Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/xeZzF4kLsUeSGRaVWSM2Yl0MJyw.roa
File: xeZzF4kLsUeSGRaVWSM2Yl0MJyw.roa (raw, json)
Hash identifier: lnF7laQENq7wiyRjfsr7hJCvC1X60Wd/Bj27GtnwCQI=
Subject key identifier: C5:E6:73:17:89:0B:B1:47:92:19:16:95:59:23:36:62:5D:0C:27:2C
Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Certificate serial: 01977D1FFE83EE7E4E18E003C5FD05033D85
Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/xeZzF4kLsUeSGRaVWSM2Yl0MJyw.roa
Signing time: Tue 17 Jun 2025 09:02:18 +0000
ROA not before: Tue 17 Jun 2025 09:02:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 401418
IP address blocks: 207.244.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 04:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7d:1f:fe:83:ee:7e:4e:18:e0:03:c5:fd:05:03:3d:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Validity
Not Before: Jun 17 09:02:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c5e67317890bb14792191695592336625d0c272c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:11:60:76:f6:ee:d2:a7:b3:c5:ff:65:08:60:
9c:eb:b5:6d:0a:f1:ed:39:f2:c9:8c:5c:3f:a3:30:
e3:47:23:ba:5a:17:b2:f0:bf:8b:29:a3:87:26:c6:
cf:b1:66:71:ab:1a:de:e8:0e:72:d4:0f:12:c1:ea:
39:17:4f:bd:14:2f:7c:d9:64:af:8b:27:63:ba:34:
ab:33:5f:af:e1:a6:e6:0d:74:59:81:14:95:0e:78:
8c:96:b3:7a:b4:c6:78:f5:69:7a:d9:11:63:1d:92:
ab:61:86:82:f2:91:ea:22:6a:5a:f0:78:d1:74:48:
88:8c:d8:46:6c:5d:fd:a4:21:f6:db:69:85:c9:51:
46:41:c1:26:15:53:cd:e7:64:fc:8a:b7:c9:40:55:
40:66:53:55:49:c1:90:02:f6:fe:76:22:f4:3c:d0:
4b:d8:f8:8d:2a:b4:c0:e2:d3:b6:5e:7e:75:18:43:
05:02:b1:a9:ed:fa:4c:7f:ed:cd:af:d9:de:61:ac:
63:c4:e7:b7:d4:2c:5b:7b:c6:a2:80:1b:77:be:ed:
5a:bf:f2:4e:b2:73:04:10:06:d5:73:c6:e0:44:1c:
3e:df:5c:68:1a:91:3f:83:20:63:3e:4c:40:59:18:
d2:0f:c6:ca:a7:85:f4:7f:91:52:8e:92:dc:d8:70:
3e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:E6:73:17:89:0B:B1:47:92:19:16:95:59:23:36:62:5D:0C:27:2C
X509v3 Authority Key Identifier:
keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/xeZzF4kLsUeSGRaVWSM2Yl0MJyw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
207.244.208.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:c5:72:86:a4:6a:b8:db:2e:37:04:51:3b:94:55:90:ac:b8:
6a:35:ba:6c:76:5e:84:2c:6f:21:22:8c:d7:4e:b3:28:c3:8f:
9e:ef:01:74:f1:d7:1a:2b:dc:81:fb:35:61:b9:49:c5:06:95:
3c:43:f1:73:e8:68:d1:9c:61:77:38:14:71:23:84:fb:99:85:
64:69:64:d3:f9:3c:af:37:3c:9c:89:55:12:d6:40:cc:7c:0a:
68:f8:3d:c0:89:66:f5:55:85:3f:e3:bf:34:39:69:c0:f3:61:
5a:c7:da:83:ee:b1:96:f4:b4:b1:26:41:35:c8:d9:62:5a:28:
72:8a:d5:83:46:09:f3:79:98:ca:39:8e:eb:d4:8e:3c:39:f3:
a2:a1:52:39:c3:8e:fe:2a:91:7d:a5:69:98:46:45:19:56:ea:
6c:22:fe:59:dc:1c:d1:bd:8e:41:47:3f:8a:bd:da:d3:e1:68:
80:32:76:eb:f5:f8:f7:77:92:65:2a:24:a7:0f:98:3e:01:52:
17:02:e9:2d:88:be:e4:7f:e7:6a:b1:8a:2d:ed:82:c7:f0:9f:
be:d4:21:04:c9:08:99:37:5a:dd:be:ea:e0:e8:d0:b0:6d:ba:
18:7f:af:5c:cd:37:39:5a:9e:2a:2a:c5:fd:7d:55:a6:5b:5f:
c4:00:08:d8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZd9H/6D7n5OGOADxf0FAz2FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwOGRhOWNmMDBkNGQ1OGI4NTRmZmM2MjAxMGYyMzViMDZk
ZjM1NGEwHhcNMjUwNjE3MDkwMjE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNWU2NzMxNzg5MGJiMTQ3OTIxOTE2OTU1OTIzMzY2MjVkMGMyNzJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxFgdvbu0qezxf9lCGCc67VtCvHt
OfLJjFw/ozDjRyO6Whey8L+LKaOHJsbPsWZxqxre6A5y1A8Sweo5F0+9FC982WSv
iydjujSrM1+v4abmDXRZgRSVDniMlrN6tMZ49Wl62RFjHZKrYYaC8pHqImpa8HjR
dEiIjNhGbF39pCH222mFyVFGQcEmFVPN52T8irfJQFVAZlNVScGQAvb+diL0PNBL
2PiNKrTA4tO2Xn51GEMFArGp7fpMf+3Nr9neYaxjxOe31Cxbe8aigBt3vu1av/JO
snMEEAbVc8bgRBw+31xoGpE/gyBjPkxAWRjSD8bKp4X0f5FSjpLc2HA+PQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMXmcxeJC7FHkhkWlVkjNmJdDCcsMB8GA1UdIwQY
MBaAFNCNqc8A1NWLhU/8YgEPI1sG3zVKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEkycHp3RFUxWXVGVF94aUFROGpXd2JmTlVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9mZWJlZjgtYTBlYS00YzdlLTg4MDYt
MjBlMTk3ODBjYjJlLzEveGVaekY0a0xzVWVTR1JhVldTTTJZbDBNSnl3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9mZWJlZjgtYTBlYS00YzdlLTg4MDYtMjBlMTk3ODBjYjJl
LzEvMEkycHp3RFUxWXVGVF94aUFROGpXd2JmTlVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz/TQMA0G
CSqGSIb3DQEBCwUAA4IBAQAcxXKGpGq42y43BFE7lFWQrLhqNbpsdl6ELG8hIozX
TrMow4+e7wF08dcaK9yB+zVhuUnFBpU8Q/Fz6GjRnGF3OBRxI4T7mYVkaWTT+Tyv
NzyciVUS1kDMfApo+D3AiWb1VYU/4780OWnA82Fax9qD7rGW9LSxJkE1yNliWihy
itWDRgnzeZjKOY7r1I48OfOioVI5w47+KpF9pWmYRkUZVupsIv5Z3BzRvY5BRz+K
vdrT4WiAMnbr9fj3d5JlKiSnD5g+AVIXAuktiL7kf+dqsYot7YLH8J++1CEEyQiZ
N1rdvurg6NCwbboYf69czTc5Wp4qKsX9fVWmW1/EAAjY
-----END CERTIFICATE-----
Generated at Thu Jul 3 11:33:04 2025 by rpki-client