Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/gYA_rHJcDyZ1I8qy1R4L0zDW9qI.roa
File: gYA_rHJcDyZ1I8qy1R4L0zDW9qI.roa (raw, json)
Hash identifier: u5z8BQnf6PynI8NBRk8KSGbQCrjifEnXJWVptV9ywSs=
Subject key identifier: 81:80:3F:AC:72:5C:0F:26:75:23:CA:B2:D5:1E:0B:D3:30:D6:F6:A2
Certificate issuer: /CN=8b82433ffe94bf3536fec327543d396158202072
Certificate serial: 019720FEBD519862C0273D46E6D74D19A310
Authority key identifier: 8B:82:43:3F:FE:94:BF:35:36:FE:C3:27:54:3D:39:61:58:20:20:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i4JDP_6UvzU2_sMnVD05YVggIHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/gYA_rHJcDyZ1I8qy1R4L0zDW9qI.roa
Signing time: Fri 30 May 2025 11:40:54 +0000
ROA not before: Fri 30 May 2025 11:40:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210976
IP address blocks: 83.217.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i4JDP_6UvzU2_sMnVD05YVggIHI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:20:fe:bd:51:98:62:c0:27:3d:46:e6:d7:4d:19:a3:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b82433ffe94bf3536fec327543d396158202072
Validity
Not Before: May 30 11:40:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=81803fac725c0f267523cab2d51e0bd330d6f6a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:12:8e:42:cc:d6:74:f0:d8:c3:cf:ab:0d:48:
15:c8:1e:81:68:ab:8d:df:a4:cd:5f:ff:71:ae:16:
d4:25:74:1e:23:88:04:f6:af:ac:8a:b8:8b:e4:6e:
bd:3b:c1:d2:4e:c0:0f:a4:2f:ca:66:7b:b6:0a:11:
1b:81:43:40:2d:41:fe:61:9e:18:a8:05:e2:9a:3e:
de:b5:f4:a1:99:e7:88:0d:61:b3:6b:d5:4c:d6:35:
26:01:87:d4:fc:46:a3:7a:f5:ae:73:9d:e0:3f:0c:
04:40:cf:49:b8:05:95:9b:5a:8b:1d:b5:5a:57:53:
8e:be:f1:80:53:d0:76:16:ae:78:f7:5d:e0:a7:b3:
a9:d3:7e:78:4c:16:80:cc:31:21:c2:5d:1d:94:18:
7f:fb:5b:5c:43:8a:09:8c:b9:2a:43:db:c4:cc:db:
16:f0:93:ef:bf:0f:90:d6:03:4d:8b:ad:d9:fa:5b:
a6:79:00:be:d5:3f:dc:08:4e:40:ab:4b:87:15:2b:
92:ac:d5:ad:25:9b:6b:93:a2:25:1d:65:08:18:7c:
d3:58:90:bf:d2:43:06:7a:47:67:ba:f7:80:b6:a6:
c1:db:90:fb:93:77:3a:c7:57:3b:3a:3f:d5:d3:55:
82:64:cf:8e:7e:c6:c4:29:30:70:eb:fd:1c:f5:e8:
a0:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:80:3F:AC:72:5C:0F:26:75:23:CA:B2:D5:1E:0B:D3:30:D6:F6:A2
X509v3 Authority Key Identifier:
keyid:8B:82:43:3F:FE:94:BF:35:36:FE:C3:27:54:3D:39:61:58:20:20:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i4JDP_6UvzU2_sMnVD05YVggIHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/gYA_rHJcDyZ1I8qy1R4L0zDW9qI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.217.222.0/24
Signature Algorithm: sha256WithRSAEncryption
