Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/1d4e06-4faa-49a9-849b-e950699157e1/1/FQ0Z9CjauF1-N_C29EdkHs_XYtQ.roa
File: FQ0Z9CjauF1-N_C29EdkHs_XYtQ.roa (raw, json)
Hash identifier: +snXzR2/FfWDx0T5r9Nyn9CPDVn/IvcZNIPrKP0aONw=
Subject key identifier: 15:0D:19:F4:28:DA:B8:5D:7E:37:F0:B6:F4:47:64:1E:CF:D7:62:D4
Certificate issuer: /CN=c0aab396d650826027c2bd8a0620721092109e29
Certificate serial: 0197591D8B94F7A93E4E02CB824AA658C0B6
Authority key identifier: C0:AA:B3:96:D6:50:82:60:27:C2:BD:8A:06:20:72:10:92:10:9E:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wKqzltZQgmAnwr2KBiByEJIQnik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/1d4e06-4faa-49a9-849b-e950699157e1/1/FQ0Z9CjauF1-N_C29EdkHs_XYtQ.roa
Signing time: Tue 10 Jun 2025 09:13:17 +0000
ROA not before: Tue 10 Jun 2025 09:13:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59782
IP address blocks: 81.163.200.0/21 maxlen: 21
2001:67c:d64::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/1d4e06-4faa-49a9-849b-e950699157e1/1/wKqzltZQgmAnwr2KBiByEJIQnik.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/1d4e06-4faa-49a9-849b-e950699157e1/1/wKqzltZQgmAnwr2KBiByEJIQnik.mft
rsync://rpki.ripe.net/repository/DEFAULT/wKqzltZQgmAnwr2KBiByEJIQnik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 06:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:1d:8b:94:f7:a9:3e:4e:02:cb:82:4a:a6:58:c0:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0aab396d650826027c2bd8a0620721092109e29
Validity
Not Before: Jun 10 09:13:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=150d19f428dab85d7e37f0b6f447641ecfd762d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:43:46:ac:c0:0f:88:ef:ee:1a:52:09:0f:ce:
d7:1b:97:ad:e6:d5:07:9a:f0:1b:85:ac:37:b5:6e:
37:40:88:44:31:63:b0:e4:ea:02:ae:10:74:b5:34:
6f:5d:c6:6f:c8:93:91:a3:85:22:15:81:81:4c:9b:
18:df:79:bb:42:b9:4c:93:4d:14:e5:82:3d:2c:58:
f0:6a:bd:e5:14:41:22:8b:5e:21:b1:6c:d8:b8:a7:
fe:59:35:86:b4:15:02:1c:80:46:01:c7:a4:9a:cc:
d6:80:c2:bb:d7:58:e3:64:2c:da:ea:b7:2f:c8:49:
c8:d9:0d:3e:1a:b3:1b:fa:e0:e1:d4:63:a0:56:96:
59:52:02:be:0f:ec:c7:be:d9:55:0e:74:40:b8:38:
59:ab:7d:9d:8d:63:e8:ea:a8:bb:ea:5c:81:e4:80:
33:de:a4:d1:84:22:24:2d:da:b5:c1:4f:31:4c:4d:
87:bc:84:54:41:7e:42:16:b8:27:93:a1:63:4f:b2:
01:84:7e:f0:56:20:a7:e0:ed:1e:eb:02:ff:05:45:
7b:9e:1c:62:1a:98:45:7e:56:e0:fd:7a:e1:20:ef:
86:18:49:cf:c4:f5:ff:64:3f:c1:87:27:43:3e:77:
1c:3d:bb:3f:78:53:05:63:7a:fc:28:ec:a2:15:f8:
79:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:0D:19:F4:28:DA:B8:5D:7E:37:F0:B6:F4:47:64:1E:CF:D7:62:D4
X509v3 Authority Key Identifier:
