Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/5d2af7-382b-4dd6-a8b4-f921db75bdf9/1/gIk_7swzfHIFzJ9HRo4H0hPRjBs.roa
File: gIk_7swzfHIFzJ9HRo4H0hPRjBs.roa (raw, json)
Hash identifier: BT//6chX/aEeGk4MSCvHtrW5Qz6acTtSqbOnjSJQFXE=
Subject key identifier: 80:89:3F:EE:CC:33:7C:72:05:CC:9F:47:46:8E:07:D2:13:D1:8C:1B
Certificate issuer: /CN=892f3ff3c0a1ffb3af20f5b95e8cb64c88043f39
Certificate serial: 019784ABC0926DAEA36EC47D66DD5505D75D
Authority key identifier: 89:2F:3F:F3:C0:A1:FF:B3:AF:20:F5:B9:5E:8C:B6:4C:88:04:3F:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/5d2af7-382b-4dd6-a8b4-f921db75bdf9/1/gIk_7swzfHIFzJ9HRo4H0hPRjBs.roa
Signing time: Wed 18 Jun 2025 20:12:17 +0000
ROA not before: Wed 18 Jun 2025 20:12:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207059
IP address blocks: 151.216.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/5d2af7-382b-4dd6-a8b4-f921db75bdf9/1/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/5d2af7-382b-4dd6-a8b4-f921db75bdf9/1/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:84:ab:c0:92:6d:ae:a3:6e:c4:7d:66:dd:55:05:d7:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=892f3ff3c0a1ffb3af20f5b95e8cb64c88043f39
Validity
Not Before: Jun 18 20:12:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=80893feecc337c7205cc9f47468e07d213d18c1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ad:9f:3d:d2:25:8f:9f:55:3f:53:12:6c:2f:
ab:32:02:6f:8f:53:10:55:5e:73:0c:59:bf:34:50:
db:69:b7:b4:8e:52:d7:1b:2e:46:5a:73:5b:8d:00:
17:4b:02:ed:c2:69:69:aa:b1:c6:52:e5:cf:91:59:
78:67:f7:d8:5e:6a:97:01:e9:fc:f8:83:2f:b1:8c:
8e:17:49:67:d5:5a:e4:7e:33:bf:ab:74:40:5e:69:
6b:34:fc:b9:04:07:62:78:09:2f:4b:50:e8:9a:d6:
49:5f:a1:24:3a:a8:f4:5b:0e:12:25:97:89:c6:b3:
6b:4c:d4:64:6b:95:d4:40:3f:d9:ad:19:40:b7:47:
0f:d7:36:1d:29:07:21:4b:a6:38:cb:b0:d3:44:e1:
5a:89:fa:91:05:ea:56:10:d4:4b:58:bf:88:e6:3f:
f3:26:e6:58:53:2b:79:54:a0:e7:2d:4f:bb:25:21:
4a:ca:f1:b9:22:14:71:d9:19:0b:ca:a5:d4:fb:b2:
f9:be:53:8c:5a:9a:99:59:2f:ba:2d:66:58:d6:44:
c0:2a:86:9a:da:1c:3f:9e:03:48:a0:3a:9b:32:bf:
73:7d:96:bc:f6:5d:67:96:6d:b4:77:25:d5:a6:7f:
61:28:9d:fe:da:fa:28:0c:5e:43:4e:37:f9:86:36:
36:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:89:3F:EE:CC:33:7C:72:05:CC:9F:47:46:8E:07:D2:13:D1:8C:1B
X509v3 Authority Key Identifier:
keyid:89:2F:3F:F3:C0:A1:FF:B3:AF:20:F5:B9:5E:8C:B6:4C:88:04:3F:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/5d2af7-382b-4dd6-a8b4-f921db75bdf9/1/gIk_7swzfHIFzJ9HRo4H0hPRjBs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/5d2af7-382b-4dd6-a8b4-f921db75bdf9/1/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.46.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:da:4c:56:27:69:79:ab:d4:38:43:b3:a6:25:2c:a9:7a:55:
fa:4d:60:ff:75:1d:0e:75:b8:e0:25:f1:9e:93:89:19:8a:54:
69:ee:96:8d:f1:f8:ac:0f:2b:8f:39:1e:76:02:8d:7b:95:13:
30:75:6a:e5:20:da:12:9c:66:71:df:20:4e:11:da:9a:f9:1d:
40:0a:49:ab:c5:5b:6d:7f:3a:0e:e2:a7:88:a5:2f:29:a4:e4:
e4:95:6b:32:e4:f5:04:cb:b0:c8:91:ad:21:73:04:9e:55:31:
c4:1c:c8:e9:45:a1:33:72:f8:71:23:a2:36:3c:f2:36:f0:a0:
b7:c4:08:2d:c3:4a:9b:b9:0b:92:3d:cf:4d:47:24:b2:ac:d4:
73:9c:93:3c:64:75:c2:cf:56:51:98:f3:42:b1:22:f6:a5:bf:
04:52:36:64:cf:5e:b5:ca:67:f4:22:65:a4:5b:2c:3a:b2:4d:
52:73:25:4b:91:94:ae:1d:4b:de:ca:b6:5f:b6:45:56:2a:39:
04:bc:bc:0e:c4:92:4e:b4:2f:58:97:ed:d6:88:ce:9b:89:5b:
73:36:b6:84:d2:2d:82:37:fe:fd:16:0f:5b:3c:d2:2b:72:d6:
3d:72:3f:4e:ee:12:f4:62:d0:7f:93:5c:d5:81:c8:6d:6c:e0:
bb:f7:a0:a7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZeEq8CSba6jbsR9Zt1VBdddMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5MmYzZmYzYzBhMWZmYjNhZjIwZjViOTVlOGNiNjRjODgw
NDNmMzkwHhcNMjUwNjE4MjAxMjE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MDg5M2ZlZWNjMzM3YzcyMDVjYzlmNDc0NjhlMDdkMjEzZDE4YzFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApq2fPdIlj59VP1MSbC+rMgJvj1MQ
VV5zDFm/NFDbabe0jlLXGy5GWnNbjQAXSwLtwmlpqrHGUuXPkVl4Z/fYXmqXAen8
+IMvsYyOF0ln1VrkfjO/q3RAXmlrNPy5BAdieAkvS1DomtZJX6EkOqj0Ww4SJZeJ
xrNrTNRka5XUQD/ZrRlAt0cP1zYdKQchS6Y4y7DTROFaifqRBepWENRLWL+I5j/z
JuZYUyt5VKDnLU+7JSFKyvG5IhRx2RkLyqXU+7L5vlOMWpqZWS+6LWZY1kTAKoaa
2hw/ngNIoDqbMr9zfZa89l1nlm20dyXVpn9hKJ3+2vooDF5DTjf5hjY2rwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFICJP+7MM3xyBcyfR0aOB9IT0YwbMB8GA1UdIwQY
MBaAFIkvP/PAof+zryD1uV6MtkyIBD85MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVM4Xzg4Q2hfN092SVBXNVhveTJUSWdFUHprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy81ZDJhZjctMzgyYi00ZGQ2LWE4YjQt
ZjkyMWRiNzViZGY5LzEvZ0lrXzdzd3pmSElGeko5SFJvNEgwaFBSakJzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy81ZDJhZjctMzgyYi00ZGQ2LWE4YjQtZjkyMWRiNzViZGY5
LzEvaVM4Xzg4Q2hfN092SVBXNVhveTJUSWdFUHprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl9guMA0G
CSqGSIb3DQEBCwUAA4IBAQAb2kxWJ2l5q9Q4Q7OmJSypelX6TWD/dR0OdbjgJfGe
k4kZilRp7paN8fisDyuPOR52Ao17lRMwdWrlINoSnGZx3yBOEdqa+R1ACkmrxVtt
fzoO4qeIpS8ppOTklWsy5PUEy7DIka0hcwSeVTHEHMjpRaEzcvhxI6I2PPI28KC3
xAgtw0qbuQuSPc9NRySyrNRznJM8ZHXCz1ZRmPNCsSL2pb8EUjZkz161ymf0ImWk
Wyw6sk1ScyVLkZSuHUveyrZftkVWKjkEvLwOxJJOtC9Yl+3WiM6biVtzNraE0i2C
N/79Fg9bPNIrctY9cj9O7hL0YtB/k1zVgchtbOC796Cn
-----END CERTIFICATE-----
Generated at Sun Jun 29 03:52:37 2025 by rpki-client