Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/tGvaJqw-BkYv98JxwuYhGJMirKI.roa
File: tGvaJqw-BkYv98JxwuYhGJMirKI.roa (raw, json)
Hash identifier: n1mCBZS2+2xEitKl9orN+eHu3AcNiwq8Xb6c6Ko5sAc=
Subject key identifier: B4:6B:DA:26:AC:3E:06:46:2F:F7:C2:71:C2:E6:21:18:93:22:AC:A2
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 01989A983C55EFAC4A5C661C62F0181B6536
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/tGvaJqw-BkYv98JxwuYhGJMirKI.roa
Signing time: Mon 11 Aug 2025 19:25:24 +0000
ROA not before: Mon 11 Aug 2025 19:25:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211936
IP address blocks: 213.209.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9a:98:3c:55:ef:ac:4a:5c:66:1c:62:f0:18:1b:65:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Aug 11 19:25:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b46bda26ac3e06462ff7c271c2e621189322aca2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:73:1f:cb:31:07:7c:a7:a6:2b:1e:b1:55:41:
20:8c:f3:5e:a6:9d:f8:20:1c:c5:ef:0d:35:db:35:
72:e2:79:cb:51:88:54:9c:a8:1c:02:d3:c1:84:b6:
60:ad:93:ac:b2:ca:1c:9d:5e:cf:cc:2a:1e:8b:66:
a0:ff:a7:71:78:c7:e6:54:ff:a5:42:4c:3c:76:6e:
f6:9e:74:11:0b:f6:07:4a:42:1f:53:c7:49:03:fc:
dd:0b:75:11:f3:d8:ff:0d:15:4d:85:d6:69:1d:f8:
b4:1e:85:15:f3:c6:db:67:fd:ce:52:58:a1:a9:c9:
ca:dd:0d:21:5d:a5:ee:c0:a1:a9:c0:09:4d:10:30:
df:14:a1:8a:4e:72:49:9c:fa:29:4d:f1:ad:7d:fd:
80:a2:4d:1f:81:ae:60:e8:2a:19:ee:7f:d9:41:58:
f1:43:ee:68:ca:a9:da:c8:70:0c:8f:a2:28:ea:b3:
b2:bc:8d:ba:f0:90:39:76:67:5e:18:8d:8b:ab:9e:
46:aa:e0:dd:51:3c:3a:fc:42:6b:36:f3:b3:98:30:
73:b3:56:a4:ea:10:f8:19:12:25:6b:c7:8d:fc:5c:
8e:22:8c:4b:3b:04:09:eb:3f:37:ec:95:ba:81:8d:
0b:ea:2c:93:ea:4e:ac:50:d2:5c:90:c0:64:6c:e3:
0b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:6B:DA:26:AC:3E:06:46:2F:F7:C2:71:C2:E6:21:18:93:22:AC:A2
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/tGvaJqw-BkYv98JxwuYhGJMirKI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.209.136.0/24
Signature Algorithm: sha256WithRSAEncryption
04:3e:f0:e3:3e:e1:25:20:c4:66:38:67:b5:51:83:64:cd:92:
a7:c2:d2:34:92:e1:d4:68:13:d2:7a:a9:31:7d:56:7f:79:df:
a9:63:5e:6b:2a:ab:40:cb:e7:ff:e8:74:29:d5:7b:48:92:c6:
9a:3f:78:59:66:c2:0a:fc:24:7e:33:7f:cf:02:cb:c7:a4:2c:
71:62:e6:55:80:fd:58:b2:d7:f6:5f:74:f6:04:bd:0b:c9:d7:
d3:56:08:12:84:fd:f9:84:0d:ee:67:b4:be:5c:f6:7d:9f:12:
95:93:60:ac:d6:5c:1a:fc:6f:13:be:cd:1c:39:7c:e4:0f:ab:
dc:7d:49:b2:ba:92:81:71:aa:f4:0c:b9:79:15:17:f5:14:cb:
0c:3c:e1:02:25:8e:36:ff:b2:80:69:88:e1:5d:e3:29:a3:6f:
68:0a:0e:22:07:04:b9:7c:5a:f7:d0:f7:67:49:14:42:ad:c6:
80:a6:8f:be:ec:fd:92:8e:55:81:1e:3f:e1:b0:49:57:f4:5d:
45:dc:ce:44:9f:52:aa:bc:8f:1b:ba:a0:ab:8f:da:5d:e1:76:
f6:17:ed:f1:f6:47:f9:05:94:86:2e:05:3f:7d:d7:ad:63:a2:
c9:23:79:d3:d9:d3:cf:f5:8e:bd:0a:f7:d6:43:36:81:f3:81:
3b:22:f9:a7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZiamDxV76xKXGYcYvAYG2U2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiNDc2ZTEyZTg5ODdlNWIzMDJjZGMyNGJkZDlkYjNmZTgz
Yzg0NDkwHhcNMjUwODExMTkyNTI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNDZiZGEyNmFjM2UwNjQ2MmZmN2MyNzFjMmU2MjExODkzMjJhY2EyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnMfyzEHfKemKx6xVUEgjPNepp34
IBzF7w012zVy4nnLUYhUnKgcAtPBhLZgrZOsssocnV7PzCoei2ag/6dxeMfmVP+l
Qkw8dm72nnQRC/YHSkIfU8dJA/zdC3UR89j/DRVNhdZpHfi0HoUV88bbZ/3OUlih
qcnK3Q0hXaXuwKGpwAlNEDDfFKGKTnJJnPopTfGtff2Aok0fga5g6CoZ7n/ZQVjx
Q+5oyqnayHAMj6Io6rOyvI268JA5dmdeGI2Lq55GquDdUTw6/EJrNvOzmDBzs1ak
6hD4GRIla8eN/FyOIoxLOwQJ6z837JW6gY0L6iyT6k6sUNJckMBkbOML4QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLRr2iasPgZGL/fCccLmIRiTIqyiMB8GA1UdIwQY
MBaAFDtHbhLomH5bMCzcJL3Z2z/oPIRJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMt
NmNiZmYzYzRkYTAxLzEvdEd2YUpxdy1Ca1l2OThKeHd1WWhHSk1pcktJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMtNmNiZmYzYzRkYTAx
LzEvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1dGIMA0G
CSqGSIb3DQEBCwUAA4IBAQAEPvDjPuElIMRmOGe1UYNkzZKnwtI0kuHUaBPSeqkx
fVZ/ed+pY15rKqtAy+f/6HQp1XtIksaaP3hZZsIK/CR+M3/PAsvHpCxxYuZVgP1Y
stf2X3T2BL0LydfTVggShP35hA3uZ7S+XPZ9nxKVk2Cs1lwa/G8Tvs0cOXzkD6vc
fUmyupKBcar0DLl5FRf1FMsMPOECJY42/7KAaYjhXeMpo29oCg4iBwS5fFr30Pdn
SRRCrcaApo++7P2SjlWBHj/hsElX9F1F3M5En1KqvI8buqCrj9pd4Xb2F+3x9kf5
BZSGLgU/fdetY6LJI3nT2dPP9Y69CvfWQzaB84E7Ivmn
-----END CERTIFICATE-----
Generated at Sat Aug 23 18:41:01 2025 by rpki-client