keyid:C0:AA:B3:96:D6:50:82:60:27:C2:BD:8A:06:20:72:10:92:10:9E:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wKqzltZQgmAnwr2KBiByEJIQnik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/1d4e06-4faa-49a9-849b-e950699157e1/1/FQ0Z9CjauF1-N_C29EdkHs_XYtQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/1d4e06-4faa-49a9-849b-e950699157e1/1/wKqzltZQgmAnwr2KBiByEJIQnik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.163.200.0/21
IPv6:
2001:67c:d64::/48
Signature Algorithm: sha256WithRSAEncryption
21:17:42:73:c5:45:37:c7:44:24:08:ab:de:65:c3:49:d7:5a:
48:06:d0:1f:6a:40:a1:de:4d:7a:13:a5:33:0a:71:dc:90:17:
49:5f:6f:e5:a9:96:ad:dc:f8:67:67:8e:a2:e7:bf:1d:18:2d:
96:09:26:f1:36:33:16:a5:36:e4:f4:5c:94:03:fd:51:17:66:
2b:d8:4e:0f:0f:43:62:19:d3:d0:4a:46:ac:85:65:83:ef:7b:
67:49:84:e5:47:d7:2d:1b:76:a5:65:8d:89:ec:db:39:b5:01:
a2:0e:8f:3c:25:b7:1a:4a:6d:41:bf:56:46:63:3b:b2:7f:a7:
7d:14:cf:d5:e9:91:01:10:9c:33:0e:9d:c6:50:12:d5:08:63:
9f:4b:83:0d:a9:95:99:a6:d6:0a:51:73:14:96:6c:38:65:2c:
78:1b:7a:74:fa:c9:de:c1:46:61:4f:b1:75:4d:22:29:df:98:
89:6b:04:5a:25:05:f1:cc:4c:22:0f:76:56:00:54:d2:3b:bb:
69:2c:20:36:0e:f9:61:49:e2:68:2e:8b:fa:a8:91:e9:11:87:
ad:0a:23:b6:dc:99:e6:0a:ec:40:0b:6b:01:9c:7d:7f:a8:dc:
87:9d:e3:ab:c0:7a:7d:23:ed:a6:cf:83:f5:fb:11:1a:0b:09:
72:55:6b:4d
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZdZHYuU96k+TgLLgkqmWMC2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwYWFiMzk2ZDY1MDgyNjAyN2MyYmQ4YTA2MjA3MjEwOTIx
MDllMjkwHhcNMjUwNjEwMDkxMzE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNTBkMTlmNDI4ZGFiODVkN2UzN2YwYjZmNDQ3NjQxZWNmZDc2MmQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkNGrMAPiO/uGlIJD87XG5et5tUH
mvAbhaw3tW43QIhEMWOw5OoCrhB0tTRvXcZvyJORo4UiFYGBTJsY33m7QrlMk00U
5YI9LFjwar3lFEEii14hsWzYuKf+WTWGtBUCHIBGAcekmszWgMK711jjZCza6rcv
yEnI2Q0+GrMb+uDh1GOgVpZZUgK+D+zHvtlVDnRAuDhZq32djWPo6qi76lyB5IAz
3qTRhCIkLdq1wU8xTE2HvIRUQX5CFrgnk6FjT7IBhH7wViCn4O0e6wL/BUV7nhxi
GphFflbg/XrhIO+GGEnPxPX/ZD/BhydDPnccPbs/eFMFY3r8KOyiFfh5XQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFBUNGfQo2rhdfjfwtvRHZB7P12LUMB8GA1UdIwQY
MBaAFMCqs5bWUIJgJ8K9igYgchCSEJ4pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0txemx0WlFnbUFud3IyS0JpQnlFSklRbmlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8xZDRlMDYtNGZhYS00OWE5LTg0OWIt
ZTk1MDY5OTE1N2UxLzEvRlEwWjlDamF1RjEtTl9DMjlFZGtIc19YWXRRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi8xZDRlMDYtNGZhYS00OWE5LTg0OWItZTk1MDY5OTE1N2Ux
LzEvd0txemx0WlFnbUFud3IyS0JpQnlFSklRbmlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDUaPIMA8E
AgACMAkDBwAgAQZ8DWQwDQYJKoZIhvcNAQELBQADggEBACEXQnPFRTfHRCQIq95l
w0nXWkgG0B9qQKHeTXoTpTMKcdyQF0lfb+Wplq3c+GdnjqLnvx0YLZYJJvE2Mxal
NuT0XJQD/VEXZivYTg8PQ2IZ09BKRqyFZYPve2dJhOVH1y0bdqVljYns2zm1AaIO
jzwltxpKbUG/VkZjO7J/p30Uz9XpkQEQnDMOncZQEtUIY59Lgw2plZmm1gpRcxSW
bDhlLHgbenT6yd7BRmFPsXVNIinfmIlrBFolBfHMTCIPdlYAVNI7u2ksIDYO+WFJ
4mgui/qokekRh60KI7bcmeYK7EALawGcfX+o3Ied46vAen0j7abPg/X7ERoLCXJV
a00=
-----END CERTIFICATE-----
Generated at Thu Jun 12 14:19:30 2025 by rpki-client