Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/8976e2-14f5-4cef-9912-cd3c160a6f46/1/n0Ip-VL6cLqnuppCWC9aIAGGBVk.roa
File: n0Ip-VL6cLqnuppCWC9aIAGGBVk.roa (raw, json)
Hash identifier: Plze8bNi0S5C4H4tkQ3hgwkWsiFwc79XI6iUMh0AEzM=
Subject key identifier: 9F:42:29:F9:52:FA:70:BA:A7:BA:9A:42:58:2F:5A:20:01:86:05:59
Certificate issuer: /CN=42add08d75249a067dbbc6317be5ba6e3f4d5fc9
Certificate serial: 01973F3A0BF66C3BFACBAE7ED2EF6C7C063A
Authority key identifier: 42:AD:D0:8D:75:24:9A:06:7D:BB:C6:31:7B:E5:BA:6E:3F:4D:5F:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/8976e2-14f5-4cef-9912-cd3c160a6f46/1/n0Ip-VL6cLqnuppCWC9aIAGGBVk.roa
Signing time: Thu 05 Jun 2025 08:34:18 +0000
ROA not before: Thu 05 Jun 2025 08:34:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208150
IP address blocks: 217.138.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/8976e2-14f5-4cef-9912-cd3c160a6f46/1/Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/8976e2-14f5-4cef-9912-cd3c160a6f46/1/Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:3f:3a:0b:f6:6c:3b:fa:cb:ae:7e:d2:ef:6c:7c:06:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42add08d75249a067dbbc6317be5ba6e3f4d5fc9
Validity
Not Before: Jun 5 08:34:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9f4229f952fa70baa7ba9a42582f5a2001860559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:36:9d:3b:72:68:fd:d4:87:ad:cc:e6:29:7c:
cc:d7:4a:bc:5e:30:cf:7b:de:81:3a:36:11:fa:d9:
23:bb:33:0c:44:9a:ba:ff:34:d8:a6:07:77:d1:63:
30:52:6e:c8:4e:88:09:ae:e2:ad:2c:29:83:af:1a:
9e:a5:6d:2a:a5:37:98:55:84:e1:b2:51:8d:c2:33:
76:f3:f6:5f:a8:3d:4b:7f:2a:cd:07:3d:cd:00:82:
cf:7b:a7:3d:95:a1:f5:e9:ee:28:a6:9f:3a:4c:82:
9f:74:cc:b3:9f:cd:a2:94:5a:b9:c5:3f:1d:f2:d7:
c2:0a:51:2a:c7:da:cb:ec:aa:a2:3c:f5:a1:dc:3f:
32:06:58:07:b5:dc:00:d0:2b:96:24:ae:d7:ea:af:
ca:98:ff:17:cc:52:c0:b0:5d:bc:8d:56:01:5d:db:
ac:b0:8f:d3:53:ae:69:9f:c0:e3:d5:d4:ee:68:b5:
e0:19:5a:53:d2:82:37:7d:32:97:69:92:57:13:b6:
5a:9e:59:0a:93:58:2d:6b:33:2f:20:c7:6a:63:d8:
3c:8e:30:54:1d:dd:49:01:e6:f4:a4:21:18:8d:71:
15:8b:55:b5:44:79:77:04:62:c8:ec:29:9e:a9:36:
51:e0:1d:98:07:5a:a2:32:cf:d2:a0:b3:86:83:f7:
e5:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:42:29:F9:52:FA:70:BA:A7:BA:9A:42:58:2F:5A:20:01:86:05:59
X509v3 Authority Key Identifier:
keyid:42:AD:D0:8D:75:24:9A:06:7D:BB:C6:31:7B:E5:BA:6E:3F:4D:5F:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/8976e2-14f5-4cef-9912-cd3c160a6f46/1/n0Ip-VL6cLqnuppCWC9aIAGGBVk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/8976e2-14f5-4cef-9912-cd3c160a6f46/1/Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.138.104.0/24
