Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/paYy_Hhxnm4PBAs2Lf2_YVwZO6U.roa
File: paYy_Hhxnm4PBAs2Lf2_YVwZO6U.roa (raw, json)
Hash identifier: ATfmnjPDFCrMSy8LdJNeeiWeAqOBvNXLV0H5uqzb3IU=
Subject key identifier: A5:A6:32:FC:78:71:9E:6E:0F:04:0B:36:2D:FD:BF:61:5C:19:3B:A5
Certificate issuer: /CN=642bab8459948b79747648e13e99b9d0a582506a
Certificate serial: 019759962594078442299F1D248FE8C5321C
Authority key identifier: 64:2B:AB:84:59:94:8B:79:74:76:48:E1:3E:99:B9:D0:A5:82:50:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZCurhFmUi3l0dkjhPpm50KWCUGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/paYy_Hhxnm4PBAs2Lf2_YVwZO6U.roa
Signing time: Tue 10 Jun 2025 11:25:01 +0000
ROA not before: Tue 10 Jun 2025 11:25:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34986
IP address blocks: 193.104.166.0/24 maxlen: 24
193.188.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/ZCurhFmUi3l0dkjhPpm50KWCUGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/ZCurhFmUi3l0dkjhPpm50KWCUGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZCurhFmUi3l0dkjhPpm50KWCUGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 08:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:96:25:94:07:84:42:29:9f:1d:24:8f:e8:c5:32:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=642bab8459948b79747648e13e99b9d0a582506a
Validity
Not Before: Jun 10 11:25:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a5a632fc78719e6e0f040b362dfdbf615c193ba5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:29:00:60:c3:12:b1:90:df:de:45:2a:f8:bc:
d6:99:8f:91:a0:93:33:4b:f0:f0:ab:f6:be:1b:5b:
56:8b:62:34:7a:65:47:a2:86:ae:e4:b7:8e:1e:3a:
05:79:37:32:17:35:57:4f:62:7c:0d:70:d1:48:41:
39:f7:03:b4:7e:ff:bd:2d:c5:ab:88:bf:fc:1a:02:
6e:18:fe:1a:ed:2f:0d:c4:2e:d2:09:72:c7:c4:b3:
6a:16:90:fe:9f:ef:a8:f5:7b:bb:82:ac:af:da:59:
ef:13:a9:c6:65:02:e4:17:57:1e:50:d7:d9:66:63:
d0:e9:83:0a:97:d0:d5:3d:5e:ff:52:c4:de:57:cb:
64:19:8b:00:b3:83:2a:ee:e4:4a:61:93:de:59:38:
37:eb:f3:18:9d:eb:66:f1:e7:4d:ee:f0:ae:ca:47:
c6:59:eb:1c:01:b6:7a:7c:00:2f:93:12:e2:0f:38:
00:6c:c6:a6:63:85:71:aa:b6:91:74:2d:61:f1:5e:
6b:de:16:9f:49:a1:0c:d3:c7:85:f1:64:4c:31:09:
75:ab:3d:cd:74:4a:39:c6:92:66:a9:5c:bb:84:5a:
b7:6b:4b:77:f6:24:61:91:d7:3d:44:5d:71:ce:e9:
7e:d4:31:d2:41:69:a1:02:7d:b8:19:a2:f8:f0:77:
d9:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:A6:32:FC:78:71:9E:6E:0F:04:0B:36:2D:FD:BF:61:5C:19:3B:A5
X509v3 Authority Key Identifier:
keyid:64:2B:AB:84:59:94:8B:79:74:76:48:E1:3E:99:B9:D0:A5:82:50:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCurhFmUi3l0dkjhPpm50KWCUGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/paYy_Hhxnm4PBAs2Lf2_YVwZO6U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/ZCurhFmUi3l0dkjhPpm50KWCUGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.166.0/24
