Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/a188bc-deee-42ec-8289-ed84a0058a9f/1/rrGOi9anRvR5QebW7N400Bflp6A.roa
File: rrGOi9anRvR5QebW7N400Bflp6A.roa (raw, json)
Hash identifier: Lx19fsGkA0pLuMfnZQBwHFov6RWJrMaJVmKObOMNpzU=
Subject key identifier: AE:B1:8E:8B:D6:A7:46:F4:79:41:E6:D6:EC:DE:34:D0:17:E5:A7:A0
Certificate issuer: /CN=b328fe258a1b9bf6148a6ce0e8a712f18840904c
Certificate serial: 0196B49A413EA8C8C64520C78DD0E97CF1A3
Authority key identifier: B3:28:FE:25:8A:1B:9B:F6:14:8A:6C:E0:E8:A7:12:F1:88:40:90:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/syj-JYobm_YUimzg6KcS8YhAkEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/a188bc-deee-42ec-8289-ed84a0058a9f/1/rrGOi9anRvR5QebW7N400Bflp6A.roa
Signing time: Fri 09 May 2025 10:32:10 +0000
ROA not before: Fri 09 May 2025 10:32:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25459
IP address blocks: 83.172.128.0/22 maxlen: 22
83.172.132.0/23 maxlen: 23
83.172.160.0/22 maxlen: 22
83.172.164.0/23 maxlen: 23
83.172.180.0/22 maxlen: 22
83.172.188.0/23 maxlen: 23
2a02:cec0::/30 maxlen: 30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/a188bc-deee-42ec-8289-ed84a0058a9f/1/syj-JYobm_YUimzg6KcS8YhAkEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/a188bc-deee-42ec-8289-ed84a0058a9f/1/syj-JYobm_YUimzg6KcS8YhAkEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/syj-JYobm_YUimzg6KcS8YhAkEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b4:9a:41:3e:a8:c8:c6:45:20:c7:8d:d0:e9:7c:f1:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b328fe258a1b9bf6148a6ce0e8a712f18840904c
Validity
Not Before: May 9 10:32:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aeb18e8bd6a746f47941e6d6ecde34d017e5a7a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0c:5e:56:88:b6:3f:e6:5a:fe:e2:d9:4a:4e:
c7:46:7a:96:7d:1a:ea:a9:56:53:2a:02:b4:00:35:
d4:58:9b:18:cd:84:98:0f:40:b3:95:29:df:ea:08:
86:33:4f:26:24:84:40:c4:0f:27:ef:31:59:af:38:
72:92:f0:fe:3c:06:86:6e:bf:ed:8d:e2:62:5b:4d:
92:29:6d:67:20:14:95:d7:f3:fa:3c:4d:ac:9e:f9:
ea:97:5a:b8:98:6b:5f:b9:16:85:46:2c:6d:77:f1:
8b:96:2c:9a:a5:a8:7b:5b:18:94:e4:fc:0d:1d:c2:
cc:c5:e5:a6:1c:d1:74:88:ba:eb:67:00:8f:32:da:
fa:13:b7:1b:90:99:2d:0e:2f:3b:ab:46:72:c9:eb:
20:a9:44:3a:26:6a:3e:60:c6:c9:36:03:19:64:84:
e2:ba:13:b0:dc:96:fa:e6:68:8d:d5:25:8a:a2:9e:
b6:a7:17:84:cf:13:ad:4e:20:49:e6:37:76:31:d9:
31:d5:0b:3d:a0:75:76:f6:31:97:49:6e:82:8f:0c:
12:d7:18:a3:b5:50:7c:af:68:b1:db:f2:36:0b:79:
bd:0d:55:bb:1b:24:df:45:1d:60:c3:84:07:63:ec:
f5:27:ce:b3:cb:95:90:12:83:3a:c0:3c:b1:7c:c7:
55:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:B1:8E:8B:D6:A7:46:F4:79:41:E6:D6:EC:DE:34:D0:17:E5:A7:A0
X509v3 Authority Key Identifier:
keyid:B3:28:FE:25:8A:1B:9B:F6:14:8A:6C:E0:E8:A7:12:F1:88:40:90:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/syj-JYobm_YUimzg6KcS8YhAkEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a188bc-deee-42ec-8289-ed84a0058a9f/1/rrGOi9anRvR5QebW7N400Bflp6A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a188bc-deee-42ec-8289-ed84a0058a9f/1/syj-JYobm_YUimzg6KcS8YhAkEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.172.128.0-83.172.133.255
