Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d7ffed-6c1d-4131-950f-a49d1a006dc9/1/sYQpCYcn-q9N_eYuDGQ4-P6yDtQ.roa
File: sYQpCYcn-q9N_eYuDGQ4-P6yDtQ.roa (raw, json)
Hash identifier: iZDBjHvTi8UzC06Eug4ypR0vGR21QkFz4J3Uc1Ac+5Y=
Subject key identifier: B1:84:29:09:87:27:FA:AF:4D:FD:E6:2E:0C:64:38:F8:FE:B2:0E:D4
Certificate issuer: /CN=464d733de81fbd486d442358e0c15370520f9312
Certificate serial: 01971C69095A3EFC76CF61B5A6E2840B59C1
Authority key identifier: 46:4D:73:3D:E8:1F:BD:48:6D:44:23:58:E0:C1:53:70:52:0F:93:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rk1zPegfvUhtRCNY4MFTcFIPkxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/d7ffed-6c1d-4131-950f-a49d1a006dc9/1/sYQpCYcn-q9N_eYuDGQ4-P6yDtQ.roa
Signing time: Thu 29 May 2025 14:18:54 +0000
ROA not before: Thu 29 May 2025 14:18:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57174
IP address blocks: 95.215.176.0/21 maxlen: 21
185.42.48.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/d7ffed-6c1d-4131-950f-a49d1a006dc9/1/Rk1zPegfvUhtRCNY4MFTcFIPkxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/d7ffed-6c1d-4131-950f-a49d1a006dc9/1/Rk1zPegfvUhtRCNY4MFTcFIPkxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rk1zPegfvUhtRCNY4MFTcFIPkxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:1c:69:09:5a:3e:fc:76:cf:61:b5:a6:e2:84:0b:59:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=464d733de81fbd486d442358e0c15370520f9312
Validity
Not Before: May 29 14:18:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b18429098727faaf4dfde62e0c6438f8feb20ed4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:54:49:73:2a:a2:8c:76:ac:65:b9:ea:ff:7b:
93:75:f3:1d:aa:e7:09:95:5b:04:20:aa:45:55:35:
ed:11:98:c8:f7:e6:d9:46:71:2b:8f:8c:52:13:20:
31:ea:07:d6:42:1f:f8:6d:a6:84:45:47:80:bf:7a:
5c:81:3e:ab:59:3c:9a:9c:68:81:83:ce:cf:3d:4b:
99:4b:28:4a:6e:1d:c8:d9:55:f7:4b:ad:d4:e1:6b:
a4:86:6e:78:aa:cc:16:e4:35:ce:e1:be:e1:42:1d:
e1:90:20:dc:18:1c:2e:cb:4e:87:39:2f:b3:bb:77:
14:2b:bb:a1:73:75:50:0d:33:ec:35:d4:3d:f9:0f:
73:a7:cd:35:21:2e:8b:8d:83:2b:ea:e3:14:e3:f8:
4f:c7:24:4b:ea:9f:b2:57:9f:8a:c5:c4:2b:62:6b:
7e:59:f9:35:83:fe:1c:a6:a1:08:8e:ec:69:71:ed:
06:5c:3b:8a:9c:a9:b1:a2:9d:c4:f9:96:0d:a6:42:
c1:35:ed:2d:b2:96:6e:10:4f:cb:27:e6:be:19:b5:
c7:51:39:99:37:a6:29:bd:21:26:6c:fa:7d:9d:a9:
04:39:8e:74:f9:cb:08:4d:8c:8f:3b:00:78:7f:3b:
48:9e:b6:16:2c:ee:d8:20:e8:87:52:b5:1c:8e:22:
2c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:84:29:09:87:27:FA:AF:4D:FD:E6:2E:0C:64:38:F8:FE:B2:0E:D4
X509v3 Authority Key Identifier:
keyid:46:4D:73:3D:E8:1F:BD:48:6D:44:23:58:E0:C1:53:70:52:0F:93:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rk1zPegfvUhtRCNY4MFTcFIPkxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d7ffed-6c1d-4131-950f-a49d1a006dc9/1/sYQpCYcn-q9N_eYuDGQ4-P6yDtQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d7ffed-6c1d-4131-950f-a49d1a006dc9/1/Rk1zPegfvUhtRCNY4MFTcFIPkxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.215.176.0/21
