Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/uWdsuK3hAe7Dl7tiOo0NecGrcUU.roa
File: uWdsuK3hAe7Dl7tiOo0NecGrcUU.roa (raw, json)
Hash identifier: qdhSzKYW9JqHooGrxdO5XlVsGBK8AcDq8ZkhxAah40A=
Subject key identifier: B9:67:6C:B8:AD:E1:01:EE:C3:97:BB:62:3A:8D:0D:79:C1:AB:71:45
Certificate issuer: /CN=6764b9eeca258ae78c4d51321a8bdfef9a2b6a3c
Certificate serial: 01989A26B4A9DCC730EAE45230C318D36D5C
Authority key identifier: 67:64:B9:EE:CA:25:8A:E7:8C:4D:51:32:1A:8B:DF:EF:9A:2B:6A:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z2S57soliueMTVEyGovf75orajw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/uWdsuK3hAe7Dl7tiOo0NecGrcUU.roa
Signing time: Mon 11 Aug 2025 17:21:24 +0000
ROA not before: Mon 11 Aug 2025 17:21:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20912
IP address blocks: 193.36.108.0/22 maxlen: 22
193.36.108.0/24 maxlen: 24
193.36.109.0/24 maxlen: 24
193.36.110.0/24 maxlen: 24
193.36.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/Z2S57soliueMTVEyGovf75orajw.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/Z2S57soliueMTVEyGovf75orajw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z2S57soliueMTVEyGovf75orajw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9a:26:b4:a9:dc:c7:30:ea:e4:52:30:c3:18:d3:6d:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6764b9eeca258ae78c4d51321a8bdfef9a2b6a3c
Validity
Not Before: Aug 11 17:21:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b9676cb8ade101eec397bb623a8d0d79c1ab7145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:33:98:46:c3:8b:7c:e5:b6:4f:fe:ed:19:bc:
b6:fa:64:e6:0e:6a:19:ea:08:cb:0d:f1:43:fd:31:
69:aa:7d:c0:54:35:7d:d3:06:ca:ab:bf:47:2a:5a:
81:e3:56:ad:11:23:cc:13:37:61:24:ab:94:79:5a:
cf:65:2d:c6:31:9d:7c:cc:ad:ce:ee:dd:8a:85:4c:
ef:ed:61:c1:ab:c5:0f:e4:9c:2a:32:26:ae:22:34:
64:8a:7b:4f:44:21:78:53:ee:1d:8a:6f:b3:bd:a9:
3c:8d:e3:c5:9e:90:3e:71:f4:75:a8:ab:4c:d1:c1:
4d:17:6a:11:81:cf:93:cc:d8:f7:d3:a9:49:bb:5f:
f9:c5:21:8e:4b:36:95:cf:95:e3:e9:eb:e7:ff:bc:
a4:9b:e8:f7:7f:ad:8c:d6:c6:a0:fc:70:8b:ea:78:
76:cb:a6:9b:4c:c5:5c:bb:78:e7:93:6a:1f:60:96:
85:d6:11:68:92:e4:66:a7:5f:ef:52:d9:a6:09:44:
9c:92:60:f4:d7:f3:cc:1d:7d:ff:80:46:be:7a:f5:
b2:c9:b9:9d:09:c0:d4:8a:1d:a8:3a:6a:b3:60:54:
30:8d:45:d4:86:d9:c4:08:2f:5a:c9:46:26:9e:6f:
90:00:ef:a7:32:ce:a1:b6:4c:cc:ac:03:95:76:99:
08:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:67:6C:B8:AD:E1:01:EE:C3:97:BB:62:3A:8D:0D:79:C1:AB:71:45
X509v3 Authority Key Identifier:
keyid:67:64:B9:EE:CA:25:8A:E7:8C:4D:51:32:1A:8B:DF:EF:9A:2B:6A:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z2S57soliueMTVEyGovf75orajw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/uWdsuK3hAe7Dl7tiOo0NecGrcUU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/Z2S57soliueMTVEyGovf75orajw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.36.108.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:05:d4:b4:cf:71:56:20:11:f5:de:ee:41:ec:c5:c1:f6:9e:
ef:f3:4e:b4:0f:8b:c7:47:d5:f7:44:14:d7:72:94:87:89:61:
e6:7f:bc:1d:37:8b:cb:08:cc:fa:ed:58:49:a0:b0:3d:93:a4:
50:11:13:fd:2f:52:d1:e2:e1:60:ad:a1:96:57:ba:87:2a:20:
c1:1d:43:ad:de:02:0d:c7:c6:98:c4:68:12:55:f0:73:6d:d6:
ea:1d:5e:6d:86:9d:25:6d:47:d0:05:e7:2d:8b:06:a6:a4:be:
9d:9f:fd:28:7f:1c:83:06:a9:33:07:b3:cd:36:e6:83:fb:c2:
f7:06:09:6f:1d:7d:5f:d9:bb:0c:18:78:a5:d9:e8:27:89:4f:
1e:29:d7:dd:5e:f6:e3:c8:b3:78:2a:81:7a:45:2c:9f:27:c6:
39:85:6f:2c:18:95:e4:72:9e:09:ad:68:2b:49:3e:70:fd:70:
a7:97:99:d9:2c:ae:36:70:a0:33:a3:b6:5e:38:c4:da:f7:bd:
68:07:79:57:1a:40:81:ae:3d:7d:c5:d0:0a:7e:ca:29:78:a4:
85:58:9e:0b:e7:a9:ef:71:30:7f:b7:5b:31:cf:1b:e2:d2:b0:
0a:ea:a2:69:e0:67:3d:4d:93:af:a4:64:32:9f:32:7b:c4:14:
d0:1e:26:00
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZiaJrSp3Mcw6uRSMMMY021cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3NjRiOWVlY2EyNThhZTc4YzRkNTEzMjFhOGJkZmVmOWEy
YjZhM2MwHhcNMjUwODExMTcyMTI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOTY3NmNiOGFkZTEwMWVlYzM5N2JiNjIzYThkMGQ3OWMxYWI3MTQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7zOYRsOLfOW2T/7tGby2+mTmDmoZ
6gjLDfFD/TFpqn3AVDV90wbKq79HKlqB41atESPMEzdhJKuUeVrPZS3GMZ18zK3O
7t2KhUzv7WHBq8UP5JwqMiauIjRkintPRCF4U+4dim+zvak8jePFnpA+cfR1qKtM
0cFNF2oRgc+TzNj306lJu1/5xSGOSzaVz5Xj6evn/7ykm+j3f62M1sag/HCL6nh2
y6abTMVcu3jnk2ofYJaF1hFokuRmp1/vUtmmCUSckmD01/PMHX3/gEa+evWyybmd
CcDUih2oOmqzYFQwjUXUhtnECC9ayUYmnm+QAO+nMs6htkzMrAOVdpkI2wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLlnbLit4QHuw5e7YjqNDXnBq3FFMB8GA1UdIwQY
MBaAFGdkue7KJYrnjE1RMhqL3++aK2o8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjJTNTdzb2xpdWVNVFZFeUdvdmY3NW9yYWp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9lMzMzNWYtNDExNC00NDgyLThlMTIt
NDI1NmE0NmFmZWVjLzEvdVdkc3VLM2hBZTdEbDd0aU9vME5lY0dyY1VVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC9lMzMzNWYtNDExNC00NDgyLThlMTItNDI1NmE0NmFmZWVj
LzEvWjJTNTdzb2xpdWVNVFZFeUdvdmY3NW9yYWp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwSRsMA0G
CSqGSIb3DQEBCwUAA4IBAQAsBdS0z3FWIBH13u5B7MXB9p7v8060D4vHR9X3RBTX
cpSHiWHmf7wdN4vLCMz67VhJoLA9k6RQERP9L1LR4uFgraGWV7qHKiDBHUOt3gIN
x8aYxGgSVfBzbdbqHV5thp0lbUfQBectiwampL6dn/0ofxyDBqkzB7PNNuaD+8L3
BglvHX1f2bsMGHil2egniU8eKdfdXvbjyLN4KoF6RSyfJ8Y5hW8sGJXkcp4JrWgr
ST5w/XCnl5nZLK42cKAzo7ZeOMTa971oB3lXGkCBrj19xdAKfsopeKSFWJ4L56nv
cTB/t1sxzxvi0rAK6qJp4Gc9TZOvpGQynzJ7xBTQHiYA
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:12:38 2025 by rpki-client