Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/S4vy57KePPm5skYt1swzoPGddGE.roa
File: S4vy57KePPm5skYt1swzoPGddGE.roa (raw, json)
Hash identifier: KQUtpTpFRREzYju49IndpBOUgh/QmNJ4Aj5rKfHkClA=
Subject key identifier: 4B:8B:F2:E7:B2:9E:3C:F9:B9:B2:46:2D:D6:CC:33:A0:F1:9D:74:61
Certificate issuer: /CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e
Certificate serial: 0196BACCDD7EC00FDB036D8792C5C65632AC
Authority key identifier: 16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/S4vy57KePPm5skYt1swzoPGddGE.roa
Signing time: Sat 10 May 2025 15:25:10 +0000
ROA not before: Sat 10 May 2025 15:25:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7029
IP address blocks: 178.210.248.0/24 maxlen: 24
178.210.249.0/24 maxlen: 24
178.210.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 10:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:cc:dd:7e:c0:0f:db:03:6d:87:92:c5:c6:56:32:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e
Validity
Not Before: May 10 15:25:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4b8bf2e7b29e3cf9b9b2462dd6cc33a0f19d7461
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:39:83:e5:e3:35:dc:dd:2d:2b:7e:5e:72:d7:
7d:76:c2:0f:82:14:d6:a6:ad:e4:23:d8:a5:59:52:
4a:62:22:b5:39:1d:db:08:af:29:37:99:c5:0b:4c:
ad:1b:e0:61:ae:fb:7b:a5:04:23:01:ee:a5:d7:2e:
b6:9f:fa:fa:2e:3a:d6:cf:1b:2c:ff:4b:30:70:28:
b0:4c:09:0f:33:22:f9:cc:e9:f1:08:da:38:0a:a2:
db:3a:5b:bc:39:24:85:58:b3:91:c6:37:d6:48:7a:
c5:33:e1:51:50:af:5e:98:75:59:ae:12:68:d1:cd:
de:09:b2:2e:64:57:3b:1e:72:18:2b:f8:ad:ee:0b:
75:5c:ff:b0:02:b7:d6:4e:03:22:a4:6e:39:06:e4:
66:02:b3:65:25:05:ee:e5:e5:2d:4c:f9:a6:43:a8:
96:aa:5f:0c:8d:16:ab:8d:11:a5:e6:f5:8e:ec:53:
60:ed:5a:54:b0:76:5e:fd:6b:88:04:e3:2f:36:23:
28:7b:32:7d:4f:56:65:65:65:88:34:66:49:04:c4:
0b:08:7a:e5:02:ec:94:7f:49:dc:8a:f4:46:e7:4d:
93:d9:70:bb:f7:db:46:2e:f4:06:4d:ce:ee:e9:a1:
a6:cd:93:d8:ad:9d:83:de:66:30:21:d0:1b:59:f3:
85:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:8B:F2:E7:B2:9E:3C:F9:B9:B2:46:2D:D6:CC:33:A0:F1:9D:74:61
X509v3 Authority Key Identifier:
keyid:16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/S4vy57KePPm5skYt1swzoPGddGE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.210.248.0/23
178.210.251.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:0f:5b:dd:b9:c0:65:ed:ce:4a:5a:b1:31:54:82:cd:1f:c7:
56:2f:5c:db:00:dc:d0:16:ab:95:61:ca:d9:0a:d1:d7:9e:53:
