Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/cbttRTAQtZsHiLMa9aVnpoXBbRM.roa
File: cbttRTAQtZsHiLMa9aVnpoXBbRM.roa (raw, json)
Hash identifier: jWR2BjglYoR0DxuI3Xja/PASrPrmIYFaaoTINLM/F0k=
Subject key identifier: 71:BB:6D:45:30:10:B5:9B:07:88:B3:1A:F5:A5:67:A6:85:C1:6D:13
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 0197A0EB48771612B2B3B7A1DE0869DFB9B3
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/cbttRTAQtZsHiLMa9aVnpoXBbRM.roa
Signing time: Tue 24 Jun 2025 07:51:03 +0000
ROA not before: Tue 24 Jun 2025 07:51:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 185.47.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:a0:eb:48:77:16:12:b2:b3:b7:a1:de:08:69:df:b9:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jun 24 07:51:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=71bb6d453010b59b0788b31af5a567a685c16d13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2d:7f:5f:9f:e8:d9:0a:2e:0e:9e:25:23:4f:
d4:70:d0:6c:3f:59:18:f0:63:11:d4:16:87:d8:94:
5d:f7:88:80:0c:2a:b5:7c:22:d6:48:21:fc:0b:b0:
87:cb:cb:09:46:76:7d:09:0f:91:74:8b:3f:70:bc:
17:81:5e:88:54:0f:19:2b:40:93:72:2d:f5:5a:f2:
05:d8:a1:c1:2a:5e:f7:a5:28:d9:f8:93:4a:8a:b7:
78:61:9f:eb:25:a9:b5:76:24:3e:71:90:93:46:b8:
a0:ac:97:65:0e:a0:6a:83:f5:e5:a8:d5:b5:13:d3:
a1:a8:e6:66:56:c3:77:7f:9e:79:cc:10:57:3d:4c:
59:e6:df:d5:27:56:f3:76:a9:87:76:64:ff:8b:bf:
33:db:01:39:4f:37:e5:2a:e2:7f:7b:cf:d8:c3:e3:
e1:be:c6:42:ed:21:6e:a4:56:7d:39:05:b3:8f:c3:
42:16:48:93:39:16:4b:60:71:7a:37:7b:fa:ff:f2:
3c:76:9c:41:ab:8f:28:7d:9b:a2:83:a6:3e:a1:30:
08:63:21:e4:3f:4d:f8:2e:68:14:34:14:10:64:bb:
c8:20:d2:79:71:82:a2:f0:7d:63:9b:51:72:93:75:
64:42:c4:35:09:a3:9a:6e:5d:c5:f5:82:05:d8:52:
a5:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:BB:6D:45:30:10:B5:9B:07:88:B3:1A:F5:A5:67:A6:85:C1:6D:13
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/cbttRTAQtZsHiLMa9aVnpoXBbRM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.47.91.0/24
Signature Algorithm: sha256WithRSAEncryption
89:31:1f:d2:e4:b7:e9:c8:33:0c:a6:15:f9:b3:41:20:c2:8c:
b5:67:05:6e:c9:91:4e:c7:0b:58:ed:71:a0:2a:17:fc:0d:22:
1a:fd:69:b2:89:33:3a:18:32:a2:b5:e0:46:f7:e5:33:df:85:
c1:a4:6f:68:0a:66:c7:39:a5:8b:5d:24:ed:46:43:61:22:ba:
c2:4c:51:2d:48:db:df:50:ba:37:a5:96:8d:1b:e7:14:f3:f9:
b5:69:08:fb:b4:41:23:71:89:87:7c:a9:39:3c:ed:07:d8:1e:
21:41:d2:6f:c3:51:4f:f6:45:b5:c4:7a:dc:0a:d8:ad:26:1e:
21:0a:e7:52:06:08:43:2b:b3:61:8e:f3:6a:11:01:74:af:85:
e8:b0:8c:6f:0f:eb:ef:cb:a9:55:b0:31:c5:b8:a2:ef:0d:c5:
c3:13:43:56:ac:94:7d:7c:ec:52:12:1c:68:95:cd:e5:94:e0:
23:8c:c1:42:64:df:51:f3:cc:70:5a:66:5b:e9:92:2c:ef:bd:
dd:72:81:ff:7f:3f:80:69:72:a6:18:ab:af:08:92:04:6f:e6:
5c:4a:81:52:06:02:f1:ee:b5:d5:75:24:a4:8b:95:f7:b2:56:
13:a7:35:b8:c1:65:94:33:fe:f0:b2:d7:48:82:93:a4:64:3c:
ea:0a:5a:47
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZeg60h3FhKys7eh3ghp37mzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj
N2U5MTUwHhcNMjUwNjI0MDc1MTAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MWJiNmQ0NTMwMTBiNTliMDc4OGIzMWFmNWE1NjdhNjg1YzE2ZDEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtS1/X5/o2QouDp4lI0/UcNBsP1kY
8GMR1BaH2JRd94iADCq1fCLWSCH8C7CHy8sJRnZ9CQ+RdIs/cLwXgV6IVA8ZK0CT
ci31WvIF2KHBKl73pSjZ+JNKird4YZ/rJam1diQ+cZCTRrigrJdlDqBqg/XlqNW1
E9OhqOZmVsN3f555zBBXPUxZ5t/VJ1bzdqmHdmT/i78z2wE5TzflKuJ/e8/Yw+Ph
vsZC7SFupFZ9OQWzj8NCFkiTORZLYHF6N3v6//I8dpxBq48ofZuig6Y+oTAIYyHk
P034LmgUNBQQZLvIINJ5cYKi8H1jm1Fyk3VkQsQ1CaOabl3F9YIF2FKlJQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHG7bUUwELWbB4izGvWlZ6aFwW0TMB8GA1UdIwQY
MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt
ZmFlNWRiZWQzYjFiLzEvY2J0dFJUQVF0WnNIaUxNYTlhVm5wb1hCYlJNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi
LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuS9bMA0G
CSqGSIb3DQEBCwUAA4IBAQCJMR/S5LfpyDMMphX5s0Egwoy1ZwVuyZFOxwtY7XGg
Khf8DSIa/WmyiTM6GDKiteBG9+Uz34XBpG9oCmbHOaWLXSTtRkNhIrrCTFEtSNvf
ULo3pZaNG+cU8/m1aQj7tEEjcYmHfKk5PO0H2B4hQdJvw1FP9kW1xHrcCtitJh4h
CudSBghDK7NhjvNqEQF0r4XosIxvD+vvy6lVsDHFuKLvDcXDE0NWrJR9fOxSEhxo
lc3llOAjjMFCZN9R88xwWmZb6ZIs773dcoH/fz+AaXKmGKuvCJIEb+ZcSoFSBgLx
7rXVdSSki5X3slYTpzW4wWWUM/7wstdIgpOkZDzqClpH
-----END CERTIFICATE-----
Generated at Sun Jun 29 03:28:00 2025 by rpki-client