Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/G219Y64AdfvWR2NuekRtXdgP-Ic.roa
File: G219Y64AdfvWR2NuekRtXdgP-Ic.roa (raw, json)
Hash identifier: 5+RXRW/15EIQ38duZeOS5dPeZR9sfJdvGbXk53gYh2w=
Subject key identifier: 1B:6D:7D:63:AE:00:75:FB:D6:47:63:6E:7A:44:6D:5D:D8:0F:F8:87
Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial: 0196572D052968739FCD49F252EBFBBC7664
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/G219Y64AdfvWR2NuekRtXdgP-Ic.roa
Signing time: Mon 21 Apr 2025 07:08:10 +0000
ROA not before: Mon 21 Apr 2025 07:08:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211881
IP address blocks: 94.183.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 19:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:2d:05:29:68:73:9f:cd:49:f2:52:eb:fb:bc:76:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
Validity
Not Before: Apr 21 07:08:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1b6d7d63ae0075fbd647636e7a446d5dd80ff887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3d:c0:e1:87:6b:f9:35:d1:b0:2c:aa:bb:3e:
34:18:50:67:6e:ee:c7:c1:67:5a:20:a0:a9:2a:96:
8c:10:bd:7d:76:6a:4c:28:bd:e9:28:2d:3b:28:82:
43:7d:9c:47:10:c8:71:90:07:b1:eb:e0:35:b6:27:
f0:2e:40:58:ad:59:15:42:29:a2:ef:d6:d9:57:08:
84:c5:3e:20:d9:a7:e6:6d:8e:0b:21:81:c6:46:d4:
14:06:44:d0:76:57:a9:81:0e:18:77:80:c3:d4:92:
36:26:4c:93:8e:f0:36:61:4b:3a:df:25:e4:a2:a5:
eb:f5:6d:97:47:e2:23:f0:65:de:ca:7d:bc:67:1f:
9c:e7:93:f0:e5:5d:f2:3d:e5:08:c8:38:de:8f:37:
db:1b:50:7f:c7:ad:a8:f0:ea:cf:4e:57:e1:9a:43:
8a:8b:e8:c0:c8:07:9d:24:2d:76:5d:a8:f6:b1:3d:
de:ac:e2:3d:6a:2b:80:0c:e3:9b:aa:3c:17:ec:3d:
f6:11:85:c5:d6:e8:0c:38:c7:2e:5b:40:91:16:55:
ae:bd:19:27:4b:4c:e7:3c:a3:85:4b:ea:8a:1d:42:
3f:24:55:e0:ab:e9:cc:3d:8d:25:2b:16:ca:a4:bd:
9a:8d:70:5a:67:11:c0:0f:1b:fa:0b:4e:01:35:8a:
bd:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:6D:7D:63:AE:00:75:FB:D6:47:63:6E:7A:44:6D:5D:D8:0F:F8:87
X509v3 Authority Key Identifier:
keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/G219Y64AdfvWR2NuekRtXdgP-Ic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.183.233.0/24
Signature Algorithm: sha256WithRSAEncryption
27:ca:56:4d:4e:3a:97:b5:f2:b6:24:b1:8b:cd:29:f4:09:a0:
e1:00:0c:d7:2b:e2:35:90:e4:57:ff:f7:21:0e:6f:e6:10:89:
e4:40:d6:ff:17:e7:b6:4e:2d:42:ad:ff:89:9b:3d:62:bf:1f:
bc:c4:09:a5:ab:b4:b0:5d:a6:3a:0b:1d:3a:4a:78:80:21:7b:
44:e8:99:09:9f:b4:33:91:bc:0c:93:fb:ec:fa:74:cb:00:ab:
56:b2:99:20:e1:a2:80:de:cd:66:a5:65:93:f9:79:d5:54:45:
07:74:7e:0c:c3:39:cf:ff:84:59:ed:28:b3:8f:55:f1:f8:b0:
fe:49:f8:ea:ee:aa:cb:d8:50:35:89:1a:b8:12:78:5c:95:43:
6e:21:50:55:54:a5:5f:12:a0:a6:99:16:68:b7:b1:7a:12:f8:
00:01:6e:5b:a8:e1:6b:8e:81:b4:73:18:4e:77:43:f4:4b:bb:
56:10:24:c7:7e:da:34:e8:ea:fa:70:43:ef:17:53:86:b0:75:
62:4d:ac:7e:d7:0e:e9:a8:c7:54:ea:95:a7:8d:a6:5d:2e:0b:
9e:ed:8e:a3:36:d2:b1:32:39:8e:a0:ee:c2:18:24:0b:0b:7b:
f2:7c:fe:0f:e1:ca:5b:ca:f8:a7:16:f9:06:7c:c2:b1:b1:6a:
3f:9d:c3:4f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZZXLQUpaHOfzUnyUuv7vHZkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkZjQ5MTQ4OGE3Y2Q4NDQ4YTQyMDk0NTg3MWMwYjk5Njcy
ZGM2NmUwHhcNMjUwNDIxMDcwODEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYjZkN2Q2M2FlMDA3NWZiZDY0NzYzNmU3YTQ0NmQ1ZGQ4MGZmODg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoj3A4Ydr+TXRsCyquz40GFBnbu7H
wWdaIKCpKpaMEL19dmpMKL3pKC07KIJDfZxHEMhxkAex6+A1tifwLkBYrVkVQimi
79bZVwiExT4g2afmbY4LIYHGRtQUBkTQdlepgQ4Yd4DD1JI2JkyTjvA2YUs63yXk
oqXr9W2XR+Ij8GXeyn28Zx+c55Pw5V3yPeUIyDjejzfbG1B/x62o8OrPTlfhmkOK
i+jAyAedJC12Xaj2sT3erOI9aiuADOObqjwX7D32EYXF1ugMOMcuW0CRFlWuvRkn
S0znPKOFS+qKHUI/JFXgq+nMPY0lKxbKpL2ajXBaZxHADxv6C04BNYq9rwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBttfWOuAHX71kdjbnpEbV3YD/iHMB8GA1UdIwQY
MBaAFK30kUiKfNhEikIJRYccC5lnLcZuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmZTUlNJcDgyRVNLUWdsRmh4d0xtV2N0eG00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi83MTVkMTUtMjgxMC00ODI3LThkYmQt
MGJlZTA2MTI2YjFhLzEvRzIxOVk2NEFkZnZXUjJOdWVrUnRYZGdQLUljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi83MTVkMTUtMjgxMC00ODI3LThkYmQtMGJlZTA2MTI2YjFh
LzEvcmZTUlNJcDgyRVNLUWdsRmh4d0xtV2N0eG00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXrfpMA0G
CSqGSIb3DQEBCwUAA4IBAQAnylZNTjqXtfK2JLGLzSn0CaDhAAzXK+I1kORX//ch
Dm/mEInkQNb/F+e2Ti1Crf+Jmz1ivx+8xAmlq7SwXaY6Cx06SniAIXtE6JkJn7Qz
kbwMk/vs+nTLAKtWspkg4aKA3s1mpWWT+XnVVEUHdH4MwznP/4RZ7Sizj1Xx+LD+
Sfjq7qrL2FA1iRq4EnhclUNuIVBVVKVfEqCmmRZot7F6EvgAAW5bqOFrjoG0cxhO
d0P0S7tWECTHfto06Or6cEPvF1OGsHViTax+1w7pqMdU6pWnjaZdLgue7Y6jNtKx
MjmOoO7CGCQLC3vyfP4P4cpbyvinFvkGfMKxsWo/ncNP
-----END CERTIFICATE-----
Generated at Sun Jun 8 04:34:35 2025 by rpki-client