76:51:ff:d0:0b:30:81:e9:af:cd:fd:de:9d:1f:3e:3e:8c:62:
22:a0:f8:17:f0:1e:42:9c:c1:76:7c:a6:07:90:c5:64:e3:d4:
04:b9:4d:f3:0c:fd:d9:97:f4:c1:aa:07:0e:a1:b1:23:83:c5:
cd:09:77:c4:db:5e:0f:61:69:f5:6e:44:35:8d:81:45:f6:54:
26:75:d4:eb:04:de:52:e4:2a:79:51:88:92:bd:c8:7f:46:35:
67:69:58:58:a9:c0:c7:76:34:ed:00:3d:b1:a2:44:57:ab:24:
9b:54:f3:54:15:6a:0b:97:ec:07:dd:73:73:85:25:20:bd:56:
a1:6a:95:eb:92:9e:37:ca:6f:c8:01:64:9e:5f:51:30:53:f1:
e6:36:02:a8:b7:bc:e5:df:d7:ed:f3:80:9f:62:58:77:fc:35:
c7:3c:55:8a:2f:8d:f3:f3:c0:62:a9:fb:f5:e5:82:f2:d0:9d:
3d:0a:e3:f9:b7:8f:49:66:be:c9:59:e9:51:64:28:c2:75:62:
82:12:11:7a:e9:c8:8f:7b:0d:ae:d6:bd:bf:d3:96:70:07:34:
4a:af:22:3e:51:f5:8d:aa:4b:08:d0:96:de:1c:53:c8:87:38:
c2:18:f9:8e:86:2f:6a:fe:a5:33:8d:78:e7:39:51:4c:58:46:
cf:e2:1d:2f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZcg/r1RmGLAJz1G5tdNGaMQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiODI0MzNmZmU5NGJmMzUzNmZlYzMyNzU0M2QzOTYxNTgy
MDIwNzIwHhcNMjUwNTMwMTE0MDU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MTgwM2ZhYzcyNWMwZjI2NzUyM2NhYjJkNTFlMGJkMzMwZDZmNmEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhKOQszWdPDYw8+rDUgVyB6BaKuN
36TNX/9xrhbUJXQeI4gE9q+siriL5G69O8HSTsAPpC/KZnu2ChEbgUNALUH+YZ4Y
qAXimj7etfShmeeIDWGza9VM1jUmAYfU/EajevWuc53gPwwEQM9JuAWVm1qLHbVa
V1OOvvGAU9B2Fq54913gp7Op0354TBaAzDEhwl0dlBh/+1tcQ4oJjLkqQ9vEzNsW
8JPvvw+Q1gNNi63Z+lumeQC+1T/cCE5Aq0uHFSuSrNWtJZtrk6IlHWUIGHzTWJC/
0kMGekdnuveAtqbB25D7k3c6x1c7Oj/V01WCZM+OfsbEKTBw6/0c9eigDwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIGAP6xyXA8mdSPKstUeC9Mw1vaiMB8GA1UdIwQY
MBaAFIuCQz/+lL81Nv7DJ1Q9OWFYICByMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTRKRFBfNlV2elUyX3NNblZEMDVZVmdnSUhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9mNTU5M2QtNjg5Yy00ZGZlLThkOTYt
MmRkNzg5MGRjNjg5LzEvZ1lBX3JISmNEeVoxSThxeTFSNEwwekRXOXFJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy9mNTU5M2QtNjg5Yy00ZGZlLThkOTYtMmRkNzg5MGRjNjg5
LzEvaTRKRFBfNlV2elUyX3NNblZEMDVZVmdnSUhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAU9neMA0G
CSqGSIb3DQEBCwUAA4IBAQB2Uf/QCzCB6a/N/d6dHz4+jGIioPgX8B5CnMF2fKYH
kMVk49QEuU3zDP3Zl/TBqgcOobEjg8XNCXfE214PYWn1bkQ1jYFF9lQmddTrBN5S
5Cp5UYiSvch/RjVnaVhYqcDHdjTtAD2xokRXqySbVPNUFWoLl+wH3XNzhSUgvVah
apXrkp43ym/IAWSeX1EwU/HmNgKot7zl39ft84CfYlh3/DXHPFWKL43z88Biqfv1
5YLy0J09CuP5t49JZr7JWelRZCjCdWKCEhF66ciPew2u1r2/05ZwBzRKryI+UfWN
qksI0JbeHFPIhzjCGPmOhi9q/qUzjXjnOVFMWEbP4h0v
-----END CERTIFICATE-----
Generated at Sat Jun 7 13:44:42 2025 by rpki-client