Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/nEVdqY8AEi1qAf3gwN9XP2vFdQA.roa
File: nEVdqY8AEi1qAf3gwN9XP2vFdQA.roa (raw, json)
Hash identifier: P91fqqZlwovSkVfQ/1sdmUvD3fOVdOBgnzJN7JJt5gk=
Subject key identifier: 9C:45:5D:A9:8F:00:12:2D:6A:01:FD:E0:C0:DF:57:3F:6B:C5:75:00
Certificate issuer: /CN=5954b6183e459748c89ee5431b8f31de692ae3b7
Certificate serial: 0198CC5428CC4B2DE5C2FF242AE52D563DA2
Authority key identifier: 59:54:B6:18:3E:45:97:48:C8:9E:E5:43:1B:8F:31:DE:69:2A:E3:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/nEVdqY8AEi1qAf3gwN9XP2vFdQA.roa
Signing time: Thu 21 Aug 2025 11:12:04 +0000
ROA not before: Thu 21 Aug 2025 11:12:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 138160
IP address blocks: 212.11.16.0/23 maxlen: 24
212.11.20.0/22 maxlen: 24
212.11.24.0/23 maxlen: 24
212.11.32.0/21 maxlen: 24
212.11.42.0/23 maxlen: 24
212.11.60.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.mft
rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 08:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:cc:54:28:cc:4b:2d:e5:c2:ff:24:2a:e5:2d:56:3d:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5954b6183e459748c89ee5431b8f31de692ae3b7
Validity
Not Before: Aug 21 11:12:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9c455da98f00122d6a01fde0c0df573f6bc57500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:be:dd:d5:b2:b1:4b:a9:2a:ae:1c:ae:ca:db:
31:8f:97:da:50:f3:a4:a7:c6:87:ce:2e:af:c5:3c:
f1:39:f6:03:da:cd:02:f5:d0:8b:ed:50:56:e5:d5:
55:e3:e5:33:a0:47:37:5c:cf:75:64:71:c1:db:ea:
59:84:55:6a:01:1b:1c:7a:a9:ee:20:2f:2b:5b:79:
2d:05:ab:2a:1b:f4:b6:68:9d:8c:b1:2b:d9:e2:65:
74:43:18:1e:08:93:d6:e9:16:80:2e:51:41:d9:5a:
71:bc:0a:81:83:56:73:55:40:00:74:b2:a8:2d:b9:
fc:c3:9c:4e:15:54:82:e6:c8:22:e8:73:c6:8d:fe:
63:18:93:59:bd:70:c9:8c:d3:78:29:86:ac:86:59:
dc:31:51:63:37:b6:36:3a:1d:87:fd:9a:e5:21:4d:
5b:a5:dc:db:64:0d:75:4a:0b:29:30:94:37:84:9c:
e1:3c:d5:42:6d:39:0a:79:10:32:fc:88:e5:29:9e:
fa:6d:b2:6c:00:e6:89:97:81:08:d1:14:47:6a:a4:
48:49:ec:66:f0:a4:07:7b:f5:8c:a9:26:f3:d7:c9:
24:14:d4:9c:cd:15:3c:61:f6:3b:b1:7a:43:47:23:
94:38:bc:fc:e5:e6:e1:0f:25:9d:47:5d:0f:32:bc:
5c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:45:5D:A9:8F:00:12:2D:6A:01:FD:E0:C0:DF:57:3F:6B:C5:75:00
X509v3 Authority Key Identifier:
keyid:59:54:B6:18:3E:45:97:48:C8:9E:E5:43:1B:8F:31:DE:69:2A:E3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/nEVdqY8AEi1qAf3gwN9XP2vFdQA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.11.16.0/23
212.11.20.0-212.11.25.255
212.11.32.0/21
212.11.42.0/23
212.11.60.0/23
