Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/x5ZXzDwgJhPdHgLaomboiwmxNA8.roa
File: x5ZXzDwgJhPdHgLaomboiwmxNA8.roa (raw, json)
Hash identifier: 3e3dNRhM435tSpzT0GBxNzuDi6p8F1OJMww/MjwUAag=
Subject key identifier: C7:96:57:CC:3C:20:26:13:DD:1E:02:DA:A2:66:E8:8B:09:B1:34:0F
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 01975AB0603FF4F7E9F52A8EF7D1B32ED7A6
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/x5ZXzDwgJhPdHgLaomboiwmxNA8.roa
Signing time: Tue 10 Jun 2025 16:33:17 +0000
ROA not before: Tue 10 Jun 2025 16:33:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213541
IP address blocks: 88.214.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5a:b0:60:3f:f4:f7:e9:f5:2a:8e:f7:d1:b3:2e:d7:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Jun 10 16:33:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c79657cc3c202613dd1e02daa266e88b09b1340f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:01:16:18:01:5b:14:cb:c4:3a:f5:72:ad:3a:
97:b1:f1:f6:e4:a0:a7:ff:22:e4:c5:e2:de:2c:5c:
7e:84:4b:75:56:25:05:50:7c:24:b1:4e:f3:1f:1d:
2e:45:bb:82:8e:f5:b2:5b:d8:bd:8f:f1:b9:e8:3a:
eb:c8:e4:9a:54:43:59:0f:03:91:64:aa:32:33:ce:
29:79:b9:0d:76:5b:4d:ce:7f:17:39:e4:82:f9:2a:
e5:06:78:39:d0:27:6b:f7:4a:cc:f1:09:1d:90:74:
b2:f8:df:5a:0b:15:fe:47:a8:49:c5:f7:bc:24:b3:
44:01:8e:be:c0:5c:72:f8:0b:dc:e1:7d:95:07:14:
53:6e:fc:92:0b:30:97:f2:25:af:99:26:fa:ff:a4:
73:79:1b:30:aa:9f:16:4e:ab:92:78:24:9f:24:a4:
f4:34:df:d5:0c:bd:df:c5:52:df:c3:0a:43:e3:5d:
7f:07:3b:7b:07:e6:54:36:86:26:d0:65:aa:73:8e:
3d:9a:55:4f:b2:d4:45:3d:2b:74:ab:63:a4:8d:19:
aa:9c:78:7f:2e:de:53:be:58:d4:e7:1e:4f:8f:86:
5d:66:7c:40:73:a7:a4:44:c3:8f:85:ce:bb:3d:eb:
3e:08:90:99:7e:cb:38:71:d4:90:b0:58:e3:a4:1f:
f3:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:96:57:CC:3C:20:26:13:DD:1E:02:DA:A2:66:E8:8B:09:B1:34:0F
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/x5ZXzDwgJhPdHgLaomboiwmxNA8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.214.51.0/24
Signature Algorithm: sha256WithRSAEncryption
05:f3:c8:c4:b0:e0:38:ba:b8:e7:22:51:ba:c7:d0:33:1c:58:
2d:0c:16:eb:91:08:00:97:db:f7:dd:2b:21:b8:11:4b:44:14:
49:20:8b:fe:0b:4b:87:2b:a2:41:8b:81:54:07:83:ff:f5:ce:
ae:dd:86:56:1f:d3:64:e7:17:ba:90:7a:ee:a3:98:bb:51:aa:
21:28:b6:d2:71:fc:57:4b:b7:9e:ff:b6:be:c6:10:49:05:74:
30:75:25:97:df:2a:2f:48:7f:e0:1c:ea:42:b5:98:24:dd:26:
64:32:b9:8c:af:5c:7d:99:b8:af:40:af:db:84:03:41:07:23:
4f:68:2b:22:aa:f5:e1:ef:79:4e:1d:0d:8e:63:c8:07:42:a7:
8a:da:c7:1d:05:ec:19:dc:15:33:4c:61:29:0d:92:27:f5:9f:
88:19:54:09:46:4c:26:fa:c5:29:0f:ab:c6:e1:da:5a:3b:44:
9b:1e:23:eb:83:5a:c6:6b:11:81:3b:d2:37:52:75:2e:fc:70:
a6:ef:8d:6d:68:36:40:4e:12:95:64:a9:30:a0:13:ae:4a:19:
c2:43:35:86:14:35:91:9e:d6:bb:fa:8f:3c:72:b9:f1:fc:9d:
8d:2a:5f:95:3b:62:d7:5d:00:38:57:4e:a9:1f:a8:70:98:e8:
c7:0a:eb:62
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZdasGA/9Pfp9SqO99GzLtemMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4
ZmNjNGMwHhcNMjUwNjEwMTYzMzE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNzk2NTdjYzNjMjAyNjEzZGQxZTAyZGFhMjY2ZTg4YjA5YjEzNDBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQEWGAFbFMvEOvVyrTqXsfH25KCn
/yLkxeLeLFx+hEt1ViUFUHwksU7zHx0uRbuCjvWyW9i9j/G56DrryOSaVENZDwOR
ZKoyM84pebkNdltNzn8XOeSC+SrlBng50Cdr90rM8QkdkHSy+N9aCxX+R6hJxfe8
JLNEAY6+wFxy+Avc4X2VBxRTbvySCzCX8iWvmSb6/6RzeRswqp8WTquSeCSfJKT0
NN/VDL3fxVLfwwpD411/Bzt7B+ZUNoYm0GWqc449mlVPstRFPSt0q2OkjRmqnHh/
Lt5TvljU5x5Pj4ZdZnxAc6ekRMOPhc67Pes+CJCZfss4cdSQsFjjpB/zuQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMeWV8w8ICYT3R4C2qJm6IsJsTQPMB8GA1UdIwQY
MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt
MjM5ZDJmZTM5OGIxLzEveDVaWHpEd2dKaFBkSGdMYW9tYm9pd214TkE4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx
LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWNYzMA0G
CSqGSIb3DQEBCwUAA4IBAQAF88jEsOA4urjnIlG6x9AzHFgtDBbrkQgAl9v33Ssh
uBFLRBRJIIv+C0uHK6JBi4FUB4P/9c6u3YZWH9Nk5xe6kHruo5i7UaohKLbScfxX
S7ee/7a+xhBJBXQwdSWX3yovSH/gHOpCtZgk3SZkMrmMr1x9mbivQK/bhANBByNP
aCsiqvXh73lOHQ2OY8gHQqeK2scdBewZ3BUzTGEpDZIn9Z+IGVQJRkwm+sUpD6vG
4dpaO0SbHiPrg1rGaxGBO9I3UnUu/HCm741taDZAThKVZKkwoBOuShnCQzWGFDWR
nta7+o88crnx/J2NKl+VO2LXXQA4V06pH6hwmOjHCuti
-----END CERTIFICATE-----
Generated at Wed Jun 18 02:30:01 2025 by rpki-client