Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/37FQCjMbU7_BHICNwNw1qqAaIMw.roa
File: 37FQCjMbU7_BHICNwNw1qqAaIMw.roa (raw, json)
Hash identifier: Ipdi0PQyrreWqk/DVBvIqC0dkcax+ckpQNsw/qKo1K4=
Subject key identifier: DF:B1:50:0A:33:1B:53:BF:C1:1C:80:8D:C0:DC:35:AA:A0:1A:20:CC
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 01976910CCC7E69D92191D010FEC07F342C7
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/37FQCjMbU7_BHICNwNw1qqAaIMw.roa
Signing time: Fri 13 Jun 2025 11:33:18 +0000
ROA not before: Fri 13 Jun 2025 11:33:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202561
IP address blocks: 188.132.203.0/24 maxlen: 24
188.132.221.0/24 maxlen: 24
188.132.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:10:cc:c7:e6:9d:92:19:1d:01:0f:ec:07:f3:42:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jun 13 11:33:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dfb1500a331b53bfc11c808dc0dc35aaa01a20cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:19:0f:c7:27:1a:c8:d1:3a:d5:6b:a4:32:89:
d4:ec:0d:23:e5:d8:4a:85:46:61:5a:6d:21:d7:e3:
07:2a:ce:aa:dd:ad:58:91:0a:18:25:3f:57:4c:0d:
13:50:10:8d:b2:e3:83:5b:91:8b:b0:b0:72:30:d8:
3a:26:09:76:4d:7c:63:47:bd:9d:79:fb:46:05:f7:
8a:25:31:67:49:a6:48:ad:75:44:6b:39:bd:78:bd:
d9:65:cd:f0:97:07:ec:cf:c3:d5:df:bc:90:64:95:
5a:4b:75:d9:44:89:3b:61:23:cd:47:ea:94:25:d2:
b8:b6:a9:61:45:43:77:ec:3e:1a:b5:b1:2f:34:57:
21:b1:49:87:d1:4e:d7:12:34:2a:3d:18:88:22:70:
bc:36:fa:cf:22:90:61:2f:2f:21:5a:2b:ef:50:8f:
35:3c:08:08:93:72:16:16:29:12:6b:52:a0:1b:c9:
2e:a0:5c:36:e3:9a:f8:8f:be:51:5b:b4:10:0f:c6:
47:44:d3:89:a6:fe:f0:f3:5a:2e:96:2c:65:f3:1e:
16:97:0f:70:b7:cc:6e:83:c2:d6:dc:5d:5f:4f:36:
49:85:ec:e1:fa:49:5f:57:01:ba:f7:8a:51:1c:20:
43:fd:70:dc:1c:e5:c1:b6:c7:06:d6:3b:04:fa:83:
75:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:B1:50:0A:33:1B:53:BF:C1:1C:80:8D:C0:DC:35:AA:A0:1A:20:CC
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/37FQCjMbU7_BHICNwNw1qqAaIMw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.132.203.0/24
188.132.221.0-188.132.222.255
Signature Algorithm: sha256WithRSAEncryption
69:66:71:db:69:eb:09:7c:f9:c8:16:80:d8:b7:27:97:72:45:
e9:a0:64:22:76:18:f8:38:5a:cf:88:31:a0:41:71:4f:b6:bf:
5f:46:79:88:f7:af:78:40:eb:34:2e:29:b4:4d:83:43:72:02:
f7:46:90:22:ca:bf:4a:1e:66:89:d6:6e:f6:2b:61:8e:16:51:
58:18:c6:a3:6b:24:f3:d0:35:ef:03:aa:d4:ec:51:6a:47:6d:
d0:27:9b:cd:12:55:6f:67:39:71:45:9f:6d:fa:9a:fa:9b:60:
15:57:ee:98:89:d4:ad:a7:ef:92:7f:d4:67:b8:3a:28:0c:68:
79:c3:9a:55:49:77:84:46:f1:f5:75:72:27:41:bb:8c:33:0d:
9f:89:d8:84:3c:b7:8e:86:22:bb:83:36:d7:26:a5:f3:16:fd:
00:94:53:7c:15:54:d6:5a:c4:4a:21:84:1c:cc:28:8b:48:e9:
28:21:dc:86:0c:d8:01:3d:fe:f3:80:45:64:2b:ff:57:1a:f1:
ae:c5:a5:53:46:89:1b:2b:56:db:ff:c8:20:2b:ba:0d:a1:e7:
80:80:19:9b:c0:fa:7c:5f:fb:2e:12:aa:e7:a8:98:8d:ba:a3:
89:ee:cd:2d:3d:23:1e:6c:8f:76:17:e9:4a:9e:7d:d2:af:a8:
92:14:b8:a9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jun 15 07:34:54 2025 by rpki-client