185.42.48.0/22
Signature Algorithm: sha256WithRSAEncryption
86:0f:74:5b:12:d7:43:bd:02:65:ef:78:19:d7:92:b0:43:ad:
88:ea:89:53:81:41:c4:e0:7c:21:a5:87:99:41:43:d7:4d:65:
35:8d:9d:aa:88:ca:c2:d3:db:8c:5f:6b:d1:8a:7d:b7:e5:a8:
c8:d8:3a:f4:14:c7:be:9f:fe:50:78:32:78:74:f1:63:1d:a0:
eb:44:41:3f:7c:e5:9f:ad:ad:f7:22:cd:6d:d7:94:68:d8:aa:
85:9d:8a:db:6e:7e:0f:a9:72:b6:8f:6a:e1:77:ec:f7:c5:10:
bf:dd:79:7b:85:d0:d3:cd:db:ee:89:44:33:9c:7b:31:8a:ea:
76:7c:ce:01:9d:a9:9e:ca:e0:3b:3e:68:9a:04:8c:6c:bc:ef:
9a:27:93:34:f3:dc:37:1c:25:4e:2c:a7:37:22:0c:97:a8:c2:
06:50:00:a9:89:4b:b2:82:b5:2e:14:4e:59:4d:5c:66:5b:7c:
0a:9a:47:f8:c3:7f:03:35:4f:8f:0a:bc:90:2a:8c:73:d0:e7:
d6:6e:7f:1d:24:c0:86:5f:46:65:3f:12:23:ab:6f:7a:37:5e:
27:b5:17:c0:11:44:5b:89:fa:27:43:03:19:46:be:9b:a9:6e:
1d:85:e4:61:2f:4f:be:f8:32:f0:3d:cf:67:cc:e5:37:a9:88:
91:64:9e:e2
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZccaQlaPvx2z2G1puKEC1nBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2NGQ3MzNkZTgxZmJkNDg2ZDQ0MjM1OGUwYzE1MzcwNTIw
ZjkzMTIwHhcNMjUwNTI5MTQxODU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMTg0MjkwOTg3MjdmYWFmNGRmZGU2MmUwYzY0MzhmOGZlYjIwZWQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1RJcyqijHasZbnq/3uTdfMdqucJ
lVsEIKpFVTXtEZjI9+bZRnErj4xSEyAx6gfWQh/4baaERUeAv3pcgT6rWTyanGiB
g87PPUuZSyhKbh3I2VX3S63U4Wukhm54qswW5DXO4b7hQh3hkCDcGBwuy06HOS+z
u3cUK7uhc3VQDTPsNdQ9+Q9zp801IS6LjYMr6uMU4/hPxyRL6p+yV5+KxcQrYmt+
Wfk1g/4cpqEIjuxpce0GXDuKnKmxop3E+ZYNpkLBNe0tspZuEE/LJ+a+GbXHUTmZ
N6YpvSEmbPp9nakEOY50+csITYyPOwB4fztInrYWLO7YIOiHUrUcjiIsLQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLGEKQmHJ/qvTf3mLgxkOPj+sg7UMB8GA1UdIwQY
MBaAFEZNcz3oH71IbUQjWODBU3BSD5MSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmsxelBlZ2Z2VWh0UkNOWTRNRlRjRklQa3hJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9kN2ZmZWQtNmMxZC00MTMxLTk1MGYt
YTQ5ZDFhMDA2ZGM5LzEvc1lRcENZY24tcTlOX2VZdURHUTQtUDZ5RHRRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi9kN2ZmZWQtNmMxZC00MTMxLTk1MGYtYTQ5ZDFhMDA2ZGM5
LzEvUmsxelBlZ2Z2VWh0UkNOWTRNRlRjRklQa3hJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDX9ewAwQC
uSowMA0GCSqGSIb3DQEBCwUAA4IBAQCGD3RbEtdDvQJl73gZ15KwQ62I6olTgUHE
4HwhpYeZQUPXTWU1jZ2qiMrC09uMX2vRin235ajI2Dr0FMe+n/5QeDJ4dPFjHaDr
REE/fOWfra33Is1t15Ro2KqFnYrbbn4PqXK2j2rhd+z3xRC/3Xl7hdDTzdvuiUQz
nHsxiup2fM4BnameyuA7PmiaBIxsvO+aJ5M089w3HCVOLKc3IgyXqMIGUACpiUuy
grUuFE5ZTVxmW3wKmkf4w38DNU+PCryQKoxz0OfWbn8dJMCGX0ZlPxIjq296N14n
tRfAEURbifonQwMZRr6bqW4dheRhL0+++DLwPc9nzOU3qYiRZJ7i
-----END CERTIFICATE-----
Generated at Sun Jun 8 06:25:35 2025 by rpki-client