Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/3391ce-a795-401f-839d-a4d0d10c9016/1/e-6blqAsGrPGqaN7LcIbj4DyH0U.roa
File: e-6blqAsGrPGqaN7LcIbj4DyH0U.roa (raw, json)
Hash identifier: iyM95LnHDG5/i8Ga2g5NozrBqrgdbA+3I4RYkh38fiI=
Subject key identifier: 7B:EE:9B:96:A0:2C:1A:B3:C6:A9:A3:7B:2D:C2:1B:8F:80:F2:1F:45
Certificate issuer: /CN=7b732b6e5710ba8289cff4bb226b75bc4b07819f
Certificate serial: 0198747E4647BF55B19330E872AD2E7C72A2
Authority key identifier: 7B:73:2B:6E:57:10:BA:82:89:CF:F4:BB:22:6B:75:BC:4B:07:81:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e3MrblcQuoKJz_S7Imt1vEsHgZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/3391ce-a795-401f-839d-a4d0d10c9016/1/e-6blqAsGrPGqaN7LcIbj4DyH0U.roa
Signing time: Mon 04 Aug 2025 09:51:29 +0000
ROA not before: Mon 04 Aug 2025 09:51:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60387
IP address blocks: 82.115.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/3391ce-a795-401f-839d-a4d0d10c9016/1/e3MrblcQuoKJz_S7Imt1vEsHgZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/3391ce-a795-401f-839d-a4d0d10c9016/1/e3MrblcQuoKJz_S7Imt1vEsHgZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/e3MrblcQuoKJz_S7Imt1vEsHgZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:7e:46:47:bf:55:b1:93:30:e8:72:ad:2e:7c:72:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b732b6e5710ba8289cff4bb226b75bc4b07819f
Validity
Not Before: Aug 4 09:51:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7bee9b96a02c1ab3c6a9a37b2dc21b8f80f21f45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:26:94:0b:3f:e8:3a:43:ed:ab:ad:a4:1a:56:
ba:7a:e4:17:1f:86:65:0f:5c:3b:83:ff:b4:97:40:
6c:8b:4b:0b:05:f9:0a:2b:b9:6b:e0:00:f9:2a:18:
f2:5d:9e:5d:0a:fe:36:fb:26:e5:7a:cf:3c:a9:42:
fb:70:f7:ce:2d:36:62:65:d6:45:5f:cb:23:5e:f2:
09:4e:74:ff:36:5e:51:2b:83:64:e9:31:64:4f:38:
06:c6:49:04:2d:6e:bd:e4:7c:e0:a3:07:64:56:b7:
48:29:c9:45:2f:f2:bf:3f:37:5a:01:ab:eb:12:b9:
a1:6f:69:d5:65:6b:c6:f6:80:88:e8:d6:ed:f8:68:
34:53:62:4d:a8:b1:d4:6d:54:3a:f6:2c:da:06:b7:
95:d4:91:83:70:0b:db:03:e6:dd:ee:d4:4d:31:ff:
98:d1:28:93:d7:b9:53:b9:bc:71:a7:83:3d:74:62:
37:c5:ec:6f:e3:de:73:14:a3:1a:46:b2:dc:5e:c4:
37:d3:72:22:53:da:33:5e:29:55:df:2a:71:e7:56:
eb:dd:57:ae:ba:ed:67:fd:57:30:b4:c1:53:b9:37:
30:2b:28:a4:00:7e:85:3b:e5:cc:e4:34:cd:6c:1f:
bf:b9:07:79:6a:fe:d3:93:9d:ed:33:6b:9b:db:38:
81:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:EE:9B:96:A0:2C:1A:B3:C6:A9:A3:7B:2D:C2:1B:8F:80:F2:1F:45
X509v3 Authority Key Identifier:
keyid:7B:73:2B:6E:57:10:BA:82:89:CF:F4:BB:22:6B:75:BC:4B:07:81:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3MrblcQuoKJz_S7Imt1vEsHgZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/3391ce-a795-401f-839d-a4d0d10c9016/1/e-6blqAsGrPGqaN7LcIbj4DyH0U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/3391ce-a795-401f-839d-a4d0d10c9016/1/e3MrblcQuoKJz_S7Imt1vEsHgZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.115.15.0/24
