Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/cVV3-C5x7SwNbxQSvBGVrg4qnls.roa
File: cVV3-C5x7SwNbxQSvBGVrg4qnls.roa (raw, json)
Hash identifier: TuaWHCgRog0Lts8BBn6Xtq/aihmugvOpoGaD7SODA1k=
Subject key identifier: 71:55:77:F8:2E:71:ED:2C:0D:6F:14:12:BC:11:95:AE:0E:2A:9E:5B
Certificate issuer: /CN=e48da335b072536d58e6b7cdf4cdb16445bcbc33
Certificate serial: 0197AC805B89C311E992FDD03AD373427ACE
Authority key identifier: E4:8D:A3:35:B0:72:53:6D:58:E6:B7:CD:F4:CD:B1:64:45:BC:BC:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5I2jNbByU21Y5rfN9M2xZEW8vDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/cVV3-C5x7SwNbxQSvBGVrg4qnls.roa
Signing time: Thu 26 Jun 2025 13:49:42 +0000
ROA not before: Thu 26 Jun 2025 13:49:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197107
IP address blocks: 178.20.192.0/24 maxlen: 24
178.20.193.0/24 maxlen: 24
178.20.194.0/24 maxlen: 24
178.20.195.0/24 maxlen: 24
178.20.196.0/24 maxlen: 24
178.20.197.0/24 maxlen: 24
178.20.198.0/24 maxlen: 24
178.20.199.0/24 maxlen: 24
185.58.88.0/24 maxlen: 24
185.58.89.0/24 maxlen: 24
185.58.90.0/24 maxlen: 24
185.58.91.0/24 maxlen: 24
195.225.64.0/24 maxlen: 24
195.225.65.0/24 maxlen: 24
195.225.66.0/24 maxlen: 24
195.225.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/5I2jNbByU21Y5rfN9M2xZEW8vDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/5I2jNbByU21Y5rfN9M2xZEW8vDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5I2jNbByU21Y5rfN9M2xZEW8vDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ac:80:5b:89:c3:11:e9:92:fd:d0:3a:d3:73:42:7a:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e48da335b072536d58e6b7cdf4cdb16445bcbc33
Validity
Not Before: Jun 26 13:49:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=715577f82e71ed2c0d6f1412bc1195ae0e2a9e5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:54:d2:d6:dc:f2:5e:af:60:d1:13:b5:c2:e5:
fc:61:52:6b:d6:4d:88:10:5c:29:82:60:25:46:90:
e2:bb:65:42:1c:0a:f1:43:84:db:a7:1c:f9:82:03:
02:21:51:62:8b:cc:24:ea:e6:8f:59:c9:fb:d6:b4:
38:59:b7:e0:e1:81:b4:12:07:05:e1:8e:5e:c7:88:
b0:09:64:4e:61:b3:75:6a:8e:73:8b:c8:5c:d6:ac:
46:63:b0:a6:b9:a0:2c:f7:1b:5b:a3:1e:80:9e:62:
68:91:3b:1e:b8:25:09:6f:e7:b3:76:2e:60:ab:35:
68:28:32:40:e4:21:3a:47:57:f9:29:27:2f:e0:78:
97:d9:eb:73:15:f3:55:98:53:af:01:0b:b3:01:3e:
bd:51:a9:b7:7b:36:aa:1f:7d:64:29:4f:e2:97:81:
c5:8a:fc:18:48:4c:7e:04:5c:26:10:f2:7e:52:42:
98:b6:ac:32:37:0d:8a:bd:df:c7:74:ea:e6:8e:32:
41:5f:80:bb:25:bd:d1:a8:36:ee:6e:2e:5f:05:61:
ce:5a:64:8b:96:5c:de:6d:e7:40:d5:6d:7a:21:f4:
fb:86:af:b4:77:26:12:2b:3c:d0:95:b0:b9:2f:6f:
a4:e6:79:8a:9e:f7:05:d8:0f:8d:16:85:64:9a:7d:
48:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:55:77:F8:2E:71:ED:2C:0D:6F:14:12:BC:11:95:AE:0E:2A:9E:5B
X509v3 Authority Key Identifier:
keyid:E4:8D:A3:35:B0:72:53:6D:58:E6:B7:CD:F4:CD:B1:64:45:BC:BC:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5I2jNbByU21Y5rfN9M2xZEW8vDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/cVV3-C5x7SwNbxQSvBGVrg4qnls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/5I2jNbByU21Y5rfN9M2xZEW8vDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.20.192.0/21
185.58.88.0/22
195.225.64.0/22
Signature Algorithm: sha256WithRSAEncryption
03:4c:6a:3d:d9:fc:96:d1:33:a7:0c:2e:ae:e8:3d:d9:13:9b:
b1:b6:22:37:03:8b:d1:59:3d:12:d6:f8:d2:f2:53:86:5d:6e:
66:f1:91:55:1c:3e:1f:97:40:1d:d8:43:ed:75:0c:9e:a8:ea:
2f:88:1c:43:27:3a:1e:af:de:66:f3:30:af:59:de:1b:0a:44:
25:5e:28:4d:7d:f7:4e:a6:6d:4f:14:6b:36:02:34:33:25:05:
1c:53:d2:73:17:02:cf:8f:40:bc:aa:7a:31:66:d1:db:ce:8b:
ab:d9:3e:83:76:52:c4:9c:ba:f6:1e:ee:12:32:e4:2d:27:d1:
07:fe:9f:f9:c2:1a:a8:2c:13:8a:d2:9d:77:7d:bc:0e:ed:cf:
e2:4b:49:29:8b:1d:cd:2e:a0:90:67:16:ee:fe:ed:f6:7d:85:
d1:ec:f4:82:4d:ed:e6:d6:ca:6b:68:2a:39:0e:c5:27:81:cc:
36:dd:99:7a:30:92:38:bf:cf:3c:de:68:b4:fa:9e:b0:99:73:
28:9d:f0:bc:c1:7a:a8:e4:d2:c4:8b:24:29:9d:87:92:a7:3d:
21:3d:56:4b:ac:25:d4:c3:f4:30:a0:29:a4:aa:0f:90:39:7a:
e4:f0:36:a2:37:f6:c5:f3:fc:ff:6a:98:1a:2d:4f:49:ba:48:
bc:95:fd:3d
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZesgFuJwxHpkv3QOtNzQnrOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0OGRhMzM1YjA3MjUzNmQ1OGU2YjdjZGY0Y2RiMTY0NDVi
Y2JjMzMwHhcNMjUwNjI2MTM0OTQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MTU1NzdmODJlNzFlZDJjMGQ2ZjE0MTJiYzExOTVhZTBlMmE5ZTViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFTS1tzyXq9g0RO1wuX8YVJr1k2I
EFwpgmAlRpDiu2VCHArxQ4Tbpxz5ggMCIVFii8wk6uaPWcn71rQ4Wbfg4YG0EgcF
4Y5ex4iwCWROYbN1ao5zi8hc1qxGY7CmuaAs9xtbox6AnmJokTseuCUJb+ezdi5g
qzVoKDJA5CE6R1f5KScv4HiX2etzFfNVmFOvAQuzAT69Uam3ezaqH31kKU/il4HF
ivwYSEx+BFwmEPJ+UkKYtqwyNw2Kvd/HdOrmjjJBX4C7Jb3RqDbubi5fBWHOWmSL
llzebedA1W16IfT7hq+0dyYSKzzQlbC5L2+k5nmKnvcF2A+NFoVkmn1IOwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFHFVd/guce0sDW8UErwRla4OKp5bMB8GA1UdIwQY
MBaAFOSNozWwclNtWOa3zfTNsWRFvLwzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUkyak5iQnlVMjFZNXJmTjlNMnhaRVc4dkRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC83OTUwOTgtYTJmMC00NzMzLTk3MDkt
ZTZlYjkxOWQ3YTAyLzEvY1ZWMy1DNXg3U3dOYnhRU3ZCR1ZyZzRxbmxzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC83OTUwOTgtYTJmMC00NzMzLTk3MDktZTZlYjkxOWQ3YTAy
LzEvNUkyak5iQnlVMjFZNXJmTjlNMnhaRVc4dkRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDshTAAwQC
uTpYAwQCw+FAMA0GCSqGSIb3DQEBCwUAA4IBAQADTGo92fyW0TOnDC6u6D3ZE5ux
tiI3A4vRWT0S1vjS8lOGXW5m8ZFVHD4fl0Ad2EPtdQyeqOoviBxDJzoer95m8zCv
Wd4bCkQlXihNffdOpm1PFGs2AjQzJQUcU9JzFwLPj0C8qnoxZtHbzour2T6DdlLE
nLr2Hu4SMuQtJ9EH/p/5whqoLBOK0p13fbwO7c/iS0kpix3NLqCQZxbu/u32fYXR
7PSCTe3m1spraCo5DsUngcw23Zl6MJI4v8883mi0+p6wmXMonfC8wXqo5NLEiyQp
nYeSpz0hPVZLrCXUw/QwoCmkqg+QOXrk8DaiN/bF8/z/apgaLU9Juki8lf09
-----END CERTIFICATE-----
Generated at Wed Jul 2 16:41:47 2025 by rpki-client