Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/4F0KJtFXRU3fkugT-OafG-85Iaw.roa
File: 4F0KJtFXRU3fkugT-OafG-85Iaw.roa (raw, json)
Hash identifier: Cm6BlMCjwcC260JqpRt6qpSEAwf360RpgzlbjNm7EnI=
Subject key identifier: E0:5D:0A:26:D1:57:45:4D:DF:92:E8:13:F8:E6:9F:1B:EF:39:21:AC
Certificate issuer: /CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
Certificate serial: 0198CD59155C620FBD07FD57A1A0D97BF528
Authority key identifier: 92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/4F0KJtFXRU3fkugT-OafG-85Iaw.roa
Signing time: Thu 21 Aug 2025 15:57:04 +0000
ROA not before: Thu 21 Aug 2025 15:57:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214922
IP address blocks: 87.236.208.0/24 maxlen: 24
2a03:9381:1::/48 maxlen: 48
2a03:9381:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:cd:59:15:5c:62:0f:bd:07:fd:57:a1:a0:d9:7b:f5:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
Validity
Not Before: Aug 21 15:57:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e05d0a26d157454ddf92e813f8e69f1bef3921ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:88:2c:cf:3a:59:23:41:a2:80:55:3a:39:4b:
6f:71:bb:6e:a8:bc:91:28:42:d9:cd:ae:b7:15:63:
df:8d:c0:50:04:06:71:e4:d0:24:c7:7d:4c:b7:c7:
ed:b3:8e:40:61:62:33:66:9a:52:0b:8c:3c:9d:1a:
12:69:06:b9:50:33:8a:ae:b8:25:55:4e:16:fc:02:
e8:44:5c:2c:50:c4:17:3e:61:56:13:07:e7:5f:b9:
e6:5a:5d:45:a9:d8:d7:f3:6b:32:c3:f7:24:b6:3f:
b6:11:f7:50:86:40:c6:69:2a:dc:eb:fd:63:6a:b2:
5e:47:94:dd:f6:df:dd:d1:10:ba:a1:bf:84:01:cf:
d0:b3:28:ec:82:ab:f6:19:44:04:07:33:d5:5d:57:
2e:c4:4c:7b:b7:19:c2:58:cc:d0:02:93:e2:e1:a5:
e6:51:62:2f:b7:ec:16:a2:5e:14:3c:3b:7a:55:9b:
8d:17:d0:b5:66:8c:e5:a6:0c:2a:07:ef:a5:d3:3a:
a7:7a:f9:54:19:b7:3b:b0:00:49:4d:8e:3f:6b:8a:
ce:21:01:bc:84:b2:3f:71:44:65:ab:32:2d:73:69:
e4:25:8a:8c:c9:ff:75:ce:4c:03:e9:cc:f8:59:f8:
09:90:e7:8a:42:e4:9c:91:c9:b7:49:28:ba:5a:10:
c6:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:5D:0A:26:D1:57:45:4D:DF:92:E8:13:F8:E6:9F:1B:EF:39:21:AC
X509v3 Authority Key Identifier:
keyid:92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/4F0KJtFXRU3fkugT-OafG-85Iaw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.236.208.0/24
IPv6:
2a03:9381:1::-2a03:9381:2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
72:65:c7:6d:29:0a:17:e7:28:ce:73:a5:86:ef:a5:28:bc:90:
0c:f1:98:a0:30:72:a1:ad:9d:4f:0d:0a:f4:53:b5:c4:61:11:
bc:69:c1:5e:36:15:ae:a6:8c:56:b3:e4:50:39:2e:76:ba:f0:
05:21:69:0d:23:e1:6d:90:d0:0a:0f:3e:84:88:a4:6b:b5:da:
b6:e0:15:99:89:6d:9b:66:ea:a8:19:98:4e:16:61:2d:4a:13:
d8:da:84:6b:98:48:7b:46:ce:d1:42:b7:11:72:08:66:0c:79:
76:c2:78:9a:d6:82:82:55:67:c5:18:28:a7:9e:68:9c:ba:66:
20:66:e8:38:0b:36:f6:7d:13:11:f4:83:7a:3d:53:d5:ac:74:
2d:d2:3f:c3:b6:c2:b3:60:b9:d3:10:c9:ca:f0:7f:a1:3a:44:
fc:47:d5:8a:03:a9:ff:92:56:42:46:7b:c2:e6:51:0c:b5:f0:
8b:93:35:b3:a6:b8:24:06:fa:60:09:38:0c:80:23:a4:7e:fc:
28:0c:25:f4:93:2a:60:4c:76:cf:e4:49:3e:3b:31:5f:60:fd:
05:78:b3:17:7d:06:6d:12:0a:68:4f:33:95:cf:f4:a5:ab:23:
03:0c:8c:97:e6:1f:23:68:cb:68:a5:24:90:73:89:a0:78:3c:
c5:e4:94:fa
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZjNWRVcYg+9B/1XoaDZe/UoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyYmY2NDY0Y2U2ZTE5YTRkY2Y4YTMyYjI3YTJmMWNiZTE1
NTEwNTUwHhcNMjUwODIxMTU1NzA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMDVkMGEyNmQxNTc0NTRkZGY5MmU4MTNmOGU2OWYxYmVmMzkyMWFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0IgszzpZI0GigFU6OUtvcbtuqLyR
KELZza63FWPfjcBQBAZx5NAkx31Mt8fts45AYWIzZppSC4w8nRoSaQa5UDOKrrgl
VU4W/ALoRFwsUMQXPmFWEwfnX7nmWl1FqdjX82syw/cktj+2EfdQhkDGaSrc6/1j
arJeR5Td9t/d0RC6ob+EAc/Qsyjsgqv2GUQEBzPVXVcuxEx7txnCWMzQApPi4aXm
UWIvt+wWol4UPDt6VZuNF9C1ZozlpgwqB++l0zqnevlUGbc7sABJTY4/a4rOIQG8
hLI/cURlqzItc2nkJYqMyf91zkwD6cz4WfgJkOeKQuSckcm3SSi6WhDGVQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFOBdCibRV0VN35LoE/jmnxvvOSGsMB8GA1UdIwQY
MBaAFJK/ZGTObhmk3PijKyei8cvhVRBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3I5a1pNNXVHYVRjLUtNcko2THh5LUZWRUZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9mMWQ2OTctYmM4ZS00ZjE0LThiMzct
YjUzZTMwZTE0MTJhLzEvNEYwS0p0RlhSVTNma3VnVC1PYWZHLTg1SWF3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy9mMWQ2OTctYmM4ZS00ZjE0LThiMzctYjUzZTMwZTE0MTJh
LzEva3I5a1pNNXVHYVRjLUtNcko2THh5LUZWRUZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAMBAIAATAGAwQAV+zQMBoE
AgACMBQwEgMHACoDk4EAAQMHACoDk4EAAjANBgkqhkiG9w0BAQsFAAOCAQEAcmXH
bSkKF+coznOlhu+lKLyQDPGYoDByoa2dTw0K9FO1xGERvGnBXjYVrqaMVrPkUDku
drrwBSFpDSPhbZDQCg8+hIika7XatuAVmYltm2bqqBmYThZhLUoT2NqEa5hIe0bO
0UK3EXIIZgx5dsJ4mtaCglVnxRgop55onLpmIGboOAs29n0TEfSDej1T1ax0LdI/
w7bCs2C50xDJyvB/oTpE/EfVigOp/5JWQkZ7wuZRDLXwi5M1s6a4JAb6YAk4DIAj
pH78KAwl9JMqYEx2z+RJPjsxX2D9BXizF30GbRIKaE8zlc/0pasjAwyMl+YfI2jL
aKUkkHOJoHg8xeSU+g==
-----END CERTIFICATE-----
Generated at Sat Aug 23 16:11:44 2025 by rpki-client