Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/g79vhXHjpRFh3Y-GxHmCGsiBZGA.roa
File: g79vhXHjpRFh3Y-GxHmCGsiBZGA.roa (raw, json)
Hash identifier: RJ1u6MS+HvMdlY5nwrlEy806vD9xNxkwf89ZeEiyu90=
Subject key identifier: 83:BF:6F:85:71:E3:A5:11:61:DD:8F:86:C4:79:82:1A:C8:81:64:60
Certificate issuer: /CN=fc3ab55d57509cbfae798bd71aaa23b3444d8e5a
Certificate serial: 019731E4F4C1D543A01A279AD4C53B98D699
Authority key identifier: FC:3A:B5:5D:57:50:9C:BF:AE:79:8B:D7:1A:AA:23:B3:44:4D:8E:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Dq1XVdQnL-ueYvXGqojs0RNjlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/g79vhXHjpRFh3Y-GxHmCGsiBZGA.roa
Signing time: Mon 02 Jun 2025 18:26:17 +0000
ROA not before: Mon 02 Jun 2025 18:26:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6079
IP address blocks: 185.165.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Dq1XVdQnL-ueYvXGqojs0RNjlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 18:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:31:e4:f4:c1:d5:43:a0:1a:27:9a:d4:c5:3b:98:d6:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc3ab55d57509cbfae798bd71aaa23b3444d8e5a
Validity
Not Before: Jun 2 18:26:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=83bf6f8571e3a51161dd8f86c479821ac8816460
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:59:83:ff:cb:46:4e:07:33:44:68:7a:ce:ab:
95:e7:e7:8a:f8:a3:3c:5d:7f:fb:d4:2d:b4:88:70:
51:6c:48:6b:0c:31:12:95:1c:b3:7d:93:cc:59:50:
06:0f:24:9e:08:00:6e:09:0f:8f:25:b7:f5:27:2e:
7d:16:a1:6b:f8:b2:74:49:d2:f9:0d:3b:05:e1:0c:
17:f3:ca:bc:bd:3c:bc:00:69:2f:27:b5:aa:55:f9:
03:4d:c0:50:29:df:5f:ec:cb:5f:e4:9b:de:a7:cc:
75:a3:42:5b:0a:2d:e5:1b:4b:c5:d8:f1:12:c2:f4:
df:27:88:bc:09:16:06:4e:5f:2d:37:d5:ee:a8:82:
fd:77:ce:89:62:b5:22:c8:f6:fc:76:f7:40:e4:47:
97:53:62:e5:7a:91:2d:b0:a0:4c:8c:ac:52:0b:fb:
2c:dc:c0:22:50:33:62:10:96:81:78:b9:3b:7a:ec:
58:f2:52:20:99:8d:e6:59:34:c4:cf:70:92:a8:43:
fc:a4:6d:04:f7:ba:fe:c8:f5:b8:ea:e8:85:85:aa:
bc:8c:5a:cf:06:93:49:a4:4e:78:fd:9b:47:87:02:
ba:99:e5:65:f5:2d:60:f3:93:5e:c3:18:4a:e7:25:
04:cf:41:6a:e4:27:b9:dd:df:68:93:86:66:13:8b:
35:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:BF:6F:85:71:E3:A5:11:61:DD:8F:86:C4:79:82:1A:C8:81:64:60
X509v3 Authority Key Identifier:
keyid:FC:3A:B5:5D:57:50:9C:BF:AE:79:8B:D7:1A:AA:23:B3:44:4D:8E:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Dq1XVdQnL-ueYvXGqojs0RNjlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/g79vhXHjpRFh3Y-GxHmCGsiBZGA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.165.92.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:f3:2c:60:85:fa:e7:c3:0d:e5:16:c6:c3:a5:b9:be:58:69:
37:21:08:e6:1b:2a:9a:7d:17:69:f9:db:6b:fc:31:ad:6f:ed:
1b:f0:07:97:62:1f:8a:0a:cd:04:e7:79:1a:b6:07:95:2e:2c:
82:01:20:a2:e5:4d:d6:8e:c6:b4:7b:bc:26:e9:6e:f7:74:30:
81:4f:c7:d3:8d:64:6c:47:87:e0:06:b9:bc:bf:67:0f:da:b8:
de:e4:f7:39:01:4c:48:09:5e:70:81:ec:e4:ef:66:13:08:35:
32:1a:77:ed:d3:3a:18:7a:cb:ae:f1:aa:47:d8:e2:b0:12:9f:
0a:15:52:19:f0:18:bd:48:41:d0:0a:c6:50:a6:c7:73:4e:be:
c1:4e:73:f4:bf:48:ac:18:ac:3c:43:d0:d6:9b:15:84:38:fc:
e0:cc:21:20:38:b3:1c:e0:45:56:9c:56:98:70:77:66:71:81:
17:df:a3:15:90:7b:f0:64:35:be:ce:a0:8e:e4:cc:34:e1:1a:
14:06:8d:2a:f9:e2:07:6e:b5:6d:30:1b:8c:cf:af:c8:eb:d5:
dd:5e:ce:23:33:a8:9e:0d:d6:28:31:ff:9e:a2:3d:ef:94:7e:
54:d5:65:b2:68:04:0e:85:89:f6:a2:52:f5:96:2f:cf:d8:67:
e7:47:de:52
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZcx5PTB1UOgGiea1MU7mNaZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjM2FiNTVkNTc1MDljYmZhZTc5OGJkNzFhYWEyM2IzNDQ0
ZDhlNWEwHhcNMjUwNjAyMTgyNjE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4M2JmNmY4NTcxZTNhNTExNjFkZDhmODZjNDc5ODIxYWM4ODE2NDYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFmD/8tGTgczRGh6zquV5+eK+KM8
XX/71C20iHBRbEhrDDESlRyzfZPMWVAGDySeCABuCQ+PJbf1Jy59FqFr+LJ0SdL5
DTsF4QwX88q8vTy8AGkvJ7WqVfkDTcBQKd9f7Mtf5Jvep8x1o0JbCi3lG0vF2PES
wvTfJ4i8CRYGTl8tN9XuqIL9d86JYrUiyPb8dvdA5EeXU2LlepEtsKBMjKxSC/ss
3MAiUDNiEJaBeLk7euxY8lIgmY3mWTTEz3CSqEP8pG0E97r+yPW46uiFhaq8jFrP
BpNJpE54/ZtHhwK6meVl9S1g85NewxhK5yUEz0Fq5Ce53d9ok4ZmE4s1mwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIO/b4Vx46URYd2PhsR5ghrIgWRgMB8GA1UdIwQY
MBaAFPw6tV1XUJy/rnmL1xqqI7NETY5aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0RxMVhWZFFuTC11ZVl2WEdxb2pzMFJOamxvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC83MjlkYTktZWIwMy00NTFiLWJmZWYt
MGM0NTIxOGU3OTgxLzEvZzc5dmhYSGpwUkZoM1ktR3hIbUNHc2lCWkdBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC83MjlkYTktZWIwMy00NTFiLWJmZWYtMGM0NTIxOGU3OTgx
LzEvX0RxMVhWZFFuTC11ZVl2WEdxb2pzMFJOamxvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuaVcMA0G
CSqGSIb3DQEBCwUAA4IBAQAq8yxghfrnww3lFsbDpbm+WGk3IQjmGyqafRdp+dtr
/DGtb+0b8AeXYh+KCs0E53katgeVLiyCASCi5U3Wjsa0e7wm6W73dDCBT8fTjWRs
R4fgBrm8v2cP2rje5Pc5AUxICV5wgezk72YTCDUyGnft0zoYesuu8apH2OKwEp8K
FVIZ8Bi9SEHQCsZQpsdzTr7BTnP0v0isGKw8Q9DWmxWEOPzgzCEgOLMc4EVWnFaY
cHdmcYEX36MVkHvwZDW+zqCO5Mw04RoUBo0q+eIHbrVtMBuMz6/I69XdXs4jM6ie
DdYoMf+eoj3vlH5U1WWyaAQOhYn2olL1li/P2GfnR95S
-----END CERTIFICATE-----
Generated at Sun Jun 15 03:13:32 2025 by rpki-client