Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/67GiNAuPjdtHnpnjYgqVfSHnuIU.roa
File: 67GiNAuPjdtHnpnjYgqVfSHnuIU.roa (raw, json)
Hash identifier: WSIoXa7KPAj7Wn/s1FZRSs3mpU6342C8MlX+F0kKQXE=
Subject key identifier: EB:B1:A2:34:0B:8F:8D:DB:47:9E:99:E3:62:0A:95:7D:21:E7:B8:85
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01976EAB6DF9C827774590EF0B7F6E848027
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/67GiNAuPjdtHnpnjYgqVfSHnuIU.roa
Signing time: Sat 14 Jun 2025 13:40:17 +0000
ROA not before: Sat 14 Jun 2025 13:40:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210705
IP address blocks: 5.231.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:ab:6d:f9:c8:27:77:45:90:ef:0b:7f:6e:84:80:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jun 14 13:40:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ebb1a2340b8f8ddb479e99e3620a957d21e7b885
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:73:dd:b0:0d:36:94:e9:b3:93:a6:dc:dc:ce:
7d:e7:ae:04:b8:7c:fa:6e:fb:dd:32:c8:86:a7:11:
cc:38:d5:07:95:8a:07:dd:bb:7a:0b:75:ba:eb:53:
1e:40:a6:e1:a3:75:2c:64:96:8b:0b:e8:96:e1:94:
c1:58:73:fc:46:e2:d4:46:87:73:24:b2:53:bc:19:
d0:af:05:15:fd:b7:e5:65:bc:53:df:8a:44:63:1c:
2c:2a:66:6a:ff:79:e0:d7:e4:30:da:45:c3:52:71:
c1:d2:7b:33:62:c3:9f:fb:d1:c5:75:d2:24:c0:d7:
e2:9a:a3:00:0b:37:70:36:d3:00:52:c6:0e:c4:96:
b2:07:78:61:67:8f:6a:3e:c3:23:b0:a4:28:f4:75:
6c:1a:fb:ce:fe:e0:93:75:51:9f:82:39:b0:48:3f:
36:f6:dc:6d:95:a6:f5:1b:fa:01:5e:28:f8:cf:2b:
fa:36:10:ce:01:87:30:67:24:b8:37:d3:36:6e:d3:
c5:fd:55:fe:43:fb:3e:9a:3d:04:33:9a:83:69:fd:
aa:0b:dd:e9:41:ba:97:47:d1:33:87:35:0c:47:f2:
b9:ee:b4:2f:7b:99:f4:f1:df:db:86:fa:5a:df:2b:
5a:62:d3:a1:d6:58:00:52:31:44:9c:71:53:b8:fa:
d2:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:B1:A2:34:0B:8F:8D:DB:47:9E:99:E3:62:0A:95:7D:21:E7:B8:85
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/67GiNAuPjdtHnpnjYgqVfSHnuIU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.204.0/24
Signature Algorithm: sha256WithRSAEncryption
26:bf:3c:9b:9a:5c:a7:3c:e2:57:39:af:4c:cc:9a:c7:60:24:
d7:37:ba:94:6e:a3:7d:b4:27:db:35:7f:81:14:e5:ac:d8:30:
1c:89:72:2a:ec:82:85:18:24:15:b9:37:e0:82:f4:f3:0a:e4:
91:94:b6:dd:b9:39:e9:4d:c8:d9:ef:e1:29:24:d7:34:2b:af:
29:3e:c5:3a:a0:f8:37:e0:cd:87:42:12:bd:4e:1d:ec:de:e3:
e9:50:27:f0:a1:75:f4:b1:b4:57:8d:f6:45:a8:e8:da:1c:f1:
03:a4:c2:39:6c:25:a2:4d:ed:6d:72:df:bb:00:1b:c4:fd:a1:
90:75:37:1a:a5:8f:ce:8f:fa:64:5f:bc:4b:89:24:94:1f:df:
fc:5e:da:c2:61:ac:2d:53:5d:ae:32:ee:ba:e5:1b:e6:d8:14:
3a:cf:21:8b:2f:8e:8d:13:03:eb:fb:88:39:2d:74:f6:94:b2:
e9:ac:d8:7c:2f:ed:9a:df:6f:e5:57:02:09:50:b2:52:2f:60:
9b:1e:e4:b0:9a:4a:f1:5d:61:35:25:bb:89:1b:d6:14:2d:a4:
c1:f4:fc:6c:8d:a5:de:bc:a2:35:f8:af:93:0d:22:ac:1d:0f:
e0:bf:7f:37:3c:cb:83:a0:b3:8c:83:9a:d1:54:cc:81:57:2c:
de:1a:87:81
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZduq235yCd3RZDvC39uhIAnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjUwNjE0MTM0MDE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYmIxYTIzNDBiOGY4ZGRiNDc5ZTk5ZTM2MjBhOTU3ZDIxZTdiODg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2XPdsA02lOmzk6bc3M59564EuHz6
bvvdMsiGpxHMONUHlYoH3bt6C3W661MeQKbho3UsZJaLC+iW4ZTBWHP8RuLURodz
JLJTvBnQrwUV/bflZbxT34pEYxwsKmZq/3ng1+Qw2kXDUnHB0nszYsOf+9HFddIk
wNfimqMACzdwNtMAUsYOxJayB3hhZ49qPsMjsKQo9HVsGvvO/uCTdVGfgjmwSD82
9txtlab1G/oBXij4zyv6NhDOAYcwZyS4N9M2btPF/VX+Q/s+mj0EM5qDaf2qC93p
QbqXR9EzhzUMR/K57rQve5n08d/bhvpa3ytaYtOh1lgAUjFEnHFTuPrSCwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOuxojQLj43bR56Z42IKlX0h57iFMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvNjdHaU5BdVBqZHRIbnBuallncVZmU0hudUlVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABefMMA0G
CSqGSIb3DQEBCwUAA4IBAQAmvzybmlynPOJXOa9MzJrHYCTXN7qUbqN9tCfbNX+B
FOWs2DAciXIq7IKFGCQVuTfggvTzCuSRlLbduTnpTcjZ7+EpJNc0K68pPsU6oPg3
4M2HQhK9Th3s3uPpUCfwoXX0sbRXjfZFqOjaHPEDpMI5bCWiTe1tct+7ABvE/aGQ
dTcapY/Oj/pkX7xLiSSUH9/8XtrCYawtU12uMu665Rvm2BQ6zyGLL46NEwPr+4g5
LXT2lLLprNh8L+2a32/lVwIJULJSL2CbHuSwmkrxXWE1JbuJG9YULaTB9PxsjaXe
vKI1+K+TDSKsHQ/gv383PMuDoLOMg5rRVMyBVyzeGoeB
-----END CERTIFICATE-----
Generated at Sun Jun 15 08:20:40 2025 by rpki-client