Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/d70d46-265a-4092-8331-ef5f093f5395/1/RiL09rS6VjBEVN__JOM2U5RqEcI.roa
File: RiL09rS6VjBEVN__JOM2U5RqEcI.roa (raw, json)
Hash identifier: uYgL/yhRbt5qevmx86ZZVWKBSugMaqO2EFz8Vo1U7Pk=
Subject key identifier: 46:22:F4:F6:B4:BA:56:30:44:54:DF:FF:24:E3:36:53:94:6A:11:C2
Certificate issuer: /CN=19b668e56fe25bd6dc53800ee1775061ecc09206
Certificate serial: 0197AC183885242DEC83B8DCA9697B9A2BAA
Authority key identifier: 19:B6:68:E5:6F:E2:5B:D6:DC:53:80:0E:E1:77:50:61:EC:C0:92:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GbZo5W_iW9bcU4AO4XdQYezAkgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/d70d46-265a-4092-8331-ef5f093f5395/1/RiL09rS6VjBEVN__JOM2U5RqEcI.roa
Signing time: Thu 26 Jun 2025 11:55:57 +0000
ROA not before: Thu 26 Jun 2025 11:55:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50727
IP address blocks: 193.107.228.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/d70d46-265a-4092-8331-ef5f093f5395/1/GbZo5W_iW9bcU4AO4XdQYezAkgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/d70d46-265a-4092-8331-ef5f093f5395/1/GbZo5W_iW9bcU4AO4XdQYezAkgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GbZo5W_iW9bcU4AO4XdQYezAkgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 01:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ac:18:38:85:24:2d:ec:83:b8:dc:a9:69:7b:9a:2b:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19b668e56fe25bd6dc53800ee1775061ecc09206
Validity
Not Before: Jun 26 11:55:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4622f4f6b4ba56304454dfff24e33653946a11c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ca:52:16:da:73:ae:4a:89:2a:7d:c4:82:3a:
9b:7a:1c:45:b1:d9:d0:00:2f:74:a7:f9:ca:8b:e5:
8b:47:1d:19:d3:73:bf:32:82:6c:81:68:d6:a6:a8:
45:75:f1:e9:80:f4:0f:e6:ba:2c:fe:8c:e1:eb:ae:
c2:34:8c:2a:7c:24:d8:ec:ee:2d:88:ef:d1:43:50:
7a:07:8b:37:8d:7e:c9:cf:cc:c8:6d:d8:7c:bc:b6:
1c:12:c8:e1:72:b8:3c:ef:a4:03:2a:3d:2e:16:bc:
57:41:4d:5e:df:ca:1f:19:5d:84:83:a3:fa:11:dd:
c7:1f:14:17:95:70:98:11:8c:e1:c2:a8:19:f3:72:
4a:2c:8b:3a:62:06:11:08:c8:17:f8:6d:ef:54:88:
1b:f6:56:8d:d6:55:25:c6:30:4f:6c:f4:3e:5c:91:
5f:7c:96:75:90:02:45:a7:78:0c:da:68:60:e1:b0:
bc:04:45:a0:be:79:4c:8c:df:1b:8c:59:81:a1:2d:
be:3b:75:b9:8b:02:37:10:c0:53:5b:5e:cd:d8:80:
ab:ce:1b:27:1e:bb:ab:d8:dd:4f:2d:6e:ce:38:51:
a7:f7:e2:78:5b:56:3c:a4:ad:c8:51:5f:21:b7:25:
65:f4:8c:9b:af:e8:c7:2f:a8:bd:f9:2f:a7:3f:da:
60:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:22:F4:F6:B4:BA:56:30:44:54:DF:FF:24:E3:36:53:94:6A:11:C2
X509v3 Authority Key Identifier:
keyid:19:B6:68:E5:6F:E2:5B:D6:DC:53:80:0E:E1:77:50:61:EC:C0:92:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbZo5W_iW9bcU4AO4XdQYezAkgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/d70d46-265a-4092-8331-ef5f093f5395/1/RiL09rS6VjBEVN__JOM2U5RqEcI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/d70d46-265a-4092-8331-ef5f093f5395/1/GbZo5W_iW9bcU4AO4XdQYezAkgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.107.228.0/22
Signature Algorithm: sha256WithRSAEncryption
83:45:5a:53:4c:d3:4f:69:be:9a:75:f0:4e:14:0d:22:38:82:
e9:e6:9e:72:b4:3a:77:94:d3:c2:d9:b1:fc:46:c6:0c:35:f9:
92:52:db:5f:61:9b:fa:06:6e:ac:a1:13:bf:ba:c5:68:60:ed:
df:5a:90:96:5a:54:2f:ee:7d:9c:04:19:e7:46:74:18:96:db:
b3:e1:8e:2d:5d:40:b4:93:d3:2c:32:70:de:4d:d5:f3:02:15:
92:df:d6:06:33:1d:f8:72:d8:bf:6b:f8:47:63:d8:b3:57:60:
61:73:90:9c:75:95:52:f1:db:20:0d:20:82:a3:ae:12:8e:77:
e2:a8:5a:8a:07:33:09:97:20:85:d6:d0:a7:b9:be:f3:16:97:
c3:41:b9:70:4c:c2:41:76:bb:e9:a9:a7:1d:ad:d5:24:91:70:
8b:53:a6:22:db:51:b5:f3:b4:97:d1:4b:fc:d1:40:8b:09:4a:
ec:c4:90:d4:80:31:f7:d8:cc:ff:65:78:72:a7:71:17:a2:be:
21:74:94:c7:10:f8:7d:c5:b4:0d:0d:96:7f:78:43:e0:a5:6b:
ac:8d:94:ea:c1:8d:9b:c6:3f:ab:01:f1:30:4b:62:f1:ba:24:
fe:f9:3b:29:93:60:4a:95:8b:d4:98:88:10:d2:12:24:42:65:
65:31:5b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 04:45:30 2025 by rpki-client