Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/4c043c-5fcd-48cb-bd50-c596af2a42ba/1/CZQAZEvMh_XTxw7BOmbx2zwgX-k.roa
File: CZQAZEvMh_XTxw7BOmbx2zwgX-k.roa (raw, json)
Hash identifier: Ire9dW7Oeexx5f9et2qGgWkDs4AnuBBZcM9DwhOcJAg=
Subject key identifier: 09:94:00:64:4B:CC:87:F5:D3:C7:0E:C1:3A:66:F1:DB:3C:20:5F:E9
Certificate issuer: /CN=3e17837a10db1d3dd73e20df0b479e40db2236fe
Certificate serial: 0197AC4EEBC9FD5DE6FE5D3D3586725AE936
Authority key identifier: 3E:17:83:7A:10:DB:1D:3D:D7:3E:20:DF:0B:47:9E:40:DB:22:36:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PheDehDbHT3XPiDfC0eeQNsiNv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/4c043c-5fcd-48cb-bd50-c596af2a42ba/1/CZQAZEvMh_XTxw7BOmbx2zwgX-k.roa
Signing time: Thu 26 Jun 2025 12:55:42 +0000
ROA not before: Thu 26 Jun 2025 12:55:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210631
IP address blocks: 185.173.148.0/22 maxlen: 23
2a0b:5900::/32 maxlen: 33
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/4c043c-5fcd-48cb-bd50-c596af2a42ba/1/PheDehDbHT3XPiDfC0eeQNsiNv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/4c043c-5fcd-48cb-bd50-c596af2a42ba/1/PheDehDbHT3XPiDfC0eeQNsiNv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PheDehDbHT3XPiDfC0eeQNsiNv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ac:4e:eb:c9:fd:5d:e6:fe:5d:3d:35:86:72:5a:e9:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e17837a10db1d3dd73e20df0b479e40db2236fe
Validity
Not Before: Jun 26 12:55:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=099400644bcc87f5d3c70ec13a66f1db3c205fe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c2:fc:03:66:33:80:c6:d6:c5:c7:03:ce:d1:
45:86:a0:39:1b:c7:e5:6f:af:bc:88:89:29:0c:b0:
de:e3:53:ad:6c:61:87:36:9f:51:c6:7e:62:30:80:
bd:92:0f:65:4c:26:a8:56:99:f3:ff:78:d5:c4:96:
85:58:5d:38:8f:86:7e:10:c7:13:44:31:19:da:0e:
18:ff:95:a9:30:68:79:73:3f:9b:74:56:c9:90:aa:
22:09:a5:a6:02:c7:cf:86:e4:da:07:e5:06:54:ae:
66:73:8d:bc:43:99:e8:e1:2c:a8:55:5d:96:ab:92:
cb:11:9f:b3:03:d6:6d:73:c2:4a:85:53:a3:04:c8:
fa:c7:1d:b8:d6:13:f6:57:c3:d2:13:82:95:e9:93:
4f:14:bd:14:c3:fd:3c:dc:60:91:66:70:84:6c:cf:
04:2e:7e:32:9c:f3:58:a2:a0:4e:de:5c:a2:ec:0a:
eb:7c:e4:c0:9f:1f:da:8a:35:3c:5a:9f:16:0c:61:
98:a8:3d:6c:d0:2c:dc:8c:33:f7:01:f8:a4:a8:4d:
3d:04:25:07:36:8a:9d:ac:9d:85:cb:6f:1f:c4:48:
63:23:cc:95:ca:c1:26:ae:78:bd:a3:79:5c:a0:4f:
db:3e:74:8d:c6:33:d9:7c:77:31:7d:e4:ce:e7:ad:
d7:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:94:00:64:4B:CC:87:F5:D3:C7:0E:C1:3A:66:F1:DB:3C:20:5F:E9
X509v3 Authority Key Identifier:
keyid:3E:17:83:7A:10:DB:1D:3D:D7:3E:20:DF:0B:47:9E:40:DB:22:36:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PheDehDbHT3XPiDfC0eeQNsiNv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/4c043c-5fcd-48cb-bd50-c596af2a42ba/1/CZQAZEvMh_XTxw7BOmbx2zwgX-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/4c043c-5fcd-48cb-bd50-c596af2a42ba/1/PheDehDbHT3XPiDfC0eeQNsiNv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.173.148.0/22
