Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/K3u_1sIaXVoN0lEA9ddPOZWrrQs.roa
File: K3u_1sIaXVoN0lEA9ddPOZWrrQs.roa (raw, json)
Hash identifier: PTCw7o7H8uhb5Ui1JBuuO+u5Kvyxm53H3KZiAi1F6gE=
Subject key identifier: 2B:7B:BF:D6:C2:1A:5D:5A:0D:D2:51:00:F5:D7:4F:39:95:AB:AD:0B
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 019708B390837A35350E3C74CB304277C3C3
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/K3u_1sIaXVoN0lEA9ddPOZWrrQs.roa
Signing time: Sun 25 May 2025 18:27:55 +0000
ROA not before: Sun 25 May 2025 18:27:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57043
IP address blocks: 5.180.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 13:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:08:b3:90:83:7a:35:35:0e:3c:74:cb:30:42:77:c3:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: May 25 18:27:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2b7bbfd6c21a5d5a0dd25100f5d74f3995abad0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:43:d1:3f:6b:10:f0:42:f2:8c:c8:5a:c3:e2:
0c:4b:d9:4c:4c:89:d0:97:49:7b:da:c4:28:5f:32:
be:0f:38:3c:02:39:0d:09:cf:04:8f:53:95:5b:36:
c6:00:b3:96:1c:a4:63:42:a6:e0:cb:eb:79:44:af:
40:bd:95:54:91:54:30:e0:2d:35:a7:94:72:18:2b:
da:18:dc:6a:03:93:be:fe:d1:b3:ff:7b:70:15:a1:
0c:f4:19:44:a4:d7:f9:32:34:c9:d3:4c:e5:f9:ea:
2c:38:d4:7e:0d:cd:4e:5f:8b:33:3a:27:f6:b1:31:
2e:77:34:6e:fb:5f:ae:e0:f1:32:80:b2:b5:9d:f7:
98:a2:eb:ce:de:db:c7:30:0a:ce:af:bf:41:fa:17:
e6:dc:cc:49:ad:e9:55:27:31:36:71:47:f9:3b:80:
33:cb:1d:bf:cd:ec:67:87:9e:f1:ef:66:07:29:b5:
10:e2:74:51:8a:fd:7d:d4:d7:9d:3b:d6:f3:1c:e7:
35:63:48:c9:02:1e:fb:9e:b0:3e:39:3f:aa:31:51:
20:81:e9:21:bc:e4:05:58:4d:05:c8:fe:27:51:86:
40:03:f1:d9:1f:3d:21:9d:00:ce:59:c1:c7:ee:ee:
55:20:d7:3d:3a:2b:dd:cd:50:34:40:db:88:03:c0:
9f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:7B:BF:D6:C2:1A:5D:5A:0D:D2:51:00:F5:D7:4F:39:95:AB:AD:0B
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/K3u_1sIaXVoN0lEA9ddPOZWrrQs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.33.0/24
Signature Algorithm: sha256WithRSAEncryption
95:12:80:a8:57:2a:b2:b1:8c:c6:85:8f:b4:62:15:49:f5:1e:
08:f7:ec:4f:2e:96:d9:82:79:c6:12:92:10:46:38:40:eb:a9:
56:f5:96:2e:16:21:69:a0:0c:98:62:41:4f:81:8b:10:b0:7a:
31:70:f6:a4:c4:eb:4c:36:de:dc:9a:02:9e:4f:ea:29:02:dc:
7e:1a:35:6d:c0:9a:f1:6b:b5:c0:e8:b7:82:73:f4:3c:31:1b:
e4:ad:19:47:aa:c5:2b:a2:63:f3:4c:5e:d1:5e:e3:7e:00:fb:
c8:ba:60:45:9f:1b:47:c2:c5:24:71:b4:a2:5f:c3:0c:d0:12:
d5:f0:69:30:c8:68:38:62:14:fb:8e:aa:d9:8c:03:0f:4b:59:
9b:e4:c6:e6:89:34:c5:6e:66:24:ca:c7:63:1e:2e:10:87:5b:
75:42:6d:45:39:24:f5:d1:0f:e9:7e:fb:40:48:1a:b1:d2:0c:
1a:b5:7d:57:fc:20:2d:d0:17:aa:dd:9b:17:68:5e:7f:3b:3e:
9f:1d:1a:8a:a2:69:78:a4:9c:99:14:9b:28:75:4b:34:ef:b4:
1d:83:c0:74:85:30:34:07:27:ee:52:1a:f5:e9:50:c2:8b:2d:
25:25:e1:34:95:c4:a3:b9:ef:ac:11:fc:a7:51:86:ce:f7:06:
eb:bb:f5:33
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZcIs5CDejU1Djx0yzBCd8PDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj
Zjk3MDQwHhcNMjUwNTI1MTgyNzU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYjdiYmZkNmMyMWE1ZDVhMGRkMjUxMDBmNWQ3NGYzOTk1YWJhZDBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUPRP2sQ8ELyjMhaw+IMS9lMTInQ
l0l72sQoXzK+Dzg8AjkNCc8Ej1OVWzbGALOWHKRjQqbgy+t5RK9AvZVUkVQw4C01
p5RyGCvaGNxqA5O+/tGz/3twFaEM9BlEpNf5MjTJ00zl+eosONR+Dc1OX4szOif2
sTEudzRu+1+u4PEygLK1nfeYouvO3tvHMArOr79B+hfm3MxJrelVJzE2cUf5O4Az
yx2/zexnh57x72YHKbUQ4nRRiv191NedO9bzHOc1Y0jJAh77nrA+OT+qMVEggekh
vOQFWE0FyP4nUYZAA/HZHz0hnQDOWcHH7u5VINc9OivdzVA0QNuIA8CfJQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCt7v9bCGl1aDdJRAPXXTzmVq60LMB8GA1UdIwQY
MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct
ZTg2MTIxYzU5NGRmLzEvSzN1XzFzSWFYVm9OMGxFQTlkZFBPWldyclFzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm
LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABbQhMA0G
CSqGSIb3DQEBCwUAA4IBAQCVEoCoVyqysYzGhY+0YhVJ9R4I9+xPLpbZgnnGEpIQ
RjhA66lW9ZYuFiFpoAyYYkFPgYsQsHoxcPakxOtMNt7cmgKeT+opAtx+GjVtwJrx
a7XA6LeCc/Q8MRvkrRlHqsUromPzTF7RXuN+APvIumBFnxtHwsUkcbSiX8MM0BLV
8GkwyGg4YhT7jqrZjAMPS1mb5MbmiTTFbmYkysdjHi4Qh1t1Qm1FOST10Q/pfvtA
SBqx0gwatX1X/CAt0Beq3ZsXaF5/Oz6fHRqKoml4pJyZFJsodUs077Qdg8B0hTA0
ByfuUhr16VDCiy0lJeE0lcSjue+sEfynUYbO9wbru/Uz
-----END CERTIFICATE-----
Generated at Fri Jun 6 17:05:18 2025 by rpki-client