Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a02c08-f31b-48c5-ad47-f83b8d04087c/1/XcIL6Sukfm7k1AWtWl445xp4QV0.roa
File: XcIL6Sukfm7k1AWtWl445xp4QV0.roa (raw, json)
Hash identifier: 4UDRmx72tIl2+y56n6Ye2uGR21iaVE2WkWXR6GxV+6Y=
Subject key identifier: 5D:C2:0B:E9:2B:A4:7E:6E:E4:D4:05:AD:5A:5E:38:E7:1A:78:41:5D
Certificate issuer: /CN=885c09522f635fcafa29bcebac72c894e4ffeed2
Certificate serial: 0196F21D560B37A674FBAD43E9EADA776C5C
Authority key identifier: 88:5C:09:52:2F:63:5F:CA:FA:29:BC:EB:AC:72:C8:94:E4:FF:EE:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFwJUi9jX8r6KbzrrHLIlOT_7tI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a02c08-f31b-48c5-ad47-f83b8d04087c/1/XcIL6Sukfm7k1AWtWl445xp4QV0.roa
Signing time: Wed 21 May 2025 09:12:10 +0000
ROA not before: Wed 21 May 2025 09:12:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208167
IP address blocks: 193.104.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a02c08-f31b-48c5-ad47-f83b8d04087c/1/iFwJUi9jX8r6KbzrrHLIlOT_7tI.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/a02c08-f31b-48c5-ad47-f83b8d04087c/1/iFwJUi9jX8r6KbzrrHLIlOT_7tI.mft
rsync://rpki.ripe.net/repository/DEFAULT/iFwJUi9jX8r6KbzrrHLIlOT_7tI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f2:1d:56:0b:37:a6:74:fb:ad:43:e9:ea:da:77:6c:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885c09522f635fcafa29bcebac72c894e4ffeed2
Validity
Not Before: May 21 09:12:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5dc20be92ba47e6ee4d405ad5a5e38e71a78415d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:71:aa:05:b7:78:b3:55:50:6f:fa:87:3d:02:
6e:46:94:56:28:47:9f:52:71:af:bb:38:b3:a3:b9:
2c:f8:8f:68:2d:c3:b8:75:37:02:93:fc:40:70:15:
66:c8:ad:d2:21:8a:f3:63:3c:75:d1:ac:47:31:6b:
d3:e1:b1:a8:fc:2f:6c:4b:d8:d1:63:3d:db:13:62:
81:fa:44:71:2d:74:20:e1:c5:23:8b:03:30:b1:dc:
18:47:3b:84:5e:b1:8b:7e:7b:1a:ba:a2:9b:91:cd:
ad:16:29:ae:9c:f7:d1:3a:88:33:30:13:a9:8a:28:
24:cd:81:b9:c6:52:37:a1:f8:b3:7c:4f:1f:e5:f8:
34:08:bd:19:07:0f:8d:6f:a1:20:41:22:bc:03:b7:
41:c7:b7:9e:e0:5c:9c:64:74:7a:0b:3f:84:a2:9c:
8e:00:15:b8:58:60:cc:08:f0:3f:65:50:4d:0d:84:
a7:83:f9:65:a5:6c:3d:2a:3f:f4:1b:bb:e8:55:16:
a4:98:4e:be:df:e0:3f:22:8c:71:ed:73:24:c6:40:
79:07:0c:a4:b2:dc:3d:8f:5e:7d:d0:60:3a:5f:fc:
bc:72:3f:39:b9:ef:36:7b:72:59:c5:a9:01:0f:a5:
0d:d2:c0:4c:56:bf:4d:54:d7:05:d9:6d:26:b1:af:
ad:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:C2:0B:E9:2B:A4:7E:6E:E4:D4:05:AD:5A:5E:38:E7:1A:78:41:5D
X509v3 Authority Key Identifier:
keyid:88:5C:09:52:2F:63:5F:CA:FA:29:BC:EB:AC:72:C8:94:E4:FF:EE:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFwJUi9jX8r6KbzrrHLIlOT_7tI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a02c08-f31b-48c5-ad47-f83b8d04087c/1/XcIL6Sukfm7k1AWtWl445xp4QV0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a02c08-f31b-48c5-ad47-f83b8d04087c/1/iFwJUi9jX8r6KbzrrHLIlOT_7tI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.74.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:d3:a2:ef:46:2f:ff:dc:cf:c5:70:f1:72:09:1d:b5:76:83:
b2:ca:fc:f9:97:aa:f7:21:8a:c7:2b:9a:67:28:49:0e:cb:c3:
0f:58:9f:69:32:d4:06:d1:7e:41:73:d1:85:e2:34:b7:6c:96:
a4:fc:de:34:ec:46:03:98:6a:da:c6:a3:ea:8e:b8:a5:fb:dc:
af:7b:a1:af:31:43:a3:d1:db:1e:11:fe:e5:60:23:1c:67:e2:
37:79:8e:da:9a:10:4a:07:4e:e1:ff:1d:6a:2c:30:33:f2:4c:
a4:d8:ff:80:ea:13:73:94:b2:26:ea:6c:57:91:e1:09:6f:1f:
2a:09:a0:5e:ba:7b:94:84:88:5c:44:63:15:24:68:f8:30:aa:
80:29:dd:1e:bf:f4:35:42:f9:d1:46:f7:d9:6b:0a:a6:b0:24:
c8:d3:7c:18:d2:a4:51:a0:a4:77:dd:84:25:3b:8e:1d:ba:b7:
32:93:38:e0:f1:cb:29:b7:d1:dc:1a:e7:96:5e:27:ee:3e:31:
7d:32:6f:43:32:f1:cf:14:15:6d:18:5f:f2:9f:a7:22:02:94:
1d:71:c5:25:6d:62:2c:7c:e4:bf:01:60:17:69:94:7d:a1:67:
5f:8c:95:a1:6b:83:bd:b3:5a:aa:33:aa:aa:d4:b3:9c:2a:39:
00:6c:f1:a3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZbyHVYLN6Z0+61D6erad2xcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4NWMwOTUyMmY2MzVmY2FmYTI5YmNlYmFjNzJjODk0ZTRm
ZmVlZDIwHhcNMjUwNTIxMDkxMjEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZGMyMGJlOTJiYTQ3ZTZlZTRkNDA1YWQ1YTVlMzhlNzFhNzg0MTVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmnGqBbd4s1VQb/qHPQJuRpRWKEef
UnGvuzizo7ks+I9oLcO4dTcCk/xAcBVmyK3SIYrzYzx10axHMWvT4bGo/C9sS9jR
Yz3bE2KB+kRxLXQg4cUjiwMwsdwYRzuEXrGLfnsauqKbkc2tFimunPfROogzMBOp
iigkzYG5xlI3ofizfE8f5fg0CL0ZBw+Nb6EgQSK8A7dBx7ee4FycZHR6Cz+EopyO
ABW4WGDMCPA/ZVBNDYSng/llpWw9Kj/0G7voVRakmE6+3+A/Ioxx7XMkxkB5Bwyk
stw9j1590GA6X/y8cj85ue82e3JZxakBD6UN0sBMVr9NVNcF2W0msa+tiQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFF3CC+krpH5u5NQFrVpeOOcaeEFdMB8GA1UdIwQY
MBaAFIhcCVIvY1/K+im866xyyJTk/+7SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUZ3SlVpOWpYOHI2S2J6cnJITElsT1RfN3RJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9hMDJjMDgtZjMxYi00OGM1LWFkNDct
ZjgzYjhkMDQwODdjLzEvWGNJTDZTdWtmbTdrMUFXdFdsNDQ1eHA0UVYwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9hMDJjMDgtZjMxYi00OGM1LWFkNDctZjgzYjhkMDQwODdj
LzEvaUZ3SlVpOWpYOHI2S2J6cnJITElsT1RfN3RJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWhKMA0G
CSqGSIb3DQEBCwUAA4IBAQDB06LvRi//3M/FcPFyCR21doOyyvz5l6r3IYrHK5pn
KEkOy8MPWJ9pMtQG0X5Bc9GF4jS3bJak/N407EYDmGraxqPqjril+9yve6GvMUOj
0dseEf7lYCMcZ+I3eY7amhBKB07h/x1qLDAz8kyk2P+A6hNzlLIm6mxXkeEJbx8q
CaBeunuUhIhcRGMVJGj4MKqAKd0ev/Q1QvnRRvfZawqmsCTI03wY0qRRoKR33YQl
O44durcykzjg8cspt9HcGueWXifuPjF9Mm9DMvHPFBVtGF/yn6ciApQdccUlbWIs
fOS/AWAXaZR9oWdfjJWha4O9s1qqM6qq1LOcKjkAbPGj
-----END CERTIFICATE-----
Generated at Sat Jun 7 13:59:19 2025 by rpki-client