Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/9Cv1x_jAkuvWV-S7bhdwS0dFTuc.roa
File: 9Cv1x_jAkuvWV-S7bhdwS0dFTuc.roa (raw, json)
Hash identifier: l74BXIsr9tFoOgjbmMSDMd1UV/QSFnTI8Mvo9Udf3LM=
Subject key identifier: F4:2B:F5:C7:F8:C0:92:EB:D6:57:E4:BB:6E:17:70:4B:47:45:4E:E7
Certificate issuer: /CN=1b12120c351c14eec22109f603249fcdac1d3321
Certificate serial: 019754FB325E3F7F06908E4B15EE351DDC88
Authority key identifier: 1B:12:12:0C:35:1C:14:EE:C2:21:09:F6:03:24:9F:CD:AC:1D:33:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/9Cv1x_jAkuvWV-S7bhdwS0dFTuc.roa
Signing time: Mon 09 Jun 2025 13:57:17 +0000
ROA not before: Mon 09 Jun 2025 13:57:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47585
IP address blocks: 185.7.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 09:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:fb:32:5e:3f:7f:06:90:8e:4b:15:ee:35:1d:dc:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b12120c351c14eec22109f603249fcdac1d3321
Validity
Not Before: Jun 9 13:57:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f42bf5c7f8c092ebd657e4bb6e17704b47454ee7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:dc:51:76:05:26:21:ac:66:91:9e:e6:bb:85:
36:d4:5b:e4:00:b6:2f:66:10:75:d0:77:5b:b8:84:
83:56:8a:b1:ef:99:2c:04:28:6c:11:01:14:42:9f:
ee:37:f9:58:b4:61:5b:1e:e6:27:86:c6:9c:f7:1e:
6a:3e:66:26:e2:f2:ec:04:43:ee:a1:85:92:fc:2f:
5a:39:5a:08:11:f7:77:e5:fc:48:31:7b:bc:8b:1a:
63:ec:8f:7a:4e:43:55:80:2a:78:57:7e:2b:82:15:
53:48:97:f3:ec:14:5c:90:b5:81:01:dc:a5:1c:e5:
27:f4:e3:8e:f3:08:d4:1d:dd:9b:55:32:3d:f2:73:
1e:be:1a:4d:59:a8:bf:4a:42:24:85:6f:1c:16:c3:
28:06:19:6d:f2:ec:46:12:ae:0b:3d:79:a2:43:e1:
6a:c2:ca:03:a7:24:02:1f:2a:8c:ed:b7:82:14:54:
8a:0e:01:40:a2:df:df:5a:24:6f:13:52:a8:46:1b:
0c:b6:80:b8:19:b9:e1:0d:e3:21:a1:8d:d1:78:3d:
b6:1b:4d:f8:55:73:c2:e9:7a:d8:72:d8:39:58:e7:
ba:54:22:fd:d4:cc:c6:e0:b9:64:ad:6f:69:89:7c:
31:89:b7:41:47:f5:78:1e:3c:13:b0:1a:54:6c:d7:
88:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:2B:F5:C7:F8:C0:92:EB:D6:57:E4:BB:6E:17:70:4B:47:45:4E:E7
X509v3 Authority Key Identifier:
keyid:1B:12:12:0C:35:1C:14:EE:C2:21:09:F6:03:24:9F:CD:AC:1D:33:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/9Cv1x_jAkuvWV-S7bhdwS0dFTuc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.7.241.0/24
Signature Algorithm: sha256WithRSAEncryption
66:8d:22:c8:3c:67:1b:0c:4d:76:99:a8:e0:54:db:91:f3:a7:
5a:b4:e5:94:d8:a6:cd:2f:ea:c5:57:03:b7:55:8e:75:98:94:
b3:d0:2f:b2:ed:dc:a4:71:3a:72:cd:b9:bc:44:44:ea:08:2b:
d4:04:05:2d:dd:da:54:5d:64:e2:e8:ca:68:de:bd:7d:a2:71:
a4:5b:0a:96:9c:74:b8:22:75:d8:f2:8d:67:a1:b8:67:e9:92:
01:2d:cd:ec:f0:cf:71:b6:70:b5:22:bb:9b:7c:c2:58:9c:3b:
10:8f:4f:be:de:06:d4:b7:a5:3a:62:02:7d:bc:82:22:7c:81:
05:5a:da:6d:f3:df:91:32:56:63:92:eb:cb:f7:84:3b:00:73:
95:7f:96:99:49:72:07:8e:9f:4e:bf:30:64:a4:2c:18:16:ee:
36:ca:89:f3:2e:a8:d7:17:88:47:2b:f8:8a:b4:f2:28:60:09:
ee:eb:d0:36:d9:ee:d9:98:82:78:df:55:df:0d:af:78:eb:0b:
c4:31:31:82:65:f3:1e:57:fc:b8:c2:f8:1e:88:f3:18:ed:0d:
82:4f:bc:90:00:11:78:3f:b5:89:0c:7f:ca:c8:2e:8c:45:d1:
8f:0a:aa:e9:75:f2:06:59:47:53:71:f1:f0:88:9e:17:a9:49:
a6:26:a4:f7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZdU+zJeP38GkI5LFe41HdyIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiMTIxMjBjMzUxYzE0ZWVjMjIxMDlmNjAzMjQ5ZmNkYWMx
ZDMzMjEwHhcNMjUwNjA5MTM1NzE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNDJiZjVjN2Y4YzA5MmViZDY1N2U0YmI2ZTE3NzA0YjQ3NDU0ZWU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9xRdgUmIaxmkZ7mu4U21FvkALYv
ZhB10HdbuISDVoqx75ksBChsEQEUQp/uN/lYtGFbHuYnhsac9x5qPmYm4vLsBEPu
oYWS/C9aOVoIEfd35fxIMXu8ixpj7I96TkNVgCp4V34rghVTSJfz7BRckLWBAdyl
HOUn9OOO8wjUHd2bVTI98nMevhpNWai/SkIkhW8cFsMoBhlt8uxGEq4LPXmiQ+Fq
wsoDpyQCHyqM7beCFFSKDgFAot/fWiRvE1KoRhsMtoC4GbnhDeMhoY3ReD22G034
VXPC6XrYctg5WOe6VCL91MzG4LlkrW9piXwxibdBR/V4HjwTsBpUbNeIYQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPQr9cf4wJLr1lfku24XcEtHRU7nMB8GA1UdIwQY
MBaAFBsSEgw1HBTuwiEJ9gMkn82sHTMhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3hJU0REVWNGTzdDSVFuMkF5U2Z6YXdkTXlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8zZGFmN2YtMzAxZC00MjNlLTk0NmUt
NDNkZjQ3ZDVhMWU3LzEvOUN2MXhfakFrdXZXVi1TN2JoZHdTMGRGVHVjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS8zZGFmN2YtMzAxZC00MjNlLTk0NmUtNDNkZjQ3ZDVhMWU3
LzEvR3hJU0REVWNGTzdDSVFuMkF5U2Z6YXdkTXlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuQfxMA0G
CSqGSIb3DQEBCwUAA4IBAQBmjSLIPGcbDE12majgVNuR86datOWU2KbNL+rFVwO3
VY51mJSz0C+y7dykcTpyzbm8RETqCCvUBAUt3dpUXWTi6Mpo3r19onGkWwqWnHS4
InXY8o1nobhn6ZIBLc3s8M9xtnC1IrubfMJYnDsQj0++3gbUt6U6YgJ9vIIifIEF
Wtpt89+RMlZjkuvL94Q7AHOVf5aZSXIHjp9OvzBkpCwYFu42yonzLqjXF4hHK/iK
tPIoYAnu69A22e7ZmIJ431XfDa946wvEMTGCZfMeV/y4wvgeiPMY7Q2CT7yQABF4
P7WJDH/KyC6MRdGPCqrpdfIGWUdTcfHwiJ4XqUmmJqT3
-----END CERTIFICATE-----
Generated at Sun Jun 15 18:25:54 2025 by rpki-client