Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/6Uqj3qB__xu3P3uEygfv-bB5aGM.roa
File: 6Uqj3qB__xu3P3uEygfv-bB5aGM.roa (raw, json)
Hash identifier: DA+xFEu9e7gbATHhCec3WbWJPfAhFTSBmNWKRbMDyro=
Subject key identifier: E9:4A:A3:DE:A0:7F:FF:1B:B7:3F:7B:84:CA:07:EF:F9:B0:79:68:63
Certificate issuer: /CN=9577345dfcc93478c5ff221d482ee4c98483f908
Certificate serial: 0196F00D111FC76CEDF3D56540E548D2BCA6
Authority key identifier: 95:77:34:5D:FC:C9:34:78:C5:FF:22:1D:48:2E:E4:C9:84:83:F9:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/6Uqj3qB__xu3P3uEygfv-bB5aGM.roa
Signing time: Tue 20 May 2025 23:35:10 +0000
ROA not before: Tue 20 May 2025 23:35:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216083
IP address blocks: 195.68.234.0/23 maxlen: 23
195.68.234.0/24 maxlen: 24
195.68.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f0:0d:11:1f:c7:6c:ed:f3:d5:65:40:e5:48:d2:bc:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9577345dfcc93478c5ff221d482ee4c98483f908
Validity
Not Before: May 20 23:35:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e94aa3dea07fff1bb73f7b84ca07eff9b0796863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:eb:a8:92:9b:fb:e1:4c:03:98:02:76:82:18:
7d:68:df:d7:96:4e:eb:db:07:57:c5:7c:30:51:7c:
06:55:fd:eb:e6:6e:ae:5c:46:25:ca:b9:08:60:28:
8a:54:7f:48:80:19:98:5c:bf:09:16:01:d9:0e:2d:
06:4e:45:67:5b:b9:95:5a:62:e3:a6:d8:12:3f:4b:
74:59:0d:63:f2:df:63:dd:33:bb:db:7a:1f:81:6d:
7f:f2:c4:d8:21:36:dc:d1:94:6c:b0:64:23:48:a9:
f5:ad:44:56:5c:12:5f:57:b0:6d:2d:e5:b5:c1:54:
b3:fa:30:82:23:fe:ff:6f:b2:3d:54:12:27:b0:ae:
b0:92:87:31:3f:65:2f:71:eb:02:15:37:13:6c:9a:
db:d9:98:00:3f:75:4e:6b:8a:78:7f:d6:a3:53:ca:
f0:de:de:f7:fc:df:c0:c3:75:0d:57:28:2b:df:7a:
73:c1:f9:d5:f9:08:1d:61:e8:5d:53:e5:e6:4c:11:
5a:77:3e:0b:7f:07:15:08:81:85:78:ee:8e:ef:cf:
0d:db:5c:8e:c3:1d:d8:48:cf:94:08:d4:b2:ee:02:
31:93:32:16:85:9b:07:c3:27:9e:bd:c1:47:92:2d:
91:47:c3:3c:4a:36:19:c1:d7:61:52:bb:66:c5:68:
79:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:4A:A3:DE:A0:7F:FF:1B:B7:3F:7B:84:CA:07:EF:F9:B0:79:68:63
X509v3 Authority Key Identifier:
keyid:95:77:34:5D:FC:C9:34:78:C5:FF:22:1D:48:2E:E4:C9:84:83:F9:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/6Uqj3qB__xu3P3uEygfv-bB5aGM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.68.234.0/23
Signature Algorithm: sha256WithRSAEncryption
5c:2b:b5:5a:18:97:f0:24:67:61:2a:ed:44:33:f6:02:ad:a1:
51:90:11:61:3c:1a:4c:48:40:bd:fc:de:53:6b:33:4f:44:9b:
98:d6:93:85:f2:12:47:2b:7c:0e:cd:7b:66:8f:96:7a:6b:9b:
16:d0:fa:bc:3b:f2:ad:b7:91:31:df:b2:b4:d5:4b:23:b1:27:
51:b1:a8:a8:12:14:bb:4c:bb:87:1c:35:69:96:97:d2:b2:74:
d3:5b:4e:e4:af:50:8e:07:d0:29:31:29:54:3c:90:0f:8b:d8:
9a:1e:1f:c5:7b:b2:c9:fd:05:6c:98:25:4a:23:fa:cb:2c:55:
5e:55:70:b0:e9:cd:8b:3e:6c:16:71:a1:60:6c:84:31:4e:60:
43:63:50:46:5e:05:6c:1f:aa:a9:11:49:9b:d6:5a:b5:dc:a8:
71:4d:72:de:3f:b4:23:d6:5a:d3:1f:3a:3a:77:17:dd:4b:80:
e6:d4:bb:10:0c:16:79:77:b5:f8:c7:c7:1b:e6:55:46:62:76:
02:13:3e:93:0e:66:4a:78:0f:c7:74:93:da:c8:b6:77:05:74:
53:7a:ba:dd:c6:6e:f6:b9:2d:8e:ba:9f:ac:70:dd:02:ab:e7:
2e:b9:3f:32:d7:06:af:9e:69:3c:92:3e:f6:2f:05:d5:aa:34:
b0:e8:aa:f7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZbwDREfx2zt89VlQOVI0rymMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1NzczNDVkZmNjOTM0NzhjNWZmMjIxZDQ4MmVlNGM5ODQ4
M2Y5MDgwHhcNMjUwNTIwMjMzNTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOTRhYTNkZWEwN2ZmZjFiYjczZjdiODRjYTA3ZWZmOWIwNzk2ODYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAueuokpv74UwDmAJ2ghh9aN/Xlk7r
2wdXxXwwUXwGVf3r5m6uXEYlyrkIYCiKVH9IgBmYXL8JFgHZDi0GTkVnW7mVWmLj
ptgSP0t0WQ1j8t9j3TO723ofgW1/8sTYITbc0ZRssGQjSKn1rURWXBJfV7BtLeW1
wVSz+jCCI/7/b7I9VBInsK6wkocxP2UvcesCFTcTbJrb2ZgAP3VOa4p4f9ajU8rw
3t73/N/Aw3UNVygr33pzwfnV+QgdYehdU+XmTBFadz4LfwcVCIGFeO6O788N21yO
wx3YSM+UCNSy7gIxkzIWhZsHwyeevcFHki2RR8M8SjYZwddhUrtmxWh5dwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOlKo96gf/8btz97hMoH7/mweWhjMB8GA1UdIwQY
MBaAFJV3NF38yTR4xf8iHUgu5MmEg/kIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFhjMFhmekpOSGpGX3lJZFNDN2t5WVNELVFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9iMTZmNjYtMmFmNC00NjNlLTk3ODUt
NDMzZjVmYTRmOTAxLzEvNlVxajNxQl9feHUzUDN1RXlnZnYtYkI1YUdNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS9iMTZmNjYtMmFmNC00NjNlLTk3ODUtNDMzZjVmYTRmOTAx
LzEvbFhjMFhmekpOSGpGX3lJZFNDN2t5WVNELVFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw0TqMA0G
CSqGSIb3DQEBCwUAA4IBAQBcK7VaGJfwJGdhKu1EM/YCraFRkBFhPBpMSEC9/N5T
azNPRJuY1pOF8hJHK3wOzXtmj5Z6a5sW0Pq8O/Ktt5Ex37K01UsjsSdRsaioEhS7
TLuHHDVplpfSsnTTW07kr1COB9ApMSlUPJAPi9iaHh/Fe7LJ/QVsmCVKI/rLLFVe
VXCw6c2LPmwWcaFgbIQxTmBDY1BGXgVsH6qpEUmb1lq13KhxTXLeP7Qj1lrTHzo6
dxfdS4Dm1LsQDBZ5d7X4x8cb5lVGYnYCEz6TDmZKeA/HdJPayLZ3BXRTerrdxm72
uS2Oup+scN0Cq+cuuT8y1wavnmk8kj72LwXVqjSw6Kr3
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:59:08 2025 by rpki-client