Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/SAv1oGSNW1aA2gDHKKm72FJEUOM.roa
File: SAv1oGSNW1aA2gDHKKm72FJEUOM.roa (raw, json)
Hash identifier: U6IfA+NYmrwYWZBX8R3ttuTnTj6KSmf44pq/e90m1CI=
Subject key identifier: 48:0B:F5:A0:64:8D:5B:56:80:DA:00:C7:28:A9:BB:D8:52:44:50:E3
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 019685DC50F2C0F6BC992A1D5C4BB06CC0C5
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/SAv1oGSNW1aA2gDHKKm72FJEUOM.roa
Signing time: Wed 30 Apr 2025 08:42:10 +0000
ROA not before: Wed 30 Apr 2025 08:42:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 26042
IP address blocks: 185.230.67.0/24 maxlen: 24
194.76.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 15:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:dc:50:f2:c0:f6:bc:99:2a:1d:5c:4b:b0:6c:c0:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Apr 30 08:42:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=480bf5a0648d5b5680da00c728a9bbd8524450e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:01:de:48:24:c1:e6:54:2a:00:5a:df:de:66:
e1:be:f5:e3:4c:e2:1f:aa:4d:f6:5c:42:7c:fe:71:
fc:10:5a:b9:62:1a:06:0f:ad:7b:86:d7:47:e3:b6:
8e:da:f1:06:13:98:2b:e1:d2:ed:35:c2:b9:9f:bc:
79:46:56:c2:ed:21:63:e4:d4:62:2f:ce:cd:b4:9a:
2d:6a:94:38:13:01:5f:05:3f:f9:58:cb:4c:89:1b:
6a:8f:b2:3d:40:da:ac:d0:87:31:be:b3:ce:65:33:
dc:15:90:76:2a:ba:24:c0:2f:f8:3b:af:e4:1d:9d:
3e:75:c5:6e:cd:8d:08:f9:9d:45:c6:d1:08:c7:c8:
44:37:73:7e:fa:6b:fd:58:4b:59:aa:95:74:78:d3:
c9:32:97:8f:d3:f8:7d:7f:58:3d:f3:e6:9c:0a:85:
c4:78:c3:c8:9e:73:78:36:d0:91:30:63:94:f7:30:
c7:24:0e:ec:47:80:7c:1b:79:01:9c:fd:95:e1:1f:
a3:4a:d3:f1:20:62:5f:bc:eb:d2:ca:b5:bd:1c:ea:
68:33:4a:13:97:0c:df:cb:ab:d4:93:c2:85:e7:03:
6c:50:0b:0e:56:63:b1:8f:58:22:25:12:20:57:94:
63:ec:fb:62:3d:38:3c:b5:2e:a3:67:b0:35:91:eb:
fb:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:0B:F5:A0:64:8D:5B:56:80:DA:00:C7:28:A9:BB:D8:52:44:50:E3
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/SAv1oGSNW1aA2gDHKKm72FJEUOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.230.67.0/24
194.76.168.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:02:9e:fb:8e:ba:03:7f:3a:2a:60:a5:11:ab:73:50:73:d9:
aa:3a:d3:7a:b5:c7:f5:66:0e:20:25:4e:f9:e9:77:20:cc:c1:
a0:c5:5a:11:b3:fa:28:00:cd:38:7f:8b:79:b8:63:48:b5:15:
3b:ed:8b:ad:52:fd:a6:bf:e9:f4:d3:c1:64:ae:0e:31:84:14:
e5:1a:b6:fe:83:8d:45:a9:dd:aa:4c:47:3d:8f:4d:a9:ee:2a:
e4:64:71:7a:ad:28:0e:ca:5d:f9:35:d3:10:3a:1c:f8:6e:f3:
13:8c:88:c5:5e:2c:66:0c:f0:c4:c1:dd:ed:79:12:41:0b:34:
6c:b7:a6:4c:ad:ea:1c:95:e0:29:d8:6a:e0:61:5f:f7:e2:f9:
62:94:a5:7a:8a:db:a5:85:07:ef:42:a3:f1:db:2f:c6:a8:87:
ff:4b:30:5d:e9:5b:46:14:6f:52:6f:90:cb:c6:74:c1:6c:3f:
ab:b5:cb:5c:39:2b:2d:5a:b7:12:bc:86:ca:fc:4d:95:92:18:
8c:c3:90:37:ce:ef:a2:d0:d0:d5:d9:af:ab:e6:13:15:41:76:
36:d5:4d:42:55:58:b7:d3:46:20:de:b7:2b:04:be:46:a5:63:
6d:34:ac:e1:eb:a6:41:8f:8c:d8:5c:22:79:06:d0:34:c3:ee:
0f:67:55:2c
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZaF3FDywPa8mSodXEuwbMDFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjUwNDMwMDg0MjEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ODBiZjVhMDY0OGQ1YjU2ODBkYTAwYzcyOGE5YmJkODUyNDQ1MGUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0gHeSCTB5lQqAFrf3mbhvvXjTOIf
qk32XEJ8/nH8EFq5YhoGD617htdH47aO2vEGE5gr4dLtNcK5n7x5RlbC7SFj5NRi
L87NtJotapQ4EwFfBT/5WMtMiRtqj7I9QNqs0IcxvrPOZTPcFZB2KrokwC/4O6/k
HZ0+dcVuzY0I+Z1FxtEIx8hEN3N++mv9WEtZqpV0eNPJMpeP0/h9f1g98+acCoXE
eMPInnN4NtCRMGOU9zDHJA7sR4B8G3kBnP2V4R+jStPxIGJfvOvSyrW9HOpoM0oT
lwzfy6vUk8KF5wNsUAsOVmOxj1giJRIgV5Rj7PtiPTg8tS6jZ7A1kev7lwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFEgL9aBkjVtWgNoAxyipu9hSRFDjMB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvU0F2MW9HU05XMWFBMmdESEtLbTcyRkpFVU9NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAueZDAwQA
wkyoMA0GCSqGSIb3DQEBCwUAA4IBAQCeAp77jroDfzoqYKURq3NQc9mqOtN6tcf1
Zg4gJU756XcgzMGgxVoRs/ooAM04f4t5uGNItRU77YutUv2mv+n008Fkrg4xhBTl
Grb+g41Fqd2qTEc9j02p7irkZHF6rSgOyl35NdMQOhz4bvMTjIjFXixmDPDEwd3t
eRJBCzRst6ZMreocleAp2GrgYV/34vlilKV6itulhQfvQqPx2y/GqIf/SzBd6VtG
FG9Sb5DLxnTBbD+rtctcOSstWrcSvIbK/E2VkhiMw5A3zu+i0NDV2a+r5hMVQXY2
1U1CVVi300Yg3rcrBL5GpWNtNKzh66ZBj4zYXCJ5BtA0w+4PZ1Us
-----END CERTIFICATE-----
Generated at Mon May 5 21:58:57 2025 by rpki-client