Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/CYC52qHhJ6RUPTEobJ8VoMfHNRI.roa
File: CYC52qHhJ6RUPTEobJ8VoMfHNRI.roa (raw, json)
Hash identifier: ZZP9aFpLns5QQxSZHDNfLoao3AVc9G009OXX8vXR5gc=
Subject key identifier: 09:80:B9:DA:A1:E1:27:A4:54:3D:31:28:6C:9F:15:A0:C7:C7:35:12
Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Certificate serial: 0197545EA3539AECC8C44DC0027ADE2920B5
Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/CYC52qHhJ6RUPTEobJ8VoMfHNRI.roa
Signing time: Mon 09 Jun 2025 11:06:17 +0000
ROA not before: Mon 09 Jun 2025 11:06:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29802
IP address blocks: 37.148.132.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 23:47:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:5e:a3:53:9a:ec:c8:c4:4d:c0:02:7a:de:29:20:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Validity
Not Before: Jun 9 11:06:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0980b9daa1e127a4543d31286c9f15a0c7c73512
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8b:8b:17:b4:70:50:83:a3:b4:e1:ff:c4:8c:
8b:89:4e:78:48:74:ba:a2:94:9e:1a:ee:0b:fc:8c:
90:6c:ab:1c:8a:90:c2:13:a0:06:f9:80:0c:61:b4:
98:f3:99:74:f1:7e:35:2f:63:42:bb:e7:0b:eb:39:
25:38:97:89:ad:ee:a7:b7:41:af:4a:a9:36:d1:4c:
b3:1a:f3:51:73:18:ab:87:b6:61:92:71:fd:f2:e9:
47:6b:b6:d7:aa:3e:aa:9f:65:2d:93:90:7d:d9:b3:
71:55:5f:2f:75:29:67:f0:b5:45:b4:7c:fe:63:b7:
8a:4d:04:cc:3d:74:a4:5d:7f:5e:ae:d4:19:c9:c3:
12:e6:e6:ac:94:2a:bf:fe:35:a5:4b:32:bd:05:7e:
1c:ac:93:20:40:8b:7a:48:68:f9:e2:d5:16:aa:fb:
1e:e6:2e:12:fe:ed:db:0c:c5:01:7b:cb:0a:29:14:
ad:4c:ca:19:69:f1:ff:f1:7b:c7:04:5f:8e:c2:b8:
93:b3:9b:de:d5:59:11:65:b9:0c:e6:00:4c:3c:d5:
ab:77:c5:68:1c:55:62:77:b2:a2:e6:7e:61:e9:e8:
33:85:f7:bf:47:a0:a1:2c:7d:46:3b:6a:7e:d4:af:
20:33:6c:6a:c5:9e:4e:eb:cc:13:99:b3:9c:cb:b9:
99:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:80:B9:DA:A1:E1:27:A4:54:3D:31:28:6C:9F:15:A0:C7:C7:35:12
X509v3 Authority Key Identifier:
keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/CYC52qHhJ6RUPTEobJ8VoMfHNRI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.148.132.0/22
Signature Algorithm: sha256WithRSAEncryption
40:d9:dc:3b:c2:11:d2:05:d5:da:95:9d:b7:6f:ef:09:82:45:
b0:3f:ab:d8:ed:13:12:95:ef:35:a1:20:9e:c0:98:ac:8c:25:
34:5d:0e:fa:63:44:ac:44:67:62:58:8c:59:7a:0d:f5:05:74:
e6:1b:a0:ea:d2:1b:33:a5:28:63:27:69:1f:69:60:b7:9f:8e:
df:38:56:e9:fc:c0:32:78:b4:a0:00:b0:3b:76:da:aa:9f:f8:
8e:16:43:0c:ad:aa:91:d3:61:e3:3c:b2:93:d6:eb:88:8d:6d:
d8:a7:12:a4:33:b1:c3:03:34:4a:4e:0a:9c:5f:ea:38:94:e4:
5e:b7:d9:cb:ba:ac:17:7c:3b:79:02:db:ac:91:ed:86:98:3f:
b9:da:78:dd:ac:73:7c:e8:e0:e1:57:e0:9c:38:f8:7f:3b:5f:
b1:7e:1f:75:e7:66:08:0c:55:8a:9c:df:72:c6:63:d3:21:f3:
77:b7:37:cc:85:04:15:6d:86:34:ac:b4:e4:f0:9b:db:5d:c9:
98:27:70:2a:cb:41:8d:bb:fa:10:d6:37:f1:5d:1d:4c:99:5e:
05:be:7e:fb:28:77:57:4b:18:56:c9:fc:f6:e2:96:ba:50:7d:
8d:54:23:3f:ef:6f:72:58:12:c3:22:20:62:ab:2f:8f:83:05:
c5:74:82:d7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZdUXqNTmuzIxE3AAnreKSC1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2YTI0OWEwZWFjZDhhYmNiZWEwZDgyZWY3MTAxNmQzODZl
OGVmOTQwHhcNMjUwNjA5MTEwNjE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOTgwYjlkYWExZTEyN2E0NTQzZDMxMjg2YzlmMTVhMGM3YzczNTEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4uLF7RwUIOjtOH/xIyLiU54SHS6
opSeGu4L/IyQbKscipDCE6AG+YAMYbSY85l08X41L2NCu+cL6zklOJeJre6nt0Gv
Sqk20UyzGvNRcxirh7ZhknH98ulHa7bXqj6qn2Utk5B92bNxVV8vdSln8LVFtHz+
Y7eKTQTMPXSkXX9ertQZycMS5uaslCq//jWlSzK9BX4crJMgQIt6SGj54tUWqvse
5i4S/u3bDMUBe8sKKRStTMoZafH/8XvHBF+OwriTs5ve1VkRZbkM5gBMPNWrd8Vo
HFVid7Ki5n5h6egzhfe/R6ChLH1GO2p+1K8gM2xqxZ5O68wTmbOcy7mZpwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAmAudqh4SekVD0xKGyfFaDHxzUSMB8GA1UdIwQY
MBaAFMaiSaDqzYq8vqDYLvcQFtOG6O+UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8zMGYxODYtOTBlMi00Y2E2LTkxN2Ut
MjEwNTdkMjI4ZDA1LzEvQ1lDNTJxSGhKNlJVUFRFb2JKOFZvTWZITlJJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC8zMGYxODYtOTBlMi00Y2E2LTkxN2UtMjEwNTdkMjI4ZDA1
LzEveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJZSEMA0G
CSqGSIb3DQEBCwUAA4IBAQBA2dw7whHSBdXalZ23b+8JgkWwP6vY7RMSle81oSCe
wJisjCU0XQ76Y0SsRGdiWIxZeg31BXTmG6Dq0hszpShjJ2kfaWC3n47fOFbp/MAy
eLSgALA7dtqqn/iOFkMMraqR02HjPLKT1uuIjW3YpxKkM7HDAzRKTgqcX+o4lORe
t9nLuqwXfDt5Atuske2GmD+52njdrHN86ODhV+CcOPh/O1+xfh9152YIDFWKnN9y
xmPTIfN3tzfMhQQVbYY0rLTk8JvbXcmYJ3Aqy0GNu/oQ1jfxXR1MmV4Fvn77KHdX
SxhWyfz24pa6UH2NVCM/729yWBLDIiBiqy+PgwXFdILX
-----END CERTIFICATE-----
Generated at Thu Jun 19 09:18:51 2025 by rpki-client