Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/nXaIPWMZpRgR6Frtaa8yis8ZZFI.roa
File: nXaIPWMZpRgR6Frtaa8yis8ZZFI.roa (raw, json)
Hash identifier: UIB95mGqRdjkW4yMnYC+km6NPglXCSgTVTDEhvkpKNU=
Subject key identifier: 9D:76:88:3D:63:19:A5:18:11:E8:5A:ED:69:AF:32:8A:CF:19:64:52
Certificate issuer: /CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Certificate serial: 01963432159A2C3FE0AF594C1B3EAEF7E4DB
Authority key identifier: 30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/nXaIPWMZpRgR6Frtaa8yis8ZZFI.roa
Signing time: Mon 14 Apr 2025 12:06:59 +0000
ROA not before: Mon 14 Apr 2025 12:06:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198949
IP address blocks: 195.77.198.0/24 maxlen: 24
195.77.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:34:32:15:9a:2c:3f:e0:af:59:4c:1b:3e:ae:f7:e4:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Validity
Not Before: Apr 14 12:06:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9d76883d6319a51811e85aed69af328acf196452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9e:f1:da:8b:b0:f3:1d:35:ee:b4:46:79:1c:
41:fa:5f:15:25:02:60:b2:21:0f:76:28:12:2f:86:
c4:8c:23:d2:76:a3:a5:66:11:7e:b1:a3:5f:64:4a:
10:7c:6f:42:c2:0c:4f:f0:29:77:f6:38:cf:8a:76:
0d:fb:ca:5f:90:c0:ca:a3:d0:3a:ea:0c:90:0c:2d:
44:34:fd:6f:86:98:1c:59:13:e3:99:18:66:76:8f:
24:ad:70:1b:c1:4b:21:56:48:f8:8f:3a:37:8d:26:
f0:f8:53:92:ab:66:f3:61:de:c5:86:c5:e3:ad:3e:
3a:e0:6f:88:dc:b2:f9:42:fa:c3:30:e2:41:d4:39:
69:4f:2c:9b:59:b5:e5:91:37:9d:ca:87:51:ed:e5:
69:1b:24:84:2c:cb:bd:eb:8e:db:3e:c8:62:75:46:
fc:85:13:f4:f9:f3:f9:8e:41:2a:c6:7d:48:3c:6b:
25:f1:da:fe:1a:d0:49:53:21:04:87:35:a4:82:5b:
72:ad:72:a5:6a:a4:c3:1e:e2:1c:8a:30:a2:72:92:
eb:df:d3:c0:14:93:4d:ab:4f:8f:1e:37:3c:73:2b:
ea:89:b6:5b:99:1b:95:13:15:22:34:14:57:51:85:
13:78:ea:f6:7d:39:0e:39:f4:d2:17:67:35:02:43:
52:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:76:88:3D:63:19:A5:18:11:E8:5A:ED:69:AF:32:8A:CF:19:64:52
X509v3 Authority Key Identifier:
keyid:30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/nXaIPWMZpRgR6Frtaa8yis8ZZFI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.77.198.0/23
Signature Algorithm: sha256WithRSAEncryption
1b:36:19:53:35:9e:56:54:d4:5b:d2:d0:f8:12:30:2d:b7:36:
79:72:54:f0:d7:59:c5:de:e9:2a:c2:4e:da:a7:fc:1a:90:14:
52:be:f1:24:37:9f:e8:ec:1f:af:ad:2e:35:e2:25:dc:3a:9e:
57:82:91:2a:38:72:7d:fe:77:85:87:cf:0d:a5:72:a3:4f:cb:
ab:29:91:7a:d2:c1:0e:8e:16:de:71:5a:6e:11:ca:01:d7:7f:
5f:ff:6e:fd:33:4e:d8:ad:79:d8:d4:04:85:39:fe:59:bc:fc:
9b:9d:7f:b6:50:0f:df:48:c1:11:43:d7:76:07:24:6c:ee:8a:
f3:13:60:3c:a8:80:a8:b7:a0:f8:25:28:16:e7:53:d0:fd:9d:
fa:10:9b:56:eb:bb:88:7e:48:d3:74:00:d8:47:ff:95:05:28:
e5:23:9a:17:7a:6e:63:a2:51:d3:65:01:6f:73:8a:1b:13:5a:
f0:c1:0b:ee:fc:65:9d:63:0f:88:c5:3d:fe:d2:d4:a0:43:82:
a9:c4:46:67:87:73:8b:3c:c4:ed:86:68:d3:e2:80:78:18:29:
d9:87:f9:67:b9:07:cf:71:69:32:71:6e:d0:76:1b:0d:71:c5:
b1:06:1f:6d:ff:a5:b3:9c:e5:b1:e2:10:84:55:e3:9b:cd:f8:
66:42:6a:40
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZY0MhWaLD/gr1lMGz6u9+TbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwN2Y1ZmUyNzQwYTJiNmRlNGMzNzA5ZDI5NjQxMTViM2M5
NjdkYTEwHhcNMjUwNDE0MTIwNjU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZDc2ODgzZDYzMTlhNTE4MTFlODVhZWQ2OWFmMzI4YWNmMTk2NDUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn57x2ouw8x017rRGeRxB+l8VJQJg
siEPdigSL4bEjCPSdqOlZhF+saNfZEoQfG9CwgxP8Cl39jjPinYN+8pfkMDKo9A6
6gyQDC1ENP1vhpgcWRPjmRhmdo8krXAbwUshVkj4jzo3jSbw+FOSq2bzYd7FhsXj
rT464G+I3LL5QvrDMOJB1DlpTyybWbXlkTedyodR7eVpGySELMu9647bPshidUb8
hRP0+fP5jkEqxn1IPGsl8dr+GtBJUyEEhzWkgltyrXKlaqTDHuIcijCicpLr39PA
FJNNq0+PHjc8cyvqibZbmRuVExUiNBRXUYUTeOr2fTkOOfTSF2c1AkNSUQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ12iD1jGaUYEeha7WmvMorPGWRSMB8GA1UdIwQY
MBaAFDB/X+J0Citt5MNwnSlkEVs8ln2hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUg5ZjRuUUtLMjNrdzNDZEtXUVJXenlXZmFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9kY2ZkNDgtYzU0YS00Yzc4LWE0ZWQt
NGJhMmY4ZjFmODNiLzEvblhhSVBXTVpwUmdSNkZydGFhOHlpczhaWkZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9kY2ZkNDgtYzU0YS00Yzc4LWE0ZWQtNGJhMmY4ZjFmODNi
LzEvTUg5ZjRuUUtLMjNrdzNDZEtXUVJXenlXZmFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw03GMA0G
CSqGSIb3DQEBCwUAA4IBAQAbNhlTNZ5WVNRb0tD4EjAttzZ5clTw11nF3ukqwk7a
p/wakBRSvvEkN5/o7B+vrS414iXcOp5XgpEqOHJ9/neFh88NpXKjT8urKZF60sEO
jhbecVpuEcoB139f/279M07YrXnY1ASFOf5ZvPybnX+2UA/fSMERQ9d2ByRs7orz
E2A8qICot6D4JSgW51PQ/Z36EJtW67uIfkjTdADYR/+VBSjlI5oXem5jolHTZQFv
c4obE1rwwQvu/GWdYw+IxT3+0tSgQ4KpxEZnh3OLPMTthmjT4oB4GCnZh/lnuQfP
cWkycW7QdhsNccWxBh9t/6WznOWx4hCEVeObzfhmQmpA
-----END CERTIFICATE-----
Generated at Sun Apr 27 23:02:41 2025 by rpki-client