Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/vNVFzH5gEKJ1baBtLmgSvcY3RkQ.roa
File: vNVFzH5gEKJ1baBtLmgSvcY3RkQ.roa (raw, json)
Hash identifier: /z7XV3EEBuHJSfHSGhUgYOh8gSkR0UyztveR5eyCEJk=
Subject key identifier: BC:D5:45:CC:7E:60:10:A2:75:6D:A0:6D:2E:68:12:BD:C6:37:46:44
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0198ADDFAD5F938AD5511B64D423755D6404
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/vNVFzH5gEKJ1baBtLmgSvcY3RkQ.roa
Signing time: Fri 15 Aug 2025 13:16:13 +0000
ROA not before: Fri 15 Aug 2025 13:16:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 94.183.181.0/24 maxlen: 24
217.60.12.0/22 maxlen: 24
217.60.24.0/22 maxlen: 24
217.60.60.0/22 maxlen: 24
217.60.239.0/24 maxlen: 24
217.60.246.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:ad:df:ad:5f:93:8a:d5:51:1b:64:d4:23:75:5d:64:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 15 13:16:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bcd545cc7e6010a2756da06d2e6812bdc6374644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7a:38:ce:f2:c2:8c:d8:f8:64:a1:3a:3e:e2:
7d:6a:4b:57:44:ed:e5:aa:86:8f:70:44:5b:0b:6e:
3c:1c:be:12:74:13:0b:91:a8:a9:b8:56:c0:c2:22:
aa:ba:c3:bf:46:94:bc:50:2d:d9:33:e3:e2:3f:1f:
97:68:56:26:b6:01:b8:bc:a5:1d:31:bd:75:ae:e7:
0f:54:2b:e2:7a:8a:7c:24:c9:64:ba:14:a9:3b:43:
6b:b0:06:89:0f:20:54:c4:9a:48:aa:af:d8:90:fd:
b4:84:2a:72:de:10:e4:5f:72:8f:90:6d:ef:3c:60:
13:40:6d:a6:93:92:08:61:cf:69:73:8f:27:86:d8:
f3:68:ec:1f:3d:52:0d:e5:e0:3e:70:ab:b2:b6:2f:
6e:02:93:9d:cb:b6:f6:86:7a:32:97:67:36:9d:73:
c2:65:f0:91:a9:5d:ba:e2:b8:90:4f:7b:71:02:d5:
5a:4f:a8:68:24:5d:4e:39:78:72:3c:12:33:1e:cc:
06:bb:b6:b6:1e:d8:56:b3:77:b5:9a:3b:22:91:d4:
40:76:63:43:21:50:f0:4f:b4:c6:ef:70:f0:e5:74:
b1:be:fe:3c:65:6f:78:8a:23:0c:e0:37:df:ff:7e:
b8:e4:0b:f4:43:6d:99:fb:f9:24:70:79:94:b4:ea:
c9:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:D5:45:CC:7E:60:10:A2:75:6D:A0:6D:2E:68:12:BD:C6:37:46:44
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/vNVFzH5gEKJ1baBtLmgSvcY3RkQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.183.181.0/24
217.60.12.0/22
217.60.24.0/22
217.60.60.0/22
217.60.239.0/24
217.60.246.0/23
Signature Algorithm: sha256WithRSAEncryption
11:2c:78:84:60:62:13:0e:63:cd:7b:25:f8:c0:5f:82:08:a5:
d3:b9:57:47:8d:ab:ac:96:7f:87:6c:92:a2:0c:94:9c:f6:6a:
51:fc:5b:62:c8:89:e4:f5:48:13:c0:7c:69:a1:01:9e:d8:68:
bc:e6:57:9f:57:d2:6c:0a:34:04:c9:ab:31:35:6b:04:3a:c3:
49:0f:df:81:e7:f2:c2:f2:5e:3d:23:f1:b1:eb:04:fe:6b:cd:
eb:4d:fb:5d:e6:3c:a8:31:a3:7e:df:58:38:77:23:28:20:f6:
bf:e5:80:01:29:a9:c2:78:e1:af:7a:dd:6f:5f:59:b5:b1:73:
3c:e1:25:d3:6a:eb:c1:63:e3:4a:31:2b:02:72:34:db:7e:ee:
0d:46:13:48:b9:43:9e:2b:62:cd:b5:89:21:d3:e8:c5:d4:25:
ef:dc:93:9b:f3:23:87:c5:9d:24:50:89:e6:68:ab:e3:2a:2c:
60:de:87:a5:83:b9:5b:d2:2a:b9:46:d2:f4:67:56:18:21:a4:
0e:8f:8f:d0:12:dc:c8:32:17:45:50:aa:fd:93:fa:ce:ab:20:
46:2b:82:da:a1:af:28:c3:37:68:13:fc:38:03:16:7c:14:c3:
f2:ef:05:31:97:6f:c7:e9:81:06:c1:5a:9a:d8:e3:08:c7:b8:
39:4f:97:32
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAZit361fk4rVURtk1CN1XWQEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwODE1MTMxNjEzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiY2Q1NDVjYzdlNjAxMGEyNzU2ZGEwNmQyZTY4MTJiZGM2Mzc0NjQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHo4zvLCjNj4ZKE6PuJ9aktXRO3l
qoaPcERbC248HL4SdBMLkaipuFbAwiKqusO/RpS8UC3ZM+PiPx+XaFYmtgG4vKUd
Mb11rucPVCvieop8JMlkuhSpO0NrsAaJDyBUxJpIqq/YkP20hCpy3hDkX3KPkG3v
PGATQG2mk5IIYc9pc48nhtjzaOwfPVIN5eA+cKuyti9uApOdy7b2hnoyl2c2nXPC
ZfCRqV264riQT3txAtVaT6hoJF1OOXhyPBIzHswGu7a2HthWs3e1mjsikdRAdmND
IVDwT7TG73Dw5XSxvv48ZW94iiMM4Dff/3645Av0Q22Z+/kkcHmUtOrJvwIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFLzVRcx+YBCidW2gbS5oEr3GN0ZEMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvdk5WRnpINWdFS0oxYmFCdExtZ1N2Y1kzUmtRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAXre1AwQC
2TwMAwQC2TwYAwQC2Tw8AwQA2TzvAwQB2Tz2MA0GCSqGSIb3DQEBCwUAA4IBAQAR
LHiEYGITDmPNeyX4wF+CCKXTuVdHjausln+HbJKiDJSc9mpR/FtiyInk9UgTwHxp
oQGe2Gi85lefV9JsCjQEyasxNWsEOsNJD9+B5/LC8l49I/Gx6wT+a83rTftd5jyo
MaN+31g4dyMoIPa/5YABKanCeOGvet1vX1m1sXM84SXTauvBY+NKMSsCcjTbfu4N
RhNIuUOeK2LNtYkh0+jF1CXv3JOb8yOHxZ0kUInmaKvjKixg3oelg7lb0iq5RtL0
Z1YYIaQOj4/QEtzIMhdFUKr9k/rOqyBGK4Laoa8owzdoE/w4AxZ8FMPy7wUxl2/H
6YEGwVqa2OMIx7g5T5cy
-----END CERTIFICATE-----
Generated at Sat Aug 23 08:23:19 2025 by rpki-client