IPv6:
2a0b:5900::/32
Signature Algorithm: sha256WithRSAEncryption
05:07:9a:25:81:49:60:a1:a5:2d:47:0a:7f:50:ee:52:66:a5:
e3:71:b3:40:51:5b:be:dd:f6:7e:3f:6b:9d:6e:d7:dd:0f:f9:
f2:e9:f4:63:3b:1d:ed:52:b6:da:44:3a:3b:d5:ec:41:02:5a:
6c:21:9b:0a:83:c2:ff:2d:a6:9e:d0:f3:ab:1a:8a:51:19:dd:
8b:98:58:7c:aa:a2:5e:58:3b:1b:f7:d6:7f:c3:14:6c:11:b2:
c0:7a:82:e2:af:15:95:31:75:72:27:52:23:2e:3c:9f:de:b9:
41:e5:ac:ab:70:8c:46:b1:e5:1b:8a:3c:32:19:12:12:30:48:
3b:67:f5:db:29:b7:3d:5e:58:16:a6:b8:92:ed:33:f1:6e:ba:
20:43:0e:3a:31:66:12:ef:29:ea:56:bc:dc:10:8d:41:bd:ca:
dd:c9:d2:98:09:81:1f:24:2f:df:46:09:0c:46:35:6b:4c:12:
24:eb:13:00:e4:0f:2f:a3:ed:90:d0:de:60:18:51:8a:3a:c3:
a9:e2:7b:64:ae:3b:6c:a5:c1:71:a1:91:35:a7:32:50:df:f0:
82:ed:e7:84:a0:0a:4d:ab:56:dd:58:f1:8c:75:b8:5b:28:4b:
80:15:8e:f3:05:25:40:5e:97:5a:f9:5a:e6:83:41:7c:c0:75:
3a:af:9f:d7
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZesTuvJ/V3m/l09NYZyWuk2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlMTc4MzdhMTBkYjFkM2RkNzNlMjBkZjBiNDc5ZTQwZGIy
MjM2ZmUwHhcNMjUwNjI2MTI1NTQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOTk0MDA2NDRiY2M4N2Y1ZDNjNzBlYzEzYTY2ZjFkYjNjMjA1ZmU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8L8A2YzgMbWxccDztFFhqA5G8fl
b6+8iIkpDLDe41OtbGGHNp9Rxn5iMIC9kg9lTCaoVpnz/3jVxJaFWF04j4Z+EMcT
RDEZ2g4Y/5WpMGh5cz+bdFbJkKoiCaWmAsfPhuTaB+UGVK5mc428Q5no4SyoVV2W
q5LLEZ+zA9Ztc8JKhVOjBMj6xx241hP2V8PSE4KV6ZNPFL0Uw/083GCRZnCEbM8E
Ln4ynPNYoqBO3lyi7ArrfOTAnx/aijU8Wp8WDGGYqD1s0CzcjDP3AfikqE09BCUH
NoqdrJ2Fy28fxEhjI8yVysEmrni9o3lcoE/bPnSNxjPZfHcxfeTO563XeQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFAmUAGRLzIf108cOwTpm8ds8IF/pMB8GA1UdIwQY
MBaAFD4Xg3oQ2x091z4g3wtHnkDbIjb+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGhlRGVoRGJIVDNYUGlEZkMwZWVRTnNpTnY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS80YzA0M2MtNWZjZC00OGNiLWJkNTAt
YzU5NmFmMmE0MmJhLzEvQ1pRQVpFdk1oX1hUeHc3Qk9tYngyendnWC1rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS80YzA0M2MtNWZjZC00OGNiLWJkNTAtYzU5NmFmMmE0MmJh
LzEvUGhlRGVoRGJIVDNYUGlEZkMwZWVRTnNpTnY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCua2UMA0E
AgACMAcDBQAqC1kAMA0GCSqGSIb3DQEBCwUAA4IBAQAFB5olgUlgoaUtRwp/UO5S
ZqXjcbNAUVu+3fZ+P2udbtfdD/ny6fRjOx3tUrbaRDo71exBAlpsIZsKg8L/Laae
0POrGopRGd2LmFh8qqJeWDsb99Z/wxRsEbLAeoLirxWVMXVyJ1IjLjyf3rlB5ayr
cIxGseUbijwyGRISMEg7Z/XbKbc9XlgWpriS7TPxbrogQw46MWYS7ynqVrzcEI1B
vcrdydKYCYEfJC/fRgkMRjVrTBIk6xMA5A8vo+2Q0N5gGFGKOsOp4ntkrjtspcFx
oZE1pzJQ3/CC7eeEoApNq1bdWPGMdbhbKEuAFY7zBSVAXpda+Vrmg0F8wHU6r5/X
-----END CERTIFICATE-----
Generated at Tue Jul 1 15:26:46 2025 by rpki-client