Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/9kSMJGxaOFXjRfmmzIZyhtVBGaw.roa
File: 9kSMJGxaOFXjRfmmzIZyhtVBGaw.roa (raw, json)
Hash identifier: wWp8Ri8meQ6KDq+yA9l4R/FhDk5mIMQIh6yTUwKxRpg=
Subject key identifier: F6:44:8C:24:6C:5A:38:55:E3:45:F9:A6:CC:86:72:86:D5:41:19:AC
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 019727B09B490F60DA11B8384FD18A2378FC
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/9kSMJGxaOFXjRfmmzIZyhtVBGaw.roa
Signing time: Sat 31 May 2025 18:52:54 +0000
ROA not before: Sat 31 May 2025 18:52:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214677
IP address blocks: 45.9.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:27:b0:9b:49:0f:60:da:11:b8:38:4f:d1:8a:23:78:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: May 31 18:52:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f6448c246c5a3855e345f9a6cc867286d54119ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:47:e3:bd:08:e0:28:e8:bb:be:18:76:65:0d:
7c:3b:14:d1:6c:6c:fd:ca:6e:43:bc:e7:c5:58:3c:
d2:dd:f0:5d:bc:75:d5:34:65:c5:59:bf:d7:b7:3d:
ea:2c:61:28:78:42:0a:c7:39:4a:cc:89:29:52:46:
47:00:5c:b4:99:38:5d:a8:18:19:dd:12:4b:63:a8:
8f:c2:a8:10:7a:a5:21:73:8e:da:3d:43:75:ab:ca:
d1:e0:4f:6b:91:fb:06:c2:67:bd:cc:62:d5:c5:0b:
83:55:4a:48:d9:2d:81:8f:22:5b:02:cb:aa:e8:17:
74:3f:4f:52:8b:61:47:72:1c:27:1c:31:84:cb:64:
9f:7a:a7:29:33:c5:82:49:6e:23:73:8b:f2:61:d7:
f3:33:6f:6b:98:b6:5b:b8:2d:69:98:0b:9d:89:90:
7a:83:52:e3:db:99:58:f7:4c:00:2a:be:60:66:34:
42:21:cc:01:47:c6:e9:d9:7a:ef:a0:6e:23:0b:16:
e8:f5:bc:7a:a4:f7:fa:f1:6e:26:80:56:30:5e:3d:
04:c5:65:94:30:6d:68:cf:6a:8e:03:2b:7e:42:7f:
85:15:0c:c6:2e:77:c1:41:a5:1f:8a:90:39:67:0a:
92:9a:c8:e8:fb:56:a2:30:b2:70:fb:2d:8e:50:60:
a9:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:44:8C:24:6C:5A:38:55:E3:45:F9:A6:CC:86:72:86:D5:41:19:AC
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/9kSMJGxaOFXjRfmmzIZyhtVBGaw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.2.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:5f:10:dc:ad:c6:28:35:88:cb:a8:41:5a:b3:b1:4f:ae:57:
98:10:03:0f:85:5d:89:51:2c:c1:c0:ff:7c:9a:be:2a:8c:c1:
b0:cd:66:81:07:18:7a:86:38:1e:d2:41:8e:93:e6:03:8b:b9:
e0:a9:6a:f5:81:9f:86:7f:1a:bc:78:c7:cf:c4:c7:a1:22:00:
f7:ba:92:f9:35:ee:5c:5f:56:cc:7d:53:89:05:b5:c4:48:8d:
45:79:87:4a:c2:6e:27:bc:3b:b5:2f:28:b5:b9:ae:4a:f5:46:
4f:00:77:1f:e7:89:d0:b7:3b:f6:65:90:3e:ee:9d:4d:00:4c:
16:99:97:6d:3a:76:25:b8:53:cf:87:37:31:cd:5c:ea:1d:c8:
27:d5:55:27:90:5b:98:a7:13:a1:58:eb:da:9c:62:dd:6d:6d:
2a:e4:c2:f9:1b:60:d1:6c:fd:87:55:0d:77:ad:71:d7:41:a0:
59:e7:65:11:e3:f6:49:42:65:d5:5d:d1:b6:f0:ff:9a:d2:f2:
b2:50:7f:b6:8d:4b:a5:ed:97:70:0b:c2:26:a1:7d:13:8c:23:
de:ab:07:ef:44:33:51:28:e7:b8:eb:24:91:bc:76:a3:77:af:
1b:a8:b7:91:eb:53:0f:e6:d8:b0:6e:a8:29:c1:fc:99:8e:c5:
71:ab:f1:21
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZcnsJtJD2DaEbg4T9GKI3j8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj
Zjk3MDQwHhcNMjUwNTMxMTg1MjU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNjQ0OGMyNDZjNWEzODU1ZTM0NWY5YTZjYzg2NzI4NmQ1NDExOWFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEfjvQjgKOi7vhh2ZQ18OxTRbGz9
ym5DvOfFWDzS3fBdvHXVNGXFWb/Xtz3qLGEoeEIKxzlKzIkpUkZHAFy0mThdqBgZ
3RJLY6iPwqgQeqUhc47aPUN1q8rR4E9rkfsGwme9zGLVxQuDVUpI2S2BjyJbAsuq
6Bd0P09Si2FHchwnHDGEy2SfeqcpM8WCSW4jc4vyYdfzM29rmLZbuC1pmAudiZB6
g1Lj25lY90wAKr5gZjRCIcwBR8bp2XrvoG4jCxbo9bx6pPf68W4mgFYwXj0ExWWU
MG1oz2qOAyt+Qn+FFQzGLnfBQaUfipA5ZwqSmsjo+1aiMLJw+y2OUGCppwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPZEjCRsWjhV40X5psyGcobVQRmsMB8GA1UdIwQY
MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct
ZTg2MTIxYzU5NGRmLzEvOWtTTUpHeGFPRlhqUmZtbXpJWnlodFZCR2F3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm
LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQkCMA0G
CSqGSIb3DQEBCwUAA4IBAQDMXxDcrcYoNYjLqEFas7FPrleYEAMPhV2JUSzBwP98
mr4qjMGwzWaBBxh6hjge0kGOk+YDi7ngqWr1gZ+Gfxq8eMfPxMehIgD3upL5Ne5c
X1bMfVOJBbXESI1FeYdKwm4nvDu1Lyi1ua5K9UZPAHcf54nQtzv2ZZA+7p1NAEwW
mZdtOnYluFPPhzcxzVzqHcgn1VUnkFuYpxOhWOvanGLdbW0q5ML5G2DRbP2HVQ13
rXHXQaBZ52UR4/ZJQmXVXdG28P+a0vKyUH+2jUul7ZdwC8ImoX0TjCPeqwfvRDNR
KOe46ySRvHajd68bqLeR61MP5tiwbqgpwfyZjsVxq/Eh
-----END CERTIFICATE-----
Generated at Mon Jun 9 07:55:37 2025 by rpki-client