Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/c22a3e-fcdb-4a71-8976-00a549e1b1d7/1/41DTuek1VatXKqyOZ16zPIzA15c.roa
File: 41DTuek1VatXKqyOZ16zPIzA15c.roa (raw, json)
Hash identifier: xDUrI4pP1nTL2y1WCMAWoY6BskvJrsSqrtvmAaoQnEQ=
Subject key identifier: E3:50:D3:B9:E9:35:55:AB:57:2A:AC:8E:67:5E:B3:3C:8C:C0:D7:97
Certificate issuer: /CN=51da3d32597b5051932f6ca9182d4b9a2fb05b56
Certificate serial: 01997ADDDA466DE5DAD7BD8ACF936803AE90
Authority key identifier: 51:DA:3D:32:59:7B:50:51:93:2F:6C:A9:18:2D:4B:9A:2F:B0:5B:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Udo9Mll7UFGTL2ypGC1Lmi-wW1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/c22a3e-fcdb-4a71-8976-00a549e1b1d7/1/41DTuek1VatXKqyOZ16zPIzA15c.roa
Signing time: Wed 24 Sep 2025 08:36:23 +0000
ROA not before: Wed 24 Sep 2025 08:36:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20509
IP address blocks: 193.178.232.0/23 maxlen: 23
193.178.232.0/24 maxlen: 24
193.178.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/c22a3e-fcdb-4a71-8976-00a549e1b1d7/1/Udo9Mll7UFGTL2ypGC1Lmi-wW1Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/c22a3e-fcdb-4a71-8976-00a549e1b1d7/1/Udo9Mll7UFGTL2ypGC1Lmi-wW1Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/Udo9Mll7UFGTL2ypGC1Lmi-wW1Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:7a:dd:da:46:6d:e5:da:d7:bd:8a:cf:93:68:03:ae:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51da3d32597b5051932f6ca9182d4b9a2fb05b56
Validity
Not Before: Sep 24 08:36:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e350d3b9e93555ab572aac8e675eb33c8cc0d797
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:64:18:84:01:6d:99:62:92:d0:97:4e:e9:13:
71:b3:64:cc:9e:da:8f:78:19:52:52:f5:40:37:96:
d2:61:33:ee:ed:b8:57:81:d9:d9:41:e8:78:54:89:
2e:b8:df:b4:f4:3a:48:b5:16:08:1f:18:d3:a5:39:
97:e9:bf:a5:a0:be:57:7e:94:2b:42:cd:48:31:0c:
fc:0d:70:93:5f:f0:4a:55:ec:1d:87:a1:b6:9e:ee:
24:e1:5c:a5:0f:09:5a:e0:ee:67:66:29:cc:3e:31:
a8:37:ef:19:67:f2:b7:38:95:b7:49:73:65:6a:21:
9f:c5:ea:d6:cb:29:16:42:df:bf:bd:92:fd:87:33:
db:62:0b:db:3d:cf:29:cd:cf:3b:e9:11:98:b0:c7:
59:60:1d:d0:30:81:37:da:c7:84:91:36:4f:6e:5b:
41:9e:f1:e2:15:86:43:29:45:bc:73:21:47:b6:73:
21:f5:2e:bd:60:80:f6:61:aa:61:7c:70:b8:c4:ab:
3a:cd:55:76:7c:5e:6a:19:47:a3:3c:5b:b6:6d:21:
7c:09:d5:70:12:42:c4:5f:04:b9:a6:b3:11:3d:92:
9e:32:58:f2:26:95:60:e0:5e:7e:e7:92:7a:88:82:
77:79:6d:79:50:86:57:20:de:7b:25:f2:03:0f:c4:
28:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:50:D3:B9:E9:35:55:AB:57:2A:AC:8E:67:5E:B3:3C:8C:C0:D7:97
X509v3 Authority Key Identifier:
keyid:51:DA:3D:32:59:7B:50:51:93:2F:6C:A9:18:2D:4B:9A:2F:B0:5B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Udo9Mll7UFGTL2ypGC1Lmi-wW1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c22a3e-fcdb-4a71-8976-00a549e1b1d7/1/41DTuek1VatXKqyOZ16zPIzA15c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c22a3e-fcdb-4a71-8976-00a549e1b1d7/1/Udo9Mll7UFGTL2ypGC1Lmi-wW1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.178.232.0/23
Signature Algorithm: sha256WithRSAEncryption
21:94:fc:40:6e:f2:15:cf:f6:71:9e:3c:11:58:ee:36:61:4c:
d3:67:1f:36:d1:02:82:68:85:e3:71:b1:87:86:ba:0c:6b:7c:
be:ee:ed:34:b2:21:7d:48:69:b6:b3:f0:79:79:db:a4:94:0c:
74:b6:dc:90:e6:fe:f2:63:63:8c:7a:42:4b:6b:8c:a4:48:0b:
42:24:72:58:58:97:5e:cf:b0:d2:63:c5:a9:50:a5:9e:0c:da:
51:ee:c6:5e:1d:21:d2:29:50:19:39:36:e5:29:b0:83:14:94:
65:9b:d8:39:d7:1f:af:5d:e1:43:28:ee:a6:8a:3c:42:2c:5d:
d7:83:c6:80:69:39:b8:66:ed:c3:e9:f7:01:1e:a6:f4:22:b2:
6d:2f:26:31:78:db:57:bc:01:38:37:f0:de:7d:49:36:b2:f9:
79:80:8e:78:f9:a4:98:be:e7:70:ba:63:14:75:eb:95:5b:df:
39:3c:c6:9f:69:3a:d6:1c:a4:46:4f:bf:fc:50:ec:86:70:8d:
5c:f9:b6:30:36:dc:d6:d7:15:4a:b5:ef:17:7e:c4:66:dc:99:
f0:89:4b:24:c3:0c:49:64:f6:eb:e6:e8:6b:1d:d7:b7:22:13:
b2:c9:4e:f7:4f:e2:cb:d7:5c:a0:25:a2:53:fe:7f:7c:6e:29:
69:92:52:be
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZl63dpGbeXa172Kz5NoA66QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxZGEzZDMyNTk3YjUwNTE5MzJmNmNhOTE4MmQ0YjlhMmZi
MDViNTYwHhcNMjUwOTI0MDgzNjIzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMzUwZDNiOWU5MzU1NWFiNTcyYWFjOGU2NzVlYjMzYzhjYzBkNzk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2QYhAFtmWKS0JdO6RNxs2TMntqP
eBlSUvVAN5bSYTPu7bhXgdnZQeh4VIkuuN+09DpItRYIHxjTpTmX6b+loL5XfpQr
Qs1IMQz8DXCTX/BKVewdh6G2nu4k4VylDwla4O5nZinMPjGoN+8ZZ/K3OJW3SXNl
aiGfxerWyykWQt+/vZL9hzPbYgvbPc8pzc876RGYsMdZYB3QMIE32seEkTZPbltB
nvHiFYZDKUW8cyFHtnMh9S69YID2YaphfHC4xKs6zVV2fF5qGUejPFu2bSF8CdVw
EkLEXwS5prMRPZKeMljyJpVg4F5+55J6iIJ3eW15UIZXIN57JfIDD8QoSQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFONQ07npNVWrVyqsjmdeszyMwNeXMB8GA1UdIwQY
MBaAFFHaPTJZe1BRky9sqRgtS5ovsFtWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWRvOU1sbDdVRkdUTDJ5cEdDMUxtaS13VzFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9jMjJhM2UtZmNkYi00YTcxLTg5NzYt
MDBhNTQ5ZTFiMWQ3LzEvNDFEVHVlazFWYXRYS3F5T1oxNnpQSXpBMTVjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9jMjJhM2UtZmNkYi00YTcxLTg5NzYtMDBhNTQ5ZTFiMWQ3
LzEvVWRvOU1sbDdVRkdUTDJ5cEdDMUxtaS13VzFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwbLoMA0G
CSqGSIb3DQEBCwUAA4IBAQAhlPxAbvIVz/ZxnjwRWO42YUzTZx820QKCaIXjcbGH
hroMa3y+7u00siF9SGm2s/B5eduklAx0ttyQ5v7yY2OMekJLa4ykSAtCJHJYWJde
z7DSY8WpUKWeDNpR7sZeHSHSKVAZOTblKbCDFJRlm9g51x+vXeFDKO6mijxCLF3X
g8aAaTm4Zu3D6fcBHqb0IrJtLyYxeNtXvAE4N/DefUk2svl5gI54+aSYvudwumMU
deuVW985PMafaTrWHKRGT7/8UOyGcI1c+bYwNtzW1xVKte8XfsRm3JnwiUskwwxJ
ZPbr5uhrHde3IhOyyU73T+LL11ygJaJT/n98bilpklK+
-----END CERTIFICATE-----
Generated at Mon Oct 20 03:18:15 2025 by rpki-client