Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/Itnfb5cOidqPHmrm9ItGmwZzqpE.roa
File: Itnfb5cOidqPHmrm9ItGmwZzqpE.roa (raw, json)
Hash identifier: iss4kvemyRAUGLNEu7CN/erlN+DUp3hzgmc3aCXZAfU=
Subject key identifier: 22:D9:DF:6F:97:0E:89:DA:8F:1E:6A:E6:F4:8B:46:9B:06:73:AA:91
Certificate issuer: /CN=ff31492473a78c6fe9f539f9fa7d2252560a2b7e
Certificate serial: 01976883CE4CCFD795569194A45FF19F56B9
Authority key identifier: FF:31:49:24:73:A7:8C:6F:E9:F5:39:F9:FA:7D:22:52:56:0A:2B:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/Itnfb5cOidqPHmrm9ItGmwZzqpE.roa
Signing time: Fri 13 Jun 2025 08:59:17 +0000
ROA not before: Fri 13 Jun 2025 08:59:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206813
IP address blocks: 2001:bf7:170::/44 maxlen: 48
2001:bf7:1310::/44 maxlen: 48
2001:bf7:1310::/48 maxlen: 48
2001:bf7:1311::/48 maxlen: 48
2001:bf7:1314::/48 maxlen: 48
2001:bf7:1315::/48 maxlen: 48
2001:bf7:1320::/44 maxlen: 48
2001:bf7:1322::/48 maxlen: 48
2001:bf7:1350::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft
rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 02:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:83:ce:4c:cf:d7:95:56:91:94:a4:5f:f1:9f:56:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff31492473a78c6fe9f539f9fa7d2252560a2b7e
Validity
Not Before: Jun 13 08:59:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=22d9df6f970e89da8f1e6ae6f48b469b0673aa91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:84:b0:3e:92:4a:47:1e:63:08:8f:3d:6e:b8:
9f:48:6f:22:d8:b8:4d:09:4b:d5:ce:13:3d:46:de:
63:fa:59:76:9f:b2:74:1a:6c:fe:b4:21:9b:0f:46:
b8:ab:73:c9:3d:67:5e:e0:b6:a5:51:79:5d:41:5b:
4b:53:93:d5:20:bd:d2:94:bd:72:ff:d4:f4:dc:b8:
41:9f:fe:b7:3f:86:ee:97:50:98:ce:c2:38:a4:1a:
95:1a:74:01:42:9d:6c:e2:b9:7e:4d:40:15:af:e0:
f9:cf:01:bf:a9:e6:ab:db:41:8b:da:6e:50:13:59:
c8:9e:f6:1c:69:42:71:8e:d2:fc:17:6a:81:fb:88:
cb:7f:55:48:fe:82:27:fa:f8:d6:17:51:41:22:26:
c4:40:fb:22:a5:53:3a:ec:cb:28:9b:75:75:d7:77:
2e:9d:ab:e6:f3:d1:74:c1:38:4f:fc:d3:05:ff:33:
17:5c:9c:c7:ac:e1:18:62:77:03:9f:51:4e:ce:01:
35:87:61:70:58:91:72:63:6d:0d:bd:52:41:4d:10:
95:cd:06:8e:8e:26:87:41:0d:8b:7f:51:1c:8c:f5:
cc:95:50:c6:82:7a:61:9b:36:8d:14:44:c9:7d:12:
dc:f2:bf:69:97:92:61:c7:85:95:2a:08:c0:97:0e:
98:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:D9:DF:6F:97:0E:89:DA:8F:1E:6A:E6:F4:8B:46:9B:06:73:AA:91
X509v3 Authority Key Identifier:
keyid:FF:31:49:24:73:A7:8C:6F:E9:F5:39:F9:FA:7D:22:52:56:0A:2B:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/Itnfb5cOidqPHmrm9ItGmwZzqpE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:bf7:170::/44
2001:bf7:1310::-2001:bf7:132f:ffff:ffff:ffff:ffff:ffff
