Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/AtVgm7bEXdzPUGkRHFh-62Hhbnk.roa
File: AtVgm7bEXdzPUGkRHFh-62Hhbnk.roa (raw, json)
Hash identifier: bbi9eLzz/sNbpp6vVM1Q0qOLVVNZ9gyTf1BjgXt0Rqw=
Subject key identifier: 02:D5:60:9B:B6:C4:5D:DC:CF:50:69:11:1C:58:7E:EB:61:E1:6E:79
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0197A37D32A92156A3463922BFB6BD7B6590
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/AtVgm7bEXdzPUGkRHFh-62Hhbnk.roa
Signing time: Tue 24 Jun 2025 19:49:40 +0000
ROA not before: Tue 24 Jun 2025 19:49:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 84.21.188.0/24 maxlen: 24
2a06:a600::/29 maxlen: 29
2a06:b5c0::/29 maxlen: 29
2a06:bf40::/29 maxlen: 29
2a0e:1a84::/32 maxlen: 32
2a0e:f600:5f::/48 maxlen: 48
2a0f:1e84:20::/48 maxlen: 48
2a0f:7d00:1::/48 maxlen: 48
2a0f:bc00:a1c4::/48 maxlen: 48
2a0f:ea00:100::/40 maxlen: 40
2a0f:ea01::/40 maxlen: 40
2a13:2b40::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:a3:7d:32:a9:21:56:a3:46:39:22:bf:b6:bd:7b:65:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jun 24 19:49:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=02d5609bb6c45ddccf5069111c587eeb61e16e79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:82:52:99:e6:73:2a:2f:f5:2c:4a:b2:34:17:
56:bd:a8:77:3b:f5:d7:f1:3f:93:87:db:76:d8:d7:
6f:dd:3d:12:7a:8c:9c:20:21:ec:0f:7e:f3:ad:be:
86:f9:86:72:32:22:b9:ab:67:d5:22:d8:5e:bc:69:
9d:07:35:ab:98:6d:4e:da:48:8c:d8:d7:e4:77:fe:
ac:f6:5a:70:ae:da:be:71:2f:08:a8:2f:5e:33:2b:
21:73:34:05:c2:68:e4:22:6c:c8:13:9e:38:99:a3:
61:65:e3:65:d5:57:aa:a9:27:ed:b4:17:c2:57:03:
6b:2f:74:48:47:95:12:7e:af:07:98:ad:ff:27:6e:
d6:15:c4:1b:c5:41:6e:74:07:b5:04:b0:46:5b:ec:
2c:4c:c4:28:47:61:b0:1f:a9:2c:fb:4a:6f:b0:fe:
98:dd:2d:bd:72:7e:1e:9e:c2:de:32:8f:6c:29:cc:
71:18:8a:55:8b:08:9d:d7:55:17:f5:c3:b6:b4:7d:
29:85:86:7c:97:87:4d:b6:d7:02:ab:a5:f8:63:0f:
df:8b:23:33:1a:91:24:8f:cc:0f:55:38:6f:dc:a0:
36:5f:e1:cb:79:50:47:68:5a:28:f7:b0:1a:41:42:
19:be:36:31:0a:eb:3e:20:e7:da:4b:2e:f6:0d:94:
b6:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:D5:60:9B:B6:C4:5D:DC:CF:50:69:11:1C:58:7E:EB:61:E1:6E:79
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/AtVgm7bEXdzPUGkRHFh-62Hhbnk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.21.188.0/24
IPv6:
2a06:a600::/29
2a06:b5c0::/29
2a06:bf40::/29
2a0e:1a84::/32
2a0e:f600:5f::/48
2a0f:1e84:20::/48
2a0f:7d00:1::/48
