Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/897378-c556-4352-9a04-b10a832bca43/1/zL5-bAaGKrg00nXa4Fn138IIxZ4.roa
File: zL5-bAaGKrg00nXa4Fn138IIxZ4.roa (raw, json)
Hash identifier: M0v0JdyOR6B67NfHINIqXbYt7Qf8KStgSSSkak8wlls=
Subject key identifier: CC:BE:7E:6C:06:86:2A:B8:34:D2:75:DA:E0:59:F5:DF:C2:08:C5:9E
Certificate issuer: /CN=af6da9d56b42c2b816b1ae6b185125abf21593ef
Certificate serial: 0196FCEED40D6EF43680D677294D1439D538
Authority key identifier: AF:6D:A9:D5:6B:42:C2:B8:16:B1:AE:6B:18:51:25:AB:F2:15:93:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r22p1WtCwrgWsa5rGFElq_IVk-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/897378-c556-4352-9a04-b10a832bca43/1/zL5-bAaGKrg00nXa4Fn138IIxZ4.roa
Signing time: Fri 23 May 2025 11:37:12 +0000
ROA not before: Fri 23 May 2025 11:37:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 194.56.108.0/24 maxlen: 24
194.56.109.0/24 maxlen: 24
194.56.110.0/24 maxlen: 24
194.56.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/897378-c556-4352-9a04-b10a832bca43/1/r22p1WtCwrgWsa5rGFElq_IVk-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/897378-c556-4352-9a04-b10a832bca43/1/r22p1WtCwrgWsa5rGFElq_IVk-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/r22p1WtCwrgWsa5rGFElq_IVk-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:fc:ee:d4:0d:6e:f4:36:80:d6:77:29:4d:14:39:d5:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af6da9d56b42c2b816b1ae6b185125abf21593ef
Validity
Not Before: May 23 11:37:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ccbe7e6c06862ab834d275dae059f5dfc208c59e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fb:75:28:53:94:88:c3:7b:e1:c5:f4:ec:3a:
4f:4c:5e:e3:dc:47:d1:2c:b0:7b:ec:83:92:d0:60:
d0:76:42:8f:ab:62:50:77:a5:df:b6:8e:16:92:1a:
7f:d5:1f:c0:8a:3b:3e:22:ce:a1:f6:30:0a:50:ab:
2a:e5:e9:d6:9b:b6:dc:0a:16:64:c0:8c:6a:a7:d6:
0e:0f:9e:a4:8e:fd:fb:da:20:9d:da:16:33:ea:94:
ae:20:48:f9:f8:90:de:a5:a7:73:9c:5a:8e:50:db:
d4:ec:d0:5d:e7:5a:00:8a:38:fd:29:57:2a:62:43:
f2:c0:cd:2a:6b:ee:0b:d9:73:9c:e1:3a:7b:76:7e:
5f:68:33:f7:7b:b1:c5:77:49:43:ea:67:5e:ca:10:
f2:3b:79:e4:dc:fe:49:99:70:84:05:00:f9:41:80:
d0:58:ba:69:20:6b:2e:40:51:41:67:d7:d7:39:50:
ce:b7:5c:95:cd:9d:7b:ba:6e:ec:76:57:02:f9:38:
93:c7:46:a2:74:bf:58:cd:5b:a9:89:7e:e2:41:71:
04:25:04:71:bb:b4:97:0c:9c:bf:6e:7c:db:00:4f:
a4:8d:24:75:89:07:65:26:36:4f:98:52:f1:a9:d2:
16:af:ec:4d:90:94:e8:f9:c5:60:2f:12:68:a7:6c:
1f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:BE:7E:6C:06:86:2A:B8:34:D2:75:DA:E0:59:F5:DF:C2:08:C5:9E
X509v3 Authority Key Identifier:
keyid:AF:6D:A9:D5:6B:42:C2:B8:16:B1:AE:6B:18:51:25:AB:F2:15:93:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r22p1WtCwrgWsa5rGFElq_IVk-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/897378-c556-4352-9a04-b10a832bca43/1/zL5-bAaGKrg00nXa4Fn138IIxZ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/897378-c556-4352-9a04-b10a832bca43/1/r22p1WtCwrgWsa5rGFElq_IVk-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.56.108.0/22
Signature Algorithm: sha256WithRSAEncryption
af:dd:df:c3:c9:c0:7b:bd:b6:f1:d9:25:75:34:8a:f6:b4:c3:
c3:65:9d:34:3d:5a:ac:71:42:a4:14:22:41:0e:10:92:c8:9c:
90:3e:8c:1a:3b:b3:79:9d:69:cb:d6:e7:75:0a:b9:86:c8:d8:
bb:e9:1c:51:63:46:22:3e:0e:33:09:51:12:3f:ac:81:a8:51:
58:1f:07:39:19:93:1c:eb:0a:b4:52:e8:03:1a:94:60:d2:ed:
7f:e0:4f:74:e3:bb:75:be:fe:ec:bf:11:d8:12:9d:5a:3a:55:
91:15:bd:d8:cf:b8:3a:bd:98:f0:41:c5:21:44:24:2e:dc:38:
cc:44:06:2c:71:c3:50:4e:6b:fa:56:44:dc:a7:6b:26:2c:a0:
81:03:77:5e:b1:36:6b:5e:05:d6:79:a7:6c:ba:7f:35:8a:9b:
ea:88:cd:d7:aa:d0:80:5a:51:ac:54:bf:83:3a:eb:16:fd:b0:
b9:3c:b1:80:40:1a:20:e1:da:35:71:db:de:3d:86:6f:e7:8a:
69:91:90:9e:47:a1:96:57:fc:57:8b:f9:81:79:00:31:79:8b:
3f:d6:9d:25:3c:73:1f:27:c4:2a:01:bd:f8:12:da:ce:32:7a:
cc:0c:96:e6:a8:ce:cb:91:16:6c:e3:f4:7f:55:c7:06:1f:7f:
56:33:cf:2e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZb87tQNbvQ2gNZ3KU0UOdU4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmNmRhOWQ1NmI0MmMyYjgxNmIxYWU2YjE4NTEyNWFiZjIx
NTkzZWYwHhcNMjUwNTIzMTEzNzEyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjY2JlN2U2YzA2ODYyYWI4MzRkMjc1ZGFlMDU5ZjVkZmMyMDhjNTllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvft1KFOUiMN74cX07DpPTF7j3EfR
LLB77IOS0GDQdkKPq2JQd6Xfto4Wkhp/1R/Aijs+Is6h9jAKUKsq5enWm7bcChZk
wIxqp9YOD56kjv372iCd2hYz6pSuIEj5+JDepadznFqOUNvU7NBd51oAijj9KVcq
YkPywM0qa+4L2XOc4Tp7dn5faDP3e7HFd0lD6mdeyhDyO3nk3P5JmXCEBQD5QYDQ
WLppIGsuQFFBZ9fXOVDOt1yVzZ17um7sdlcC+TiTx0aidL9YzVupiX7iQXEEJQRx
u7SXDJy/bnzbAE+kjSR1iQdlJjZPmFLxqdIWr+xNkJTo+cVgLxJop2wfywIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMy+fmwGhiq4NNJ12uBZ9d/CCMWeMB8GA1UdIwQY
MBaAFK9tqdVrQsK4FrGuaxhRJavyFZPvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjIycDFXdEN3cmdXc2E1ckdGRWxxX0lWay04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy84OTczNzgtYzU1Ni00MzUyLTlhMDQt
YjEwYTgzMmJjYTQzLzEvekw1LWJBYUdLcmcwMG5YYTRGbjEzOElJeFo0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy84OTczNzgtYzU1Ni00MzUyLTlhMDQtYjEwYTgzMmJjYTQz
LzEvcjIycDFXdEN3cmdXc2E1ckdGRWxxX0lWay04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwjhsMA0G
CSqGSIb3DQEBCwUAA4IBAQCv3d/DycB7vbbx2SV1NIr2tMPDZZ00PVqscUKkFCJB
DhCSyJyQPowaO7N5nWnL1ud1CrmGyNi76RxRY0YiPg4zCVESP6yBqFFYHwc5GZMc
6wq0UugDGpRg0u1/4E9047t1vv7svxHYEp1aOlWRFb3Yz7g6vZjwQcUhRCQu3DjM
RAYsccNQTmv6VkTcp2smLKCBA3desTZrXgXWeadsun81ipvqiM3XqtCAWlGsVL+D
OusW/bC5PLGAQBog4do1cdvePYZv54ppkZCeR6GWV/xXi/mBeQAxeYs/1p0lPHMf
J8QqAb34EtrOMnrMDJbmqM7LkRZs4/R/VccGH39WM88u
-----END CERTIFICATE-----
Generated at Sat Jun 14 06:20:25 2025 by rpki-client