Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/dlXIk7WimVWVHc3ungqiNoZMusw.roa
File: dlXIk7WimVWVHc3ungqiNoZMusw.roa (raw, json)
Hash identifier: RfuMfcHrLbRg0Y3xsz3a1+VdHPSrzNKZ40aYKpVDn2E=
Subject key identifier: 76:55:C8:93:B5:A2:99:55:95:1D:CD:EE:9E:0A:A2:36:86:4C:BA:CC
Certificate issuer: /CN=acaf5ae46f05eff34433b5f371060dd4ccbde438
Certificate serial: 0197697CD4CAB4701DEC57AE03F9F63A5725
Authority key identifier: AC:AF:5A:E4:6F:05:EF:F3:44:33:B5:F3:71:06:0D:D4:CC:BD:E4:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rK9a5G8F7_NEM7XzcQYN1My95Dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/dlXIk7WimVWVHc3ungqiNoZMusw.roa
Signing time: Fri 13 Jun 2025 13:31:17 +0000
ROA not before: Fri 13 Jun 2025 13:31:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197726
IP address blocks: 193.9.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rK9a5G8F7_NEM7XzcQYN1My95Dg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 21:51:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:7c:d4:ca:b4:70:1d:ec:57:ae:03:f9:f6:3a:57:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acaf5ae46f05eff34433b5f371060dd4ccbde438
Validity
Not Before: Jun 13 13:31:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7655c893b5a29955951dcdee9e0aa236864cbacc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:da:a1:f0:8d:83:be:ad:44:01:fe:d9:40:41:
19:fa:3d:80:fb:76:d2:44:44:31:03:dd:51:5e:e1:
92:66:fc:e2:f1:76:b6:8a:26:e5:03:31:28:2c:46:
d9:7c:79:cf:d8:b9:60:35:01:e4:74:65:97:7d:ae:
cd:f4:8b:47:e9:c7:72:91:23:f5:e2:3b:fb:00:95:
0b:ae:e8:69:41:21:81:52:d7:bd:e7:20:4a:4f:a3:
9a:da:b5:6e:67:79:a2:0c:37:0b:68:6e:f4:9d:9b:
4b:b6:0d:ed:d4:e1:db:eb:64:f7:f7:c8:05:33:f6:
4c:ea:fc:f8:84:02:ac:e4:97:61:2d:bf:b3:d7:95:
6f:65:fb:e9:0f:27:23:31:c0:e0:a3:d9:db:b5:5b:
ab:1d:4c:83:03:d3:12:59:70:bd:0b:fa:fc:da:8d:
9f:73:60:5d:56:ea:61:76:77:61:6f:b4:14:5f:14:
bf:f8:e4:f8:13:92:fa:4d:ae:99:85:11:50:43:bd:
e0:7a:e5:9b:f9:94:81:54:8d:d1:23:04:ac:a0:12:
fe:7a:ba:c7:29:d3:e1:ab:93:45:93:a7:ec:ba:86:
1f:70:e9:06:89:f9:85:e8:1c:f6:cf:fd:b1:18:64:
3a:54:03:a5:da:6f:fa:71:40:d6:33:97:91:c0:69:
be:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:55:C8:93:B5:A2:99:55:95:1D:CD:EE:9E:0A:A2:36:86:4C:BA:CC
X509v3 Authority Key Identifier:
keyid:AC:AF:5A:E4:6F:05:EF:F3:44:33:B5:F3:71:06:0D:D4:CC:BD:E4:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rK9a5G8F7_NEM7XzcQYN1My95Dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/dlXIk7WimVWVHc3ungqiNoZMusw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.9.28.0/24