2a0f:bc00:a1c4::/48
2a0f:ea00:100::/40
2a0f:ea01::/40
2a13:2b40::/29
Signature Algorithm: sha256WithRSAEncryption
75:0c:e4:8b:aa:6a:f4:bd:99:e0:2f:fd:25:f9:20:2c:ea:13:
8c:3a:42:31:e4:ed:0a:6a:01:b3:a1:43:70:88:a6:a3:da:91:
16:ed:a6:23:99:51:cd:7b:6d:31:39:b5:bb:75:c5:62:2d:0d:
9f:53:db:fe:c6:df:19:da:46:a6:0b:c4:f8:97:01:3e:c5:ab:
08:0d:4b:77:fe:6f:a1:1a:3b:d7:3f:1f:a4:16:cd:0a:fd:50:
36:1b:de:e8:40:26:29:79:5e:bc:51:1b:74:ac:c8:a8:1d:56:
44:41:6d:89:df:f1:00:2f:04:15:18:50:e5:7a:7a:13:73:df:
1e:49:ad:f8:a7:8d:f6:86:40:ff:37:5e:0d:ae:b4:23:29:a8:
6f:ce:4f:2c:69:a6:c6:94:26:f6:0d:30:cc:90:e7:e4:30:5c:
77:c1:7f:4f:14:a4:2d:f3:23:76:3d:5a:de:e1:91:c8:c8:fc:
f8:58:76:b2:cf:80:ad:5e:50:ae:98:b3:89:5d:a0:ee:71:c3:
4b:bf:53:18:cc:99:f8:9f:c2:ec:2e:57:16:cf:ab:14:1d:d9:
38:5a:d8:f8:ab:99:e6:64:f3:81:96:c8:89:46:20:dd:4d:39:
62:c1:41:73:4c:a9:8c:84:32:09:0a:21:9b:d9:5f:5a:ea:96:
84:f9:6f:79
-----BEGIN CERTIFICATE-----
MIIFXDCCBESgAwIBAgISAZejfTKpIVajRjkiv7a9e2WQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjUwNjI0MTk0OTQwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMmQ1NjA5YmI2YzQ1ZGRjY2Y1MDY5MTExYzU4N2VlYjYxZTE2ZTc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiIJSmeZzKi/1LEqyNBdWvah3O/XX
8T+Th9t22Ndv3T0SeoycICHsD37zrb6G+YZyMiK5q2fVIthevGmdBzWrmG1O2kiM
2Nfkd/6s9lpwrtq+cS8IqC9eMyshczQFwmjkImzIE544maNhZeNl1VeqqSfttBfC
VwNrL3RIR5USfq8HmK3/J27WFcQbxUFudAe1BLBGW+wsTMQoR2GwH6ks+0pvsP6Y
3S29cn4ensLeMo9sKcxxGIpViwid11UX9cO2tH0phYZ8l4dNttcCq6X4Yw/fiyMz
GpEkj8wPVThv3KA2X+HLeVBHaFoo97AaQUIZvjYxCus+IOfaSy72DZS2SQIDAQAB
o4ICaDCCAmQwHQYDVR0OBBYEFALVYJu2xF3cz1BpERxYfuth4W55MB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvQXRWZ203YkVYZHpQVUdrUkhGaC02MkhoYm5rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMH4GCCsGAQUFBwEHAQH/BG8wbTAMBAIAATAGAwQAVBW8MF0E
AgACMFcDBQMqBqYAAwUDKga1wAMFAyoGv0ADBQAqDhqEAwcAKg72AABfAwcAKg8e
hAAgAwcAKg99AAABAwcAKg+8AKHEAwYAKg/qAAEDBgAqD+oBAAMFAyoTK0AwDQYJ
KoZIhvcNAQELBQADggEBAHUM5IuqavS9meAv/SX5ICzqE4w6QjHk7QpqAbOhQ3CI
pqPakRbtpiOZUc17bTE5tbt1xWItDZ9T2/7G3xnaRqYLxPiXAT7FqwgNS3f+b6Ea
O9c/H6QWzQr9UDYb3uhAJil5XrxRG3SsyKgdVkRBbYnf8QAvBBUYUOV6ehNz3x5J
rfinjfaGQP83Xg2utCMpqG/OTyxppsaUJvYNMMyQ5+QwXHfBf08UpC3zI3Y9Wt7h
kcjI/PhYdrLPgK1eUK6Ys4ldoO5xw0u/UxjMmfifwuwuVxbPqxQd2Tha2PirmeZk
84GWyIlGIN1NOWLBQXNMqYyEMgkKIZvZX1rqloT5b3k=
-----END CERTIFICATE-----
Generated at Sun Jun 29 08:42:25 2025 by rpki-client