Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/_dHzyYQGv4Y8g-fA2KZPPLrw37k.roa
File: _dHzyYQGv4Y8g-fA2KZPPLrw37k.roa (raw, json)
Hash identifier: uETpHYFoMRywDiMebPWA1EXMMuWHRhKGPHCH85PDRSk=
Subject key identifier: FD:D1:F3:C9:84:06:BF:86:3C:83:E7:C0:D8:A6:4F:3C:BA:F0:DF:B9
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0196B8D0C250D22FF2DA1F7C47530937D988
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/_dHzyYQGv4Y8g-fA2KZPPLrw37k.roa
Signing time: Sat 10 May 2025 06:10:11 +0000
ROA not before: Sat 10 May 2025 06:10:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210369
IP address blocks: 193.222.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 10:50:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:d0:c2:50:d2:2f:f2:da:1f:7c:47:53:09:37:d9:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: May 10 06:10:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fdd1f3c98406bf863c83e7c0d8a64f3cbaf0dfb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c6:f4:28:24:b9:d8:e7:bb:8f:33:f7:af:a4:
7c:9c:4f:e7:27:d7:85:96:72:9d:56:4a:98:37:fa:
a8:0a:c7:3d:6b:e3:24:d2:b6:47:13:a8:c0:9f:5b:
61:f9:91:6f:d1:62:4b:5e:82:70:1d:8b:87:6d:7c:
60:10:35:29:58:4f:8a:32:8d:3a:16:12:50:f9:69:
7d:a2:b3:6f:c9:ce:fb:eb:f4:b6:91:b0:56:6b:d7:
17:45:f3:bf:3d:6f:dc:f6:fc:2f:35:8c:c3:7f:3f:
cd:7a:a9:91:3c:5f:78:ea:81:1e:a5:11:66:c0:36:
94:0c:00:8d:38:d3:9e:10:2b:2c:c5:1a:b9:c1:d1:
cf:b2:84:ed:fa:42:41:8a:d7:84:de:36:e1:7c:53:
53:1d:b1:91:b9:37:36:2d:66:61:a6:9b:9d:94:e2:
61:8b:2a:e8:af:e2:a8:06:29:da:55:17:f1:7a:b8:
fe:e5:39:29:7c:f2:16:32:20:0f:8e:9f:cf:ee:64:
42:c8:ee:29:80:92:77:f2:eb:f8:c4:c8:92:0e:27:
48:56:b8:e6:0f:4d:a1:73:2a:8f:ea:87:a2:07:f8:
73:7c:41:18:cf:f0:e3:00:f3:c5:f5:0c:75:40:27:
dc:29:da:55:67:c0:d4:65:67:c7:16:9c:e6:99:6c:
6e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:D1:F3:C9:84:06:BF:86:3C:83:E7:C0:D8:A6:4F:3C:BA:F0:DF:B9
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/_dHzyYQGv4Y8g-fA2KZPPLrw37k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.222.98.0/24
Signature Algorithm: sha256WithRSAEncryption
63:8c:4b:1e:09:38:56:b4:5c:ee:3c:ae:75:6e:93:fc:c1:93:
9f:94:5a:11:47:c4:7a:bd:fc:77:e5:a7:63:62:ed:8a:6a:7a:
23:ea:99:42:e9:e3:8f:66:d1:35:f6:7a:7e:73:3f:9f:b2:06:
0a:51:56:2b:d0:53:13:9e:68:67:77:3a:6b:13:5f:2c:88:e0:
14:c7:c7:0c:4a:6e:e2:b0:80:ef:40:28:fb:cb:2c:a9:2f:51:
a2:a3:aa:86:47:cb:c5:a6:ad:eb:b1:59:ee:e1:02:cf:04:c3:
6b:9f:88:8f:80:78:33:0c:9d:9b:c8:05:3f:12:32:04:a6:fd:
c7:31:11:b6:54:c3:e3:10:c3:95:9f:ff:49:62:75:cc:0e:09:
c3:98:be:ee:87:68:8c:04:ac:ff:83:dd:22:ae:61:01:2d:8e:
3d:c5:9b:4d:86:24:b2:85:df:7e:c9:a1:33:79:91:f3:ca:bb:
40:80:7e:ae:e5:fb:7a:1f:ab:44:c5:8f:67:7c:20:60:31:50:
f9:71:c1:27:41:80:32:bb:25:3a:07:50:94:3a:f5:8f:74:25:
17:8c:95:65:78:1d:6b:37:88:17:a2:88:72:3a:b4:37:b7:16:
e9:ee:74:9c:1b:43:c6:19:41:ef:40:07:63:12:87:fa:a2:df:
a2:80:95:ca
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZa40MJQ0i/y2h98R1MJN9mIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjUwNTEwMDYxMDExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZGQxZjNjOTg0MDZiZjg2M2M4M2U3YzBkOGE2NGYzY2JhZjBkZmI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8b0KCS52Oe7jzP3r6R8nE/nJ9eF
lnKdVkqYN/qoCsc9a+Mk0rZHE6jAn1th+ZFv0WJLXoJwHYuHbXxgEDUpWE+KMo06
FhJQ+Wl9orNvyc776/S2kbBWa9cXRfO/PW/c9vwvNYzDfz/NeqmRPF946oEepRFm
wDaUDACNONOeECssxRq5wdHPsoTt+kJBiteE3jbhfFNTHbGRuTc2LWZhppudlOJh
iyror+KoBinaVRfxerj+5TkpfPIWMiAPjp/P7mRCyO4pgJJ38uv4xMiSDidIVrjm
D02hcyqP6oeiB/hzfEEYz/DjAPPF9Qx1QCfcKdpVZ8DUZWfHFpzmmWxuRQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP3R88mEBr+GPIPnwNimTzy68N+5MB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvX2RIenlZUUd2NFk4Zy1mQTJLWlBQTHJ3MzdrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwd5iMA0G
CSqGSIb3DQEBCwUAA4IBAQBjjEseCThWtFzuPK51bpP8wZOflFoRR8R6vfx35adj
Yu2Kanoj6plC6eOPZtE19np+cz+fsgYKUVYr0FMTnmhndzprE18siOAUx8cMSm7i
sIDvQCj7yyypL1Gio6qGR8vFpq3rsVnu4QLPBMNrn4iPgHgzDJ2byAU/EjIEpv3H
MRG2VMPjEMOVn/9JYnXMDgnDmL7uh2iMBKz/g90irmEBLY49xZtNhiSyhd9+yaEz
eZHzyrtAgH6u5ft6H6tExY9nfCBgMVD5ccEnQYAyuyU6B1CUOvWPdCUXjJVleB1r
N4gXoohyOrQ3txbp7nScG0PGGUHvQAdjEof6ot+igJXK
-----END CERTIFICATE-----
Generated at Mon May 12 20:34:18 2025 by rpki-client