Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/r57HiExQQyMhLrahmxZzmVENffw.roa
File: r57HiExQQyMhLrahmxZzmVENffw.roa (raw, json)
Hash identifier: 1vrMTB9isNaoFoOGMc8WnOAnAdIniK85OKG8YOrrMTo=
Subject key identifier: AF:9E:C7:88:4C:50:43:23:21:2E:B6:A1:9B:16:73:99:51:0D:7D:FC
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 019920E332CF196D1F3F48E4173705D75F1D
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/r57HiExQQyMhLrahmxZzmVENffw.roa
Signing time: Sat 06 Sep 2025 21:16:24 +0000
ROA not before: Sat 06 Sep 2025 21:16:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205987
IP address blocks: 2a12:bec4:1c40::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:20:e3:32:cf:19:6d:1f:3f:48:e4:17:37:05:d7:5f:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Sep 6 21:16:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=af9ec7884c504323212eb6a19b167399510d7dfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:af:f4:5e:7e:c1:66:80:3c:53:7d:f0:27:35:
aa:30:29:73:1a:c8:f0:73:93:0f:72:f7:a9:8f:a3:
86:33:9f:95:de:4e:88:d8:b4:46:65:c3:79:47:b7:
62:85:c5:bd:54:84:28:26:cc:cd:eb:ee:f3:95:49:
2b:9c:e8:21:5a:a4:ea:58:0a:bc:16:ac:0d:d2:8b:
91:80:33:58:95:2e:44:5f:a2:58:1b:d5:c3:f3:96:
40:f1:bb:61:65:ee:e2:55:a3:bc:c1:6d:84:99:f8:
50:a4:65:70:91:c9:af:64:4c:a5:88:4a:84:11:ec:
af:9a:67:32:37:19:59:4d:19:b0:69:ee:27:f9:4d:
4f:51:34:78:a5:69:2d:29:a7:f4:83:82:6a:84:01:
db:06:1b:4f:b3:06:99:53:44:65:5f:10:f7:81:d8:
f7:2c:d4:9c:7e:b4:11:3b:20:79:a3:e4:66:4e:14:
a3:30:41:41:c3:b5:be:73:0f:d8:78:51:11:fe:0e:
b0:af:cf:0d:8a:ce:31:39:b8:25:99:24:ac:70:80:
1d:35:25:53:91:44:22:50:64:51:46:4c:8b:64:42:
d2:ba:a0:06:cb:51:80:06:4a:ef:60:e5:3f:68:82:
e1:da:50:b0:39:2b:8b:41:e2:0c:c8:b7:81:86:0e:
1b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:9E:C7:88:4C:50:43:23:21:2E:B6:A1:9B:16:73:99:51:0D:7D:FC
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/r57HiExQQyMhLrahmxZzmVENffw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec4:1c40::/44
Signature Algorithm: sha256WithRSAEncryption
25:0d:11:3b:59:67:91:ce:6c:03:40:27:76:26:51:77:b4:22:
06:f2:42:a6:e6:21:82:ec:1a:21:5a:dd:61:68:c7:c1:80:f6:
47:15:d2:0e:fa:21:70:42:ec:11:d3:16:77:6a:c9:21:55:ec:
7d:37:73:ce:9c:46:f8:ed:b8:3d:fa:29:db:6f:3d:36:23:1f:
47:70:9d:52:9d:3d:e0:67:88:3c:3e:ab:97:e5:21:f0:74:45:
0f:96:92:03:0c:e9:fd:f0:c7:ce:68:da:26:21:bc:6a:44:e6:
23:16:6f:4a:33:3f:6d:c2:93:48:de:bc:74:4b:85:4b:2c:22:
29:d0:c2:4d:40:62:1d:bb:1e:a8:75:0a:ef:bd:a8:6f:13:7e:
fc:bc:68:11:03:12:75:1b:55:6a:a4:63:82:36:ab:4d:cb:ea:
22:53:6d:85:8b:cc:6c:de:e6:2f:37:96:b1:4a:fc:0e:1b:6e:
0f:26:9e:bd:65:6f:c2:f8:ef:00:49:2d:71:70:44:87:82:27:
80:1a:c6:1b:98:b5:e8:c3:82:d4:1d:72:e4:ae:b7:7c:fe:79:
ab:ea:ed:3b:5c:ae:3f:b4:c4:b6:40:e9:2b:49:f9:17:0a:ff:
12:14:df:93:73:a4:81:69:3b:ca:0a:06:b3:2f:22:02:0f:ad:
66:4f:66:e8
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZkg4zLPGW0fP0jkFzcF118dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj
M2Q2NmYwHhcNMjUwOTA2MjExNjI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZjllYzc4ODRjNTA0MzIzMjEyZWI2YTE5YjE2NzM5OTUxMGQ3ZGZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyq/0Xn7BZoA8U33wJzWqMClzGsjw
c5MPcvepj6OGM5+V3k6I2LRGZcN5R7dihcW9VIQoJszN6+7zlUkrnOghWqTqWAq8
FqwN0ouRgDNYlS5EX6JYG9XD85ZA8bthZe7iVaO8wW2EmfhQpGVwkcmvZEyliEqE
EeyvmmcyNxlZTRmwae4n+U1PUTR4pWktKaf0g4JqhAHbBhtPswaZU0RlXxD3gdj3
LNScfrQROyB5o+RmThSjMEFBw7W+cw/YeFER/g6wr88Nis4xObglmSSscIAdNSVT
kUQiUGRRRkyLZELSuqAGy1GABkrvYOU/aILh2lCwOSuLQeIMyLeBhg4blQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFK+ex4hMUEMjIS62oZsWc5lRDX38MB8GA1UdIwQY
MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt
NTUzNjljZjUwN2VlLzEvcjU3SGlFeFFReU1oTHJhaG14WnptVkVOZmZ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQtNTUzNjljZjUwN2Vl
LzEvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhK+xBxA
MA0GCSqGSIb3DQEBCwUAA4IBAQAlDRE7WWeRzmwDQCd2JlF3tCIG8kKm5iGC7Boh
Wt1haMfBgPZHFdIO+iFwQuwR0xZ3askhVex9N3POnEb47bg9+inbbz02Ix9HcJ1S
nT3gZ4g8PquX5SHwdEUPlpIDDOn98MfOaNomIbxqROYjFm9KMz9twpNI3rx0S4VL
LCIp0MJNQGIdux6odQrvvahvE378vGgRAxJ1G1VqpGOCNqtNy+oiU22Fi8xs3uYv
N5axSvwOG24PJp69ZW/C+O8ASS1xcESHgieAGsYbmLXow4LUHXLkrrd8/nmr6u07
XK4/tMS2QOkrSfkXCv8SFN+Tc6SBaTvKCgazLyICD61mT2bo
-----END CERTIFICATE-----
Generated at Tue Sep 9 08:00:51 2025 by rpki-client