Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/XeHwlV4_nC5T8BptDxih7yIgLeg.roa
File: XeHwlV4_nC5T8BptDxih7yIgLeg.roa (raw, json)
Hash identifier: SOsMIv7q0cLJ7sDVkddmO8lkJPy7j4qBPOmyU0Pco9g=
Subject key identifier: 5D:E1:F0:95:5E:3F:9C:2E:53:F0:1A:6D:0F:18:A1:EF:22:20:2D:E8
Certificate issuer: /CN=609ea7abafc52c7ffa20a7a6aae4ae2d26252076
Certificate serial: 0197793A10B5EB5851767C820BD6B73FAB34
Authority key identifier: 60:9E:A7:AB:AF:C5:2C:7F:FA:20:A7:A6:AA:E4:AE:2D:26:25:20:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJ6nq6_FLH_6IKemquSuLSYlIHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/XeHwlV4_nC5T8BptDxih7yIgLeg.roa
Signing time: Mon 16 Jun 2025 14:52:17 +0000
ROA not before: Mon 16 Jun 2025 14:52:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34612
IP address blocks: 91.215.148.0/22 maxlen: 22
141.138.216.0/21 maxlen: 21
178.20.56.0/21 maxlen: 21
185.50.208.0/22 maxlen: 22
2a03:5380::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/YJ6nq6_FLH_6IKemquSuLSYlIHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/YJ6nq6_FLH_6IKemquSuLSYlIHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YJ6nq6_FLH_6IKemquSuLSYlIHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:79:3a:10:b5:eb:58:51:76:7c:82:0b:d6:b7:3f:ab:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=609ea7abafc52c7ffa20a7a6aae4ae2d26252076
Validity
Not Before: Jun 16 14:52:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5de1f0955e3f9c2e53f01a6d0f18a1ef22202de8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:83:48:8d:73:19:95:63:29:e4:e0:8b:6e:42:
e8:58:2d:7f:22:72:d8:9d:89:59:75:83:73:8e:a6:
57:43:ea:60:9d:fa:c6:b6:2b:f0:65:9b:db:5f:a5:
d8:de:ef:90:83:ce:bd:2f:4f:8c:9f:5a:b0:cd:17:
5e:49:0b:b0:64:d2:22:9f:6d:a8:52:7d:28:af:6a:
49:61:78:2b:2c:e3:d9:82:6f:8c:ad:9b:a0:74:fb:
e7:87:eb:3c:98:38:9d:bd:04:36:d4:bf:9a:dd:45:
f2:87:c8:c9:30:af:1b:fa:b3:6a:62:a5:cf:6c:4a:
cc:b1:b0:43:ba:b1:ef:e4:44:4d:d3:fb:36:ee:74:
31:99:0f:f0:03:c2:5d:71:4d:2d:6a:c9:e9:60:6d:
47:1d:1a:be:89:fd:e3:20:f5:32:ab:13:66:6e:e4:
3f:8d:15:56:a4:22:76:71:20:0c:3d:37:3e:68:1e:
16:1e:cc:cf:f4:60:b5:64:d7:c0:f5:d4:e8:b8:57:
7f:f6:bd:27:c9:94:7f:d9:48:b0:66:95:7f:0c:73:
8b:89:25:89:7a:38:3a:e3:32:8f:97:80:ae:0f:0e:
ea:0b:bb:f2:8d:3f:28:06:81:24:7c:c2:a4:a8:85:
4d:39:4b:8d:0f:3f:b0:2c:8f:b1:68:cd:a2:e6:84:
9c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:E1:F0:95:5E:3F:9C:2E:53:F0:1A:6D:0F:18:A1:EF:22:20:2D:E8
X509v3 Authority Key Identifier:
keyid:60:9E:A7:AB:AF:C5:2C:7F:FA:20:A7:A6:AA:E4:AE:2D:26:25:20:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJ6nq6_FLH_6IKemquSuLSYlIHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/XeHwlV4_nC5T8BptDxih7yIgLeg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/YJ6nq6_FLH_6IKemquSuLSYlIHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.215.148.0/22