Signature Algorithm: sha256WithRSAEncryption
78:79:6d:6a:7f:06:a7:88:0a:d7:f3:4c:12:19:48:ab:d9:e0:
0f:fa:f3:e0:2e:7b:ae:b1:b1:9d:99:c6:37:f9:cb:b4:16:71:
56:4a:9c:4f:cd:11:2d:32:b6:73:2c:20:ad:80:e7:fe:aa:46:
15:a3:d2:da:68:fa:40:e0:ea:62:87:3b:93:a0:20:ca:d5:69:
0f:d4:f6:40:d7:e8:4c:d7:99:28:54:54:38:c0:e7:e5:62:7b:
89:a9:f3:97:54:96:f6:0a:f8:86:2e:34:23:68:53:b0:b0:e8:
e6:34:c1:f1:75:ac:72:2f:0f:84:3b:20:6e:c7:f3:2e:67:10:
01:cb:0d:d5:d3:87:5e:ec:a3:6a:01:a3:8a:67:04:60:dc:54:
08:c6:5c:7c:88:d3:0b:45:53:c9:45:72:1f:e6:73:a3:68:05:
f8:85:41:db:2c:d2:d4:b5:97:0b:aa:0e:17:32:3c:f3:70:01:
38:2b:6a:ed:93:bb:a8:fe:df:8a:eb:2b:38:dc:71:05:df:f1:
e6:89:2e:b3:14:f3:94:ea:14:45:ed:2a:7b:0f:c3:13:4e:7b:
2e:79:25:18:2b:06:5a:df:a4:0d:7e:98:0e:c2:d8:49:02:99:
0a:8f:dc:6e:d2:5c:fd:fe:ca:67:9d:2c:9c:96:ce:40:aa:6e:
5f:8b:4f:bb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZc/Ogv2bDv6y65+0u9sfAY6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyYWRkMDhkNzUyNDlhMDY3ZGJiYzYzMTdiZTViYTZlM2Y0
ZDVmYzkwHhcNMjUwNjA1MDgzNDE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZjQyMjlmOTUyZmE3MGJhYTdiYTlhNDI1ODJmNWEyMDAxODYwNTU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTadO3Jo/dSHrczmKXzM10q8XjDP
e96BOjYR+tkjuzMMRJq6/zTYpgd30WMwUm7ITogJruKtLCmDrxqepW0qpTeYVYTh
slGNwjN28/ZfqD1LfyrNBz3NAILPe6c9laH16e4opp86TIKfdMyzn82ilFq5xT8d
8tfCClEqx9rL7KqiPPWh3D8yBlgHtdwA0CuWJK7X6q/KmP8XzFLAsF28jVYBXdus
sI/TU65pn8Dj1dTuaLXgGVpT0oI3fTKXaZJXE7ZanlkKk1gtazMvIMdqY9g8jjBU
Hd1JAeb0pCEYjXEVi1W1RHl3BGLI7CmeqTZR4B2YB1qiMs/SoLOGg/flZwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ9CKflS+nC6p7qaQlgvWiABhgVZMB8GA1UdIwQY
MBaAFEKt0I11JJoGfbvGMXvlum4/TV/JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXEzUWpYVWttZ1o5dThZeGUtVzZiajlOWDhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84OTc2ZTItMTRmNS00Y2VmLTk5MTIt
Y2QzYzE2MGE2ZjQ2LzEvbjBJcC1WTDZjTHFudXBwQ1dDOWFJQUdHQlZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi84OTc2ZTItMTRmNS00Y2VmLTk5MTItY2QzYzE2MGE2ZjQ2
LzEvUXEzUWpYVWttZ1o5dThZeGUtVzZiajlOWDhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2YpoMA0G
CSqGSIb3DQEBCwUAA4IBAQB4eW1qfwaniArX80wSGUir2eAP+vPgLnuusbGdmcY3
+cu0FnFWSpxPzREtMrZzLCCtgOf+qkYVo9LaaPpA4OpihzuToCDK1WkP1PZA1+hM
15koVFQ4wOflYnuJqfOXVJb2CviGLjQjaFOwsOjmNMHxdaxyLw+EOyBux/MuZxAB
yw3V04de7KNqAaOKZwRg3FQIxlx8iNMLRVPJRXIf5nOjaAX4hUHbLNLUtZcLqg4X
MjzzcAE4K2rtk7uo/t+K6ys43HEF3/HmiS6zFPOU6hRF7Sp7D8MTTnsueSUYKwZa
36QNfpgOwthJApkKj9xu0lz9/spnnSycls5Aqm5fi0+7
-----END CERTIFICATE-----
Generated at Sat Jun 14 11:56:10 2025 by rpki-client