Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/Ri1W5hGdOA2IQn0eWHH7b3-bfws.roa
File: Ri1W5hGdOA2IQn0eWHH7b3-bfws.roa (raw, json)
Hash identifier: P/qvYKsl5b2W4hd0B25iig5CdZGpWYsMZEWjWtHjTyU=
Subject key identifier: 46:2D:56:E6:11:9D:38:0D:88:42:7D:1E:58:71:FB:6F:7F:9B:7F:0B
Certificate issuer: /CN=d4afe3f0c9e555e52d3505d6163278df3da18cee
Certificate serial: 019759962578639FF3105241C621FB21BD31
Authority key identifier: D4:AF:E3:F0:C9:E5:55:E5:2D:35:05:D6:16:32:78:DF:3D:A1:8C:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1K_j8MnlVeUtNQXWFjJ43z2hjO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/Ri1W5hGdOA2IQn0eWHH7b3-bfws.roa
Signing time: Tue 10 Jun 2025 11:25:01 +0000
ROA not before: Tue 10 Jun 2025 11:25:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39591
IP address blocks: 46.17.8.0/22 maxlen: 22
2a02:2870::/33 maxlen: 33
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1K_j8MnlVeUtNQXWFjJ43z2hjO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:96:25:78:63:9f:f3:10:52:41:c6:21:fb:21:bd:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4afe3f0c9e555e52d3505d6163278df3da18cee
Validity
Not Before: Jun 10 11:25:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=462d56e6119d380d88427d1e5871fb6f7f9b7f0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:59:55:18:eb:b8:8f:8a:20:09:38:dd:8f:10:
23:5b:09:ab:5e:6d:1a:97:33:78:d4:23:cd:d8:b6:
fd:d5:ea:15:49:a2:05:55:5c:39:d0:22:7f:d3:6a:
f5:35:8c:0e:b6:2f:bd:3a:84:b4:7d:9f:12:af:51:
b4:0e:88:d5:68:f1:57:cb:5c:83:d8:0f:0f:ab:4e:
58:91:88:54:8b:1e:5d:31:ee:da:dd:5a:3a:d5:84:
f7:43:12:03:be:05:af:40:8e:36:04:87:8b:ad:19:
80:01:8d:a1:e6:80:24:d1:08:c5:fe:eb:3c:d9:ea:
30:d4:4a:3f:82:1b:ec:63:46:69:80:2e:4c:89:8c:
7f:f1:d0:56:e6:c9:3f:72:cc:cf:f9:bb:f9:30:26:
03:54:25:d0:04:bc:90:0f:60:d5:83:17:ae:39:f5:
99:33:8d:b0:67:a6:de:9b:e2:bc:25:ff:68:94:53:
84:85:b7:43:ba:c4:82:a9:77:0b:43:57:82:e2:ea:
33:9a:08:3f:92:c1:fb:0b:1a:8b:8e:3a:5e:1d:41:
3a:b4:f5:f1:e0:3b:6c:fc:99:01:25:62:c2:b2:77:
69:de:04:bc:38:d5:f2:19:20:cd:3c:be:9e:7a:f5:
7c:8e:1e:98:dd:d4:2b:46:b2:ba:78:2f:a9:6d:9c:
9a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:2D:56:E6:11:9D:38:0D:88:42:7D:1E:58:71:FB:6F:7F:9B:7F:0B
X509v3 Authority Key Identifier:
keyid:D4:AF:E3:F0:C9:E5:55:E5:2D:35:05:D6:16:32:78:DF:3D:A1:8C:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1K_j8MnlVeUtNQXWFjJ43z2hjO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/Ri1W5hGdOA2IQn0eWHH7b3-bfws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.17.8.0/22
IPv6:
2a02:2870::/33
