Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/cyZ1sTw8fJMJ0imtzY4vSPe1vTA.roa
File: cyZ1sTw8fJMJ0imtzY4vSPe1vTA.roa (raw, json)
Hash identifier: mq6LW/5tlRNhY67aMiyHZWFimK2nqWKi24D//Whvb/I=
Subject key identifier: 73:26:75:B1:3C:3C:7C:93:09:D2:29:AD:CD:8E:2F:48:F7:B5:BD:30
Certificate issuer: /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Certificate serial: 0198CD01343B0CEB8FEEF5076CB13405E184
Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/cyZ1sTw8fJMJ0imtzY4vSPe1vTA.roa
Signing time: Thu 21 Aug 2025 14:21:04 +0000
ROA not before: Thu 21 Aug 2025 14:21:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213120
IP address blocks: 2.21.122.0/24 maxlen: 24
2a02:2370:1000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.mft
rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:cd:01:34:3b:0c:eb:8f:ee:f5:07:6c:b1:34:05:e1:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Validity
Not Before: Aug 21 14:21:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=732675b13c3c7c9309d229adcd8e2f48f7b5bd30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:4b:ad:60:40:7c:23:35:b1:64:a6:e8:cf:70:
75:ea:a0:6d:b4:57:7b:97:dd:8b:49:43:c9:d5:46:
b2:78:aa:69:cb:51:f8:45:66:a4:4c:9c:bd:00:4d:
33:c4:d4:c2:e5:85:33:84:50:43:cb:e4:f5:10:fa:
39:9b:1e:30:d4:da:fd:7d:e4:2f:d6:52:55:b6:24:
b4:81:7b:fc:c1:e5:39:c1:d1:e4:65:78:44:22:8f:
92:e7:5a:1c:ee:96:27:9e:2d:de:38:d4:59:ba:f3:
f7:50:39:bb:c4:df:74:05:4b:d1:f0:ff:26:21:c0:
f2:31:22:93:30:09:24:61:9f:2b:52:23:6d:86:b0:
ef:29:97:40:fe:90:00:0a:8c:17:c6:8e:7d:9e:a8:
9f:c5:86:29:42:06:e1:33:40:71:bc:df:0f:39:c4:
ad:a6:2e:96:80:08:d2:03:d6:73:7f:69:81:8f:12:
04:03:85:4a:24:29:b2:96:51:56:22:e7:39:57:8f:
63:09:40:c9:43:a8:65:93:61:9a:9d:3f:c6:e3:39:
75:45:b1:57:e2:f8:47:0b:25:d2:82:52:c8:4c:0f:
4a:c7:e2:a0:0c:a7:84:fc:53:3f:d4:b0:66:7c:b8:
63:b9:7f:8c:95:42:a6:09:91:0f:c4:8e:3d:7c:82:
fd:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:26:75:B1:3C:3C:7C:93:09:D2:29:AD:CD:8E:2F:48:F7:B5:BD:30
X509v3 Authority Key Identifier:
keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/cyZ1sTw8fJMJ0imtzY4vSPe1vTA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.21.122.0/24
IPv6:
2a02:2370:1000::/48
Signature Algorithm: sha256WithRSAEncryption
01:bb:c8:2d:57:63:60:42:64:a7:31:4d:b2:a6:7a:6d:b3:62:
75:af:d2:bb:01:49:23:1a:bc:44:f2:81:fd:71:db:a2:92:77:
fe:43:14:c0:66:29:1c:6d:b9:da:4a:2c:4f:b2:60:a3:5d:6d:
61:13:f0:ef:87:a0:f2:9e:a6:8b:0d:32:43:20:f1:71:66:75:
33:98:58:67:97:61:b5:bb:53:6e:11:8d:41:0a:f2:54:f3:96:
83:d8:21:dd:8f:de:b3:f1:4d:55:09:ff:ca:7f:ba:95:d5:86:
d4:5c:b5:dc:b3:df:9a:1f:65:f8:76:4a:ac:40:da:3a:42:8b:
0f:bc:e6:19:23:68:0f:93:cf:2e:4d:8b:3b:ed:55:d3:ab:cd:
97:27:37:06:c9:24:31:85:21:11:15:ae:a2:dd:bb:04:6b:fd:
97:26:c9:01:80:ff:05:5a:0f:37:21:79:af:ee:87:1a:8f:ff:
3a:71:5b:09:38:d2:9a:bb:c1:94:5c:0a:fb:1f:3a:f1:dd:18:
9c:28:8e:a0:ac:9a:38:d3:38:10:b3:36:71:47:33:b9:7d:c0:
0e:1d:ba:59:16:3a:84:c2:ae:2f:19:ec:06:ab:cd:2f:35:98:
0a:93:41:de:97:71:a6:62:da:d6:85:f5:77:64:7d:5e:5b:d4:
b0:ed:d6:a9
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZjNATQ7DOuP7vUHbLE0BeGEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiNWZjYmJlYTQ4OTM3YTQ0MmJhYmRiMzMwMjEzMmM0YmM5
YmQ2YWEwHhcNMjUwODIxMTQyMTA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MzI2NzViMTNjM2M3YzkzMDlkMjI5YWRjZDhlMmY0OGY3YjViZDMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1EutYEB8IzWxZKboz3B16qBttFd7
l92LSUPJ1UayeKppy1H4RWakTJy9AE0zxNTC5YUzhFBDy+T1EPo5mx4w1Nr9feQv
1lJVtiS0gXv8weU5wdHkZXhEIo+S51oc7pYnni3eONRZuvP3UDm7xN90BUvR8P8m
IcDyMSKTMAkkYZ8rUiNthrDvKZdA/pAACowXxo59nqifxYYpQgbhM0BxvN8POcSt
pi6WgAjSA9Zzf2mBjxIEA4VKJCmyllFWIuc5V49jCUDJQ6hlk2GanT/G4zl1RbFX
4vhHCyXSglLITA9Kx+KgDKeE/FM/1LBmfLhjuX+MlUKmCZEPxI49fIL9IQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFHMmdbE8PHyTCdIprc2OL0j3tb0wMB8GA1UdIwQY
MBaAFGtfy76kiTekQrq9szAhMsS8m9aqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTFfTHZxU0pONlJDdXIyek1DRXl4THliMXFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8wNDIxODgtZGZiNi00YWQ0LTkxYTQt
ODhkMWNhYzllNGYxLzEvY3laMXNUdzhmSk1KMGltdHpZNHZTUGUxdlRBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC8wNDIxODgtZGZiNi00YWQ0LTkxYTQtODhkMWNhYzllNGYx
LzEvYTFfTHZxU0pONlJDdXIyek1DRXl4THliMXFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAAhV6MA8E
AgACMAkDBwAqAiNwEAAwDQYJKoZIhvcNAQELBQADggEBAAG7yC1XY2BCZKcxTbKm
em2zYnWv0rsBSSMavETygf1x26KSd/5DFMBmKRxtudpKLE+yYKNdbWET8O+HoPKe
posNMkMg8XFmdTOYWGeXYbW7U24RjUEK8lTzloPYId2P3rPxTVUJ/8p/upXVhtRc
tdyz35ofZfh2SqxA2jpCiw+85hkjaA+Tzy5NizvtVdOrzZcnNwbJJDGFIREVrqLd
uwRr/ZcmyQGA/wVaDzchea/uhxqP/zpxWwk40pq7wZRcCvsfOvHdGJwojqCsmjjT
OBCzNnFHM7l9wA4dulkWOoTCri8Z7AarzS81mAqTQd6XcaZi2taF9XdkfV5b1LDt
1qk=
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:27:54 2025 by rpki-client