Signature Algorithm: sha256WithRSAEncryption
60:9d:66:7f:ff:19:b8:d1:fc:cb:f4:9d:66:66:07:fd:07:43:
11:7e:44:b6:f8:84:9c:8a:7a:00:a1:85:20:92:bc:b5:96:c9:
58:e1:49:30:cd:d7:66:ee:9f:7f:f3:22:52:e4:d2:72:65:92:
d4:31:b2:c0:f0:8e:a8:3b:4e:b2:5c:68:00:22:7d:5c:ce:96:
82:18:77:57:3c:db:66:99:ab:9c:f6:01:5a:00:86:09:04:f7:
ce:68:8b:e8:79:30:a5:d7:59:f4:03:42:f2:02:36:6d:a9:86:
8e:7a:fa:58:f7:a5:77:60:4c:7e:b7:3d:b4:a6:4f:b0:2d:9b:
47:9d:a4:e3:86:67:28:e7:eb:0f:f9:f7:0a:93:14:33:da:e1:
63:d7:c4:2d:dd:82:c4:19:08:d0:5b:ea:08:57:2b:ef:e2:23:
9d:08:f9:e9:de:9f:ad:38:ed:26:9b:a2:e0:9b:55:d2:78:5b:
5d:ed:28:ca:a6:80:83:e0:b1:3b:2f:a7:0f:4f:92:01:0e:b1:
b7:69:ea:4f:ee:fd:32:ba:f0:5e:a6:61:5c:42:9c:59:dd:17:
8b:90:cc:03:e6:93:44:02:4a:38:2b:2a:24:45:43:44:5f:35:
07:ad:69:61:2e:76:0a:c7:dd:28:79:9f:81:53:fc:b4:11:14:
a8:b2:4d:a5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZh0fkZHv1WxkzDocq0ufHKiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiNzMyYjZlNTcxMGJhODI4OWNmZjRiYjIyNmI3NWJjNGIw
NzgxOWYwHhcNMjUwODA0MDk1MTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YmVlOWI5NmEwMmMxYWIzYzZhOWEzN2IyZGMyMWI4ZjgwZjIxZjQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnyaUCz/oOkPtq62kGla6euQXH4Zl
D1w7g/+0l0Bsi0sLBfkKK7lr4AD5KhjyXZ5dCv42+ybles88qUL7cPfOLTZiZdZF
X8sjXvIJTnT/Nl5RK4Nk6TFkTzgGxkkELW695HzgowdkVrdIKclFL/K/PzdaAavr
Ermhb2nVZWvG9oCI6Nbt+Gg0U2JNqLHUbVQ69izaBreV1JGDcAvbA+bd7tRNMf+Y
0SiT17lTubxxp4M9dGI3xexv495zFKMaRrLcXsQ303IiU9ozXilV3ypx51br3Veu
uu1n/VcwtMFTuTcwKyikAH6FO+XM5DTNbB+/uQd5av7Tk53tM2ub2ziBvQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHvum5agLBqzxqmjey3CG4+A8h9FMB8GA1UdIwQY
MBaAFHtzK25XELqCic/0uyJrdbxLB4GfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTNNcmJsY1F1b0tKel9TN0ltdDF2RXNIZ1o4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8zMzkxY2UtYTc5NS00MDFmLTgzOWQt
YTRkMGQxMGM5MDE2LzEvZS02YmxxQXNHclBHcWFON0xjSWJqNER5SDBVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC8zMzkxY2UtYTc5NS00MDFmLTgzOWQtYTRkMGQxMGM5MDE2
LzEvZTNNcmJsY1F1b0tKel9TN0ltdDF2RXNIZ1o4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUnMPMA0G
CSqGSIb3DQEBCwUAA4IBAQBgnWZ//xm40fzL9J1mZgf9B0MRfkS2+IScinoAoYUg
kry1lslY4Ukwzddm7p9/8yJS5NJyZZLUMbLA8I6oO06yXGgAIn1czpaCGHdXPNtm
mauc9gFaAIYJBPfOaIvoeTCl11n0A0LyAjZtqYaOevpY96V3YEx+tz20pk+wLZtH
naTjhmco5+sP+fcKkxQz2uFj18Qt3YLEGQjQW+oIVyvv4iOdCPnp3p+tOO0mm6Lg
m1XSeFtd7SjKpoCD4LE7L6cPT5IBDrG3aepP7v0yuvBepmFcQpxZ3ReLkMwD5pNE
Ako4KyokRUNEXzUHrWlhLnYKx90oeZ+BU/y0ERSosk2l
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:06:04 2025 by rpki-client