Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/57zX547ZTL8Yj9zlKIMk9ysHLNg.roa
File: 57zX547ZTL8Yj9zlKIMk9ysHLNg.roa (raw, json)
Hash identifier: Snla3uI3TcFFSQrYdQ3kIJgHq1gikWlCrab3vTqi1x8=
Subject key identifier: E7:BC:D7:E7:8E:D9:4C:BF:18:8F:DC:E5:28:83:24:F7:2B:07:2C:D8
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 0196F99DDE9D97D63C8EEDB52331DDBFAAF5
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/57zX547ZTL8Yj9zlKIMk9ysHLNg.roa
Signing time: Thu 22 May 2025 20:09:55 +0000
ROA not before: Thu 22 May 2025 20:09:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208949
IP address blocks: 195.211.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f9:9d:de:9d:97:d6:3c:8e:ed:b5:23:31:dd:bf:aa:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: May 22 20:09:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e7bcd7e78ed94cbf188fdce5288324f72b072cd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:09:b8:14:11:da:dc:de:07:43:dd:fb:11:2c:
67:f7:44:97:de:87:77:9c:ba:6a:1c:27:66:99:b4:
39:a5:d1:c7:78:c6:7a:4f:98:90:c5:f1:00:7d:70:
00:8a:e2:03:f6:16:f4:07:a3:6c:02:6d:4d:3a:69:
d7:70:98:d0:9f:f9:02:3f:d3:08:48:49:bd:16:54:
be:c3:ae:47:95:42:67:0e:70:86:98:27:66:6b:b6:
10:61:06:4f:11:8d:92:46:b0:b9:c8:53:e2:4c:84:
22:6b:85:4f:28:c0:fe:88:9c:64:82:86:a8:50:11:
84:a9:c0:92:a2:c8:53:aa:b5:08:d3:ba:25:ca:08:
de:4d:b6:8a:18:78:10:9d:cc:8a:19:4c:e9:76:2f:
65:ae:5f:c0:79:fa:0d:20:f5:36:bb:b6:82:d3:25:
1b:ad:49:12:53:be:ed:68:be:71:da:90:2a:23:57:
1c:3c:59:5a:25:86:aa:a5:66:be:62:42:b7:76:63:
5e:cc:2f:88:5f:03:50:27:be:a4:0a:8d:9a:35:7c:
eb:d4:79:9e:4e:ca:90:49:f2:c3:89:73:b9:da:11:
3e:48:60:65:61:b0:cd:d0:38:ff:48:a7:86:c7:27:
e4:cf:05:eb:72:cf:23:93:c4:ac:74:9f:7b:5c:bc:
ad:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:BC:D7:E7:8E:D9:4C:BF:18:8F:DC:E5:28:83:24:F7:2B:07:2C:D8
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/57zX547ZTL8Yj9zlKIMk9ysHLNg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.211.191.0/24
Signature Algorithm: sha256WithRSAEncryption
08:b4:4c:dc:3f:72:07:76:02:41:de:96:94:a9:2b:0b:30:de:
df:b4:90:e5:a3:91:86:27:ee:fa:c3:df:94:37:77:9c:df:09:
c3:e7:4c:03:eb:6c:f5:ba:68:80:3e:0c:0b:ac:c7:a2:4d:4b:
96:a0:ab:a8:0a:c6:e8:fa:37:00:13:d3:a3:0e:08:6d:62:c3:
90:bc:ba:32:33:67:d4:dd:84:d4:52:91:8a:60:59:9b:fb:11:
14:cc:05:a8:3b:9a:5e:09:40:86:9c:68:d3:72:56:2e:2d:b5:
7f:9e:98:5f:11:56:49:43:86:ed:9a:15:c6:18:81:85:d9:f9:
47:ef:ea:7b:c0:4a:7a:ed:45:30:c9:27:46:27:9a:4a:fb:bf:
9e:02:bb:56:ea:c4:2d:43:8a:45:11:a9:c4:3b:81:8f:3f:43:
07:e1:e9:d5:60:3d:e1:7d:0a:87:ca:da:9a:f8:db:27:b4:88:
90:5f:aa:f5:b8:da:88:ea:16:d5:f3:d5:d9:81:5e:90:8a:66:
ce:09:40:e9:fb:72:f1:aa:cb:15:b7:db:2f:b3:6d:37:a6:9e:
b9:8b:18:1e:5b:69:15:04:c1:af:de:67:40:3d:c0:87:1a:b5:
ce:40:8a:33:16:f8:55:62:03:22:e8:e5:33:01:09:53:52:f1:
c7:ce:ec:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:45:54 2025 by rpki-client