Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/e81d01-167b-4528-b3aa-9fe49cc4df2a/1/b0GYLmjWKwhIOi3oAzYrvPVF7ak.roa
File: b0GYLmjWKwhIOi3oAzYrvPVF7ak.roa (raw, json)
Hash identifier: j3QKWf4Na6ufdvRpfqdxKfUCQ/5sW3MTiaiymKVZLKk=
Subject key identifier: 6F:41:98:2E:68:D6:2B:08:48:3A:2D:E8:03:36:2B:BC:F5:45:ED:A9
Certificate issuer: /CN=79935964da17038e23d3a48909a13a25fb0e58eb
Certificate serial: 019874B61E162F75B78BB7D1940E7E8AACDA
Authority key identifier: 79:93:59:64:DA:17:03:8E:23:D3:A4:89:09:A1:3A:25:FB:0E:58:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZNZZNoXA44j06SJCaE6JfsOWOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/e81d01-167b-4528-b3aa-9fe49cc4df2a/1/b0GYLmjWKwhIOi3oAzYrvPVF7ak.roa
Signing time: Mon 04 Aug 2025 10:52:28 +0000
ROA not before: Mon 04 Aug 2025 10:52:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204297
IP address blocks: 185.253.180.0/22 maxlen: 22
188.64.136.0/24 maxlen: 24
188.240.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/e81d01-167b-4528-b3aa-9fe49cc4df2a/1/eZNZZNoXA44j06SJCaE6JfsOWOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/e81d01-167b-4528-b3aa-9fe49cc4df2a/1/eZNZZNoXA44j06SJCaE6JfsOWOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZNZZNoXA44j06SJCaE6JfsOWOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:b6:1e:16:2f:75:b7:8b:b7:d1:94:0e:7e:8a:ac:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79935964da17038e23d3a48909a13a25fb0e58eb
Validity
Not Before: Aug 4 10:52:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6f41982e68d62b08483a2de803362bbcf545eda9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:27:37:fe:64:b3:45:c4:c8:ae:0c:21:b4:59:
03:c6:0a:38:a7:b5:f9:39:44:7d:0f:ff:6b:e4:2d:
39:02:b8:8a:3d:2e:28:b3:d1:ec:97:de:06:77:ec:
bd:be:1c:e1:c7:e1:13:8f:7c:9b:93:cb:86:54:47:
12:d6:6f:92:3a:bd:e3:23:db:28:12:a1:2a:7b:94:
9d:f1:7b:10:b3:a1:02:db:f1:2d:a3:36:96:ef:d0:
92:e6:40:d8:a3:d5:1a:99:92:63:4c:e4:d5:44:99:
a6:1d:2c:f0:fd:60:6a:43:06:90:e0:17:71:49:bc:
5f:b2:ba:d3:5b:11:70:fd:bb:5e:f0:6d:2e:9e:d0:
ca:c2:94:e4:51:4b:3d:af:00:0d:ac:e9:ea:c9:d9:
70:a2:c8:21:7f:83:dc:61:04:3d:15:00:30:a1:2d:
bf:cc:60:63:2b:60:59:ad:22:15:a4:36:ce:02:aa:
e6:ec:42:78:99:53:7f:78:5e:76:32:24:c7:bf:d9:
11:07:19:1e:f1:66:5a:ee:03:eb:cd:62:5d:da:09:
b6:1d:46:aa:b5:6f:a7:cf:60:2a:ba:d1:a7:95:66:
14:6f:c5:64:a8:44:3c:89:a3:1c:dd:37:50:6c:35:
0a:ed:41:12:ce:ae:2a:df:9e:66:11:bd:66:59:25:
8b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:41:98:2E:68:D6:2B:08:48:3A:2D:E8:03:36:2B:BC:F5:45:ED:A9
X509v3 Authority Key Identifier:
keyid:79:93:59:64:DA:17:03:8E:23:D3:A4:89:09:A1:3A:25:FB:0E:58:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZNZZNoXA44j06SJCaE6JfsOWOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/e81d01-167b-4528-b3aa-9fe49cc4df2a/1/b0GYLmjWKwhIOi3oAzYrvPVF7ak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/e81d01-167b-4528-b3aa-9fe49cc4df2a/1/eZNZZNoXA44j06SJCaE6JfsOWOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.253.180.0/22
