Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/76krOMMFj4xGzKVVHko6uuDROxo.roa
File: 76krOMMFj4xGzKVVHko6uuDROxo.roa (raw, json)
Hash identifier: ceX2KDmhx3x4hNPX/8MXCJQ5KaH4yEnp1JFYHt1MSdY=
Subject key identifier: EF:A9:2B:38:C3:05:8F:8C:46:CC:A5:55:1E:4A:3A:BA:E0:D1:3B:1A
Certificate issuer: /CN=213e1d50d52288bee80eea435577018712409bbe
Certificate serial: 01977DE9674A5F2B3D8C64DF18D87434DF71
Authority key identifier: 21:3E:1D:50:D5:22:88:BE:E8:0E:EA:43:55:77:01:87:12:40:9B:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/76krOMMFj4xGzKVVHko6uuDROxo.roa
Signing time: Tue 17 Jun 2025 12:42:17 +0000
ROA not before: Tue 17 Jun 2025 12:42:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208821
IP address blocks: 185.130.90.0/24 maxlen: 24
193.22.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.mft
rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 12:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7d:e9:67:4a:5f:2b:3d:8c:64:df:18:d8:74:34:df:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=213e1d50d52288bee80eea435577018712409bbe
Validity
Not Before: Jun 17 12:42:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=efa92b38c3058f8c46cca5551e4a3abae0d13b1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:70:d0:92:f0:d9:bc:dc:e3:d1:64:3e:60:cf:
69:0e:45:30:a5:18:51:d0:b2:7b:c9:f7:b4:2c:82:
cb:b6:f7:51:47:d3:11:44:22:82:ac:1d:ca:38:e6:
63:f1:5a:d5:6a:30:de:a4:28:48:fe:d8:b4:33:fa:
54:09:7d:26:e5:cf:e3:47:4d:9a:da:6b:02:6c:66:
67:b4:a7:18:b9:8e:16:26:95:93:de:a7:5e:6f:e3:
8a:dd:7a:51:59:89:67:5b:d2:2f:d4:64:15:d0:95:
fc:ef:ab:dc:51:5d:78:da:6e:c5:dd:b4:c2:ea:05:
bc:91:17:5e:56:8f:90:26:38:05:f7:97:2b:c9:06:
1d:2e:d4:89:af:a7:fd:0b:42:9a:01:5f:07:92:cb:
be:dd:4c:93:c7:5a:2d:05:af:c5:40:4d:81:34:f5:
7c:1e:b9:25:99:dc:43:a9:de:a3:66:da:82:8e:49:
10:8e:0f:fa:91:08:77:24:4b:af:4c:fb:1a:c2:cd:
c4:33:a6:e1:8b:63:07:b5:e2:ff:de:e1:dd:f2:83:
84:69:e1:42:a5:a0:44:b4:c3:df:ca:bc:69:7f:c7:
bf:90:4d:6d:2f:9a:78:0e:36:b0:85:b4:a8:98:5d:
83:60:da:80:ef:9f:59:0e:ac:2a:d1:08:9e:cd:9f:
a9:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:A9:2B:38:C3:05:8F:8C:46:CC:A5:55:1E:4A:3A:BA:E0:D1:3B:1A
X509v3 Authority Key Identifier:
keyid:21:3E:1D:50:D5:22:88:BE:E8:0E:EA:43:55:77:01:87:12:40:9B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/76krOMMFj4xGzKVVHko6uuDROxo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.130.90.0/24
193.22.12.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:a7:b5:aa:f0:48:27:fd:54:d9:85:54:a8:69:19:f0:6b:9b:
5a:59:6d:1c:85:92:e3:d4:5b:d0:e6:a4:a6:a7:e9:44:70:3e:
1c:18:eb:87:77:e4:f5:45:b3:a3:47:61:25:79:ed:9d:a4:04:
dc:29:5a:33:f2:0d:6a:b6:ec:d5:a9:db:01:10:06:37:e6:a6:
bf:51:6c:18:5f:16:65:f7:57:24:5d:30:4e:bc:a0:25:18:e8:
6b:4c:4e:bc:36:75:84:5e:90:ad:c1:91:7b:84:4f:64:92:90:
3f:8b:67:75:2c:2a:7c:a7:21:c3:be:7a:a9:bf:70:2f:2c:b8:
7f:ea:5e:86:dc:e3:3e:09:49:ce:f4:5c:ef:5f:22:e2:3b:46:
75:89:55:d9:82:9e:21:b6:0b:03:b2:bd:3e:0c:0f:67:20:1f:
ab:87:dd:0d:ef:57:8a:96:92:f8:dd:da:0e:84:5a:b9:33:d9:
98:f9:cf:dc:17:da:04:6e:1b:b6:5d:d2:fb:b9:d3:dd:d2:dd:
87:9b:5d:d8:0d:f5:01:12:40:f6:82:fd:d3:f7:e5:8b:f2:53:
8a:e2:58:ee:a6:39:c8:13:95:71:75:f2:a0:44:51:a6:65:9b:
0c:92:18:2c:11:ff:69:26:7f:6c:8e:89:cd:a0:31:41:1a:d2:
20:ec:59:0f
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZd96WdKXys9jGTfGNh0NN9xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxM2UxZDUwZDUyMjg4YmVlODBlZWE0MzU1NzcwMTg3MTI0
MDliYmUwHhcNMjUwNjE3MTI0MjE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZmE5MmIzOGMzMDU4ZjhjNDZjY2E1NTUxZTRhM2FiYWUwZDEzYjFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3DQkvDZvNzj0WQ+YM9pDkUwpRhR
0LJ7yfe0LILLtvdRR9MRRCKCrB3KOOZj8VrVajDepChI/ti0M/pUCX0m5c/jR02a
2msCbGZntKcYuY4WJpWT3qdeb+OK3XpRWYlnW9Iv1GQV0JX876vcUV142m7F3bTC
6gW8kRdeVo+QJjgF95cryQYdLtSJr6f9C0KaAV8Hksu+3UyTx1otBa/FQE2BNPV8
HrklmdxDqd6jZtqCjkkQjg/6kQh3JEuvTPsaws3EM6bhi2MHteL/3uHd8oOEaeFC
paBEtMPfyrxpf8e/kE1tL5p4DjawhbSomF2DYNqA759ZDqwq0QiezZ+p3QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFO+pKzjDBY+MRsylVR5KOrrg0TsaMB8GA1UdIwQY
MBaAFCE+HVDVIoi+6A7qQ1V3AYcSQJu+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVQ0ZFVOVWlpTDdvRHVwRFZYY0JoeEpBbTc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8yYTFjZTktZmI0Yy00MWVlLTlmZjYt
MzE2ZWYyNjFmNGE1LzEvNzZrck9NTUZqNHhHektWVkhrbzZ1dURST3hvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy8yYTFjZTktZmI0Yy00MWVlLTlmZjYtMzE2ZWYyNjFmNGE1
LzEvSVQ0ZFVOVWlpTDdvRHVwRFZYY0JoeEpBbTc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuYJaAwQA
wRYMMA0GCSqGSIb3DQEBCwUAA4IBAQBNp7Wq8Egn/VTZhVSoaRnwa5taWW0chZLj
1FvQ5qSmp+lEcD4cGOuHd+T1RbOjR2Elee2dpATcKVoz8g1qtuzVqdsBEAY35qa/
UWwYXxZl91ckXTBOvKAlGOhrTE68NnWEXpCtwZF7hE9kkpA/i2d1LCp8pyHDvnqp
v3AvLLh/6l6G3OM+CUnO9FzvXyLiO0Z1iVXZgp4htgsDsr0+DA9nIB+rh90N71eK
lpL43doOhFq5M9mY+c/cF9oEbhu2XdL7udPd0t2Hm13YDfUBEkD2gv3T9+WL8lOK
4ljupjnIE5VxdfKgRFGmZZsMkhgsEf9pJn9sjonNoDFBGtIg7FkP
-----END CERTIFICATE-----
Generated at Sun Jun 29 19:02:05 2025 by rpki-client