Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/3L6JAHHrLKqNS5i1HV40c9xyyEM.roa
File: 3L6JAHHrLKqNS5i1HV40c9xyyEM.roa (raw, json)
Hash identifier: qyyZT9D9IGcDrviVnxZxLdBd6LOM1Me+aqwZJ6D1tPM=
Subject key identifier: DC:BE:89:00:71:EB:2C:AA:8D:4B:98:B5:1D:5E:34:73:DC:72:C8:43
Certificate issuer: /CN=6c5377bb9da41caa1176f432262dcaa99c476f9a
Certificate serial: 0196E88FF4FDACE6C6A7930C6B6F17F55A7C
Authority key identifier: 6C:53:77:BB:9D:A4:1C:AA:11:76:F4:32:26:2D:CA:A9:9C:47:6F:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bFN3u52kHKoRdvQyJi3KqZxHb5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/3L6JAHHrLKqNS5i1HV40c9xyyEM.roa
Signing time: Mon 19 May 2025 12:41:10 +0000
ROA not before: Mon 19 May 2025 12:41:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20676
IP address blocks: 77.247.96.0/22 maxlen: 22
2a0a:dc44::/30 maxlen: 30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/bFN3u52kHKoRdvQyJi3KqZxHb5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 03:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:e8:8f:f4:fd:ac:e6:c6:a7:93:0c:6b:6f:17:f5:5a:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c5377bb9da41caa1176f432262dcaa99c476f9a
Validity
Not Before: May 19 12:41:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dcbe890071eb2caa8d4b98b51d5e3473dc72c843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cd:20:23:3b:ba:93:2a:39:5e:94:ed:dc:8f:
d1:3c:fe:b4:f0:8e:81:53:23:8d:fd:eb:0b:0d:1e:
92:7f:ef:21:52:b2:01:53:3e:93:53:b3:ce:ba:75:
71:29:4f:55:69:b0:03:cf:1e:b8:a2:8d:76:99:95:
1a:68:f5:ba:aa:4b:93:87:ad:83:56:72:fb:70:40:
7e:1b:71:11:30:b0:aa:65:fb:7e:9a:2e:5f:aa:10:
80:81:81:18:ad:47:0e:07:49:ab:aa:35:b2:07:81:
73:57:4e:c9:41:8a:6a:cc:a3:8c:d9:08:a3:3c:85:
0c:79:27:7a:5e:b6:ab:37:2c:47:90:cc:95:ba:77:
e5:1a:0c:e9:fd:84:bc:f2:22:c0:9e:72:7c:10:fd:
ac:66:19:1f:7b:f6:ee:4c:03:53:aa:36:52:2d:2b:
eb:40:41:9e:08:b7:4e:6d:a6:2d:02:43:43:70:53:
9f:2f:22:5a:ff:31:ab:67:ce:43:58:6a:24:95:ac:
c1:1f:99:43:23:1c:cc:a9:8c:ea:94:dc:1c:f9:13:
cf:ab:8b:33:20:cc:fb:e7:f7:3a:16:c8:e5:04:1f:
66:31:84:71:e5:a6:a3:39:99:a0:9a:19:df:ec:87:
46:66:6f:92:10:4e:4d:31:53:e6:50:97:ae:28:e6:
8d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:BE:89:00:71:EB:2C:AA:8D:4B:98:B5:1D:5E:34:73:DC:72:C8:43
X509v3 Authority Key Identifier:
keyid:6C:53:77:BB:9D:A4:1C:AA:11:76:F4:32:26:2D:CA:A9:9C:47:6F:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bFN3u52kHKoRdvQyJi3KqZxHb5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/3L6JAHHrLKqNS5i1HV40c9xyyEM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.247.96.0/22