188.64.136.0/24
188.240.17.0/24
Signature Algorithm: sha256WithRSAEncryption
27:d2:38:53:65:0d:90:a6:a9:82:41:8f:bb:27:8f:2a:16:b2:
fa:45:51:69:5e:29:a6:63:5f:31:f6:80:b1:90:cf:48:4c:3e:
35:81:c1:1b:67:7c:e7:d6:60:01:02:f8:ea:f5:16:f5:30:bc:
5d:6d:4d:e6:b5:26:d8:f3:5a:2f:15:43:dd:e8:93:57:6c:04:
34:a9:2a:46:98:bd:c8:aa:66:20:c6:df:dd:42:0e:2a:2a:59:
b3:49:89:eb:35:8a:cc:38:c3:36:c5:0f:bc:ce:c7:8d:91:fc:
e0:1e:87:ce:ed:87:e0:b9:44:81:08:b6:4c:72:80:2d:bd:15:
b6:32:c9:33:24:3d:94:b4:4f:74:c1:d1:fe:34:d6:8f:2e:f8:
5e:11:1f:c4:28:7f:e8:4a:1b:54:e4:41:70:5a:ed:56:4d:fb:
8a:3a:3d:ee:b6:de:77:53:64:07:9e:c1:6f:29:35:ae:b6:15:
2f:c9:27:aa:64:5a:40:48:c4:82:77:3b:7d:16:f0:c3:a2:cf:
f2:8f:56:eb:a3:5b:dd:7a:81:49:c7:8d:b4:04:3f:1d:cf:94:
87:6b:4a:02:f3:60:35:f1:37:f7:3c:fc:09:73:78:3d:22:e8:
94:cf:e8:eb:1d:24:87:db:46:2c:aa:de:b1:62:d6:52:9e:fa:
62:68:b5:87
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZh0th4WL3W3i7fRlA5+iqzaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5OTM1OTY0ZGExNzAzOGUyM2QzYTQ4OTA5YTEzYTI1ZmIw
ZTU4ZWIwHhcNMjUwODA0MTA1MjI4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZjQxOTgyZTY4ZDYyYjA4NDgzYTJkZTgwMzM2MmJiY2Y1NDVlZGE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAric3/mSzRcTIrgwhtFkDxgo4p7X5
OUR9D/9r5C05AriKPS4os9Hsl94Gd+y9vhzhx+ETj3ybk8uGVEcS1m+SOr3jI9so
EqEqe5Sd8XsQs6EC2/EtozaW79CS5kDYo9UamZJjTOTVRJmmHSzw/WBqQwaQ4Bdx
SbxfsrrTWxFw/bte8G0untDKwpTkUUs9rwANrOnqydlwosghf4PcYQQ9FQAwoS2/
zGBjK2BZrSIVpDbOAqrm7EJ4mVN/eF52MiTHv9kRBxke8WZa7gPrzWJd2gm2HUaq
tW+nz2AqutGnlWYUb8VkqEQ8iaMc3TdQbDUK7UESzq4q355mEb1mWSWLkwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFG9BmC5o1isISDot6AM2K7z1Re2pMB8GA1UdIwQY
MBaAFHmTWWTaFwOOI9OkiQmhOiX7DljrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVpOWlpOb1hBNDRqMDZTSkNhRTZKZnNPV09zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9lODFkMDEtMTY3Yi00NTI4LWIzYWEt
OWZlNDljYzRkZjJhLzEvYjBHWUxtaldLd2hJT2kzb0F6WXJ2UFZGN2FrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS9lODFkMDEtMTY3Yi00NTI4LWIzYWEtOWZlNDljYzRkZjJh
LzEvZVpOWlpOb1hBNDRqMDZTSkNhRTZKZnNPV09zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCuf20AwQA
vECIAwQAvPARMA0GCSqGSIb3DQEBCwUAA4IBAQAn0jhTZQ2QpqmCQY+7J48qFrL6
RVFpXimmY18x9oCxkM9ITD41gcEbZ3zn1mABAvjq9Rb1MLxdbU3mtSbY81ovFUPd
6JNXbAQ0qSpGmL3IqmYgxt/dQg4qKlmzSYnrNYrMOMM2xQ+8zseNkfzgHofO7Yfg
uUSBCLZMcoAtvRW2MskzJD2UtE90wdH+NNaPLvheER/EKH/oShtU5EFwWu1WTfuK
Oj3utt53U2QHnsFvKTWuthUvySeqZFpASMSCdzt9FvDDos/yj1bro1vdeoFJx420
BD8dz5SHa0oC82A18Tf3PPwJc3g9IuiUz+jrHSSH20Ysqt6xYtZSnvpiaLWH
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:51:56 2025 by rpki-client