Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/9730d4-4f7d-4943-b9fb-7d94a94e3312/1/6FSKWG-EGTHbHR3wSnfZzAiHhXY.roa
File: 6FSKWG-EGTHbHR3wSnfZzAiHhXY.roa (raw, json)
Hash identifier: VmwTyVH3w9xwUHgrQoPTWP7hFDzEQmvR4R1wYGDo/XU=
Subject key identifier: E8:54:8A:58:6F:84:19:31:DB:1D:1D:F0:4A:77:D9:CC:08:87:85:76
Certificate issuer: /CN=0637024a18243e45f8d04aadaebeba90a569e883
Certificate serial: 019768BC504E72CBE8E24B62D6BDFFE60EFD
Authority key identifier: 06:37:02:4A:18:24:3E:45:F8:D0:4A:AD:AE:BE:BA:90:A5:69:E8:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BjcCShgkPkX40Eqtrr66kKVp6IM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/9730d4-4f7d-4943-b9fb-7d94a94e3312/1/6FSKWG-EGTHbHR3wSnfZzAiHhXY.roa
Signing time: Fri 13 Jun 2025 10:01:01 +0000
ROA not before: Fri 13 Jun 2025 10:01:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197552
IP address blocks: 91.218.164.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/9730d4-4f7d-4943-b9fb-7d94a94e3312/1/BjcCShgkPkX40Eqtrr66kKVp6IM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/9730d4-4f7d-4943-b9fb-7d94a94e3312/1/BjcCShgkPkX40Eqtrr66kKVp6IM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BjcCShgkPkX40Eqtrr66kKVp6IM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bc:50:4e:72:cb:e8:e2:4b:62:d6:bd:ff:e6:0e:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0637024a18243e45f8d04aadaebeba90a569e883
Validity
Not Before: Jun 13 10:01:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e8548a586f841931db1d1df04a77d9cc08878576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a2:da:8a:10:24:8c:97:2c:6d:c3:64:9f:c6:
88:4b:75:2d:77:aa:9b:d1:82:14:2c:e8:13:04:90:
55:9d:fa:e7:9d:5c:15:c8:25:ec:44:25:8f:ff:1a:
cc:93:bc:6d:fd:bd:30:91:59:73:eb:2a:dc:82:36:
48:57:8c:ce:7e:6f:c7:3a:f6:b0:d5:2c:72:fc:d9:
fe:a2:0f:00:91:ca:15:27:b6:e6:47:b8:74:8d:ab:
3f:b9:f8:43:f8:34:09:38:ad:69:22:5f:50:f1:0e:
0c:dc:2c:31:c0:05:28:71:af:3d:02:96:df:da:4f:
8d:c5:53:53:0f:00:a8:4a:7e:3d:83:03:9f:f6:f5:
8b:89:d2:a9:11:ec:ed:95:ee:14:74:48:10:8b:ce:
b1:7a:fd:4e:3e:dc:e9:0a:d1:e4:3b:9a:f9:60:3b:
ae:d1:f2:e5:74:95:85:b4:0f:a5:08:29:bf:de:52:
46:00:f3:27:00:b8:35:e0:9a:a5:ce:52:25:d2:fb:
a6:ea:b6:9a:9a:75:8b:ec:59:13:51:dd:d4:3d:bd:
6c:34:d9:cf:fa:57:70:b2:22:eb:45:52:cb:de:eb:
df:96:23:ed:ba:a5:e1:bb:90:ff:45:fe:cb:8a:34:
51:2b:4e:e8:85:73:19:77:31:12:ef:6e:48:23:c8:
93:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:54:8A:58:6F:84:19:31:DB:1D:1D:F0:4A:77:D9:CC:08:87:85:76
X509v3 Authority Key Identifier:
keyid:06:37:02:4A:18:24:3E:45:F8:D0:4A:AD:AE:BE:BA:90:A5:69:E8:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjcCShgkPkX40Eqtrr66kKVp6IM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/9730d4-4f7d-4943-b9fb-7d94a94e3312/1/6FSKWG-EGTHbHR3wSnfZzAiHhXY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/9730d4-4f7d-4943-b9fb-7d94a94e3312/1/BjcCShgkPkX40Eqtrr66kKVp6IM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.218.164.0/22
