Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/eb3e9b-6db5-46c6-9aa1-eb87869bd1c9/1/KI3V-Dqox_RP-IrhT4OI-uI43p8.roa
File: KI3V-Dqox_RP-IrhT4OI-uI43p8.roa (raw, json)
Hash identifier: orZRl+1ZfvhmNjNIuH/XpcJiUoUbYgZ+2tdOL/2fIOc=
Subject key identifier: 28:8D:D5:F8:3A:A8:C7:F4:4F:F8:8A:E1:4F:83:88:FA:E2:38:DE:9F
Certificate issuer: /CN=fbf8cd5d24a08b5a8afb57c9e604d193bc8cae20
Certificate serial: 0197A0B284E077C4C9B7FFF8139C8B8063D2
Authority key identifier: FB:F8:CD:5D:24:A0:8B:5A:8A:FB:57:C9:E6:04:D1:93:BC:8C:AE:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-_jNXSSgi1qK-1fJ5gTRk7yMriA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/eb3e9b-6db5-46c6-9aa1-eb87869bd1c9/1/KI3V-Dqox_RP-IrhT4OI-uI43p8.roa
Signing time: Tue 24 Jun 2025 06:49:03 +0000
ROA not before: Tue 24 Jun 2025 06:49:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215202
IP address blocks: 185.138.214.0/23 maxlen: 24
185.138.214.0/24 maxlen: 24
185.138.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/eb3e9b-6db5-46c6-9aa1-eb87869bd1c9/1/1-_jNXSSgi1qK-1fJ5gTRk7yMriA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/eb3e9b-6db5-46c6-9aa1-eb87869bd1c9/1/1-_jNXSSgi1qK-1fJ5gTRk7yMriA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-_jNXSSgi1qK-1fJ5gTRk7yMriA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 07:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:a0:b2:84:e0:77:c4:c9:b7:ff:f8:13:9c:8b:80:63:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbf8cd5d24a08b5a8afb57c9e604d193bc8cae20
Validity
Not Before: Jun 24 06:49:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=288dd5f83aa8c7f44ff88ae14f8388fae238de9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ac:dc:b7:8f:69:33:70:aa:76:cf:f7:9e:06:
d0:db:d8:f5:a7:eb:62:11:29:d3:c2:28:b0:6a:06:
d3:a7:cf:f6:24:6e:5e:8c:91:f5:3d:3e:36:25:33:
9c:53:0d:ee:be:92:47:57:a6:e5:a0:f3:c5:02:a6:
b9:e9:ec:64:fb:10:ea:24:11:c3:b2:3b:bb:9b:30:
27:23:55:4b:b3:a8:9f:92:5d:bb:49:f5:81:4e:61:
e6:f3:73:f4:97:16:2a:30:2a:da:d6:07:39:dd:25:
6b:b9:62:6b:c4:10:6b:95:80:8a:18:c9:ba:13:77:
87:bf:e6:0d:46:52:c6:b5:6e:32:6b:30:08:10:dd:
41:e6:ad:3b:58:c2:36:7a:2b:c2:e7:13:3b:4c:c5:
b9:3d:38:a1:e6:4e:20:61:44:ad:68:d9:18:6a:2d:
4e:2f:15:fc:c6:76:da:6f:b6:b4:1b:32:ba:3f:9f:
52:f3:30:9b:f9:97:86:6a:f2:6e:fe:c7:42:b8:ea:
cf:57:7d:97:ae:b9:bd:eb:75:ad:05:d1:f2:6e:27:
50:63:e4:24:4c:3e:c5:a9:8f:5c:2e:16:c7:5d:04:
84:98:a9:c6:99:9a:3b:e6:fb:fb:ea:56:fa:c1:3e:
97:32:d9:79:e7:22:ca:ad:36:af:e4:c3:15:f1:9e:
37:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:8D:D5:F8:3A:A8:C7:F4:4F:F8:8A:E1:4F:83:88:FA:E2:38:DE:9F
X509v3 Authority Key Identifier:
keyid:FB:F8:CD:5D:24:A0:8B:5A:8A:FB:57:C9:E6:04:D1:93:BC:8C:AE:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_jNXSSgi1qK-1fJ5gTRk7yMriA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/eb3e9b-6db5-46c6-9aa1-eb87869bd1c9/1/KI3V-Dqox_RP-IrhT4OI-uI43p8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/eb3e9b-6db5-46c6-9aa1-eb87869bd1c9/1/1-_jNXSSgi1qK-1fJ5gTRk7yMriA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.138.214.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:dd:af:99:ea:1f:ad:71:3b:ca:e7:5e:dd:3b:22:12:0f:cf:
c6:6e:1a:28:c4:6f:a1:03:69:f6:a0:cb:8c:44:0b:84:9f:a2:
1c:bd:9f:f0:58:a8:ca:29:8c:96:22:40:af:7c:e5:d7:07:e4:
4b:62:1a:ad:07:b8:cd:50:9a:cd:4e:bb:f5:66:2f:83:f1:d3:
99:61:d9:38:f4:1c:e7:09:cc:9e:e7:01:64:1c:aa:30:df:39:
84:59:5f:46:d9:83:bc:0d:a6:2a:d4:a2:bc:82:cd:b2:9f:88:
b7:e7:e4:51:3a:3d:8b:c0:24:f1:10:46:75:39:c8:d1:f4:24:
89:78:a5:8d:a4:d6:8e:e6:a7:1b:96:ba:9e:87:0c:0b:d2:3b:
c8:52:60:bb:55:61:11:31:46:ea:fc:09:63:36:a5:e4:70:e0:
9a:c6:a9:fe:0e:b4:d2:6b:4a:a5:e7:ea:9e:5e:e2:c5:af:c2:
3d:ff:f1:55:8c:f6:bc:d4:70:10:a5:89:2c:3a:cf:b3:ec:87:
d4:91:1a:ba:6f:03:20:4d:6f:5f:9d:66:c8:14:b9:8d:42:ef:
39:d0:7b:2b:92:5c:79:a5:65:2a:48:e9:22:ff:81:96:d7:80:
3c:5a:e7:09:47:1b:ac:55:71:53:1c:b2:07:2d:65:35:e4:e7:
4b:ab:c9:49
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZegsoTgd8TJt//4E5yLgGPSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiZjhjZDVkMjRhMDhiNWE4YWZiNTdjOWU2MDRkMTkzYmM4
Y2FlMjAwHhcNMjUwNjI0MDY0OTAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyODhkZDVmODNhYThjN2Y0NGZmODhhZTE0ZjgzODhmYWUyMzhkZTlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6zct49pM3Cqds/3ngbQ29j1p+ti
ESnTwiiwagbTp8/2JG5ejJH1PT42JTOcUw3uvpJHV6bloPPFAqa56exk+xDqJBHD
sju7mzAnI1VLs6ifkl27SfWBTmHm83P0lxYqMCra1gc53SVruWJrxBBrlYCKGMm6
E3eHv+YNRlLGtW4yazAIEN1B5q07WMI2eivC5xM7TMW5PTih5k4gYUStaNkYai1O
LxX8xnbab7a0GzK6P59S8zCb+ZeGavJu/sdCuOrPV32Xrrm963WtBdHybidQY+Qk
TD7FqY9cLhbHXQSEmKnGmZo75vv76lb6wT6XMtl55yLKrTav5MMV8Z43CwIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFCiN1fg6qMf0T/iK4U+DiPriON6fMB8GA1UdIwQY
MBaAFPv4zV0koItaivtXyeYE0ZO8jK4gMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1fak5YU1NnaTFxSy0xZko1Z1RSazd5TXJpQS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzAvZWIzZTliLTZkYjUtNDZjNi05YWEx
LWViODc4NjliZDFjOS8xL0tJM1YtRHFveF9SUC1JcmhUNE9JLXVJNDNwOC5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvYzAvZWIzZTliLTZkYjUtNDZjNi05YWExLWViODc4NjliZDFj
OS8xLzEtX2pOWFNTZ2kxcUstMWZKNWdUUms3eU1yaUEuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAG5itYw
DQYJKoZIhvcNAQELBQADggEBAB7dr5nqH61xO8rnXt07IhIPz8ZuGijEb6EDafag
y4xEC4Sfohy9n/BYqMopjJYiQK985dcH5EtiGq0HuM1Qms1Ou/VmL4Px05lh2Tj0
HOcJzJ7nAWQcqjDfOYRZX0bZg7wNpirUoryCzbKfiLfn5FE6PYvAJPEQRnU5yNH0
JIl4pY2k1o7mpxuWup6HDAvSO8hSYLtVYRExRur8CWM2peRw4JrGqf4OtNJrSqXn
6p5e4sWvwj3/8VWM9rzUcBCliSw6z7Psh9SRGrpvAyBNb1+dZsgUuY1C7znQeyuS
XHmlZSpI6SL/gZbXgDxa5wlHG6xVcVMcsgctZTXk50uryUk=
-----END CERTIFICATE-----
Generated at Sun Jun 29 16:52:38 2025 by rpki-client