Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/cRaDA0M7tZydbUsqK9aZdtiAacE.roa
File: cRaDA0M7tZydbUsqK9aZdtiAacE.roa (raw, json)
Hash identifier: ia9lL8rDnklN3aveN4RFcnweZNv6Hz0CSfkY/uHJ828=
Subject key identifier: 71:16:83:03:43:3B:B5:9C:9D:6D:4B:2A:2B:D6:99:76:D8:80:69:C1
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 01992D44C2F29C0657F829BDC68233D7C8C3
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/cRaDA0M7tZydbUsqK9aZdtiAacE.roa
Signing time: Tue 09 Sep 2025 06:58:24 +0000
ROA not before: Tue 09 Sep 2025 06:58:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215826
IP address blocks: 147.45.45.0/24 maxlen: 24
193.233.112.0/23 maxlen: 23
193.233.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 17:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2d:44:c2:f2:9c:06:57:f8:29:bd:c6:82:33:d7:c8:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Sep 9 06:58:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=71168303433bb59c9d6d4b2a2bd69976d88069c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:68:6a:f1:86:b3:66:13:29:e6:31:5c:9b:94:
66:4e:a8:1c:fc:78:b1:e4:49:9a:c7:85:cf:ea:a1:
bd:1e:66:da:87:89:a2:2b:df:30:5e:ff:d1:0c:0d:
a5:97:b3:22:9e:48:2a:fe:75:3b:b2:b7:20:67:97:
06:9d:97:62:ec:75:03:11:48:12:a0:3f:99:c7:44:
66:29:fc:1e:a7:a0:f4:d6:8f:a0:85:88:a4:68:23:
33:cc:ff:b5:95:0a:6e:dc:69:5d:6e:fd:c5:a4:19:
d1:6b:40:0e:dd:a7:1f:1e:db:c0:1b:b3:54:9c:71:
95:e4:c7:c3:cc:af:4e:fb:8d:8f:8d:63:64:31:89:
c3:4d:12:ee:aa:d8:a4:7f:0b:04:99:ea:78:8c:2f:
36:a0:c7:d2:03:a9:47:08:81:89:65:5c:d3:7e:1e:
a0:7b:7a:2b:77:e3:0b:fa:91:51:98:88:e4:c8:2f:
3f:1f:7c:09:a9:d2:d3:28:b3:45:cf:79:5b:03:01:
1d:09:f1:60:57:33:21:59:e9:ce:49:47:71:ff:f6:
42:b7:89:69:e1:ba:a8:05:92:56:95:21:5b:d2:4e:
cc:73:f1:f6:94:d2:68:81:e8:9c:61:d7:92:99:5a:
48:b8:ba:ea:c4:a9:36:b6:d2:b0:8e:5d:df:b9:7b:
63:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:16:83:03:43:3B:B5:9C:9D:6D:4B:2A:2B:D6:99:76:D8:80:69:C1
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/cRaDA0M7tZydbUsqK9aZdtiAacE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.45.45.0/24
193.233.112.0/23
193.233.134.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:6d:d4:0e:13:a9:fc:b7:5c:1a:36:42:26:78:57:41:e2:fd:
7e:2b:e0:4b:89:02:a9:2d:3d:3f:ad:3b:8a:90:8d:19:d7:4b:
dc:4e:e7:fb:cb:0d:11:42:72:87:62:99:15:86:92:6d:9d:b3:
2c:11:a8:b1:60:0e:8b:95:eb:f1:4f:f4:a3:5c:84:61:a2:3d:
51:3f:0e:1b:10:17:53:92:24:74:0c:fc:fc:97:1a:07:59:90:
c2:6e:d5:99:93:2a:65:73:9e:88:52:b2:00:76:83:7c:f5:f1:
44:97:39:86:68:ba:5a:27:4f:15:0a:ab:f4:dc:10:62:7f:a5:
f3:0c:40:84:27:6d:08:50:f8:00:3d:a3:14:a4:74:23:43:11:
67:64:5d:95:33:3c:c9:a9:80:b1:23:d5:ab:f8:2a:99:18:86:
a1:f7:80:77:c7:b9:d6:53:24:9e:0f:70:43:3a:65:fc:19:4d:
9c:3c:7e:5c:94:ca:b1:21:69:6f:de:b2:8f:e8:ce:4b:c6:4c:
d4:a9:83:44:33:4b:6a:5d:46:2c:93:e6:5c:78:8f:5f:1e:43:
4b:7d:d1:3d:73:a2:18:a9:40:e0:98:2d:cd:7a:87:8a:1c:68:
f0:70:cb:cd:c5:87:e1:a8:d8:49:67:ca:ae:fc:29:5c:fe:37:
9b:55:a8:d9
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZktRMLynAZX+Cm9xoIz18jDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ZDY0OGJkYmE5NjU0NjFiMWU4YzExYjlkZDQzNmM2MTM4
Mjg3M2MwHhcNMjUwOTA5MDY1ODI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MTE2ODMwMzQzM2JiNTljOWQ2ZDRiMmEyYmQ2OTk3NmQ4ODA2OWMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWhq8YazZhMp5jFcm5RmTqgc/Hix
5Emax4XP6qG9Hmbah4miK98wXv/RDA2ll7Minkgq/nU7srcgZ5cGnZdi7HUDEUgS
oD+Zx0RmKfwep6D01o+ghYikaCMzzP+1lQpu3Gldbv3FpBnRa0AO3acfHtvAG7NU
nHGV5MfDzK9O+42PjWNkMYnDTRLuqtikfwsEmep4jC82oMfSA6lHCIGJZVzTfh6g
e3ord+ML+pFRmIjkyC8/H3wJqdLTKLNFz3lbAwEdCfFgVzMhWenOSUdx//ZCt4lp
4bqoBZJWlSFb0k7Mc/H2lNJogeicYdeSmVpIuLrqxKk2ttKwjl3fuXtjQwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFHEWgwNDO7WcnW1LKivWmXbYgGnBMB8GA1UdIwQY
MBaAFIbWSL26llRhsejBG53UNsYTgoc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmIt
NGRlYzRkYWZlZTQ5LzEvY1JhREEwTTd0WnlkYlVzcUs5YVpkdGlBYWNFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmItNGRlYzRkYWZlZTQ5
LzEvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAky0tAwQB
welwAwQAwemGMA0GCSqGSIb3DQEBCwUAA4IBAQCabdQOE6n8t1waNkImeFdB4v1+
K+BLiQKpLT0/rTuKkI0Z10vcTuf7yw0RQnKHYpkVhpJtnbMsEaixYA6LlevxT/Sj
XIRhoj1RPw4bEBdTkiR0DPz8lxoHWZDCbtWZkyplc56IUrIAdoN89fFElzmGaLpa
J08VCqv03BBif6XzDECEJ20IUPgAPaMUpHQjQxFnZF2VMzzJqYCxI9Wr+CqZGIah
94B3x7nWUySeD3BDOmX8GU2cPH5clMqxIWlv3rKP6M5LxkzUqYNEM0tqXUYsk+Zc
eI9fHkNLfdE9c6IYqUDgmC3NeoeKHGjwcMvNxYfhqNhJZ8qu/Clc/jebVajZ
-----END CERTIFICATE-----
Generated at Mon Oct 20 02:06:06 2025 by rpki-client