Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1-XgDHNDgyr-01pu6crzIkphjL2M.roa
File: 1-XgDHNDgyr-01pu6crzIkphjL2M.roa (raw, json)
Hash identifier: 0lYDPgr9NI34cKYJ5q6dz70CxEOpBmm+nMGWfHyUXCQ=
Subject key identifier: F9:78:03:1C:D0:E0:CA:BF:B4:D6:9B:BA:72:BC:C8:92:98:63:2F:63
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0196E1CD9DB01A808B3592E46911C09819A2
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1-XgDHNDgyr-01pu6crzIkphjL2M.roa
Signing time: Sun 18 May 2025 05:11:10 +0000
ROA not before: Sun 18 May 2025 05:11:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 400556
IP address blocks: 37.202.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 23:47:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:e1:cd:9d:b0:1a:80:8b:35:92:e4:69:11:c0:98:19:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 18 05:11:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f978031cd0e0cabfb4d69bba72bcc89298632f63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:25:3a:66:b5:09:a9:86:77:db:8f:8e:f2:6d:
ec:6b:7a:69:74:0d:8b:ee:76:f1:27:61:9a:f2:ea:
5f:7f:7b:6d:e3:33:fc:93:71:ed:d7:0e:42:d7:6d:
44:9c:e9:8a:3d:d9:60:39:d9:94:9a:39:3d:9f:89:
94:a5:01:02:0f:91:c5:42:3f:b9:d9:8f:14:22:81:
e6:ea:45:60:18:17:73:2e:d0:c4:10:39:5b:0f:01:
81:1f:1d:b4:d9:6d:1b:a7:11:4b:99:7e:17:a4:3f:
2d:98:6b:57:bd:00:3c:e6:bf:b2:97:60:15:ef:03:
78:9f:94:df:72:cd:7c:19:74:b5:3c:ba:f2:a1:e8:
7b:55:ae:c3:e7:62:a6:45:ec:78:82:ba:83:71:b0:
41:3e:fa:15:6c:fe:90:e3:d2:0d:b9:1c:c1:7e:43:
ca:6c:bc:29:e2:cd:e3:1f:dd:3d:22:cb:f4:e1:fe:
9e:b7:52:3e:b9:20:13:5b:ea:7c:52:ff:a7:89:e6:
10:e0:e7:ca:3b:05:53:52:ba:86:c2:79:d2:d7:32:
79:c9:e5:7b:95:ca:e8:55:2d:6f:e7:3f:9a:ca:dc:
65:62:76:da:cf:9f:f1:36:2a:0f:af:97:bc:20:0f:
87:d3:1e:5a:6a:a3:e1:34:5f:51:86:c1:a4:67:62:
22:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:78:03:1C:D0:E0:CA:BF:B4:D6:9B:BA:72:BC:C8:92:98:63:2F:63
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1-XgDHNDgyr-01pu6crzIkphjL2M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.199.0/24
Signature Algorithm: sha256WithRSAEncryption
09:53:9b:18:ad:55:29:91:77:20:de:53:80:78:2b:2f:af:7a:
9b:7e:6d:63:96:c3:cd:07:f9:7f:fd:1d:66:b5:9b:23:2a:30:
cc:cb:00:ba:5e:2f:63:10:b3:17:7d:1e:18:90:df:4c:79:55:
9d:f0:80:be:56:3e:d4:2c:ec:cb:f3:73:3d:a7:d3:dc:2d:84:
a1:e1:ab:43:1c:0a:0d:58:ae:fe:7c:bf:07:99:3a:7b:5d:ff:
dd:f3:42:73:cd:f7:2d:19:1d:38:6d:70:5a:c2:de:af:02:dd:
74:a4:e1:97:5c:4c:ea:db:89:54:6f:68:9c:14:b1:84:b9:71:
73:c8:b2:3e:9c:85:87:d0:ed:5c:06:da:b7:d3:06:ee:c7:0a:
34:1f:52:e2:9e:fb:f5:bb:c7:93:19:9f:34:38:11:8d:4f:fa:
55:77:ff:88:9a:47:df:30:f4:a6:ba:a1:e4:17:a3:3a:87:16:
d1:62:42:c3:4d:b9:31:5b:94:3b:62:1a:ab:5b:dc:f6:ed:e6:
f7:6f:02:d4:7f:2b:fb:c2:50:ef:e8:4b:62:d9:8e:a1:ae:90:
33:1f:ae:66:b7:2a:0c:12:4a:b5:9f:97:04:c3:fe:6b:ef:dd:
40:ea:c8:e8:20:e1:6c:d5:da:79:e2:a7:ba:ca:bd:9d:f3:ba:
33:0d:35:4b
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZbhzZ2wGoCLNZLkaRHAmBmiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwNTE4MDUxMTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOTc4MDMxY2QwZTBjYWJmYjRkNjliYmE3MmJjYzg5Mjk4NjMyZjYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyyU6ZrUJqYZ324+O8m3sa3ppdA2L
7nbxJ2Ga8upff3tt4zP8k3Ht1w5C121EnOmKPdlgOdmUmjk9n4mUpQECD5HFQj+5
2Y8UIoHm6kVgGBdzLtDEEDlbDwGBHx202W0bpxFLmX4XpD8tmGtXvQA85r+yl2AV
7wN4n5Tfcs18GXS1PLryoeh7Va7D52KmRex4grqDcbBBPvoVbP6Q49INuRzBfkPK
bLwp4s3jH909Isv04f6et1I+uSATW+p8Uv+nieYQ4OfKOwVTUrqGwnnS1zJ5yeV7
lcroVS1v5z+aytxlYnbaz5/xNioPr5e8IA+H0x5aaqPhNF9RhsGkZ2IiswIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPl4AxzQ4Mq/tNabunK8yJKYYy9jMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvMS1YZ0RITkRneXItMDFwdTZjcnpJa3BoakwyTS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvOGUvZjQzYjFkLTllNTAtNDU1MS1hZTZhLTE3YjlkZTE0MTI1
Mi8xL3htSm05R2I3SkppamxGbXpOUzJpVVZHbHBNQS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEACXKxzAN
BgkqhkiG9w0BAQsFAAOCAQEACVObGK1VKZF3IN5TgHgrL696m35tY5bDzQf5f/0d
ZrWbIyowzMsAul4vYxCzF30eGJDfTHlVnfCAvlY+1Czsy/NzPafT3C2EoeGrQxwK
DViu/ny/B5k6e13/3fNCc833LRkdOG1wWsLerwLddKThl1xM6tuJVG9onBSxhLlx
c8iyPpyFh9DtXAbat9MG7scKNB9S4p779bvHkxmfNDgRjU/6VXf/iJpH3zD0prqh
5BejOocW0WJCw025MVuUO2Iaq1vc9u3m928C1H8r+8JQ7+hLYtmOoa6QMx+uZrcq
DBJKtZ+XBMP+a+/dQOrI6CDhbNXaeeKnusq9nfO6Mw01Sw==
-----END CERTIFICATE-----
Generated at Thu Jun 19 08:08:15 2025 by rpki-client