Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/kBfIeqAeKWivX1BBStYnhq8eQKY.roa
File: kBfIeqAeKWivX1BBStYnhq8eQKY.roa (raw, json)
Hash identifier: 6hm3q6RVhanYeJb6ZfkoLkT3Ro77DzfwBMRFcvbLBuA=
Subject key identifier: 90:17:C8:7A:A0:1E:29:68:AF:5F:50:41:4A:D6:27:86:AF:1E:40:A6
Certificate issuer: /CN=a999cffa6e48fa2c4f8d09803396b457a630a33d
Certificate serial: 01978D2CA73AA2C491EE1203E3392F8B3345
Authority key identifier: A9:99:CF:FA:6E:48:FA:2C:4F:8D:09:80:33:96:B4:57:A6:30:A3:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/kBfIeqAeKWivX1BBStYnhq8eQKY.roa
Signing time: Fri 20 Jun 2025 11:50:03 +0000
ROA not before: Fri 20 Jun 2025 11:50:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212655
IP address blocks: 45.92.44.0/22 maxlen: 24
83.217.160.0/20 maxlen: 20
87.192.96.0/19 maxlen: 24
185.8.92.0/24 maxlen: 24
185.8.94.0/23 maxlen: 24
185.26.240.0/22 maxlen: 22
185.43.128.0/22 maxlen: 22
185.154.144.0/22 maxlen: 22
193.28.90.0/24 maxlen: 24
2a0e:1d40::/29 maxlen: 41
2a10:6940::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 16:57:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8d:2c:a7:3a:a2:c4:91:ee:12:03:e3:39:2f:8b:33:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a999cffa6e48fa2c4f8d09803396b457a630a33d
Validity
Not Before: Jun 20 11:50:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9017c87aa01e2968af5f50414ad62786af1e40a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c0:a1:a8:d3:5f:02:ed:0a:08:ef:2f:12:31:
45:bd:cd:d1:59:e1:0c:f6:16:6c:f7:5d:64:6b:3b:
24:7a:ea:91:41:66:73:e4:60:02:bc:d3:74:ee:a5:
12:cb:b8:df:e1:e1:30:aa:6c:a3:65:8f:3c:6b:52:
e4:d6:42:60:58:0e:c7:ac:78:54:91:7b:55:3d:d0:
f2:54:78:7c:58:d6:4c:05:88:a9:cd:79:4e:35:8e:
3e:e0:b8:6c:6e:2f:79:e7:54:48:30:41:1e:51:70:
2e:e6:1f:e4:a7:c5:4d:2d:8f:49:d7:b0:be:e6:69:
9f:cd:d3:9a:af:95:21:22:f6:8d:fb:02:4b:57:1e:
1a:e3:c9:8a:80:b4:76:f5:57:1a:2b:29:41:64:bc:
52:33:70:e2:f1:30:a5:68:75:64:b5:1d:e2:c1:30:
36:97:6c:5c:91:ae:cc:48:c5:bd:ea:5c:e3:50:2d:
54:43:6d:7e:c9:d4:07:78:0e:4c:61:ca:2f:95:3b:
71:d7:91:ba:c1:1e:4d:5b:a1:91:41:c7:d6:5f:83:
50:ff:88:97:4c:df:bc:c4:f1:c8:aa:01:e9:04:06:
ba:4d:a9:39:27:5c:24:bf:b7:aa:7a:07:13:24:59:
14:6d:03:a2:8b:7c:51:52:25:d1:88:c4:9c:d8:0b:
51:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:17:C8:7A:A0:1E:29:68:AF:5F:50:41:4A:D6:27:86:AF:1E:40:A6
X509v3 Authority Key Identifier:
keyid:A9:99:CF:FA:6E:48:FA:2C:4F:8D:09:80:33:96:B4:57:A6:30:A3:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/kBfIeqAeKWivX1BBStYnhq8eQKY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.44.0/22
83.217.160.0/20
87.192.96.0/19
185.8.92.0/24
185.8.94.0/23
185.26.240.0/22
185.43.128.0/22
185.154.144.0/22
193.28.90.0/24
