Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/TJ7wCyZ9vINQHYhKwMadhJQnS2Y.roa
File: TJ7wCyZ9vINQHYhKwMadhJQnS2Y.roa (raw, json)
Hash identifier: W0rX13j2lIPxoSYnlVy329KsXHfzz1cOXW8K7nI1NDw=
Subject key identifier: 4C:9E:F0:0B:26:7D:BC:83:50:1D:88:4A:C0:C6:9D:84:94:27:4B:66
Certificate issuer: /CN=1372e0c2b83dd5109013c7f1c0bb9716d3618dd2
Certificate serial: 019735D14A4335FF5EDBF4437034FD5C8D98
Authority key identifier: 13:72:E0:C2:B8:3D:D5:10:90:13:C7:F1:C0:BB:97:16:D3:61:8D:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E3Lgwrg91RCQE8fxwLuXFtNhjdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/TJ7wCyZ9vINQHYhKwMadhJQnS2Y.roa
Signing time: Tue 03 Jun 2025 12:43:17 +0000
ROA not before: Tue 03 Jun 2025 12:43:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9009
IP address blocks: 5.252.196.0/24 maxlen: 24
5.252.199.0/24 maxlen: 24
45.146.123.0/24 maxlen: 24
92.118.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/E3Lgwrg91RCQE8fxwLuXFtNhjdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/E3Lgwrg91RCQE8fxwLuXFtNhjdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/E3Lgwrg91RCQE8fxwLuXFtNhjdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:35:d1:4a:43:35:ff:5e:db:f4:43:70:34:fd:5c:8d:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1372e0c2b83dd5109013c7f1c0bb9716d3618dd2
Validity
Not Before: Jun 3 12:43:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4c9ef00b267dbc83501d884ac0c69d8494274b66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:da:30:dc:7f:e3:f3:2e:e4:f8:d6:0a:25:ed:
90:f2:ac:82:fc:5b:b0:23:84:83:f3:bc:6a:fb:d4:
7b:a1:97:71:1d:af:c1:dc:3a:6d:44:65:bb:93:b3:
0c:63:09:ba:91:59:3e:09:1e:71:bc:0f:06:d2:59:
e2:96:21:24:71:81:74:e9:05:d1:e1:78:5d:1b:80:
66:c9:14:94:30:fd:c5:46:e1:f2:e2:76:b6:7f:66:
dc:55:53:14:cb:23:2f:94:ff:45:8c:fb:be:f4:45:
90:39:cc:7f:fe:c6:3e:b3:0f:97:51:63:05:de:25:
dc:63:45:34:a9:e6:73:7e:e5:0b:3c:f4:e6:15:6c:
11:8a:2b:13:8c:44:f9:71:7e:fe:f6:9e:ee:db:d8:
0a:5f:95:73:68:fe:c3:79:81:f6:24:6b:ea:9c:ff:
8f:bc:97:05:9b:61:51:3e:88:cc:d4:fc:61:e9:0d:
8c:93:69:31:a1:af:39:e0:11:13:11:45:b4:60:cc:
cd:c5:18:b7:c0:16:35:37:3e:6a:b4:f2:fd:c8:35:
fc:fc:0e:92:53:2a:72:57:f0:8b:fc:82:16:bc:8c:
3a:89:8d:a9:f7:37:e1:69:6c:0c:2a:36:3f:c6:8e:
1e:b1:0a:9f:d7:3b:ac:c1:6b:92:de:f1:50:71:a6:
87:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:9E:F0:0B:26:7D:BC:83:50:1D:88:4A:C0:C6:9D:84:94:27:4B:66
X509v3 Authority Key Identifier:
keyid:13:72:E0:C2:B8:3D:D5:10:90:13:C7:F1:C0:BB:97:16:D3:61:8D:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3Lgwrg91RCQE8fxwLuXFtNhjdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/TJ7wCyZ9vINQHYhKwMadhJQnS2Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/E3Lgwrg91RCQE8fxwLuXFtNhjdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.196.0/24
