Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/d-6pwwZF456Mo5Wgj7fFlJMHSYU.roa
File: d-6pwwZF456Mo5Wgj7fFlJMHSYU.roa (raw, json)
Hash identifier: DDkCkICPR92v5bUo5PyuSyPMhVyRgfAZikBXPEj0nkc=
Subject key identifier: 77:EE:A9:C3:06:45:E3:9E:8C:A3:95:A0:8F:B7:C5:94:93:07:49:85
Certificate issuer: /CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Certificate serial: 019851D7DC33F3BC0020428433E6DBF07E9F
Authority key identifier: A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/d-6pwwZF456Mo5Wgj7fFlJMHSYU.roa
Signing time: Mon 28 Jul 2025 16:22:37 +0000
ROA not before: Mon 28 Jul 2025 16:22:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6079
IP address blocks: 188.208.126.0/24 maxlen: 24
188.208.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:51:d7:dc:33:f3:bc:00:20:42:84:33:e6:db:f0:7e:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Validity
Not Before: Jul 28 16:22:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=77eea9c30645e39e8ca395a08fb7c59493074985
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c9:3f:da:52:e0:43:f6:2f:8e:be:9a:c2:82:
1c:35:9f:20:3e:04:21:b7:6c:71:4c:27:78:e1:81:
6c:e8:90:98:74:7f:26:2e:db:86:0e:1e:52:28:a9:
44:01:4f:3d:9b:45:ac:0e:25:a3:08:fe:96:9a:f4:
9d:57:ce:5a:5b:d6:05:3c:ec:f1:e1:f1:28:61:79:
d7:6b:0f:a1:e0:9a:5b:35:2a:9b:a8:fe:d7:78:ed:
45:bd:84:53:7d:71:52:60:ad:54:4f:aa:76:33:a9:
1f:1c:ff:ef:1c:ef:2f:88:56:70:4a:7b:92:d8:9a:
18:76:50:0d:c5:aa:c4:c5:44:f7:03:9b:73:1d:92:
81:e0:29:3c:ae:7b:00:43:c1:26:0a:ec:dd:e7:f0:
9a:b7:97:7b:a1:a5:8c:98:15:60:de:93:e5:63:33:
ca:dd:fa:aa:3e:e2:ef:da:9a:d2:00:cf:16:f0:f8:
d4:e0:90:c2:53:76:b5:9d:76:4e:0e:bc:0b:1e:09:
62:f9:c6:ac:12:82:58:37:82:02:88:b1:b0:d3:76:
2e:36:c1:ab:af:04:1d:50:34:da:ef:e2:58:26:fc:
4f:26:b3:a3:0b:70:df:ed:17:65:15:e6:17:58:7c:
d9:29:11:db:e2:48:f2:6d:81:30:4f:96:b0:3d:66:
38:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:EE:A9:C3:06:45:E3:9E:8C:A3:95:A0:8F:B7:C5:94:93:07:49:85
X509v3 Authority Key Identifier:
keyid:A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/d-6pwwZF456Mo5Wgj7fFlJMHSYU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.208.126.0/23
Signature Algorithm: sha256WithRSAEncryption
cc:dd:6d:0b:0a:2d:7f:df:51:fd:72:b5:81:3a:49:c4:2b:fa:
41:b7:4a:d0:e7:7f:08:80:99:c5:4b:bd:58:b8:a5:c5:57:dc:
ec:6e:27:81:35:03:ab:c7:54:05:09:01:a9:6c:60:5f:f4:3d:
30:9e:3e:36:82:2a:f1:08:a6:e2:67:20:a5:c1:9b:a5:88:73:
ce:22:45:0e:af:a8:c2:12:f9:d9:ad:c3:98:b8:dd:56:34:80:
1a:20:47:88:ee:9f:e5:50:ea:4c:4d:39:46:1e:cd:ec:5c:54:
0b:5e:5d:6a:cf:44:8f:f3:bf:53:89:23:f7:ac:22:6c:d9:49:
42:45:37:36:23:78:c2:a9:19:d9:79:ce:49:b7:a8:8e:68:0e:
20:eb:92:94:a1:62:49:88:50:f6:2d:50:d5:59:8d:4f:80:98:
8d:2c:d9:d6:10:ad:e5:e6:3a:e9:df:f6:1f:51:47:df:85:76:
c2:04:a7:9b:0e:2f:58:6e:2f:d2:8a:31:dc:29:c6:ab:39:75:
af:8d:0e:6e:9f:bf:4f:e9:a0:50:7c:ab:e5:42:72:b8:29:6e:
8c:cf:b9:52:e8:19:15:61:ce:5e:3b:0f:d8:ff:0c:7b:31:0c:
2c:21:57:97:4d:34:1c:34:fc:8a:d2:8b:97:c9:88:5c:4b:4b:
eb:5b:60:53
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZhR19wz87wAIEKEM+bb8H6fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyMDg4ZTA2ZDU1M2NmZjI5M2QyNzdmNGQ3NmMzYTcxMGJk
OGIyZjcwHhcNMjUwNzI4MTYyMjM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3N2VlYTljMzA2NDVlMzllOGNhMzk1YTA4ZmI3YzU5NDkzMDc0OTg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8k/2lLgQ/Yvjr6awoIcNZ8gPgQh
t2xxTCd44YFs6JCYdH8mLtuGDh5SKKlEAU89m0WsDiWjCP6WmvSdV85aW9YFPOzx
4fEoYXnXaw+h4JpbNSqbqP7XeO1FvYRTfXFSYK1UT6p2M6kfHP/vHO8viFZwSnuS
2JoYdlANxarExUT3A5tzHZKB4Ck8rnsAQ8EmCuzd5/Cat5d7oaWMmBVg3pPlYzPK
3fqqPuLv2prSAM8W8PjU4JDCU3a1nXZODrwLHgli+casEoJYN4ICiLGw03YuNsGr
rwQdUDTa7+JYJvxPJrOjC3Df7RdlFeYXWHzZKRHb4kjybYEwT5awPWY4UwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHfuqcMGReOejKOVoI+3xZSTB0mFMB8GA1UdIwQY
MBaAFKIIjgbVU8/yk9J39NdsOnEL2LL3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2dpT0J0VlR6X0tUMG5mMDEydzZjUXZZc3ZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9iNDVkNzktYTRkNy00NDYwLWJmZTct
YmJlYTI5MThlMTAyLzEvZC02cHd3WkY0NTZNbzVXZ2o3ZkZsSk1IU1lVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS9iNDVkNzktYTRkNy00NDYwLWJmZTctYmJlYTI5MThlMTAy
LzEvb2dpT0J0VlR6X0tUMG5mMDEydzZjUXZZc3ZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBvNB+MA0G
CSqGSIb3DQEBCwUAA4IBAQDM3W0LCi1/31H9crWBOknEK/pBt0rQ538IgJnFS71Y
uKXFV9zsbieBNQOrx1QFCQGpbGBf9D0wnj42girxCKbiZyClwZuliHPOIkUOr6jC
EvnZrcOYuN1WNIAaIEeI7p/lUOpMTTlGHs3sXFQLXl1qz0SP879TiSP3rCJs2UlC
RTc2I3jCqRnZec5Jt6iOaA4g65KUoWJJiFD2LVDVWY1PgJiNLNnWEK3l5jrp3/Yf
UUffhXbCBKebDi9Ybi/SijHcKcarOXWvjQ5un79P6aBQfKvlQnK4KW6Mz7lS6BkV
Yc5eOw/Y/wx7MQwsIVeXTTQcNPyK0ouXyYhcS0vrW2BT
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:05:32 2025 by rpki-client