Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/ax-rFfxzuS70EDlTYH9V_s95_1k.roa
File: ax-rFfxzuS70EDlTYH9V_s95_1k.roa (raw, json)
Hash identifier: No066zTAnofxIrnWO37cHRdDuGWjMPdRY7sfnOCfJs8=
Subject key identifier: 6B:1F:AB:15:FC:73:B9:2E:F4:10:39:53:60:7F:55:FE:CF:79:FF:59
Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Certificate serial: 0196AB23C5C7D05B38E36131359287474569
Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/ax-rFfxzuS70EDlTYH9V_s95_1k.roa
Signing time: Wed 07 May 2025 14:26:10 +0000
ROA not before: Wed 07 May 2025 14:26:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35277
IP address blocks: 5.181.202.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ab:23:c5:c7:d0:5b:38:e3:61:31:35:92:87:47:45:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Validity
Not Before: May 7 14:26:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6b1fab15fc73b92ef4103953607f55fecf79ff59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3c:f2:8f:30:46:3a:16:8b:e9:85:ec:ea:fb:
95:ca:f1:5e:b4:db:5d:06:f0:6a:e7:95:b6:16:8b:
94:39:25:26:fc:60:dd:a3:0c:cb:05:6b:1e:6c:a0:
a2:ae:c9:cc:a2:b5:99:aa:36:43:db:8e:3c:30:b5:
ce:2f:ea:19:95:59:70:b9:42:a6:52:15:fe:5f:a5:
6d:17:f8:9e:37:37:ab:5e:34:a8:e0:fd:64:66:55:
54:90:7a:53:6b:b4:43:97:de:f3:1f:bf:c3:01:cb:
0e:f4:48:37:f2:60:2e:52:ab:be:f0:58:96:6c:d7:
31:98:02:a7:46:ca:d5:ff:e3:1a:bc:00:04:05:7c:
ca:a8:bb:cb:2c:e6:a3:6e:52:c2:c4:73:32:2f:0c:
ec:11:42:c6:07:70:3e:0f:dc:fa:e2:f2:c7:d6:72:
d7:2c:be:b4:86:90:4b:d8:c8:4d:ad:3a:06:69:75:
0e:88:c5:75:6f:fc:6f:37:f9:bd:fb:2f:99:8d:85:
dd:fd:2e:6b:7a:73:08:f3:04:37:b1:03:86:d5:55:
6d:8f:7e:89:dd:c9:23:d4:bc:cc:8d:8f:54:77:10:
df:75:0c:3c:dd:19:46:5c:e1:c1:e6:a3:85:e5:29:
8c:4e:f1:61:1b:c9:0b:f6:26:23:cd:53:3c:4c:ab:
bd:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:1F:AB:15:FC:73:B9:2E:F4:10:39:53:60:7F:55:FE:CF:79:FF:59
X509v3 Authority Key Identifier:
keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/ax-rFfxzuS70EDlTYH9V_s95_1k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.202.0/23
Signature Algorithm: sha256WithRSAEncryption
05:a8:c8:76:85:11:3c:07:9a:7a:13:e0:82:9d:3f:e5:2a:4f:
2c:99:0e:f7:88:d0:3c:aa:9c:61:30:31:bf:49:f4:e7:3d:7a:
b1:cf:3c:b8:57:e8:bd:3d:53:e9:d0:cf:c3:12:66:04:7c:39:
39:5e:7f:23:55:f0:d5:c8:46:2b:d8:8d:c0:65:14:eb:75:37:
4b:9f:f2:27:83:04:b9:9c:5e:c3:48:5f:a3:c7:4c:6a:13:d8:
bf:f8:da:ed:9b:16:ef:1d:c1:07:6b:0a:8a:ee:19:e3:67:ff:
62:86:78:fd:ac:a9:75:ff:1b:51:3f:b9:f9:ff:1b:89:19:14:
c2:04:61:45:9f:79:ad:17:b2:ec:9a:16:3e:3b:71:66:e3:aa:
e7:cc:54:51:57:16:31:97:91:bf:21:ce:28:41:c6:42:9f:e8:
61:b5:ae:60:23:8b:1b:ff:61:29:b8:55:7d:a3:a3:66:ee:d9:
b9:12:70:64:09:53:51:d8:93:c4:c1:7e:e4:63:63:73:99:89:
80:1a:25:9c:44:2b:05:91:81:da:ac:c5:0e:11:8c:8a:cd:f8:
2f:fd:98:21:3c:44:8f:48:98:f9:f4:e5:cc:5b:52:b4:15:d1:
e3:72:c8:e0:c3:86:01:af:f8:1b:10:68:4f:34:b9:51:79:f9:
30:32:a0:38
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZarI8XH0Fs442ExNZKHR0VpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NmQ5ZDUwYjNiODlkNTFjOGFhMjQ5M2U3ZWY0NzAxZDYy
NTFkYWQwHhcNMjUwNTA3MTQyNjEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YjFmYWIxNWZjNzNiOTJlZjQxMDM5NTM2MDdmNTVmZWNmNzlmZjU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTzyjzBGOhaL6YXs6vuVyvFetNtd
BvBq55W2FouUOSUm/GDdowzLBWsebKCirsnMorWZqjZD2448MLXOL+oZlVlwuUKm
UhX+X6VtF/ieNzerXjSo4P1kZlVUkHpTa7RDl97zH7/DAcsO9Eg38mAuUqu+8FiW
bNcxmAKnRsrV/+MavAAEBXzKqLvLLOajblLCxHMyLwzsEULGB3A+D9z64vLH1nLX
LL60hpBL2MhNrToGaXUOiMV1b/xvN/m9+y+ZjYXd/S5renMI8wQ3sQOG1VVtj36J
3ckj1LzMjY9UdxDfdQw83RlGXOHB5qOF5SmMTvFhG8kL9iYjzVM8TKu9iwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGsfqxX8c7ku9BA5U2B/Vf7Pef9ZMB8GA1UdIwQY
MBaAFMZtnVCzuJ1RyKokk+fvRwHWJR2tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS80YmI3NGItOGQ2ZC00NTE0LWEzOWMt
YjdjNTc4Yjc0ZTM1LzEvYXgtckZmeHp1UzcwRURsVFlIOVZfczk1XzFrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS80YmI3NGItOGQ2ZC00NTE0LWEzOWMtYjdjNTc4Yjc0ZTM1
LzEveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBBbXKMA0G
CSqGSIb3DQEBCwUAA4IBAQAFqMh2hRE8B5p6E+CCnT/lKk8smQ73iNA8qpxhMDG/
SfTnPXqxzzy4V+i9PVPp0M/DEmYEfDk5Xn8jVfDVyEYr2I3AZRTrdTdLn/IngwS5
nF7DSF+jx0xqE9i/+NrtmxbvHcEHawqK7hnjZ/9ihnj9rKl1/xtRP7n5/xuJGRTC
BGFFn3mtF7LsmhY+O3Fm46rnzFRRVxYxl5G/Ic4oQcZCn+hhta5gI4sb/2EpuFV9
o6Nm7tm5EnBkCVNR2JPEwX7kY2NzmYmAGiWcRCsFkYHarMUOEYyKzfgv/ZghPESP
SJj59OXMW1K0FdHjcsjgw4YBr/gbEGhPNLlRefkwMqA4
-----END CERTIFICATE-----
Generated at Sat Jun 7 18:33:29 2025 by rpki-client