM0E5T3NZVlBkN21rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAufbYMA0G
CSqGSIb3DQEBCwUAA4IBAQAkat5n5C58L3NRYYJ/EdLOX0mjn/5KrWmw+eXM8rGZ
DkdLeVtxABZhtclRrs7vMBa9gswZCUPDaRckn/wwwg0qPQpUxGj9rAaA1es4nzWW
pq52l9MFV9lcNt1luEilPlHciS3sbm3Ubyc8ZEIS0P0fuizYcmQlv97IF/3nxZFf
3vUKDvx2E/JJCR8BTPlGgnTbcOj7efMHi6xtnMCy10UP60xThU9CorVZpna2wAr+
JXaZuqzyDRtDrU4Ut6V+FVk5ZrkOWkEtqV93sfKMaqVlx7/u7qTgiGfsuKqiT+Fc
O4jGlR3Va0gOSnOjkZrAcuAqGHgcp/+2ZiA7AgvmJ2BP
-----END CERTIFICATE-----
Generated at Sat Jun 7 16:00:37 2025 by rpki-client