IPv6:
2a0a:dc44::/30
Signature Algorithm: sha256WithRSAEncryption
e1:b2:1e:73:c7:6b:32:5f:87:79:8c:0a:ad:a0:6a:87:1f:28:
47:cd:b6:ad:15:e3:cb:5d:35:04:4a:c1:f7:cd:4b:5a:96:1e:
6e:52:4e:22:ef:cf:76:8a:87:bb:7e:21:2b:2c:68:9e:fd:ff:
71:9b:3d:6c:a2:86:bb:0d:80:11:1a:12:cc:a0:6f:ed:f9:aa:
ff:b1:7e:59:7a:f4:c4:0c:38:2e:17:69:33:d6:74:dd:e7:e0:
34:e7:2a:5e:d0:02:79:f8:cc:95:ca:0e:af:97:26:77:6d:d6:
ee:9b:3d:46:df:5c:08:04:21:cf:ea:08:77:b1:e8:35:ae:3f:
39:cf:95:7e:57:32:00:cf:e0:5b:11:66:51:30:15:0c:a4:34:
3d:fc:cc:9a:7d:d1:92:8b:92:cf:89:5b:e4:da:7b:dd:89:e2:
11:86:f6:7d:14:83:f9:c3:5f:9f:6b:47:92:19:9c:e8:fa:3e:
d7:8b:72:41:78:96:33:c6:34:07:0a:a7:79:e9:97:51:b9:ed:
15:b2:c1:22:13:3d:87:af:93:aa:0f:f7:b5:5e:49:c8:b2:2d:
f7:e1:f5:d5:9e:f8:aa:16:fa:65:aa:a7:8c:fa:7a:d4:75:94:
3b:08:f7:6d:c3:35:a0:c6:36:f0:90:a7:32:2b:ea:9e:4e:a4:
b4:40:44:8f
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZboj/T9rObGp5MMa28X9Vp8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjNTM3N2JiOWRhNDFjYWExMTc2ZjQzMjI2MmRjYWE5OWM0
NzZmOWEwHhcNMjUwNTE5MTI0MTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkY2JlODkwMDcxZWIyY2FhOGQ0Yjk4YjUxZDVlMzQ3M2RjNzJjODQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArs0gIzu6kyo5XpTt3I/RPP608I6B
UyON/esLDR6Sf+8hUrIBUz6TU7POunVxKU9VabADzx64oo12mZUaaPW6qkuTh62D
VnL7cEB+G3ERMLCqZft+mi5fqhCAgYEYrUcOB0mrqjWyB4FzV07JQYpqzKOM2Qij
PIUMeSd6XrarNyxHkMyVunflGgzp/YS88iLAnnJ8EP2sZhkfe/buTANTqjZSLSvr
QEGeCLdObaYtAkNDcFOfLyJa/zGrZ85DWGoklazBH5lDIxzMqYzqlNwc+RPPq4sz
IMz75/c6FsjlBB9mMYRx5aajOZmgmhnf7IdGZm+SEE5NMVPmUJeuKOaNnwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFNy+iQBx6yyqjUuYtR1eNHPccshDMB8GA1UdIwQY
MBaAFGxTd7udpByqEXb0MiYtyqmcR2+aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkZOM3U1MmtIS29SZHZReUppM0txWnhIYjVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS85YjE5YjUtNDNiYi00NzQ0LTkzY2It
NmVkMTBlYmI5MzNmLzEvM0w2SkFISHJMS3FOUzVpMUhWNDBjOXh5eUVNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS85YjE5YjUtNDNiYi00NzQ0LTkzY2ItNmVkMTBlYmI5MzNm
LzEvYkZOM3U1MmtIS29SZHZReUppM0txWnhIYjVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCTfdgMA0E
AgACMAcDBQIqCtxEMA0GCSqGSIb3DQEBCwUAA4IBAQDhsh5zx2syX4d5jAqtoGqH
HyhHzbatFePLXTUESsH3zUtalh5uUk4i7892ioe7fiErLGie/f9xmz1sooa7DYAR
GhLMoG/t+ar/sX5ZevTEDDguF2kz1nTd5+A05ype0AJ5+MyVyg6vlyZ3bdbumz1G
31wIBCHP6gh3seg1rj85z5V+VzIAz+BbEWZRMBUMpDQ9/MyafdGSi5LPiVvk2nvd
ieIRhvZ9FIP5w1+fa0eSGZzo+j7Xi3JBeJYzxjQHCqd56ZdRue0VssEiEz2Hr5Oq
D/e1XknIsi334fXVnviqFvplqqeM+nrUdZQ7CPdtwzWgxjbwkKcyK+qeTqS0QESP
-----END CERTIFICATE-----
Generated at Sun Jun 15 09:27:50 2025 by rpki-client