Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/1gXNyvAg-xbWToNun8coQyJY4vw.roa
File: 1gXNyvAg-xbWToNun8coQyJY4vw.roa (raw, json)
Hash identifier: GbS31LFGENfZoA87ex8gevDx64q/p51+pLrz/5ldsxw=
Subject key identifier: D6:05:CD:CA:F0:20:FB:16:D6:4E:83:6E:9F:C7:28:43:22:58:E2:FC
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0198C8A1826B901A93DDBBF9AAC3D302F382
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/1gXNyvAg-xbWToNun8coQyJY4vw.roa
Signing time: Wed 20 Aug 2025 17:58:04 +0000
ROA not before: Wed 20 Aug 2025 17:58:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5650
IP address blocks: 206.245.136.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 08:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c8:a1:82:6b:90:1a:93:dd:bb:f9:aa:c3:d3:02:f3:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Aug 20 17:58:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d605cdcaf020fb16d64e836e9fc728432258e2fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:33:66:2b:54:0d:eb:60:81:09:8c:cd:4a:01:
17:bf:70:8e:42:43:8d:c2:49:ce:eb:dd:c4:81:a6:
34:2a:4a:82:f5:30:37:f2:11:65:95:b0:a9:9d:d3:
48:b9:34:47:5a:cf:65:86:5e:2c:27:9d:7d:d4:23:
f0:18:64:73:31:b1:4c:3d:23:b6:fd:6a:35:0d:9b:
cb:2f:b0:ce:8d:44:17:45:fc:25:6d:f2:17:4c:b2:
e0:9a:91:da:61:db:42:15:17:95:a4:a6:e1:31:e8:
e5:1d:c8:22:34:a4:4b:58:d4:43:ce:7c:80:79:6b:
3f:05:b5:45:0a:51:ca:c9:fe:9f:04:db:f2:6e:ad:
b7:9d:7f:12:e4:d7:eb:dc:8d:eb:00:54:01:4b:96:
6a:66:03:11:36:1d:9a:fd:00:08:c9:93:c3:82:79:
ac:f3:88:12:4f:0f:a6:0e:1e:44:f6:1a:4f:57:0b:
e2:d6:d4:3b:6c:a4:db:19:9e:f7:e1:ff:bc:36:5b:
c2:ae:cd:d6:97:e5:44:3b:27:79:7c:d1:18:92:77:
8b:5b:3a:ae:c9:ea:dd:af:67:38:85:63:8e:2f:dc:
02:c2:6b:54:0a:c0:a1:a7:66:9d:03:18:d4:c3:b0:
14:0e:20:4b:3a:62:41:1d:52:7b:bf:e1:53:a4:88:
53:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:05:CD:CA:F0:20:FB:16:D6:4E:83:6E:9F:C7:28:43:22:58:E2:FC
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/1gXNyvAg-xbWToNun8coQyJY4vw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
206.245.136.0/21
Signature Algorithm: sha256WithRSAEncryption
8e:0a:65:ab:a3:4d:c8:65:19:97:0c:c9:9d:dc:ba:cf:6c:29:
6d:b0:8f:6a:87:24:21:e7:67:b3:09:12:a5:dd:4e:86:eb:bd:
75:1c:3f:00:73:74:04:d7:f8:59:0e:93:24:14:aa:34:20:57:
37:17:35:35:77:4c:cd:ce:7a:30:70:32:b4:3e:70:60:24:f0:
d4:4b:c8:a1:28:af:f6:9a:a7:fa:70:88:46:e9:0d:a1:73:43:
9f:f8:ba:a1:21:2d:5c:45:8e:f5:91:f5:c4:bd:e9:46:2e:6a:
51:78:70:52:c1:10:0b:fa:7e:21:ff:99:1c:d7:cc:cc:01:85:
e3:73:1c:36:55:18:11:8c:10:8a:6b:a2:b6:99:f7:12:7a:b4:
03:a8:e7:c5:48:c1:57:3d:9c:76:6d:e0:56:8f:ef:f0:59:ef:
54:5a:94:43:e0:ee:26:c3:fb:8b:fa:b5:36:a6:92:ad:19:f3:
5a:70:4e:47:11:57:0d:e2:b2:30:1e:ed:f9:87:b9:7d:8e:34:
dd:90:9e:a8:dd:f6:06:4b:6f:fb:0c:b2:93:37:f4:3f:5b:0d:
83:92:c1:d3:6a:95:ae:b0:10:5b:49:7c:4f:a3:9c:c4:0c:a2:
86:56:2e:63:62:06:95:83:cb:0b:b6:d6:67:b8:10:27:dc:09:
a7:bf:c0:d1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZjIoYJrkBqT3bv5qsPTAvOCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjUwODIwMTc1ODA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNjA1Y2RjYWYwMjBmYjE2ZDY0ZTgzNmU5ZmM3Mjg0MzIyNThlMmZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjNmK1QN62CBCYzNSgEXv3COQkON
wknO693EgaY0KkqC9TA38hFllbCpndNIuTRHWs9lhl4sJ5191CPwGGRzMbFMPSO2
/Wo1DZvLL7DOjUQXRfwlbfIXTLLgmpHaYdtCFReVpKbhMejlHcgiNKRLWNRDznyA
eWs/BbVFClHKyf6fBNvybq23nX8S5Nfr3I3rAFQBS5ZqZgMRNh2a/QAIyZPDgnms
84gSTw+mDh5E9hpPVwvi1tQ7bKTbGZ734f+8NlvCrs3Wl+VEOyd5fNEYkneLWzqu
yerdr2c4hWOOL9wCwmtUCsChp2adAxjUw7AUDiBLOmJBHVJ7v+FTpIhTtwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNYFzcrwIPsW1k6Dbp/HKEMiWOL8MB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvMWdYTnl2QWcteGJXVG9OdW44Y29ReUpZNHZ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzvWIMA0G
CSqGSIb3DQEBCwUAA4IBAQCOCmWro03IZRmXDMmd3LrPbCltsI9qhyQh52ezCRKl
3U6G6711HD8Ac3QE1/hZDpMkFKo0IFc3FzU1d0zNznowcDK0PnBgJPDUS8ihKK/2
mqf6cIhG6Q2hc0Of+LqhIS1cRY71kfXEvelGLmpReHBSwRAL+n4h/5kc18zMAYXj
cxw2VRgRjBCKa6K2mfcSerQDqOfFSMFXPZx2beBWj+/wWe9UWpRD4O4mw/uL+rU2
ppKtGfNacE5HEVcN4rIwHu35h7l9jjTdkJ6o3fYGS2/7DLKTN/Q/Ww2DksHTapWu
sBBbSXxPo5zEDKKGVi5jYgaVg8sLttZnuBAn3Amnv8DR
-----END CERTIFICATE-----
Generated at Sat Aug 23 18:04:53 2025 by rpki-client