Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/t65dNvZ6mIPWzEgYcMlAUQutKR4.roa
File: t65dNvZ6mIPWzEgYcMlAUQutKR4.roa (raw, json)
Hash identifier: IJP/pC4d01Se7R3R057e96hfMZC2OpsCJpYV3fv+Wfw=
Subject key identifier: B7:AE:5D:36:F6:7A:98:83:D6:CC:48:18:70:C9:40:51:0B:AD:29:1E
Certificate issuer: /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Certificate serial: 0197542F0800843CDB121395A7C69B19DFF4
Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/t65dNvZ6mIPWzEgYcMlAUQutKR4.roa
Signing time: Mon 09 Jun 2025 10:14:17 +0000
ROA not before: Mon 09 Jun 2025 10:14:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214738
IP address blocks: 185.118.79.0/24 maxlen: 24
213.21.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:2f:08:00:84:3c:db:12:13:95:a7:c6:9b:19:df:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Validity
Not Before: Jun 9 10:14:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b7ae5d36f67a9883d6cc481870c940510bad291e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f6:42:d5:bd:9a:8a:ba:b9:e2:16:19:23:72:
67:2f:0a:65:22:ce:1f:af:84:ce:1e:6d:85:a1:47:
5e:0a:8e:a8:3e:7c:7a:1f:e9:e8:71:3f:c1:5a:39:
72:3f:6d:e9:ea:df:dd:26:7b:7e:53:0e:df:4c:01:
37:4d:bb:a9:6e:8e:dc:c8:32:aa:a0:e9:10:12:fd:
3f:69:cd:af:72:1a:fa:4b:3a:4a:c2:4f:c7:e4:2f:
6f:e5:6c:70:d6:8b:34:b5:a6:fa:46:ec:ff:13:c9:
c3:ac:43:8a:6f:69:cd:5f:42:e3:7d:69:34:6d:bd:
e4:31:a0:05:11:51:25:13:d2:67:81:01:66:7e:63:
49:ae:a1:71:80:0f:5f:2b:78:54:d5:e7:f3:2f:4c:
23:5e:8c:34:24:95:c0:15:05:5a:f0:7f:46:d4:3d:
70:95:3c:7f:d9:df:45:04:20:13:8d:f1:34:a0:c0:
96:05:37:4a:ee:af:e0:0d:4b:b2:cc:8e:ce:39:5a:
49:ed:ef:1c:3f:f2:59:9d:2b:74:cf:58:2f:de:3c:
76:c5:bf:22:17:92:93:89:f7:08:1e:5a:06:4d:0a:
6c:24:64:bb:be:e1:cb:65:0e:07:60:b5:66:10:2c:
90:09:4d:e7:e0:30:34:c6:1a:3e:eb:83:8b:c4:4a:
09:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:AE:5D:36:F6:7A:98:83:D6:CC:48:18:70:C9:40:51:0B:AD:29:1E
X509v3 Authority Key Identifier:
keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/t65dNvZ6mIPWzEgYcMlAUQutKR4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.118.79.0/24
213.21.232.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:34:e3:15:72:d7:37:8c:1c:41:60:8a:a8:ae:c7:c8:c4:04:
3c:03:bc:cf:a0:11:d8:ba:22:2b:5a:b6:30:8e:fb:9c:f1:90:
4a:6c:77:77:da:f5:73:a8:bf:86:a5:69:a8:2b:70:4a:f9:72:
74:e3:3f:12:98:35:1c:7d:c1:bb:70:e8:ac:f1:ff:06:8b:1b:
83:7c:cd:2a:03:65:bc:f9:ca:d2:77:53:d2:b7:d3:6d:70:b1:
7a:47:2c:47:e2:5c:fb:8e:35:3e:21:9f:f5:e5:6a:09:c9:70:
30:77:84:e4:12:64:14:94:9f:01:5d:d3:02:90:e0:d2:87:9f:
f9:20:9a:3d:54:a9:00:a8:3d:ed:e3:ab:5a:62:0b:9c:15:8c:
2f:33:42:c0:71:8e:cd:79:c2:30:3f:48:1d:de:89:6a:a6:93:
98:68:19:8e:d7:b8:35:19:db:47:6b:15:ef:d1:4f:06:86:8a:
0a:34:cc:0a:29:a3:c8:33:4c:9b:65:f6:40:4c:a3:3e:a0:8b:
01:2c:69:a3:d1:0b:78:09:c2:31:42:ee:fc:de:1b:0c:09:2d:
0f:59:d7:da:09:3b:f6:b4:b3:dc:a4:28:f3:30:62:2b:ed:ed:
c0:71:59:8e:df:f7:76:7d:8e:dd:62:18:19:73:97:87:6e:6c:
26:fa:42:38
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZdULwgAhDzbEhOVp8abGd/0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjZmRmZTZkY2E4YWM3YmZhMWE5NDUwZWY5OWZkMzE1ZWQw
MmFjZDkwHhcNMjUwNjA5MTAxNDE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiN2FlNWQzNmY2N2E5ODgzZDZjYzQ4MTg3MGM5NDA1MTBiYWQyOTFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPZC1b2airq54hYZI3JnLwplIs4f
r4TOHm2FoUdeCo6oPnx6H+nocT/BWjlyP23p6t/dJnt+Uw7fTAE3Tbupbo7cyDKq
oOkQEv0/ac2vchr6SzpKwk/H5C9v5Wxw1os0tab6Ruz/E8nDrEOKb2nNX0LjfWk0
bb3kMaAFEVElE9JngQFmfmNJrqFxgA9fK3hU1efzL0wjXow0JJXAFQVa8H9G1D1w
lTx/2d9FBCATjfE0oMCWBTdK7q/gDUuyzI7OOVpJ7e8cP/JZnSt0z1gv3jx2xb8i
F5KTifcIHloGTQpsJGS7vuHLZQ4HYLVmECyQCU3n4DA0xho+64OLxEoJmQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLeuXTb2epiD1sxIGHDJQFELrSkeMB8GA1UdIwQY
MBaAFLz9/m3Kise/oalFDvmf0xXtAqzZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9jOWRlMTMtNWI3NC00MTNkLWIyZmIt
MWFmMjQ2NWE4ZWVjLzEvdDY1ZE52WjZtSVBXekVnWWNNbEFVUXV0S1I0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9jOWRlMTMtNWI3NC00MTNkLWIyZmItMWFmMjQ2NWE4ZWVj
LzEvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuXZPAwQA
1RXoMA0GCSqGSIb3DQEBCwUAA4IBAQBaNOMVctc3jBxBYIqorsfIxAQ8A7zPoBHY
uiIrWrYwjvuc8ZBKbHd32vVzqL+GpWmoK3BK+XJ04z8SmDUcfcG7cOis8f8GixuD
fM0qA2W8+crSd1PSt9NtcLF6RyxH4lz7jjU+IZ/15WoJyXAwd4TkEmQUlJ8BXdMC
kODSh5/5IJo9VKkAqD3t46taYgucFYwvM0LAcY7NecIwP0gd3olqppOYaBmO17g1
GdtHaxXv0U8GhooKNMwKKaPIM0ybZfZATKM+oIsBLGmj0Qt4CcIxQu783hsMCS0P
WdfaCTv2tLPcpCjzMGIr7e3AcVmO3/d2fY7dYhgZc5eHbmwm+kI4
-----END CERTIFICATE-----
Generated at Sun Jun 29 03:10:32 2025 by rpki-client