Signature Algorithm: sha256WithRSAEncryption
59:11:6e:56:ff:16:40:0b:d2:a7:59:f3:f1:f5:ef:23:45:04:
74:23:3d:32:27:7e:64:56:70:21:c9:ae:03:4b:2c:80:e0:29:
4c:a6:df:fb:23:46:f8:8a:c2:5c:2d:7f:3f:ad:47:97:f2:37:
93:73:a2:9d:22:bd:08:9e:d2:9b:f5:ad:b1:8e:5f:95:fc:eb:
2c:04:be:d3:1f:85:6d:f4:b9:13:66:a6:9d:15:25:21:2b:2c:
a7:a4:3f:8a:a5:37:1e:44:6e:83:05:a1:33:85:8d:16:4f:34:
ed:1a:42:60:35:14:7d:51:5e:87:30:1f:58:57:4a:60:d5:2d:
87:93:e5:04:d4:93:46:b8:2b:f9:31:6a:88:e9:d6:76:56:19:
9f:e9:5a:68:f6:d6:f4:06:a4:00:fd:c1:42:15:68:73:5e:67:
71:4b:51:4a:e6:29:3e:e1:b0:c1:5f:d7:ef:aa:f0:bd:b2:3f:
00:d0:45:94:d1:2f:43:e7:66:10:77:6d:ad:08:97:24:7b:44:
d3:aa:da:40:e3:1e:af:ed:5e:e9:20:e1:04:ef:ba:f5:99:c5:
47:1d:6d:c6:38:da:1d:8a:42:86:d7:e5:f6:23:91:60:d3:4c:
ca:ad:e0:6e:ec:d5:bd:1f:26:56:60:90:40:97:65:54:a4:2e:
44:4b:d5:2a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZdpfNTKtHAd7FeuA/n2OlclMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjYWY1YWU0NmYwNWVmZjM0NDMzYjVmMzcxMDYwZGQ0Y2Ni
ZGU0MzgwHhcNMjUwNjEzMTMzMTE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NjU1Yzg5M2I1YTI5OTU1OTUxZGNkZWU5ZTBhYTIzNjg2NGNiYWNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdqh8I2Dvq1EAf7ZQEEZ+j2A+3bS
REQxA91RXuGSZvzi8Xa2iiblAzEoLEbZfHnP2LlgNQHkdGWXfa7N9ItH6cdykSP1
4jv7AJULruhpQSGBUte95yBKT6Oa2rVuZ3miDDcLaG70nZtLtg3t1OHb62T398gF
M/ZM6vz4hAKs5JdhLb+z15VvZfvpDycjMcDgo9nbtVurHUyDA9MSWXC9C/r82o2f
c2BdVuphdndhb7QUXxS/+OT4E5L6Ta6ZhRFQQ73geuWb+ZSBVI3RIwSsoBL+errH
KdPhq5NFk6fsuoYfcOkGifmF6Bz2z/2xGGQ6VAOl2m/6cUDWM5eRwGm+9wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHZVyJO1oplVlR3N7p4KojaGTLrMMB8GA1UdIwQY
MBaAFKyvWuRvBe/zRDO183EGDdTMveQ4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcks5YTVHOEY3X05FTTdYemNRWU4xTXk5NURnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9kNmFhMTAtNzE4NS00MzdlLTlhNjgt
MTNjMmVhOTJhYTllLzEvZGxYSWs3V2ltVldWSGMzdW5ncWlOb1pNdXN3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9kNmFhMTAtNzE4NS00MzdlLTlhNjgtMTNjMmVhOTJhYTll
LzEvcks5YTVHOEY3X05FTTdYemNRWU4xTXk5NURnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwQkcMA0G
CSqGSIb3DQEBCwUAA4IBAQBZEW5W/xZAC9KnWfPx9e8jRQR0Iz0yJ35kVnAhya4D
SyyA4ClMpt/7I0b4isJcLX8/rUeX8jeTc6KdIr0IntKb9a2xjl+V/OssBL7TH4Vt
9LkTZqadFSUhKyynpD+KpTceRG6DBaEzhY0WTzTtGkJgNRR9UV6HMB9YV0pg1S2H
k+UE1JNGuCv5MWqI6dZ2Vhmf6Vpo9tb0BqQA/cFCFWhzXmdxS1FK5ik+4bDBX9fv
qvC9sj8A0EWU0S9D52YQd22tCJcke0TTqtpA4x6v7V7pIOEE77r1mcVHHW3GONod
ikKG1+X2I5Fg00zKreBu7NW9HyZWYJBAl2VUpC5ES9Uq
-----END CERTIFICATE-----
Generated at Tue Jun 17 06:18:03 2025 by rpki-client