Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/6HNEABw1T6hIB0q4QQqsLY38I1Q.roa
File: 6HNEABw1T6hIB0q4QQqsLY38I1Q.roa (raw, json)
Hash identifier: zNEGrf7ZrXB8v0Wt79viHUTyVYmykBBzT2YgGkxwTIA=
Subject key identifier: E8:73:44:00:1C:35:4F:A8:48:07:4A:B8:41:0A:AC:2D:8D:FC:23:54
Certificate issuer: /CN=5c32311952566d1ce18f088e8bb6ceabe7e7935a
Certificate serial: 01971FD446B13074F42B5A0FCE9BF8577F01
Authority key identifier: 5C:32:31:19:52:56:6D:1C:E1:8F:08:8E:8B:B6:CE:AB:E7:E7:93:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XDIxGVJWbRzhjwiOi7bOq-fnk1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/6HNEABw1T6hIB0q4QQqsLY38I1Q.roa
Signing time: Fri 30 May 2025 06:14:54 +0000
ROA not before: Fri 30 May 2025 06:14:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31898
IP address blocks: 188.95.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/XDIxGVJWbRzhjwiOi7bOq-fnk1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Jun 2025 14:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:1f:d4:46:b1:30:74:f4:2b:5a:0f:ce:9b:f8:57:7f:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c32311952566d1ce18f088e8bb6ceabe7e7935a
Validity
Not Before: May 30 06:14:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e87344001c354fa848074ab8410aac2d8dfc2354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6e:95:8c:0c:97:87:cf:45:ac:11:ed:e8:93:
b2:9a:1f:9f:7a:5e:3e:7f:a5:7f:bb:38:cc:f0:3f:
f1:5f:0c:32:82:5f:8a:99:e9:71:9f:f4:25:26:c8:
75:c8:94:1d:8d:1d:17:21:e0:fe:eb:05:5f:8f:65:
4b:13:e4:33:a5:86:50:76:e2:da:51:2c:ce:99:a4:
0d:e3:67:a6:10:4f:c5:35:d7:0b:87:ed:4b:0d:45:
fe:ae:93:7b:f7:b7:91:49:1a:70:ad:ac:2c:30:6e:
1d:18:22:77:27:b4:96:a7:ba:18:79:8d:fd:0c:de:
ca:56:fd:4c:75:b4:6d:94:aa:cd:fb:5c:df:f9:d6:
d0:2a:95:68:a0:79:7a:7d:64:32:86:81:b5:85:7a:
2d:36:40:e8:6e:32:33:78:e1:07:8d:90:b4:1e:f7:
69:7e:88:71:f1:4f:2d:32:b0:b7:93:59:0a:c1:e9:
6a:f9:9c:00:c7:c6:fe:b2:7e:de:19:d7:bf:d0:a1:
ff:7e:86:11:77:7b:c9:1c:25:3b:03:6b:df:3d:eb:
81:c4:56:f6:22:62:3e:d0:17:c1:af:8f:04:d5:3b:
35:09:8f:e2:c5:d4:5d:de:da:80:15:9f:e9:f5:44:
19:6b:74:43:59:f5:4c:6e:44:95:c6:7a:c0:d7:12:
b6:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:73:44:00:1C:35:4F:A8:48:07:4A:B8:41:0A:AC:2D:8D:FC:23:54
X509v3 Authority Key Identifier:
keyid:5C:32:31:19:52:56:6D:1C:E1:8F:08:8E:8B:B6:CE:AB:E7:E7:93:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDIxGVJWbRzhjwiOi7bOq-fnk1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/6HNEABw1T6hIB0q4QQqsLY38I1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.95.91.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:62:4c:d0:09:47:72:0f:1d:73:dd:8f:ac:38:f5:3b:07:73:
59:f8:59:5d:cc:46:cc:13:ff:84:bb:75:c9:ee:17:81:1d:b4:
0d:94:b4:58:29:3c:04:26:52:d5:b6:c1:2e:f8:d5:0e:81:99:
be:41:c6:7d:6b:58:1a:a1:dc:e0:4e:04:b7:9c:3c:82:69:33:
8a:7b:89:a0:5f:3c:1d:69:d2:9e:01:82:2c:11:33:a7:ff:03:
0c:17:d2:32:70:54:df:f5:a3:eb:5a:b3:3f:00:c3:3b:81:f8:
14:85:78:fa:cc:57:c0:55:c3:b3:9e:31:e6:2b:e7:cf:1b:8a:
37:2b:4d:d9:f3:73:8f:ee:63:7a:b9:93:31:d0:b8:96:86:f0:
75:42:5b:89:46:bd:d5:bd:73:06:e6:7b:e1:e4:a7:bf:62:c7:
b7:e7:2f:60:83:d1:60:a7:eb:0c:cd:7b:15:33:aa:f4:73:94:
e4:b2:1e:44:d0:d6:18:60:d5:0a:df:a9:fa:cd:76:96:4d:ea:
d1:95:cf:6d:61:f4:a9:7b:23:3b:f9:7e:ab:0b:cc:c9:82:d9:
1b:27:50:39:ba:b6:e6:ce:14:a7:fa:b0:31:85:b4:a1:bd:03:
24:e0:eb:66:2d:bb:1f:56:e2:92:90:47:32:84:12:08:25:6c:
a7:7b:38:b4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZcf1EaxMHT0K1oPzpv4V38BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjMzIzMTE5NTI1NjZkMWNlMThmMDg4ZThiYjZjZWFiZTdl
NzkzNWEwHhcNMjUwNTMwMDYxNDU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlODczNDQwMDFjMzU0ZmE4NDgwNzRhYjg0MTBhYWMyZDhkZmMyMzU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtm6VjAyXh89FrBHt6JOymh+fel4+
f6V/uzjM8D/xXwwygl+Kmelxn/QlJsh1yJQdjR0XIeD+6wVfj2VLE+QzpYZQduLa
USzOmaQN42emEE/FNdcLh+1LDUX+rpN797eRSRpwrawsMG4dGCJ3J7SWp7oYeY39
DN7KVv1MdbRtlKrN+1zf+dbQKpVooHl6fWQyhoG1hXotNkDobjIzeOEHjZC0Hvdp
fohx8U8tMrC3k1kKwelq+ZwAx8b+sn7eGde/0KH/foYRd3vJHCU7A2vfPeuBxFb2
ImI+0BfBr48E1Ts1CY/ixdRd3tqAFZ/p9UQZa3RDWfVMbkSVxnrA1xK2VwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOhzRAAcNU+oSAdKuEEKrC2N/CNUMB8GA1UdIwQY
MBaAFFwyMRlSVm0c4Y8Ijou2zqvn55NaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWERJeEdWSldiUnpoandpT2k3Yk9xLWZuazFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC81ZGZkODktNGQ3OS00YmI2LThiZjMt
MGQzOGRkZGIwNzgwLzEvNkhORUFCdzFUNmhJQjBxNFFRcXNMWTM4STFRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC81ZGZkODktNGQ3OS00YmI2LThiZjMtMGQzOGRkZGIwNzgw
LzEvWERJeEdWSldiUnpoandpT2k3Yk9xLWZuazFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvF9bMA0G
CSqGSIb3DQEBCwUAA4IBAQBKYkzQCUdyDx1z3Y+sOPU7B3NZ+FldzEbME/+Eu3XJ
7heBHbQNlLRYKTwEJlLVtsEu+NUOgZm+QcZ9a1gaodzgTgS3nDyCaTOKe4mgXzwd
adKeAYIsETOn/wMMF9IycFTf9aPrWrM/AMM7gfgUhXj6zFfAVcOznjHmK+fPG4o3
K03Z83OP7mN6uZMx0LiWhvB1QluJRr3VvXMG5nvh5Ke/Yse35y9gg9Fgp+sMzXsV
M6r0c5Tksh5E0NYYYNUK36n6zXaWTerRlc9tYfSpeyM7+X6rC8zJgtkbJ1A5urbm
zhSn+rAxhbShvQMk4OtmLbsfVuKSkEcyhBIIJWynezi0
-----END CERTIFICATE-----
Generated at Mon Jun 2 18:47:17 2025 by rpki-client