Signature Algorithm: sha256WithRSAEncryption
74:51:cf:35:a7:81:ca:c7:5e:e9:df:69:2b:a6:a3:8c:f4:25:
b8:3e:fa:dc:a3:fb:1f:73:24:c2:42:ea:a2:db:18:35:da:d0:
5c:d6:20:b6:d4:b4:02:95:07:5c:d5:bf:63:6a:d2:01:b1:01:
87:dc:16:f7:0d:c5:85:2e:2a:30:46:70:fe:7c:3c:28:a1:a0:
18:77:25:dd:04:4e:b5:1b:bf:d1:4c:39:aa:a9:b5:83:ac:a9:
54:13:f5:7c:af:0f:53:9a:02:5c:1a:df:54:35:48:c7:88:84:
23:f9:62:e5:0c:14:cb:7e:b6:28:73:41:28:42:40:5c:8e:1a:
52:25:58:a3:01:0c:7b:5b:65:e4:1d:bc:99:79:03:d2:9c:a4:
48:b3:d5:fc:85:d4:31:6b:9c:88:9f:00:0c:9c:e3:ea:7b:6d:
32:36:36:10:80:4f:8c:4f:e0:71:5e:5e:e1:1d:23:f8:a5:6a:
e5:42:15:bf:fc:d2:dd:64:22:21:90:11:7b:5f:80:69:e0:d1:
11:18:6c:5a:3c:c4:05:49:ea:6f:a7:85:a8:13:65:92:1c:e6:
de:3a:3a:bf:0a:e0:3c:7a:71:2c:97:a5:92:a3:6c:79:bd:14:
d0:39:89:bb:2e:fa:28:99:b9:9a:b5:b7:7f:60:0a:92:82:45:
be:ab:d0:e4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZdovFBOcsvo4kti1r3/5g79MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2MzcwMjRhMTgyNDNlNDVmOGQwNGFhZGFlYmViYTkwYTU2
OWU4ODMwHhcNMjUwNjEzMTAwMTAxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlODU0OGE1ODZmODQxOTMxZGIxZDFkZjA0YTc3ZDljYzA4ODc4NTc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqLaihAkjJcsbcNkn8aIS3Utd6qb
0YIULOgTBJBVnfrnnVwVyCXsRCWP/xrMk7xt/b0wkVlz6yrcgjZIV4zOfm/HOvaw
1Sxy/Nn+og8AkcoVJ7bmR7h0jas/ufhD+DQJOK1pIl9Q8Q4M3CwxwAUoca89Apbf
2k+NxVNTDwCoSn49gwOf9vWLidKpEeztle4UdEgQi86xev1OPtzpCtHkO5r5YDuu
0fLldJWFtA+lCCm/3lJGAPMnALg14JqlzlIl0vum6raamnWL7FkTUd3UPb1sNNnP
+ldwsiLrRVLL3uvfliPtuqXhu5D/Rf7LijRRK07ohXMZdzES725II8iTfwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOhUilhvhBkx2x0d8Ep32cwIh4V2MB8GA1UdIwQY
MBaAFAY3AkoYJD5F+NBKra6+upClaeiDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmpjQ1NoZ2tQa1g0MEVxdHJyNjZrS1ZwNklNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy85NzMwZDQtNGY3ZC00OTQzLWI5ZmIt
N2Q5NGE5NGUzMzEyLzEvNkZTS1dHLUVHVEhiSFIzd1NuZlp6QWlIaFhZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy85NzMwZDQtNGY3ZC00OTQzLWI5ZmItN2Q5NGE5NGUzMzEy
LzEvQmpjQ1NoZ2tQa1g0MEVxdHJyNjZrS1ZwNklNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW9qkMA0G
CSqGSIb3DQEBCwUAA4IBAQB0Uc81p4HKx17p32krpqOM9CW4Pvrco/sfcyTCQuqi
2xg12tBc1iC21LQClQdc1b9jatIBsQGH3Bb3DcWFLiowRnD+fDwooaAYdyXdBE61
G7/RTDmqqbWDrKlUE/V8rw9TmgJcGt9UNUjHiIQj+WLlDBTLfrYoc0EoQkBcjhpS
JVijAQx7W2XkHbyZeQPSnKRIs9X8hdQxa5yInwAMnOPqe20yNjYQgE+MT+BxXl7h
HSP4pWrlQhW//NLdZCIhkBF7X4Bp4NERGGxaPMQFSepvp4WoE2WSHObeOjq/CuA8
enEsl6WSo2x5vRTQOYm7Lvoombmatbd/YAqSgkW+q9Dk
-----END CERTIFICATE-----
Generated at Sun Jun 29 03:13:58 2025 by rpki-client