Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/T9T4J6edlfy_i5-slOG4aV_QdIQ.roa
File: T9T4J6edlfy_i5-slOG4aV_QdIQ.roa (raw, json)
Hash identifier: eu2IweeoPyVHQt7dr15SgVjejr4+xNgXU9dFpcwWirI=
Subject key identifier: 4F:D4:F8:27:A7:9D:95:FC:BF:8B:9F:AC:94:E1:B8:69:5F:D0:74:84
Certificate issuer: /CN=67499595a65aab0b53768def08091e31061e9e65
Certificate serial: 019787A9D4A67C593541C0543A2E6332FD42
Authority key identifier: 67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/T9T4J6edlfy_i5-slOG4aV_QdIQ.roa
Signing time: Thu 19 Jun 2025 10:09:03 +0000
ROA not before: Thu 19 Jun 2025 10:09:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 185.160.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:87:a9:d4:a6:7c:59:35:41:c0:54:3a:2e:63:32:fd:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67499595a65aab0b53768def08091e31061e9e65
Validity
Not Before: Jun 19 10:09:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4fd4f827a79d95fcbf8b9fac94e1b8695fd07484
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e5:92:42:6f:98:df:15:d9:f2:5f:a9:62:c3:
01:da:1f:28:cd:59:71:39:70:e7:b0:d6:78:c4:21:
41:ec:af:33:4d:80:49:f3:75:15:db:d3:87:6b:50:
fc:a8:5b:c5:b5:aa:4f:ec:55:ac:71:20:43:eb:6f:
cd:08:d8:be:54:d0:bd:9d:de:8e:12:14:83:fa:7f:
4a:24:69:eb:b5:47:18:9f:5a:f1:aa:e0:c8:fa:41:
5a:ac:d8:a8:98:cf:f5:99:62:04:75:f3:a4:74:0f:
18:8e:05:55:da:18:5c:4a:48:4e:5e:7c:62:04:c7:
f2:9b:fb:6f:6a:1d:98:68:4a:03:31:28:51:22:ea:
69:b5:93:21:7f:dc:42:2b:ae:44:8f:81:db:f5:33:
11:88:cf:4e:ac:a5:f4:30:d0:7d:5a:0b:76:e3:26:
64:76:c6:1f:e6:16:86:82:75:e4:a3:ba:8c:07:8d:
0f:c6:b9:ad:fc:12:57:b1:96:0d:b4:8b:29:3a:f5:
28:28:0b:e5:72:38:12:87:cf:6f:e0:c8:6c:33:96:
eb:8f:61:0e:cd:ad:96:1a:6e:db:a3:66:ff:e2:0e:
6f:e5:99:ad:e0:15:f2:f1:00:c5:09:c5:56:52:e1:
bd:67:52:2d:de:c3:fe:4f:f4:c2:b1:39:c2:d5:99:
2d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:D4:F8:27:A7:9D:95:FC:BF:8B:9F:AC:94:E1:B8:69:5F:D0:74:84
X509v3 Authority Key Identifier:
keyid:67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/T9T4J6edlfy_i5-slOG4aV_QdIQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.160.193.0/24
Signature Algorithm: sha256WithRSAEncryption
69:c4:1d:a0:a0:db:6f:92:65:94:35:3c:50:7c:2e:ae:9d:cf:
52:78:03:b9:5e:e9:4f:14:6d:bd:6e:78:29:ff:08:c5:1c:cc:
34:46:f9:dd:a1:b5:af:bc:b5:c5:a3:e9:dd:ef:11:7a:2b:0b:
8c:34:b4:54:d1:9d:1c:a4:39:44:9a:55:f9:9d:22:2b:f6:f3:
44:68:b8:ff:c1:33:16:cf:12:f7:db:cc:7c:ed:bb:20:56:ab:
4c:b9:db:5e:15:3c:d8:c8:5d:6e:67:54:54:8e:bc:cf:36:9c:
be:6c:d2:44:53:c2:cd:90:f6:6b:fa:f4:5a:5b:77:d1:55:c8:
e7:54:14:87:25:6a:5d:0b:6c:80:6d:ed:15:88:4b:e6:09:83:
da:5d:35:0d:37:d0:36:ea:95:55:c8:bc:5a:57:9b:cc:a4:53:
b2:c3:1b:5f:9b:ef:43:ee:46:4c:db:ce:6f:5c:e3:c6:b8:fb:
1d:ae:a9:47:a3:97:73:ab:c6:1c:38:c8:5e:2b:eb:dc:bd:14:
44:bb:4e:65:19:d6:17:50:9c:4d:fc:bb:0d:f3:5f:ca:b1:68:
af:65:10:ec:91:7d:f8:03:86:e2:64:46:92:2f:ae:fa:1e:71:
ac:37:6e:79:37:8f:ff:c4:e2:5a:56:aa:e8:43:9b:a8:0b:96:
9c:18:37:cd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZeHqdSmfFk1QcBUOi5jMv1CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3NDk5NTk1YTY1YWFiMGI1Mzc2OGRlZjA4MDkxZTMxMDYx
ZTllNjUwHhcNMjUwNjE5MTAwOTAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZmQ0ZjgyN2E3OWQ5NWZjYmY4YjlmYWM5NGUxYjg2OTVmZDA3NDg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3OWSQm+Y3xXZ8l+pYsMB2h8ozVlx
OXDnsNZ4xCFB7K8zTYBJ83UV29OHa1D8qFvFtapP7FWscSBD62/NCNi+VNC9nd6O
EhSD+n9KJGnrtUcYn1rxquDI+kFarNiomM/1mWIEdfOkdA8YjgVV2hhcSkhOXnxi
BMfym/tvah2YaEoDMShRIupptZMhf9xCK65Ej4Hb9TMRiM9OrKX0MNB9Wgt24yZk
dsYf5haGgnXko7qMB40Pxrmt/BJXsZYNtIspOvUoKAvlcjgSh89v4MhsM5brj2EO
za2WGm7bo2b/4g5v5Zmt4BXy8QDFCcVWUuG9Z1It3sP+T/TCsTnC1ZktAwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFE/U+CennZX8v4ufrJThuGlf0HSEMB8GA1UdIwQY
MBaAFGdJlZWmWqsLU3aN7wgJHjEGHp5lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjBtVmxhWmFxd3RUZG8zdkNBa2VNUVllbm1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iNzQ0YjgtZjM5ZC00OTViLWIyMTct
MzU1MDgwNDE2NTJkLzEvVDlUNEo2ZWRsZnlfaTUtc2xPRzRhVl9RZElRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9iNzQ0YjgtZjM5ZC00OTViLWIyMTctMzU1MDgwNDE2NTJk
LzEvWjBtVmxhWmFxd3RUZG8zdkNBa2VNUVllbm1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuaDBMA0G
CSqGSIb3DQEBCwUAA4IBAQBpxB2goNtvkmWUNTxQfC6unc9SeAO5XulPFG29bngp
/wjFHMw0RvndobWvvLXFo+nd7xF6KwuMNLRU0Z0cpDlEmlX5nSIr9vNEaLj/wTMW
zxL328x87bsgVqtMudteFTzYyF1uZ1RUjrzPNpy+bNJEU8LNkPZr+vRaW3fRVcjn
VBSHJWpdC2yAbe0ViEvmCYPaXTUNN9A26pVVyLxaV5vMpFOywxtfm+9D7kZM285v
XOPGuPsdrqlHo5dzq8YcOMheK+vcvRREu05lGdYXUJxN/LsN81/KsWivZRDskX34
A4biZEaSL676HnGsN255N4//xOJaVqroQ5uoC5acGDfN
-----END CERTIFICATE-----
Generated at Sun Jun 29 11:32:30 2025 by rpki-client