83.172.160.0-83.172.165.255
83.172.180.0/22
83.172.188.0/23
IPv6:
2a02:cec0::/30
Signature Algorithm: sha256WithRSAEncryption
c1:81:61:5d:f9:40:ed:b8:30:c9:01:5c:7d:d0:d4:a5:ca:7c:
96:ae:64:11:5e:a3:0e:54:5c:fd:81:50:dc:5c:91:fb:3c:d6:
f5:ec:8c:d7:8b:a3:cd:52:8a:a0:f5:0e:4f:36:36:72:b7:57:
37:06:b8:cd:6c:5e:48:89:9e:a4:0b:d0:c9:fb:af:06:18:0a:
04:3a:ab:c4:6c:62:33:ca:66:d6:db:b0:ac:80:5a:cf:02:1f:
13:6b:c6:8a:ac:6f:51:b1:6c:62:52:44:86:92:82:4b:fd:d0:
32:8f:5e:a9:6b:ba:63:8d:7c:f9:f6:fe:0c:42:03:aa:9b:6e:
08:04:41:0c:fc:f4:56:ef:d4:9d:c1:72:db:c3:0d:8d:eb:51:
63:61:65:e6:c9:0a:68:72:8c:88:fa:f0:e9:78:74:83:7f:24:
cf:c9:fd:58:5d:86:dd:75:67:e1:2f:76:40:b1:2e:d7:65:ec:
3a:70:1b:91:9f:e6:2e:2b:9d:58:8a:65:06:cd:4c:56:bc:ef:
d8:c1:32:97:72:31:e0:2c:6f:92:c3:8d:89:09:5c:dc:7f:3c:
10:f6:29:f8:0b:c4:fc:cc:eb:fd:a4:a2:d8:5b:bf:82:e5:a7:
32:85:e5:fe:12:2a:1b:48:bd:54:2d:1b:7d:42:d1:55:6d:87:
16:cf:b8:b6
-----BEGIN CERTIFICATE-----
MIIFLjCCBBagAwIBAgISAZa0mkE+qMjGRSDHjdDpfPGjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzMjhmZTI1OGExYjliZjYxNDhhNmNlMGU4YTcxMmYxODg0
MDkwNGMwHhcNMjUwNTA5MTAzMjEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZWIxOGU4YmQ2YTc0NmY0Nzk0MWU2ZDZlY2RlMzRkMDE3ZTVhN2EwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAxeVoi2P+Za/uLZSk7HRnqWfRrq
qVZTKgK0ADXUWJsYzYSYD0CzlSnf6giGM08mJIRAxA8n7zFZrzhykvD+PAaGbr/t
jeJiW02SKW1nIBSV1/P6PE2snvnql1q4mGtfuRaFRixtd/GLliyapah7WxiU5PwN
HcLMxeWmHNF0iLrrZwCPMtr6E7cbkJktDi87q0ZyyesgqUQ6Jmo+YMbJNgMZZITi
uhOw3Jb65miN1SWKop62pxeEzxOtTiBJ5jd2Mdkx1Qs9oHV29jGXSW6CjwwS1xij
tVB8r2ix2/I2C3m9DVW7GyTfRR1gw4QHY+z1J86zy5WQEoM6wDyxfMdV4wIDAQAB
o4ICOjCCAjYwHQYDVR0OBBYEFK6xjovWp0b0eUHm1uzeNNAX5aegMB8GA1UdIwQY
MBaAFLMo/iWKG5v2FIps4OinEvGIQJBMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3lqLUpZb2JtX1lVaW16ZzZLY1M4WWhBa0V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9hMTg4YmMtZGVlZS00MmVjLTgyODkt
ZWQ4NGEwMDU4YTlmLzEvcnJHT2k5YW5SdlI1UWViVzdONDAwQmZscDZBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC9hMTg4YmMtZGVlZS00MmVjLTgyODktZWQ4NGEwMDU4YTlm
LzEvc3lqLUpZb2JtX1lVaW16ZzZLY1M4WWhBa0V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFAGCCsGAQUFBwEHAQH/BEEwPzAuBAIAATAoMAwDBAdTrIAD
BAFTrIQwDAMEBVOsoAMEAVOspAMEAlOstAMEAVOsvDANBAIAAjAHAwUCKgLOwDAN
BgkqhkiG9w0BAQsFAAOCAQEAwYFhXflA7bgwyQFcfdDUpcp8lq5kEV6jDlRc/YFQ
3FyR+zzW9eyM14ujzVKKoPUOTzY2crdXNwa4zWxeSImepAvQyfuvBhgKBDqrxGxi
M8pm1tuwrIBazwIfE2vGiqxvUbFsYlJEhpKCS/3QMo9eqWu6Y418+fb+DEIDqptu
CARBDPz0Vu/UncFy28MNjetRY2Fl5skKaHKMiPrw6Xh0g38kz8n9WF2G3XVn4S92
QLEu12XsOnAbkZ/mLiudWIplBs1MVrzv2MEyl3Ix4CxvksONiQlc3H88EPYp+AvE
/Mzr/aSi2Fu/guWnMoXl/hIqG0i9VC0bfULRVW2HFs+4tg==
-----END CERTIFICATE-----
Generated at Mon May 12 12:53:16 2025 by rpki-client