Signature Algorithm: sha256WithRSAEncryption
70:ea:20:94:92:06:8e:02:f8:93:3f:1b:2f:62:7a:ef:b5:6b:
5f:31:27:63:87:a0:0f:75:66:fd:18:9b:6a:86:6d:95:2b:ee:
01:2e:1f:a0:58:dc:74:14:f5:a1:ce:59:98:54:7a:a5:d1:a0:
a5:a9:f4:c9:b6:60:f4:1f:c4:9d:a4:c4:16:f7:61:9e:f9:b7:
79:51:af:87:a6:37:92:f4:5f:01:2c:a0:ec:9c:9e:72:68:cd:
50:66:45:5e:32:cc:73:03:8a:19:e5:5e:9e:1d:09:2d:2d:f6:
0f:00:7a:20:6c:59:ca:73:cb:69:ca:e4:05:60:8c:fc:18:f8:
94:a3:17:0a:5b:d5:9a:05:d4:db:28:75:da:c3:f5:49:3e:3c:
d6:b6:d7:48:6c:59:01:19:e2:d7:dc:91:3f:a2:44:fa:93:4f:
58:31:66:c6:51:c9:ad:20:7c:be:cd:84:e5:08:39:ee:b3:5e:
0d:5f:3d:12:02:e4:e9:5f:27:80:8f:94:ab:d6:94:e3:48:9f:
9d:ac:e5:ee:f0:c8:66:a3:ed:21:e2:cb:93:5f:8d:9a:96:54:
35:3c:b3:7d:8a:01:ff:f9:a7:ba:03:3a:ab:74:dc:e4:46:c2:
18:81:04:b7:f0:35:a0:4d:33:fc:4e:5d:ed:cf:2f:5e:1b:d0:
dd:3b:73:48
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAZjMVCjMSy3lwv8kKuUtVj2iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5NTRiNjE4M2U0NTk3NDhjODllZTU0MzFiOGYzMWRlNjky
YWUzYjcwHhcNMjUwODIxMTExMjA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YzQ1NWRhOThmMDAxMjJkNmEwMWZkZTBjMGRmNTczZjZiYzU3NTAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0L7d1bKxS6kqrhyuytsxj5faUPOk
p8aHzi6vxTzxOfYD2s0C9dCL7VBW5dVV4+UzoEc3XM91ZHHB2+pZhFVqARsceqnu
IC8rW3ktBasqG/S2aJ2MsSvZ4mV0QxgeCJPW6RaALlFB2VpxvAqBg1ZzVUAAdLKo
Lbn8w5xOFVSC5sgi6HPGjf5jGJNZvXDJjNN4KYashlncMVFjN7Y2Oh2H/ZrlIU1b
pdzbZA11SgspMJQ3hJzhPNVCbTkKeRAy/IjlKZ76bbJsAOaJl4EI0RRHaqRISexm
8KQHe/WMqSbz18kkFNSczRU8YfY7sXpDRyOUOLz85ebhDyWdR10PMrxcMwIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFJxFXamPABItagH94MDfVz9rxXUAMB8GA1UdIwQY
MBaAFFlUthg+RZdIyJ7lQxuPMd5pKuO3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1ZTMkdENUZsMGpJbnVWREc0OHgzbWtxNDdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83ZGU2NWMtOTBmNS00ZGVmLWI4NzMt
ZDJhZGVlZDc1NWQ4LzEvbkVWZHFZOEFFaTFxQWYzZ3dOOVhQMnZGZFFBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi83ZGU2NWMtOTBmNS00ZGVmLWI4NzMtZDJhZGVlZDc1NWQ4
LzEvV1ZTMkdENUZsMGpJbnVWREc0OHgzbWtxNDdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQB1AsQMAwD
BALUCxQDBAHUCxgDBAPUCyADBAHUCyoDBAHUCzwwDQYJKoZIhvcNAQELBQADggEB
AHDqIJSSBo4C+JM/Gy9ieu+1a18xJ2OHoA91Zv0Ym2qGbZUr7gEuH6BY3HQU9aHO
WZhUeqXRoKWp9Mm2YPQfxJ2kxBb3YZ75t3lRr4emN5L0XwEsoOycnnJozVBmRV4y
zHMDihnlXp4dCS0t9g8AeiBsWcpzy2nK5AVgjPwY+JSjFwpb1ZoF1NsoddrD9Uk+
PNa210hsWQEZ4tfckT+iRPqTT1gxZsZRya0gfL7NhOUIOe6zXg1fPRIC5OlfJ4CP
lKvWlONIn52s5e7wyGaj7SHiy5NfjZqWVDU8s32KAf/5p7oDOqt03ORGwhiBBLfw
NaBNM/xOXe3PL14b0N07c0g=
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:08:58 2025 by rpki-client