141.138.216.0/21
178.20.56.0/21
185.50.208.0/22
IPv6:
2a03:5380::/32
Signature Algorithm: sha256WithRSAEncryption
85:2f:f2:ca:b1:33:be:34:ee:5d:ed:ea:7b:7c:2b:7b:57:31:
32:42:bb:ec:4f:5f:80:36:2d:ba:b5:e4:62:bf:c3:50:9d:f4:
36:b5:99:0c:80:44:d7:5d:d1:02:1a:43:fe:4a:b8:e3:66:5a:
b6:b4:ca:8c:11:f9:f8:f1:ad:a0:37:95:37:74:24:b8:51:04:
08:70:60:74:4c:50:67:f9:b7:bb:63:0b:bf:86:da:be:b2:92:
0d:e9:4b:f2:0f:30:2b:df:50:8c:67:a6:56:97:09:e2:28:b1:
55:83:9d:cd:12:bd:89:a6:31:52:87:27:df:22:32:25:bf:dc:
cd:12:56:dc:6a:ee:87:a4:4d:0a:5d:5b:7a:2d:66:84:65:b6:
58:6e:c3:90:19:52:58:2e:a4:a5:53:08:81:6a:e7:ee:80:fb:
18:03:83:b3:b4:88:3d:05:ce:3d:3b:70:0e:ec:f4:53:40:9d:
c1:7b:48:69:18:47:90:af:74:5c:93:e6:e7:86:46:ac:d9:01:
a9:6c:ca:9d:e6:e5:29:db:1f:04:7c:c6:a5:f5:d5:be:62:a7:
01:46:f4:69:5f:80:1c:1b:02:6c:16:5f:79:ce:eb:c7:68:96:
b5:11:ab:24:3a:c9:4b:56:50:8e:67:e7:ed:8e:7f:12:89:bf:
65:5f:26:a7
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAZd5OhC161hRdnyCC9a3P6s0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwOWVhN2FiYWZjNTJjN2ZmYTIwYTdhNmFhZTRhZTJkMjYy
NTIwNzYwHhcNMjUwNjE2MTQ1MjE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZGUxZjA5NTVlM2Y5YzJlNTNmMDFhNmQwZjE4YTFlZjIyMjAyZGU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvoNIjXMZlWMp5OCLbkLoWC1/InLY
nYlZdYNzjqZXQ+pgnfrGtivwZZvbX6XY3u+Qg869L0+Mn1qwzRdeSQuwZNIin22o
Un0or2pJYXgrLOPZgm+MrZugdPvnh+s8mDidvQQ21L+a3UXyh8jJMK8b+rNqYqXP
bErMsbBDurHv5ERN0/s27nQxmQ/wA8JdcU0tasnpYG1HHRq+if3jIPUyqxNmbuQ/
jRVWpCJ2cSAMPTc+aB4WHszP9GC1ZNfA9dTouFd/9r0nyZR/2UiwZpV/DHOLiSWJ
ejg64zKPl4CuDw7qC7vyjT8oBoEkfMKkqIVNOUuNDz+wLI+xaM2i5oSc4QIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFF3h8JVeP5wuU/AabQ8Yoe8iIC3oMB8GA1UdIwQY
MBaAFGCep6uvxSx/+iCnpqrkri0mJSB2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUo2bnE2X0ZMSF82SUtlbXF1U3VMU1lsSUhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9kNDU2NWQtYzg4NC00ZTJiLTlkOWEt
NDE3MGI4MmFkZjVkLzEvWGVId2xWNF9uQzVUOEJwdER4aWg3eUlnTGVnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC9kNDU2NWQtYzg4NC00ZTJiLTlkOWEtNDE3MGI4MmFkZjVk
LzEvWUo2bnE2X0ZMSF82SUtlbXF1U3VMU1lsSUhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQCW9eUAwQD
jYrYAwQDshQ4AwQCuTLQMA0EAgACMAcDBQAqA1OAMA0GCSqGSIb3DQEBCwUAA4IB
AQCFL/LKsTO+NO5d7ep7fCt7VzEyQrvsT1+ANi26teRiv8NQnfQ2tZkMgETXXdEC
GkP+SrjjZlq2tMqMEfn48a2gN5U3dCS4UQQIcGB0TFBn+be7Ywu/htq+spIN6Uvy
DzAr31CMZ6ZWlwniKLFVg53NEr2JpjFShyffIjIlv9zNElbcau6HpE0KXVt6LWaE
ZbZYbsOQGVJYLqSlUwiBaufugPsYA4OztIg9Bc49O3AO7PRTQJ3Be0hpGEeQr3Rc
k+bnhkas2QGpbMqd5uUp2x8EfMal9dW+YqcBRvRpX4AcGwJsFl95zuvHaJa1Eask
OslLVlCOZ+ftjn8Sib9lXyan
-----END CERTIFICATE-----
Generated at Sun Jun 29 09:09:46 2025 by rpki-client