5.252.199.0/24
45.146.123.0/24
92.118.46.0/24
Signature Algorithm: sha256WithRSAEncryption
55:0d:61:57:f5:ac:27:03:40:34:27:b0:3b:a0:e0:f0:b4:4f:
cf:4f:7a:de:07:8f:d6:cd:18:85:21:8a:53:bd:e2:9c:c0:dc:
42:2b:40:e7:34:65:fb:81:5a:7c:76:9a:07:b5:1c:d2:f2:24:
7d:e8:6e:53:f5:27:da:47:e8:18:26:93:4b:fd:97:b6:44:1e:
4e:de:66:a6:02:ae:aa:d7:c1:aa:2a:d9:07:86:42:38:c9:10:
a3:73:92:c9:dc:92:c3:ea:01:e5:e5:28:0d:93:3d:04:7e:a3:
a8:1e:bb:bb:1f:82:11:8a:02:30:50:53:25:e0:49:05:6b:64:
59:85:46:00:c2:9a:ea:5d:72:1e:56:e4:06:5c:12:26:0c:78:
ef:c3:9d:0e:7a:df:78:e1:95:ef:d8:09:34:fc:80:d8:33:a5:
62:eb:94:89:96:19:a8:d9:b3:b1:59:ee:3d:b4:4b:49:c4:b2:
61:85:c1:fc:bc:f3:cb:b5:78:38:f0:73:8b:23:9e:4f:77:5e:
a6:d1:be:98:bb:68:31:33:0b:29:04:c9:f4:f1:0d:56:0f:3c:
86:13:bc:24:0e:1a:2b:76:4a:0a:be:79:69:b2:3b:1f:11:0d:
b9:b6:30:c4:7e:a3:91:6d:46:fe:d8:e8:b9:ff:34:1e:ad:f2:
88:5b:d1:05
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZc10UpDNf9e2/RDcDT9XI2YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzNzJlMGMyYjgzZGQ1MTA5MDEzYzdmMWMwYmI5NzE2ZDM2
MThkZDIwHhcNMjUwNjAzMTI0MzE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YzllZjAwYjI2N2RiYzgzNTAxZDg4NGFjMGM2OWQ4NDk0Mjc0YjY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0dow3H/j8y7k+NYKJe2Q8qyC/Fuw
I4SD87xq+9R7oZdxHa/B3DptRGW7k7MMYwm6kVk+CR5xvA8G0lniliEkcYF06QXR
4XhdG4BmyRSUMP3FRuHy4na2f2bcVVMUyyMvlP9FjPu+9EWQOcx//sY+sw+XUWMF
3iXcY0U0qeZzfuULPPTmFWwRiisTjET5cX7+9p7u29gKX5VzaP7DeYH2JGvqnP+P
vJcFm2FRPojM1Pxh6Q2Mk2kxoa854BETEUW0YMzNxRi3wBY1Nz5qtPL9yDX8/A6S
UypyV/CL/IIWvIw6iY2p9zfhaWwMKjY/xo4esQqf1zuswWuS3vFQcaaHmwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFEye8AsmfbyDUB2ISsDGnYSUJ0tmMB8GA1UdIwQY
MBaAFBNy4MK4PdUQkBPH8cC7lxbTYY3SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTNMZ3dyZzkxUkNRRThmeHdMdVhGdE5oamRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS8yMjFmZDYtZTRmNi00M2UzLTk0NmQt
ZGQxZWM1N2Q3ZTc0LzEvVEo3d0N5Wjl2SU5RSFloS3dNYWRoSlFuUzJZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS8yMjFmZDYtZTRmNi00M2UzLTk0NmQtZGQxZWM1N2Q3ZTc0
LzEvRTNMZ3dyZzkxUkNRRThmeHdMdVhGdE5oamRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQABfzEAwQA
BfzHAwQALZJ7AwQAXHYuMA0GCSqGSIb3DQEBCwUAA4IBAQBVDWFX9awnA0A0J7A7
oODwtE/PT3reB4/WzRiFIYpTveKcwNxCK0DnNGX7gVp8dpoHtRzS8iR96G5T9Sfa
R+gYJpNL/Ze2RB5O3mamAq6q18GqKtkHhkI4yRCjc5LJ3JLD6gHl5SgNkz0EfqOo
Hru7H4IRigIwUFMl4EkFa2RZhUYAwprqXXIeVuQGXBImDHjvw50Oet944ZXv2Ak0
/IDYM6Vi65SJlhmo2bOxWe49tEtJxLJhhcH8vPPLtXg48HOLI55Pd16m0b6Yu2gx
MwspBMn08Q1WDzyGE7wkDhordkoKvnlpsjsfEQ25tjDEfqORbUb+2Oi5/zQerfKI
W9EF
-----END CERTIFICATE-----
Generated at Fri Jun 6 16:06:22 2025 by rpki-client