Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/Q6RmB3OAGm4Vjy2TH2zbAYpRCGQ.roa
File: Q6RmB3OAGm4Vjy2TH2zbAYpRCGQ.roa (raw, json)
Hash identifier: ZCXGsBStLuz3my4wp3w2URXBjzO0MBkzxRD9Thq+40A=
Subject key identifier: 43:A4:66:07:73:80:1A:6E:15:8F:2D:93:1F:6C:DB:01:8A:51:08:64
Certificate issuer: /CN=272ed090acf7c829a22bbfbe2b0e998cd20ad826
Certificate serial: 01970DED253D9561B762074F4C2CF0BD1059
Authority key identifier: 27:2E:D0:90:AC:F7:C8:29:A2:2B:BF:BE:2B:0E:99:8C:D2:0A:D8:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/Q6RmB3OAGm4Vjy2TH2zbAYpRCGQ.roa
Signing time: Mon 26 May 2025 18:48:54 +0000
ROA not before: Mon 26 May 2025 18:48:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39308
IP address blocks: 95.81.72.0/22 maxlen: 24
95.81.76.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:0d:ed:25:3d:95:61:b7:62:07:4f:4c:2c:f0:bd:10:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=272ed090acf7c829a22bbfbe2b0e998cd20ad826
Validity
Not Before: May 26 18:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=43a4660773801a6e158f2d931f6cdb018a510864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d9:08:a7:9d:23:8d:38:f1:dd:ce:b1:ba:86:
68:b3:bd:64:31:3c:1f:78:fe:a0:dc:44:85:07:f6:
8e:e4:72:15:13:87:c0:d5:81:97:83:32:2b:06:80:
9c:5c:17:51:0e:09:13:3f:da:81:08:f0:3f:57:07:
e3:6c:dd:b2:56:ca:ff:19:a5:90:fa:96:a4:52:9c:
48:88:e8:67:3f:22:cc:51:4f:7b:21:47:67:3a:d2:
21:b5:5d:d4:83:cd:ab:eb:84:51:3f:9f:48:e4:35:
26:9b:c0:de:17:95:cd:8e:be:fe:1e:0e:30:8b:9b:
e4:1f:61:4b:0d:df:89:27:6b:b7:ce:3b:49:b2:08:
a2:d9:6e:f9:e1:af:87:56:3e:e5:b6:4c:17:fc:65:
df:fe:1b:c5:c6:d5:b1:70:85:45:b8:4c:ee:42:e4:
ff:da:b1:c7:d3:c9:28:ab:1f:77:bc:d2:95:6b:9e:
d5:d2:25:5b:e3:4e:51:a2:b8:0c:47:b8:ec:b1:bf:
6a:28:f7:f2:66:04:ca:6d:33:b6:00:bf:a3:b8:af:
09:e7:27:aa:9b:e4:ec:9c:b0:04:18:62:2a:b8:11:
17:1c:31:81:6f:aa:29:40:d5:eb:43:ac:2e:8b:c0:
f6:e5:ca:10:86:60:2a:5f:c9:23:61:c8:2b:55:a9:
f7:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:A4:66:07:73:80:1A:6E:15:8F:2D:93:1F:6C:DB:01:8A:51:08:64
X509v3 Authority Key Identifier:
keyid:27:2E:D0:90:AC:F7:C8:29:A2:2B:BF:BE:2B:0E:99:8C:D2:0A:D8:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/Q6RmB3OAGm4Vjy2TH2zbAYpRCGQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.81.72.0/21
Signature Algorithm: sha256WithRSAEncryption
a2:50:ce:8d:ff:67:8a:61:85:84:d4:33:7d:db:d1:4a:6c:04:
ed:70:f1:e2:49:87:ed:c9:a1:b6:15:b9:d6:d0:b9:95:ba:6f:
97:e3:3b:e6:b0:6d:e7:54:5a:90:53:3e:aa:71:6a:f1:62:bf:
ba:ec:46:9a:00:62:fc:5e:0d:f2:39:2a:de:ca:b5:b6:79:b0:
95:ea:16:42:f2:a8:8a:07:13:ea:49:72:5a:df:c6:6d:ce:53:
9d:7e:ad:f0:a5:ae:89:25:b0:4f:d6:a5:1c:c8:17:22:18:84:
56:b6:fa:64:aa:84:f6:4a:56:2e:66:8c:69:61:10:50:7b:50:
18:eb:73:1e:21:2a:a7:05:db:cb:69:77:57:40:a2:c7:d9:d4:
b0:45:fc:98:07:9d:9f:ec:d7:8b:66:72:c3:39:c9:42:b7:a7:
15:40:4d:c0:bc:3e:23:00:75:f1:39:23:ac:30:a6:be:8f:db:
52:af:7b:4e:7f:a3:9f:53:66:4a:cf:e0:59:89:0f:51:ff:f3:
93:07:52:c4:8b:2b:b8:47:97:b9:98:b8:b2:30:56:f7:a5:c9:
d3:c9:cd:88:cb:11:05:89:47:ef:3f:81:13:d8:e8:b8:e9:b7:
9b:f1:dc:4d:aa:86:3c:c8:ff:6d:d1:c6:02:25:b8:96:89:56:
2a:20:b2:82
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZcN7SU9lWG3YgdPTCzwvRBZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3MmVkMDkwYWNmN2M4MjlhMjJiYmZiZTJiMGU5OThjZDIw
YWQ4MjYwHhcNMjUwNTI2MTg0ODU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0M2E0NjYwNzczODAxYTZlMTU4ZjJkOTMxZjZjZGIwMThhNTEwODY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydkIp50jjTjx3c6xuoZos71kMTwf
eP6g3ESFB/aO5HIVE4fA1YGXgzIrBoCcXBdRDgkTP9qBCPA/VwfjbN2yVsr/GaWQ
+pakUpxIiOhnPyLMUU97IUdnOtIhtV3Ug82r64RRP59I5DUmm8DeF5XNjr7+Hg4w
i5vkH2FLDd+JJ2u3zjtJsgii2W754a+HVj7ltkwX/GXf/hvFxtWxcIVFuEzuQuT/
2rHH08koqx93vNKVa57V0iVb405RorgMR7jssb9qKPfyZgTKbTO2AL+juK8J5yeq
m+TsnLAEGGIquBEXHDGBb6opQNXrQ6wui8D25coQhmAqX8kjYcgrVan3/QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEOkZgdzgBpuFY8tkx9s2wGKUQhkMB8GA1UdIwQY
MBaAFCcu0JCs98gpoiu/visOmYzSCtgmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnk3UWtLejN5Q21pSzctLUt3NlpqTklLMkNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9hMTVmOTYtZWMxOC00NjQ0LTg5YjMt
YWNjMjJiYjRkY2VkLzEvUTZSbUIzT0FHbTRWankyVEgyemJBWXBSQ0dRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My9hMTVmOTYtZWMxOC00NjQ0LTg5YjMtYWNjMjJiYjRkY2Vk
LzEvSnk3UWtLejN5Q21pSzctLUt3NlpqTklLMkNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDX1FIMA0G
CSqGSIb3DQEBCwUAA4IBAQCiUM6N/2eKYYWE1DN929FKbATtcPHiSYftyaG2FbnW
0LmVum+X4zvmsG3nVFqQUz6qcWrxYr+67EaaAGL8Xg3yOSreyrW2ebCV6hZC8qiK
BxPqSXJa38ZtzlOdfq3wpa6JJbBP1qUcyBciGIRWtvpkqoT2SlYuZoxpYRBQe1AY
63MeISqnBdvLaXdXQKLH2dSwRfyYB52f7NeLZnLDOclCt6cVQE3AvD4jAHXxOSOs
MKa+j9tSr3tOf6OfU2ZKz+BZiQ9R//OTB1LEiyu4R5e5mLiyMFb3pcnTyc2IyxEF
iUfvP4ET2Oi46beb8dxNqoY8yP9t0cYCJbiWiVYqILKC
-----END CERTIFICATE-----
Generated at Sat Jun 14 01:39:25 2025 by rpki-client