193.188.253.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:cd:bd:b6:58:cd:ef:ec:03:72:66:06:29:5d:93:36:c0:b5:
57:69:51:da:37:05:9d:37:08:14:59:1f:68:11:7e:75:71:68:
75:e3:f0:b5:d2:85:85:45:3b:9e:f2:b5:1b:c6:31:01:5d:d5:
ce:c0:23:89:2c:83:40:4f:10:24:e7:80:38:55:d9:e9:ce:7c:
be:f0:ba:26:8c:94:09:41:47:8a:31:cd:5f:9b:5a:e0:9d:e7:
c9:3f:a6:38:f2:60:cf:cc:25:a6:83:6b:fb:da:12:6d:32:13:
0e:c3:60:6b:f9:fd:a4:62:44:77:00:ea:fd:a5:03:76:ce:7c:
34:17:d4:7b:e1:6e:09:76:f6:f8:51:39:cd:87:af:b7:62:48:
4e:3a:aa:b8:14:b3:98:d8:b2:9c:47:6e:9b:49:f8:f4:14:d4:
6c:2b:3c:63:21:ee:3a:ef:55:1e:07:21:b2:ce:00:c7:75:3b:
82:d7:32:aa:cd:54:4c:a3:24:67:58:74:0c:a4:9c:18:c4:02:
fa:35:be:5b:87:c7:c5:3f:be:25:a9:8c:c5:23:26:6c:65:7e:
fa:8a:85:24:44:70:5a:3f:6a:31:77:f4:a9:d4:e6:d5:66:0b:
0d:a3:e8:66:31:d2:58:ee:d4:6a:64:d0:64:50:4f:50:30:5f:
1d:69:39:cb
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZdZliWUB4RCKZ8dJI/oxTIcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0MmJhYjg0NTk5NDhiNzk3NDc2NDhlMTNlOTliOWQwYTU4
MjUwNmEwHhcNMjUwNjEwMTEyNTAxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNWE2MzJmYzc4NzE5ZTZlMGYwNDBiMzYyZGZkYmY2MTVjMTkzYmE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSkAYMMSsZDf3kUq+LzWmY+RoJMz
S/Dwq/a+G1tWi2I0emVHooau5LeOHjoFeTcyFzVXT2J8DXDRSEE59wO0fv+9LcWr
iL/8GgJuGP4a7S8NxC7SCXLHxLNqFpD+n++o9Xu7gqyv2lnvE6nGZQLkF1ceUNfZ
ZmPQ6YMKl9DVPV7/UsTeV8tkGYsAs4Mq7uRKYZPeWTg36/MYnetm8edN7vCuykfG
WescAbZ6fAAvkxLiDzgAbMamY4VxqraRdC1h8V5r3hafSaEM08eF8WRMMQl1qz3N
dEo5xpJmqVy7hFq3a0t39iRhkdc9RF1xzul+1DHSQWmhAn24GaL48HfZpQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFKWmMvx4cZ5uDwQLNi39v2FcGTulMB8GA1UdIwQY
MBaAFGQrq4RZlIt5dHZI4T6ZudClglBqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkN1cmhGbVVpM2wwZGtqaFBwbTUwS1dDVUdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS81ZWMzMGMtMmFlZi00N2FiLWIwZWMt
NWIxNTUyM2JmY2JiLzEvcGFZeV9IaHhubTRQQkFzMkxmMl9ZVndaTzZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS81ZWMzMGMtMmFlZi00N2FiLWIwZWMtNWIxNTUyM2JmY2Ji
LzEvWkN1cmhGbVVpM2wwZGtqaFBwbTUwS1dDVUdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwWimAwQA
wbz9MA0GCSqGSIb3DQEBCwUAA4IBAQA8zb22WM3v7ANyZgYpXZM2wLVXaVHaNwWd
NwgUWR9oEX51cWh14/C10oWFRTue8rUbxjEBXdXOwCOJLINATxAk54A4Vdnpzny+
8LomjJQJQUeKMc1fm1rgnefJP6Y48mDPzCWmg2v72hJtMhMOw2Br+f2kYkR3AOr9
pQN2znw0F9R74W4Jdvb4UTnNh6+3YkhOOqq4FLOY2LKcR26bSfj0FNRsKzxjIe46
71UeByGyzgDHdTuC1zKqzVRMoyRnWHQMpJwYxAL6Nb5bh8fFP74lqYzFIyZsZX76
ioUkRHBaP2oxd/Sp1ObVZgsNo+hmMdJY7tRqZNBkUE9QMF8daTnL
-----END CERTIFICATE-----
Generated at Mon Jun 30 18:30:28 2025 by rpki-client