Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/tc7szezkYqgXsem-emQpM9XcR9c.roa
File: tc7szezkYqgXsem-emQpM9XcR9c.roa (raw, json)
Hash identifier: O2yXB3yzO1tbqMoeSHRvGfT3YmTyzVXNjGllWoLMqq0=
Subject key identifier: B5:CE:EC:CD:EC:E4:62:A8:17:B1:E9:BE:7A:64:29:33:D5:DC:47:D7
Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial: 0197B209997F87449CBD69095921B1CB7465
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/tc7szezkYqgXsem-emQpM9XcR9c.roa
Signing time: Fri 27 Jun 2025 15:37:42 +0000
ROA not before: Fri 27 Jun 2025 15:37:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1239
IP address blocks: 162.218.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 22:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b2:09:99:7f:87:44:9c:bd:69:09:59:21:b1:cb:74:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Validity
Not Before: Jun 27 15:37:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b5ceeccdece462a817b1e9be7a642933d5dc47d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f4:c2:21:0c:dc:14:f2:b4:c3:e0:a1:fd:6e:
6c:cf:0c:3f:55:e2:5c:46:e5:56:43:75:e2:0f:4e:
da:b0:d2:a6:ed:17:24:36:fd:b5:16:7d:24:86:32:
48:1d:e5:d4:02:b2:ff:ee:49:27:1c:cf:fb:d5:20:
e0:6d:57:c8:63:11:0f:6f:0d:ac:f4:dd:78:f6:40:
a8:96:ea:d3:46:e2:c0:d8:2d:b4:a0:18:5c:1b:a0:
c3:44:63:39:87:58:f3:90:64:be:c4:54:1a:94:e8:
81:f1:9d:4b:e7:98:60:2b:79:d4:4e:15:9c:81:d2:
cf:70:17:ff:cd:3f:ab:71:3f:6e:73:8a:41:7b:e4:
41:d5:0a:76:f9:ec:f8:da:c7:96:a7:07:06:68:32:
b0:22:2d:cd:b5:7d:53:f9:20:3a:0a:d8:81:98:97:
3e:2d:1d:e0:a1:35:81:1b:78:3f:a7:77:c9:3b:c9:
30:71:b7:74:6c:af:d0:88:87:43:2e:37:20:f7:e8:
aa:a3:5a:9c:6b:7a:04:e1:0a:46:60:e4:7c:1c:92:
58:f0:db:89:18:a1:31:b1:62:29:35:bf:7a:a0:9d:
67:e6:cf:e0:eb:2f:b7:ae:44:3a:19:b2:3b:87:fa:
1b:77:7d:84:9a:1b:e7:65:74:5b:4c:a7:d8:af:c8:
38:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:CE:EC:CD:EC:E4:62:A8:17:B1:E9:BE:7A:64:29:33:D5:DC:47:D7
X509v3 Authority Key Identifier:
keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/tc7szezkYqgXsem-emQpM9XcR9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
162.218.95.0/24
Signature Algorithm: sha256WithRSAEncryption
43:8f:9d:d6:3f:6c:0a:9c:9f:47:21:9a:00:49:96:4e:76:4a:
0e:b0:b3:cb:24:f3:63:39:f9:1d:48:a7:27:30:8c:02:c3:fe:
6e:8a:77:c6:9a:78:bf:a9:3d:72:44:90:50:fa:fc:5d:c9:b9:
3c:af:fb:ee:fb:84:8b:18:ee:3a:99:70:19:fe:f1:ba:eb:01:
2d:d1:80:a5:cc:0a:4b:b1:6b:a9:20:5a:84:79:05:43:ec:ff:
54:08:b6:55:4b:cc:b1:c7:c2:fb:0a:fd:5b:8d:a2:4e:2b:53:
86:2d:bf:19:c1:97:f6:0a:b2:37:fb:df:09:07:c5:0b:d4:bf:
94:54:6e:ba:21:cb:3f:5e:09:a8:2b:2d:05:c5:a1:54:0b:d9:
77:31:2d:ed:9d:10:fc:81:da:a6:28:ed:94:38:09:78:ad:e6:
26:f5:4d:68:9b:9b:6c:2e:5f:76:e3:8a:f9:e7:fb:8b:57:a7:
5b:4a:7e:86:85:73:0c:73:22:90:df:d8:7c:e6:5f:2f:8c:ab:
30:67:15:9e:0e:e5:67:55:80:26:4b:f2:c4:12:41:d1:33:15:
1c:55:49:46:76:24:f1:e5:e4:0b:f3:6e:37:15:cf:80:95:c7:
98:e6:f6:6f:96:08:b9:f6:6d:3f:0f:1d:dc:f0:08:5b:f8:fa:
b8:45:7b:8c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZeyCZl/h0ScvWkJWSGxy3RlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyYjc4ZjY2ODJmYzM5YzU1YjQxZDQ4ZjgwYjg4MzhkNWQy
ZGJmMDcwHhcNMjUwNjI3MTUzNzQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNWNlZWNjZGVjZTQ2MmE4MTdiMWU5YmU3YTY0MjkzM2Q1ZGM0N2Q3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufTCIQzcFPK0w+Ch/W5szww/VeJc
RuVWQ3XiD07asNKm7RckNv21Fn0khjJIHeXUArL/7kknHM/71SDgbVfIYxEPbw2s
9N149kColurTRuLA2C20oBhcG6DDRGM5h1jzkGS+xFQalOiB8Z1L55hgK3nUThWc
gdLPcBf/zT+rcT9uc4pBe+RB1Qp2+ez42seWpwcGaDKwIi3NtX1T+SA6CtiBmJc+
LR3goTWBG3g/p3fJO8kwcbd0bK/QiIdDLjcg9+iqo1qca3oE4QpGYOR8HJJY8NuJ
GKExsWIpNb96oJ1n5s/g6y+3rkQ6GbI7h/obd32EmhvnZXRbTKfYr8g44wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLXO7M3s5GKoF7HpvnpkKTPV3EfXMB8GA1UdIwQY
MBaAFHK3j2aC/DnFW0HUj4C4g41dLb8HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEt
ZjNlNTA2YWVhYTAxLzEvdGM3c3plemtZcWdYc2VtLWVtUXBNOVhjUjljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEtZjNlNTA2YWVhYTAx
LzEvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAotpfMA0G
CSqGSIb3DQEBCwUAA4IBAQBDj53WP2wKnJ9HIZoASZZOdkoOsLPLJPNjOfkdSKcn
MIwCw/5uinfGmni/qT1yRJBQ+vxdybk8r/vu+4SLGO46mXAZ/vG66wEt0YClzApL
sWupIFqEeQVD7P9UCLZVS8yxx8L7Cv1bjaJOK1OGLb8ZwZf2CrI3+98JB8UL1L+U
VG66Ics/XgmoKy0FxaFUC9l3MS3tnRD8gdqmKO2UOAl4reYm9U1om5tsLl9244r5
5/uLV6dbSn6GhXMMcyKQ39h85l8vjKswZxWeDuVnVYAmS/LEEkHRMxUcVUlGdiTx
5eQL8243Fc+AlceY5vZvlgi59m0/Dx3c8Ahb+Pq4RXuM
-----END CERTIFICATE-----
Generated at Tue Jul 1 04:21:57 2025 by rpki-client