IPv6:
2a0e:1d40::/29
2a10:6940::/29
Signature Algorithm: sha256WithRSAEncryption
a8:5b:9c:f3:90:68:78:9d:ed:bf:ca:54:40:46:6e:e4:be:63:
5f:d4:ee:25:2e:cc:c3:46:9d:82:09:91:a7:a7:2c:6b:a1:df:
99:be:0d:28:cc:c5:f4:79:80:1c:8f:a7:95:63:99:d0:27:3d:
6a:72:99:a9:c5:c0:2a:15:5f:a5:64:70:cc:43:9c:ce:a3:8c:
f8:51:e4:12:a9:ef:f5:ec:a3:a1:d6:12:3b:d9:01:20:e8:98:
dc:dd:b2:60:6c:b7:94:93:36:96:30:53:61:38:4c:2f:1a:ae:
09:ad:25:d6:c1:59:5f:77:45:9e:af:a8:a6:b4:5a:9f:d0:12:
4d:79:d3:ad:08:17:f5:5d:e9:ae:f7:e5:5c:78:1c:02:2e:64:
d9:3f:52:aa:29:32:38:01:5f:ec:47:86:41:d3:c2:ad:62:d2:
8d:9f:46:a0:26:44:50:2d:52:f3:60:87:c3:7f:cf:88:46:0a:
3c:5f:9e:e6:05:e2:a7:d5:11:58:1d:2e:14:f5:63:10:07:57:
62:d0:49:25:38:34:11:a5:9b:9b:2c:0d:c9:23:ca:a7:a8:94:
e5:dd:b1:d2:db:b3:88:39:9c:04:de:30:7b:af:2f:89:99:13:
72:66:f4:5e:19:d4:f6:5a:47:35:5c:bd:f6:30:14:16:bf:d8:
6f:3a:ad:95
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgISAZeNLKc6osSR7hID4zkvizNFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5OTljZmZhNmU0OGZhMmM0ZjhkMDk4MDMzOTZiNDU3YTYz
MGEzM2QwHhcNMjUwNjIwMTE1MDAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MDE3Yzg3YWEwMWUyOTY4YWY1ZjUwNDE0YWQ2Mjc4NmFmMWU0MGE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcChqNNfAu0KCO8vEjFFvc3RWeEM
9hZs911kazskeuqRQWZz5GACvNN07qUSy7jf4eEwqmyjZY88a1Lk1kJgWA7HrHhU
kXtVPdDyVHh8WNZMBYipzXlONY4+4Lhsbi9551RIMEEeUXAu5h/kp8VNLY9J17C+
5mmfzdOar5UhIvaN+wJLVx4a48mKgLR29VcaKylBZLxSM3Di8TClaHVktR3iwTA2
l2xcka7MSMW96lzjUC1UQ21+ydQHeA5MYcovlTtx15G6wR5NW6GRQcfWX4NQ/4iX
TN+8xPHIqgHpBAa6Tak5J1wkv7eqegcTJFkUbQOii3xRUiXRiMSc2AtRxwIDAQAB
o4ICTzCCAkswHQYDVR0OBBYEFJAXyHqgHilor19QQUrWJ4avHkCmMB8GA1UdIwQY
MBaAFKmZz/puSPosT40JgDOWtFemMKM9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVpuUC1tNUktaXhQalFtQU01YTBWNll3b3owLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9mMTQzZDAtYWViOC00YjUyLTljMzUt
YjNhNTA5MTBjMmE4LzEva0JmSWVxQWVLV2l2WDFCQlN0WW5ocThlUUtZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9mMTQzZDAtYWViOC00YjUyLTljMzUtYjNhNTA5MTBjMmE4
LzEvcVpuUC1tNUktaXhQalFtQU01YTBWNll3b3owLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGUGCCsGAQUFBwEHAQH/BFYwVDA8BAIAATA2AwQCLVwsAwQE
U9mgAwQFV8BgAwQAuQhcAwQBuQheAwQCuRrwAwQCuSuAAwQCuZqQAwQAwRxaMBQE
AgACMA4DBQMqDh1AAwUDKhBpQDANBgkqhkiG9w0BAQsFAAOCAQEAqFuc85BoeJ3t
v8pUQEZu5L5jX9TuJS7Mw0adggmRp6csa6Hfmb4NKMzF9HmAHI+nlWOZ0Cc9anKZ
qcXAKhVfpWRwzEOczqOM+FHkEqnv9eyjodYSO9kBIOiY3N2yYGy3lJM2ljBTYThM
LxquCa0l1sFZX3dFnq+oprRan9ASTXnTrQgX9V3prvflXHgcAi5k2T9SqikyOAFf
7EeGQdPCrWLSjZ9GoCZEUC1S82CHw3/PiEYKPF+e5gXip9URWB0uFPVjEAdXYtBJ
JTg0EaWbmywNySPKp6iU5d2x0tuziDmcBN4we68viZkTcmb0XhnU9lpHNVy99jAU
Fr/YbzqtlQ==
-----END CERTIFICATE-----
Generated at Tue Jul 1 20:35:13 2025 by rpki-client