Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/chN6_rbLs77CnXnGPq692nJkwPw.roa
File: chN6_rbLs77CnXnGPq692nJkwPw.roa (raw, json)
Hash identifier: Dzho0yjqKe+wddNVPh67JL72Lz6u5n7teE5kk1vs+u0=
Subject key identifier: 72:13:7A:FE:B6:CB:B3:BE:C2:9D:79:C6:3E:AE:BD:DA:72:64:C0:FC
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 01973F758CD8ED6FC277A33ED657B6DA95E9
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/chN6_rbLs77CnXnGPq692nJkwPw.roa
Signing time: Thu 05 Jun 2025 09:39:17 +0000
ROA not before: Thu 05 Jun 2025 09:39:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211557
IP address blocks: 212.16.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:3f:75:8c:d8:ed:6f:c2:77:a3:3e:d6:57:b6:da:95:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Jun 5 09:39:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=72137afeb6cbb3bec29d79c63eaebdda7264c0fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:37:ba:55:8c:f1:25:0f:a3:8b:1b:42:59:ab:
5a:d2:f6:51:01:f6:ca:3b:93:23:c3:6d:0f:c4:b7:
91:99:e8:09:18:be:18:82:5c:39:12:34:40:8a:bc:
1c:b3:d2:1d:a0:90:ab:5c:b3:9c:73:c8:92:f5:bf:
75:6b:4c:26:7f:dc:4a:5f:a0:ba:7b:77:f3:2d:3d:
28:31:da:2a:36:55:0a:85:48:f7:6b:7f:53:d1:27:
32:f3:4a:75:7b:c2:9a:78:69:a4:26:d9:09:39:fc:
d4:30:0e:3d:0b:d6:35:07:4a:82:6d:fc:f0:90:e4:
f7:f4:02:0d:42:25:d6:6a:54:09:f7:3a:ad:2a:df:
59:07:15:f3:20:bd:b7:33:81:21:be:87:b1:d7:e3:
4f:d6:10:c5:3a:3b:e4:bc:d8:6f:5f:18:22:c9:3b:
6a:fb:df:ef:4d:f1:7f:40:c0:43:08:86:66:7d:ca:
e9:04:01:10:08:da:52:3e:7d:b4:42:61:db:f0:c9:
b8:85:b0:45:3d:44:ec:78:e3:14:07:5c:e8:56:27:
78:21:9a:9b:11:de:97:3e:ae:b0:e3:36:6c:5a:bb:
86:43:3e:6f:3d:ef:6e:42:2d:9b:d6:e9:31:f7:b4:
9e:30:1d:26:5e:4f:8f:98:9a:be:ab:92:5d:b6:ac:
76:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:13:7A:FE:B6:CB:B3:BE:C2:9D:79:C6:3E:AE:BD:DA:72:64:C0:FC
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/chN6_rbLs77CnXnGPq692nJkwPw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.16.87.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:55:72:f0:d4:43:62:85:a1:0e:6b:68:93:78:39:e1:6e:ec:
1b:fb:ba:a9:46:64:d1:42:05:7e:2b:92:85:73:11:59:76:49:
b7:08:9f:b6:27:b8:c3:22:b9:10:be:80:a6:34:6f:d5:dc:2c:
69:64:9f:9a:ac:c7:33:fa:06:69:88:e8:f4:bc:ab:6d:58:15:
f2:44:7b:a3:1e:b9:7a:34:09:71:25:16:d9:48:61:e0:e4:1b:
66:99:e4:e9:6f:f5:8f:6f:ac:f3:9b:9b:2c:7c:b4:02:86:e5:
a5:e2:f6:44:4d:b4:05:7a:f4:bf:69:33:d9:5a:73:c1:90:dd:
bf:61:36:56:d2:5d:ad:5e:ce:12:09:6b:59:75:ad:e7:9b:b8:
94:df:23:dd:3b:0e:78:fd:27:6d:47:c0:89:ec:96:2d:0a:66:
2a:7a:f7:b0:3f:cb:1a:a5:0f:49:1b:5c:36:81:f0:17:4d:66:
8f:89:17:b1:6c:81:a2:df:f1:c8:55:f5:97:e7:a8:f8:e6:c2:
89:e9:22:16:41:02:e6:7c:87:dd:78:c3:c9:f2:4b:08:24:17:
d4:95:3d:b1:5b:97:3a:fc:a5:0d:31:36:28:77:62:4c:32:f3:
8a:44:bb:ee:6e:a1:8d:75:18:7f:4d:97:8f:8c:00:89:5a:55:
4a:2d:3f:ff
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZc/dYzY7W/Cd6M+1le22pXpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3Mjk0NWY1NzEwMzE1M2EwNzg1NGU3NGUyMjdmMmFlYzFj
NWY0MzAwHhcNMjUwNjA1MDkzOTE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MjEzN2FmZWI2Y2JiM2JlYzI5ZDc5YzYzZWFlYmRkYTcyNjRjMGZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuje6VYzxJQ+jixtCWata0vZRAfbK
O5Mjw20PxLeRmegJGL4Yglw5EjRAirwcs9IdoJCrXLOcc8iS9b91a0wmf9xKX6C6
e3fzLT0oMdoqNlUKhUj3a39T0Scy80p1e8KaeGmkJtkJOfzUMA49C9Y1B0qCbfzw
kOT39AINQiXWalQJ9zqtKt9ZBxXzIL23M4Ehvoex1+NP1hDFOjvkvNhvXxgiyTtq
+9/vTfF/QMBDCIZmfcrpBAEQCNpSPn20QmHb8Mm4hbBFPUTseOMUB1zoVid4IZqb
Ed6XPq6w4zZsWruGQz5vPe9uQi2b1ukx97SeMB0mXk+PmJq+q5Jdtqx29QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHITev62y7O+wp15xj6uvdpyZMD8MB8GA1UdIwQY
MBaAFLcpRfVxAxU6B4VOdOIn8q7BxfQwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEt
MmEwOWNjNTNhODA1LzEvY2hONl9yYkxzNzdDblhuR1BxNjkybkprd1B3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEtMmEwOWNjNTNhODA1
LzEvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1BBXMA0G
CSqGSIb3DQEBCwUAA4IBAQCjVXLw1ENihaEOa2iTeDnhbuwb+7qpRmTRQgV+K5KF
cxFZdkm3CJ+2J7jDIrkQvoCmNG/V3CxpZJ+arMcz+gZpiOj0vKttWBXyRHujHrl6
NAlxJRbZSGHg5BtmmeTpb/WPb6zzm5ssfLQChuWl4vZETbQFevS/aTPZWnPBkN2/
YTZW0l2tXs4SCWtZda3nm7iU3yPdOw54/SdtR8CJ7JYtCmYqevewP8sapQ9JG1w2
gfAXTWaPiRexbIGi3/HIVfWX56j45sKJ6SIWQQLmfIfdeMPJ8ksIJBfUlT2xW5c6
/KUNMTYod2JMMvOKRLvubqGNdRh/TZePjACJWlVKLT//
-----END CERTIFICATE-----
Generated at Sat Jun 7 14:50:01 2025 by rpki-client