Signature Algorithm: sha256WithRSAEncryption
9f:08:3c:89:25:5e:eb:27:f2:02:f9:04:9e:91:87:7b:ca:6b:
10:88:cb:cf:35:ae:77:2e:7d:f2:ee:75:59:e3:f2:de:e6:3b:
b2:0a:e7:64:53:7d:56:08:06:98:1c:b1:29:b3:d3:1b:b0:30:
3b:48:3a:4e:3f:1a:60:66:74:6d:4a:72:70:df:48:ad:63:d1:
fc:6b:20:33:3e:fb:a2:fc:96:f6:ca:a2:40:22:d2:79:98:1a:
22:51:fc:e8:75:cd:2c:8f:2d:c2:4e:b2:4c:46:03:44:d4:84:
84:ad:93:12:7b:24:23:a8:e8:3b:61:fd:ca:2c:46:67:cb:1f:
a3:18:2e:bb:12:fe:38:c6:a5:20:dd:b0:c3:39:38:56:16:f5:
68:04:80:93:45:ee:0d:83:22:52:76:9a:cc:3b:ac:b6:12:e4:
83:fa:90:2b:fd:79:21:54:e8:c3:21:ba:5b:66:dd:26:56:56:
12:dd:76:93:4c:05:ef:0c:3b:d8:ce:ce:5a:ba:0f:47:1e:7e:
84:01:24:0e:3e:54:b5:f5:50:e7:ef:89:b9:d1:41:e4:f4:58:
5b:ae:18:f6:66:ca:f5:d7:a3:55:0e:82:ab:be:c6:20:ca:99:
aa:c4:c2:a8:ac:48:e1:77:33:fa:d2:8a:6a:a0:e6:78:18:2d:
c8:eb:25:3a
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgISAZdZliV4Y5/zEFJBxiH7Ib0xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0YWZlM2YwYzllNTU1ZTUyZDM1MDVkNjE2MzI3OGRmM2Rh
MThjZWUwHhcNMjUwNjEwMTEyNTAxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NjJkNTZlNjExOWQzODBkODg0MjdkMWU1ODcxZmI2ZjdmOWI3ZjBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5VlVGOu4j4ogCTjdjxAjWwmrXm0a
lzN41CPN2Lb91eoVSaIFVVw50CJ/02r1NYwOti+9OoS0fZ8Sr1G0DojVaPFXy1yD
2A8Pq05YkYhUix5dMe7a3Vo61YT3QxIDvgWvQI42BIeLrRmAAY2h5oAk0QjF/us8
2eow1Eo/ghvsY0ZpgC5MiYx/8dBW5sk/cszP+bv5MCYDVCXQBLyQD2DVgxeuOfWZ
M42wZ6bem+K8Jf9olFOEhbdDusSCqXcLQ1eC4uozmgg/ksH7CxqLjjpeHUE6tPXx
4Dts/JkBJWLCsndp3gS8ONXyGSDNPL6eevV8jh6Y3dQrRrK6eC+pbZyanQIDAQAB
o4ICGTCCAhUwHQYDVR0OBBYEFEYtVuYRnTgNiEJ9Hlhx+29/m38LMB8GA1UdIwQY
MBaAFNSv4/DJ5VXlLTUF1hYyeN89oYzuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUtfajhNbmxWZVV0TlFYV0ZqSjQzejJoak80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8xYzY3ZWYtZTgzZC00NDI3LTg2NGIt
YzU5ODI1YmJjYjMyLzEvUmkxVzVoR2RPQTJJUW4wZVdISDdiMy1iZndzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC8xYzY3ZWYtZTgzZC00NDI3LTg2NGItYzU5ODI1YmJjYjMy
LzEvMUtfajhNbmxWZVV0TlFYV0ZqSjQzejJoak80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQCLhEIMA4E
AgACMAgDBgcqAihwADANBgkqhkiG9w0BAQsFAAOCAQEAnwg8iSVe6yfyAvkEnpGH
e8prEIjLzzWudy598u51WePy3uY7sgrnZFN9VggGmByxKbPTG7AwO0g6Tj8aYGZ0
bUpycN9IrWPR/GsgMz77ovyW9sqiQCLSeZgaIlH86HXNLI8twk6yTEYDRNSEhK2T
EnskI6joO2H9yixGZ8sfoxguuxL+OMalIN2wwzk4Vhb1aASAk0XuDYMiUnaazDus
thLkg/qQK/15IVTowyG6W2bdJlZWEt12k0wF7ww72M7OWroPRx5+hAEkDj5UtfVQ
5++JudFB5PRYW64Y9mbK9dejVQ6Cq77GIMqZqsTCqKxI4Xcz+tKKaqDmeBgtyOsl
Og==
-----END CERTIFICATE-----
Generated at Sat Jun 14 11:30:51 2025 by rpki-client