Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/627caqDtqNfm9yW20lXiIagRUdA.roa
File: 627caqDtqNfm9yW20lXiIagRUdA.roa (raw, json)
Hash identifier: Mi5qNzk/DECdSaSuVbFAUrlrcWaAk5NhLe1pKkhpRiI=
Subject key identifier: EB:6E:DC:6A:A0:ED:A8:D7:E6:F7:25:B6:D2:55:E2:21:A8:11:51:D0
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 019888A533DE7F75028906B451E3BE6148A9
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/627caqDtqNfm9yW20lXiIagRUdA.roa
Signing time: Fri 08 Aug 2025 07:46:24 +0000
ROA not before: Fri 08 Aug 2025 07:46:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 81.22.142.0/23 maxlen: 24
89.185.0.0/22 maxlen: 22
109.72.116.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:88:a5:33:de:7f:75:02:89:06:b4:51:e3:be:61:48:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Aug 8 07:46:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eb6edc6aa0eda8d7e6f725b6d255e221a81151d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:a0:cb:e4:3d:48:0a:a2:4f:fd:4f:6d:57:94:
92:78:f4:36:ea:67:99:4c:f4:48:75:21:81:39:0b:
d9:54:9e:8e:03:9e:5a:9e:0b:9b:2c:60:80:b6:72:
9f:d1:74:8c:59:fb:fb:da:2d:c3:b9:c8:cc:32:f3:
74:ee:e3:6e:a1:16:71:60:a6:43:db:52:3c:a8:d6:
88:3c:6f:6e:2f:8f:15:0d:b2:a7:9a:5c:4e:4f:b9:
64:dd:3a:04:11:d9:8e:d9:3f:76:d0:00:bf:40:01:
bc:03:08:15:94:1e:ef:06:65:bb:f6:d0:dd:f6:b0:
64:0d:34:c7:bb:cb:0d:39:4c:99:66:a3:70:ed:18:
0f:46:fd:cc:65:29:4d:03:9b:79:52:c6:ef:70:82:
0d:82:cd:df:8a:75:5e:55:ac:06:88:1e:e1:0f:f1:
5a:f8:a2:e1:d2:72:ea:e4:c8:9e:ea:6c:74:eb:02:
ba:0a:bb:1b:48:ba:97:68:8b:73:a3:92:8f:68:3b:
4f:48:e8:10:3f:f1:ff:6f:f6:12:df:ed:63:aa:9d:
57:97:f1:96:62:df:65:42:03:15:14:96:c3:b2:66:
e4:58:e3:f3:97:e6:d2:1c:27:a3:96:4c:b1:29:99:
21:b9:97:63:43:a2:9f:96:db:33:e0:21:e9:13:4f:
86:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:6E:DC:6A:A0:ED:A8:D7:E6:F7:25:B6:D2:55:E2:21:A8:11:51:D0
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/627caqDtqNfm9yW20lXiIagRUdA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.142.0/23
89.185.0.0/22
109.72.116.0/22
Signature Algorithm: sha256WithRSAEncryption
68:a1:ba:53:0e:ac:c2:7f:94:f2:60:c2:f4:39:22:95:a4:e1:
f6:e8:f3:03:44:94:5f:3c:82:6a:42:77:01:db:2a:02:2e:66:
0a:ec:55:b5:ce:c8:54:3f:f6:e0:f6:7d:45:17:8c:f9:06:39:
04:f7:4e:48:9e:46:79:05:e0:a6:b3:b9:5b:7b:66:51:24:0e:
4a:fb:98:53:0c:f0:6f:49:52:43:a5:77:50:9e:23:24:6a:91:
9a:d4:44:ba:34:c5:99:25:0f:eb:c5:73:90:26:a8:b6:fb:fa:
36:17:47:b4:54:56:99:e2:69:bd:4c:71:c7:c1:a1:9f:4b:48:
f3:db:c1:e1:e9:b0:db:92:3e:be:47:ac:64:b9:01:d3:65:cd:
6d:79:b1:a1:4a:7e:0f:57:4e:26:00:a3:b0:68:ac:70:c4:13:
88:36:06:64:ab:a0:e5:60:13:2d:48:3c:97:f1:8e:0b:ae:ee:
ef:e0:f2:15:da:4b:67:a2:8f:e3:59:1b:26:e2:74:56:7a:19:
7d:79:08:fa:1f:ff:d9:61:ed:bd:59:30:e8:2d:cd:60:24:c6:
9c:2c:4d:a4:ff:59:02:d2:74:57:46:30:29:fb:87:4d:c2:33:
e3:4f:8a:2a:06:44:dd:06:f0:8c:94:ef:3b:17:04:a9:6b:60:
5a:00:cc:f4
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZiIpTPef3UCiQa0UeO+YUipMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4MmNmODA5YzBlM2U4ZTU1NTJmOWQwZGQyZTI3ZTBkZDJk
OGRhYmUwHhcNMjUwODA4MDc0NjI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYjZlZGM2YWEwZWRhOGQ3ZTZmNzI1YjZkMjU1ZTIyMWE4MTE1MWQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4KDL5D1ICqJP/U9tV5SSePQ26meZ
TPRIdSGBOQvZVJ6OA55angubLGCAtnKf0XSMWfv72i3DucjMMvN07uNuoRZxYKZD
21I8qNaIPG9uL48VDbKnmlxOT7lk3ToEEdmO2T920AC/QAG8AwgVlB7vBmW79tDd
9rBkDTTHu8sNOUyZZqNw7RgPRv3MZSlNA5t5UsbvcIINgs3finVeVawGiB7hD/Fa
+KLh0nLq5Mie6mx06wK6CrsbSLqXaItzo5KPaDtPSOgQP/H/b/YS3+1jqp1Xl/GW
Yt9lQgMVFJbDsmbkWOPzl+bSHCejlkyxKZkhuZdjQ6Kfltsz4CHpE0+G5wIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFOtu3Gqg7ajX5vclttJV4iGoEVHQMB8GA1UdIwQY
MBaAFJgs+AnA4+jlVS+dDdLifg3S2Nq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEt
ODJhZDE0NTU1ZWFhLzEvNjI3Y2FxRHRxTmZtOXlXMjBsWGlJYWdSVWRBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEtODJhZDE0NTU1ZWFh
LzEvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBURaOAwQC
WbkAAwQCbUh0MA0GCSqGSIb3DQEBCwUAA4IBAQBoobpTDqzCf5TyYML0OSKVpOH2
6PMDRJRfPIJqQncB2yoCLmYK7FW1zshUP/bg9n1FF4z5BjkE905InkZ5BeCms7lb
e2ZRJA5K+5hTDPBvSVJDpXdQniMkapGa1ES6NMWZJQ/rxXOQJqi2+/o2F0e0VFaZ
4mm9THHHwaGfS0jz28Hh6bDbkj6+R6xkuQHTZc1tebGhSn4PV04mAKOwaKxwxBOI
NgZkq6DlYBMtSDyX8Y4Lru7v4PIV2ktnoo/jWRsm4nRWehl9eQj6H//ZYe29WTDo
Lc1gJMacLE2k/1kC0nRXRjAp+4dNwjPjT4oqBkTdBvCMlO87FwSpa2BaAMz0
-----END CERTIFICATE-----
Generated at Sat Aug 23 07:04:46 2025 by rpki-client