2001:bf7:1350::/44
Signature Algorithm: sha256WithRSAEncryption
8b:48:08:42:82:8e:e9:7a:bf:57:ac:9e:99:f5:c5:ac:fe:ab:
c9:a2:57:e7:dc:eb:2e:74:96:67:b7:0e:9f:69:45:26:07:65:
ca:8a:db:48:87:02:9b:1c:6d:7d:a1:f8:9f:04:32:48:53:bb:
e3:2a:d5:1e:93:73:ea:3c:a4:00:35:10:bd:82:1d:1c:7f:66:
f7:8d:e9:06:6e:c1:8a:ed:f1:e6:39:56:e8:25:06:c7:3a:fa:
e2:1e:32:9d:8c:ad:22:77:0a:d1:b0:7c:85:f7:2b:7a:5b:7c:
38:7d:5b:58:00:5e:39:c6:a3:f1:e9:33:0b:f9:94:6d:a3:30:
1f:e7:58:28:79:f8:e8:7d:2e:4d:1c:34:32:3f:0b:0a:da:71:
5f:5b:f0:c6:f5:ab:09:4d:c2:dd:88:52:54:ee:cf:fd:8a:9a:
eb:a8:5d:50:96:84:d5:c0:13:d2:05:4c:fd:76:f8:0d:c3:9a:
0d:b7:3e:78:f2:59:b8:38:71:ae:e7:56:ce:77:8a:ad:49:94:
25:7c:02:ff:2d:d4:49:80:81:1a:db:0a:be:00:02:3d:0f:e8:
9a:24:c9:e3:de:d7:96:9d:f7:d6:4d:52:b6:15:20:da:73:29:
f3:42:96:17:64:73:ae:ed:a6:29:cc:d6:39:46:53:7e:a1:31:
0c:b3:68:95
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAZdog85Mz9eVVpGUpF/xn1a5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmMzE0OTI0NzNhNzhjNmZlOWY1MzlmOWZhN2QyMjUyNTYw
YTJiN2UwHhcNMjUwNjEzMDg1OTE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMmQ5ZGY2Zjk3MGU4OWRhOGYxZTZhZTZmNDhiNDY5YjA2NzNhYTkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7oSwPpJKRx5jCI89brifSG8i2LhN
CUvVzhM9Rt5j+ll2n7J0Gmz+tCGbD0a4q3PJPWde4LalUXldQVtLU5PVIL3SlL1y
/9T03LhBn/63P4bul1CYzsI4pBqVGnQBQp1s4rl+TUAVr+D5zwG/qear20GL2m5Q
E1nInvYcaUJxjtL8F2qB+4jLf1VI/oIn+vjWF1FBIibEQPsipVM67Msom3V113cu
navm89F0wThP/NMF/zMXXJzHrOEYYncDn1FOzgE1h2FwWJFyY20NvVJBTRCVzQaO
jiaHQQ2Lf1EcjPXMlVDGgnphmzaNFETJfRLc8r9pl5Jhx4WVKgjAlw6YTwIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFCLZ32+XDonajx5q5vSLRpsGc6qRMB8GA1UdIwQY
MBaAFP8xSSRzp4xv6fU5+fp9IlJWCit+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3pGSkpIT25qR19wOVRuNS1uMGlVbFlLSzM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8xYjQxMDUtMzQ3MS00NTkyLWJmMDct
NzNmZDNiYzE5YWE3LzEvSXRuZmI1Y09pZHFQSG1ybTlJdEdtd1p6cXBFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8xYjQxMDUtMzQ3MS00NTkyLWJmMDctNzNmZDNiYzE5YWE3
LzEvX3pGSkpIT25qR19wOVRuNS1uMGlVbFlLSzM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAAjAmAwcEIAEL9wFw
MBIDBwQgAQv3ExADBwQgAQv3EyADBwQgAQv3E1AwDQYJKoZIhvcNAQELBQADggEB
AItICEKCjul6v1esnpn1xaz+q8miV+fc6y50lme3Dp9pRSYHZcqK20iHApscbX2h
+J8EMkhTu+Mq1R6Tc+o8pAA1EL2CHRx/ZveN6QZuwYrt8eY5VuglBsc6+uIeMp2M
rSJ3CtGwfIX3K3pbfDh9W1gAXjnGo/HpMwv5lG2jMB/nWCh5+Oh9Lk0cNDI/Cwra
cV9b8Mb1qwlNwt2IUlTuz/2KmuuoXVCWhNXAE9IFTP12+A3Dmg23PnjyWbg4ca7n
Vs53iq1JlCV8Av8t1EmAgRrbCr4AAj0P6JokyePe15ad99ZNUrYVINpzKfNClhdk
c67tpinM1jlGU36hMQyzaJU=
-----END CERTIFICATE-----
Generated at Tue Jun 17 12:17:36 2025 by rpki-client