Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/SCadw4i-1hx1vuvsgXnBg84PDBM.roa
File: SCadw4i-1hx1vuvsgXnBg84PDBM.roa (raw, json)
Hash identifier: +K5NlmQELVcAtiB61JU2MGA/iJ5Zjudqp/RmsOmbn3w=
Subject key identifier: 48:26:9D:C3:88:BE:D6:1C:75:BE:EB:EC:81:79:C1:83:CE:0F:0C:13
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 0197A0F470AD735508E53B0D72DAA50F003C
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/SCadw4i-1hx1vuvsgXnBg84PDBM.roa
Signing time: Tue 24 Jun 2025 08:01:03 +0000
ROA not before: Tue 24 Jun 2025 08:01:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19905
IP address blocks: 213.16.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 07:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:a0:f4:70:ad:73:55:08:e5:3b:0d:72:da:a5:0f:00:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Jun 24 08:01:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=48269dc388bed61c75beebec8179c183ce0f0c13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:11:f8:82:2e:f0:8f:72:b5:37:a5:db:66:7f:
34:a6:3a:c3:9f:a8:22:f8:c2:f7:d6:89:3f:b4:e4:
fc:0f:62:3a:f8:1d:e4:14:0a:8c:d7:b0:cf:fa:82:
ff:13:29:5e:a0:73:df:48:24:54:67:88:ea:55:6c:
79:d2:59:a0:b3:04:48:9b:75:9f:1c:00:7a:a9:a8:
bf:ae:ab:0e:08:54:16:da:e7:86:89:34:8a:80:f4:
cf:f0:9f:aa:e6:a3:31:9a:2c:ad:2b:49:b9:29:0d:
57:0e:9e:22:9d:32:ec:e9:94:09:17:01:2c:ad:64:
fc:fa:af:08:8b:bf:a7:ba:2a:1f:5c:4c:74:c2:e6:
4f:4f:8d:5c:bd:51:7e:15:5a:a7:7d:51:5f:cd:c8:
69:2a:82:95:af:f1:a0:3b:ee:0b:ec:b6:5e:cd:ec:
39:bb:22:ed:ef:af:cd:38:6a:be:1c:73:cd:38:79:
2b:5a:4f:27:54:fc:64:5d:ff:25:9d:60:ba:15:14:
a1:6b:48:31:78:87:61:14:db:d6:e6:10:0f:6f:11:
02:d6:ba:b6:62:d9:6f:3f:3a:81:84:1a:ec:9d:1b:
a1:63:19:c9:13:41:ff:1d:bf:46:e6:00:43:5f:41:
8a:fe:e3:9d:1a:c4:f7:bb:a4:1c:d4:ba:f7:4f:c0:
4e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:26:9D:C3:88:BE:D6:1C:75:BE:EB:EC:81:79:C1:83:CE:0F:0C:13
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/SCadw4i-1hx1vuvsgXnBg84PDBM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.16.60.0/24
Signature Algorithm: sha256WithRSAEncryption
46:ee:0e:b9:20:81:68:b6:7c:21:7a:e1:c5:4b:bc:0d:84:04:
4c:32:0e:ba:ca:e4:c7:72:e6:b9:fe:b6:01:4b:38:7c:87:40:
62:0a:52:a6:2f:f1:a1:05:eb:6d:e0:e5:df:80:31:c3:3c:41:
e3:bf:40:4b:e7:72:bc:94:b5:1e:06:2a:54:d7:a3:7d:92:20:
29:97:1f:4c:ff:68:aa:dc:ec:fa:1f:9e:49:33:e4:d8:be:7b:
ee:78:4a:dd:8b:f8:fb:bd:ac:55:b7:5d:f2:bd:13:31:39:c9:
36:c3:91:40:8d:2b:9e:a0:4a:7f:b8:1f:1e:12:b6:3d:e9:99:
f2:03:00:29:1a:ee:51:eb:f2:56:b5:fd:56:cf:3a:83:35:6b:
be:49:82:58:9e:4f:23:aa:12:f8:da:f1:9a:bb:c0:5f:c5:ff:
fe:b2:69:6b:37:36:c3:3b:37:77:20:3d:7a:1f:3d:da:0b:93:
e5:27:a8:d7:e6:27:e7:07:d7:cd:d7:0a:ed:d8:07:57:3e:dc:
ff:1f:41:e3:e2:a0:47:83:be:54:91:1e:90:db:79:71:43:ff:
38:65:5e:0a:db:7f:ad:df:9c:83:cc:d8:ac:3a:51:d4:a5:7f:
da:cb:6a:ef:d3:cb:ca:4a:7f:2c:87:9d:c4:72:00:cb:51:e3:
63:5b:d5:62
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZeg9HCtc1UI5TsNctqlDwA8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0YjJmNGZhNTE2M2FmOTYxNjhlODhmYmY5Y2I0ZWQxZWQ4
ZmI0YzQwHhcNMjUwNjI0MDgwMTAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ODI2OWRjMzg4YmVkNjFjNzViZWViZWM4MTc5YzE4M2NlMGYwYzEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBH4gi7wj3K1N6XbZn80pjrDn6gi
+ML31ok/tOT8D2I6+B3kFAqM17DP+oL/EyleoHPfSCRUZ4jqVWx50lmgswRIm3Wf
HAB6qai/rqsOCFQW2ueGiTSKgPTP8J+q5qMxmiytK0m5KQ1XDp4inTLs6ZQJFwEs
rWT8+q8Ii7+nuiofXEx0wuZPT41cvVF+FVqnfVFfzchpKoKVr/GgO+4L7LZezew5
uyLt76/NOGq+HHPNOHkrWk8nVPxkXf8lnWC6FRSha0gxeIdhFNvW5hAPbxEC1rq2
YtlvPzqBhBrsnRuhYxnJE0H/Hb9G5gBDX0GK/uOdGsT3u6Qc1Lr3T8BODwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEgmncOIvtYcdb7r7IF5wYPODwwTMB8GA1UdIwQY
MBaAFISy9PpRY6+WFo6I+/nLTtHtj7TEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDct
ODcyYmEyZDlmNDRjLzEvU0NhZHc0aS0xaHgxdnV2c2dYbkJnODRQREJNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDctODcyYmEyZDlmNDRj
LzEvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1RA8MA0G
CSqGSIb3DQEBCwUAA4IBAQBG7g65IIFotnwheuHFS7wNhARMMg66yuTHcua5/rYB
Szh8h0BiClKmL/GhBett4OXfgDHDPEHjv0BL53K8lLUeBipU16N9kiAplx9M/2iq
3Oz6H55JM+TYvnvueErdi/j7vaxVt13yvRMxOck2w5FAjSueoEp/uB8eErY96Zny
AwApGu5R6/JWtf1WzzqDNWu+SYJYnk8jqhL42vGau8Bfxf/+smlrNzbDOzd3ID16
Hz3aC5PlJ6jX5ifnB9fN1wrt2AdXPtz/H0Hj4qBHg75UkR6Q23lxQ/84ZV4K23+t
35yDzNisOlHUpX/ay2rv08vKSn8sh53EcgDLUeNjW9Vi
-----END CERTIFICATE-----
Generated at Sun Jun 29 16:24:16 2025 by rpki-client