c1:24:88:54:59:9d:da:30:02:c4:a6:bc:6f:f4:14:c9:04:48:
2a:4f:ba:e8:46:fd:25:32:d7:66:dc:00:f1:20:e8:27:07:bb:
42:f2:67:c6:0d:74:f9:35:6c:84:8b:b6:b5:6e:c4:91:c6:80:
0b:bc:d2:4f:9c:32:80:11:7f:24:f3:75:fa:f6:2a:1f:e9:9c:
35:80:19:cb:91:33:5d:4c:4f:c9:8b:37:6f:18:6a:d6:42:3f:
27:8b:d0:f3:1d:5f:2d:51:68:85:b2:5b:c0:24:4d:6e:05:84:
d4:f4:37:22:e3:20:86:ba:26:6f:87:50:83:e8:ca:0e:c7:76:
36:5c:26:33:31:f0:49:af:22:3f:1c:38:94:7a:fc:ed:d2:96:
30:64:43:5b:4a:b8:87:98:25:14:8f:30:96:de:85:2e:fb:f2:
f0:0b:63:11:29:7f:82:19:08:8f:40:1e:68:1d:a4:ac:c7:22:
8a:7c:9a:e5:7b:d0:df:75:04:6b:d0:c9:9b:77:64:72:f8:34:
78:72:4f:aa:0d:fd:18:f0:ce:09:a0:24:ce:b4:0c:fe:44:0f:
c7:ee:00:d5
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZa6zN1+wA/bA22HksXGVjKsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2NmFmYzUxYzkyMmZkODQyZmVjNWIwY2JiZDI2ZWJkYmQx
YTE2MWUwHhcNMjUwNTEwMTUyNTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YjhiZjJlN2IyOWUzY2Y5YjliMjQ2MmRkNmNjMzNhMGYxOWQ3NDYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzmD5eM13N0tK35ectd9dsIPghTW
pq3kI9ilWVJKYiK1OR3bCK8pN5nFC0ytG+Bhrvt7pQQjAe6l1y62n/r6LjrWzxss
/0swcCiwTAkPMyL5zOnxCNo4CqLbOlu8OSSFWLORxjfWSHrFM+FRUK9emHVZrhJo
0c3eCbIuZFc7HnIYK/it7gt1XP+wArfWTgMipG45BuRmArNlJQXu5eUtTPmmQ6iW
ql8MjRarjRGl5vWO7FNg7VpUsHZe/WuIBOMvNiMoezJ9T1ZlZWWINGZJBMQLCHrl
AuyUf0ncivRG502T2XC799tGLvQGTc7u6aGmzZPYrZ2D3mYwIdAbWfOFUwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFEuL8ueynjz5ubJGLdbMM6DxnXRhMB8GA1UdIwQY
MBaAFBZq/FHJIv2EL+xbDLvSbr29GhYeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRm1yOFVja2lfWVF2N0ZzTXU5SnV2YjBhRmg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy84OGM0NTQtY2JhYS00M2ZkLWIzYzEt
MTNiOTExMGNlMjBjLzEvUzR2eTU3S2VQUG01c2tZdDFzd3pvUEdkZEdFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy84OGM0NTQtY2JhYS00M2ZkLWIzYzEtMTNiOTExMGNlMjBj
LzEvRm1yOFVja2lfWVF2N0ZzTXU5SnV2YjBhRmg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBstL4AwQA
stL7MA0GCSqGSIb3DQEBCwUAA4IBAQAfD1vducBl7c5KWrExVILNH8dWL1zbANzQ
FquVYcrZCtHXnlPBJIhUWZ3aMALEprxv9BTJBEgqT7roRv0lMtdm3ADxIOgnB7tC
8mfGDXT5NWyEi7a1bsSRxoALvNJPnDKAEX8k83X69iof6Zw1gBnLkTNdTE/Jizdv
GGrWQj8ni9DzHV8tUWiFslvAJE1uBYTU9Dci4yCGuiZvh1CD6MoOx3Y2XCYzMfBJ
ryI/HDiUevzt0pYwZENbSriHmCUUjzCW3oUu+/LwC2MRKX+CGQiPQB5oHaSsxyKK
fJrle9DfdQRr0Mmbd2Ry+DR4ck+qDf0Y8M4JoCTOtAz+RA/H7gDV
-----END CERTIFICATE-----
Generated at Thu Jun 5 19:14:49 2025 by rpki-client