Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/88S6ZNIJWuEKpx-lbnqHREIGx0Y.roa
File: 88S6ZNIJWuEKpx-lbnqHREIGx0Y.roa (raw, json)
Hash identifier: /bWifb50Yp6/6XOCP+xvLuWuM45M4/ZRCrfUHjTv+lU=
Subject key identifier: F3:C4:BA:64:D2:09:5A:E1:0A:A7:1F:A5:6E:7A:87:44:42:06:C7:46
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 01966FE351D14CDB4340736C91FEE601107E
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/88S6ZNIJWuEKpx-lbnqHREIGx0Y.roa
Signing time: Sat 26 Apr 2025 02:18:10 +0000
ROA not before: Sat 26 Apr 2025 02:18:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 109.111.52.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:6f:e3:51:d1:4c:db:43:40:73:6c:91:fe:e6:01:10:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Apr 26 02:18:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f3c4ba64d2095ae10aa71fa56e7a87444206c746
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e8:d0:78:40:df:fc:41:7a:75:2c:42:fd:75:
2e:3d:29:1d:74:aa:7c:fc:ab:13:7f:79:77:13:04:
eb:51:9f:0c:a5:cd:58:05:37:eb:28:49:7f:d8:f7:
96:97:5b:2f:8a:cf:bf:27:46:af:bc:11:f3:ef:c2:
a9:4c:79:91:67:81:13:1d:3f:8b:fb:80:db:94:df:
65:ce:91:d8:97:6e:cd:b1:d0:92:a1:e5:58:bb:ea:
5b:bc:c0:36:29:58:69:55:b5:f3:9d:30:f8:76:43:
bc:65:63:d9:57:19:27:82:c5:eb:a4:2d:d0:b0:31:
23:35:4d:70:ea:e1:31:8c:ac:0e:ad:12:b8:de:2e:
62:75:a5:ec:32:e7:86:22:5d:1c:15:19:0b:26:fd:
d2:8f:67:51:5b:6f:77:cf:de:73:88:8f:2a:df:fb:
8e:f9:52:7f:c1:b3:1a:09:1a:3e:dd:7e:53:9d:d2:
5a:dc:e5:eb:ba:70:26:68:91:ea:46:e5:e4:e8:7d:
71:d7:43:2d:cf:4b:17:52:6d:2f:87:32:08:7f:7e:
42:16:67:ef:02:ed:f9:20:4c:ea:5c:94:b8:0f:64:
e9:4c:d1:b8:c5:de:7f:e7:cc:fa:a2:da:af:e9:e4:
8e:e6:23:68:84:d6:bf:ec:ac:55:ee:f5:64:da:7a:
4c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:C4:BA:64:D2:09:5A:E1:0A:A7:1F:A5:6E:7A:87:44:42:06:C7:46
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/88S6ZNIJWuEKpx-lbnqHREIGx0Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.111.52.0/22
Signature Algorithm: sha256WithRSAEncryption
82:34:21:91:06:ae:21:d0:9e:88:e5:b9:db:a2:bf:8d:53:b0:
09:3c:56:67:36:66:2b:6e:cd:8c:8a:94:a5:7c:dd:bc:94:6f:
6c:6a:46:2a:cb:f1:a0:39:ca:35:84:24:21:c0:83:86:f9:ba:
f8:16:32:cf:9d:6c:87:28:09:f1:a5:c7:23:57:6c:1a:48:c8:
78:aa:56:07:61:92:bc:82:3d:63:0a:4a:76:62:20:02:28:f5:
8f:82:fd:2c:f7:7a:77:85:91:b4:20:1a:34:ae:2c:b8:3c:f1:
8a:2e:77:24:c4:e6:1c:2d:0e:97:08:fc:71:a6:96:5a:ee:e0:
22:39:1f:39:27:98:9d:21:cd:4c:5a:a1:4b:f9:8f:75:1f:d4:
65:01:d1:69:04:b8:5d:bb:fa:27:0f:49:22:01:a8:3f:2a:d8:
6b:9a:04:aa:9b:80:f4:08:df:61:c2:3c:e6:cb:42:2b:0d:8d:
e1:fe:f5:7b:a8:1d:a7:f3:a0:15:ca:a8:d6:07:68:8b:06:2f:
39:a1:23:a7:27:d8:b1:87:19:d7:c9:81:61:81:c8:11:4a:f0:
f4:0e:80:1d:27:cc:68:f7:0b:8b:43:53:f8:bb:c4:8e:6c:a6:
7b:33:72:01:b7:a2:94:0d:87:7d:24:c3:e6:19:fd:80:39:b5:
00:b2:d4:f9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZZv41HRTNtDQHNskf7mARB+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmNzVlNGU5NGI1Y2I3NDUxN2I3YjAxNTY4MDE1ZGE5ZTZl
ZWNkYjYwHhcNMjUwNDI2MDIxODEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmM2M0YmE2NGQyMDk1YWUxMGFhNzFmYTU2ZTdhODc0NDQyMDZjNzQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+jQeEDf/EF6dSxC/XUuPSkddKp8
/KsTf3l3EwTrUZ8Mpc1YBTfrKEl/2PeWl1svis+/J0avvBHz78KpTHmRZ4ETHT+L
+4DblN9lzpHYl27NsdCSoeVYu+pbvMA2KVhpVbXznTD4dkO8ZWPZVxkngsXrpC3Q
sDEjNU1w6uExjKwOrRK43i5idaXsMueGIl0cFRkLJv3Sj2dRW293z95ziI8q3/uO
+VJ/wbMaCRo+3X5TndJa3OXrunAmaJHqRuXk6H1x10Mtz0sXUm0vhzIIf35CFmfv
Au35IEzqXJS4D2TpTNG4xd5/58z6otqv6eSO5iNohNa/7KxV7vVk2npMFQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPPEumTSCVrhCqcfpW56h0RCBsdGMB8GA1UdIwQY
MBaAFG915OlLXLdFF7ewFWgBXanm7s22MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjNYazZVdGN0MFVYdDdBVmFBRmRxZWJ1emJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi81N2EzNGYtZTMzYi00ZTE3LWJjMzIt
NjY0NTc3MjRjMmQzLzEvODhTNlpOSUpXdUVLcHgtbGJucUhSRUlHeDBZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi81N2EzNGYtZTMzYi00ZTE3LWJjMzItNjY0NTc3MjRjMmQz
LzEvYjNYazZVdGN0MFVYdDdBVmFBRmRxZWJ1emJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCbW80MA0G
CSqGSIb3DQEBCwUAA4IBAQCCNCGRBq4h0J6I5bnbor+NU7AJPFZnNmYrbs2MipSl
fN28lG9sakYqy/GgOco1hCQhwIOG+br4FjLPnWyHKAnxpccjV2waSMh4qlYHYZK8
gj1jCkp2YiACKPWPgv0s93p3hZG0IBo0riy4PPGKLnckxOYcLQ6XCPxxppZa7uAi
OR85J5idIc1MWqFL+Y91H9RlAdFpBLhdu/onD0kiAag/KthrmgSqm4D0CN9hwjzm
y0IrDY3h/vV7qB2n86AVyqjWB2iLBi85oSOnJ9ixhxnXyYFhgcgRSvD0DoAdJ8xo
9wuLQ1P4u8SObKZ7M3IBt6KUDYd9JMPmGf2AObUAstT5
-----END CERTIFICATE-----
Generated at Sat Apr 26 13:30:34 2025 by rpki-client