Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/33dAKDr85l1pyt-tQXbrFlUw0Ao.roa
File: 33dAKDr85l1pyt-tQXbrFlUw0Ao.roa (raw, json)
Hash identifier: S5tsq/HSCFXne7wdyHKNwhXdmPfekpxTl78L/Fnf1Ro=
Subject key identifier: DF:77:40:28:3A:FC:E6:5D:69:CA:DF:AD:41:76:EB:16:55:30:D0:0A
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019889189326052934A9AB2F862A2DEF8D76
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/33dAKDr85l1pyt-tQXbrFlUw0Ao.roa
Signing time: Fri 08 Aug 2025 09:52:25 +0000
ROA not before: Fri 08 Aug 2025 09:52:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207350
IP address blocks: 94.183.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:18:93:26:05:29:34:a9:ab:2f:86:2a:2d:ef:8d:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 8 09:52:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=df7740283afce65d69cadfad4176eb165530d00a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:df:af:d0:c0:b8:6c:4f:98:28:ce:65:60:75:
61:bc:0c:08:24:67:58:49:9b:91:cb:f6:87:3a:9c:
cb:80:63:97:41:a9:19:fa:fa:e5:57:0b:67:20:ca:
98:d2:93:75:8d:69:2d:96:1a:e0:44:35:19:6e:45:
a5:1f:db:3f:4f:43:3c:13:f1:bd:3a:ba:38:d4:c0:
d4:39:e8:ce:b6:07:27:61:08:51:33:f9:f0:64:43:
97:78:d0:7b:8e:2a:ce:bb:eb:58:36:1e:4c:54:07:
33:7d:20:f7:5b:8e:b1:41:e4:a1:11:c7:81:78:d6:
f5:e8:9e:80:51:28:2d:f9:09:f7:d6:93:77:3c:0b:
c4:43:1e:5c:dd:73:6a:55:d4:58:93:50:df:6c:dc:
90:37:3f:f8:30:d5:a5:6a:b0:c7:a3:90:17:93:ea:
27:74:a9:9f:94:9a:73:d4:b7:17:f7:ad:2e:55:b4:
dc:5b:2f:f0:98:9e:8f:22:43:e0:67:46:a0:1e:84:
f1:33:e4:0c:e2:a1:4e:d1:50:74:38:47:54:d1:55:
e9:7b:9d:43:8f:c7:f0:4c:a2:62:b7:a7:de:f0:66:
c9:96:77:72:20:72:14:ad:ae:b2:4f:b3:ce:3f:50:
fe:38:48:e3:d3:56:8c:f5:02:e6:4f:99:9b:85:28:
e3:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:77:40:28:3A:FC:E6:5D:69:CA:DF:AD:41:76:EB:16:55:30:D0:0A
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/33dAKDr85l1pyt-tQXbrFlUw0Ao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.183.159.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:08:b5:e0:dc:cf:7d:cb:fc:0a:2d:24:9f:8c:b9:c9:ea:2c:
4b:9a:bd:32:3d:5b:28:db:bd:49:13:d5:7d:1a:10:40:5a:32:
f0:7d:0d:4d:9e:05:4d:ab:b8:8e:49:5e:6e:4b:0a:7f:03:c6:
cc:46:81:35:fe:7b:cf:d7:d6:06:9e:bd:7e:24:50:1c:85:b1:
b2:d1:ed:4b:22:b8:20:16:6f:eb:0d:81:82:21:d7:c3:0e:4f:
9a:43:37:03:ee:87:21:cf:62:3d:71:53:a5:07:c1:46:78:d8:
a5:19:51:0a:0d:fa:ca:f4:6e:75:c6:0f:e0:c1:73:37:c6:e0:
ef:a6:c0:30:f3:50:0c:c1:cc:74:3d:41:b0:ee:ea:09:e9:15:
6d:29:dd:84:90:6e:8c:2a:91:fb:54:51:60:a1:fd:33:7a:09:
da:a0:3d:a6:32:a4:83:f7:ee:76:c1:95:b6:2c:f0:a1:30:74:
17:37:90:ed:30:6e:84:bd:70:12:d6:9d:1b:26:cf:d1:29:77:
2c:c9:77:64:7d:d5:16:23:74:8e:03:55:dc:c9:03:40:6a:91:
b3:32:af:f8:5c:80:67:f8:cf:da:ec:03:0f:ae:a5:ac:88:3d:
c6:c5:1a:60:c5:cb:81:ab:21:07:de:d4:e9:5d:2e:79:dd:4e:
36:63:1b:5a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZiJGJMmBSk0qasvhiot7412MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwODA4MDk1MjI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZjc3NDAyODNhZmNlNjVkNjljYWRmYWQ0MTc2ZWIxNjU1MzBkMDBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArd+v0MC4bE+YKM5lYHVhvAwIJGdY
SZuRy/aHOpzLgGOXQakZ+vrlVwtnIMqY0pN1jWktlhrgRDUZbkWlH9s/T0M8E/G9
Oro41MDUOejOtgcnYQhRM/nwZEOXeNB7jirOu+tYNh5MVAczfSD3W46xQeShEceB
eNb16J6AUSgt+Qn31pN3PAvEQx5c3XNqVdRYk1DfbNyQNz/4MNWlarDHo5AXk+on
dKmflJpz1LcX960uVbTcWy/wmJ6PIkPgZ0agHoTxM+QM4qFO0VB0OEdU0VXpe51D
j8fwTKJit6fe8GbJlndyIHIUra6yT7POP1D+OEjj01aM9QLmT5mbhSjjyQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFN93QCg6/OZdacrfrUF26xZVMNAKMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvMzNkQUtEcjg1bDFweXQtdFFYYnJGbFV3MEFvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXrefMA0G
CSqGSIb3DQEBCwUAA4IBAQAbCLXg3M99y/wKLSSfjLnJ6ixLmr0yPVso271JE9V9
GhBAWjLwfQ1NngVNq7iOSV5uSwp/A8bMRoE1/nvP19YGnr1+JFAchbGy0e1LIrgg
Fm/rDYGCIdfDDk+aQzcD7ochz2I9cVOlB8FGeNilGVEKDfrK9G51xg/gwXM3xuDv
psAw81AMwcx0PUGw7uoJ6RVtKd2EkG6MKpH7VFFgof0zegnaoD2mMqSD9+52wZW2
LPChMHQXN5DtMG6EvXAS1p0bJs/RKXcsyXdkfdUWI3SOA1XcyQNAapGzMq/4XIBn
+M/a7AMPrqWsiD3GxRpgxcuBqyEH3tTpXS553U42Yxta
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:44:25 2025 by rpki-client