Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/bb8727-78f7-401f-9339-e7ce26884be6/1/AhbInrBuBxUhLDDb6t4H_dnP0SQ.roa
File: AhbInrBuBxUhLDDb6t4H_dnP0SQ.roa (raw, json)
Hash identifier: LnUMs+GFvbcxwBQi1CgG4kL2ZNmGdakKt42fC58+8no=
Subject key identifier: 02:16:C8:9E:B0:6E:07:15:21:2C:30:DB:EA:DE:07:FD:D9:CF:D1:24
Certificate issuer: /CN=88ea5255f88d4b957189c142f8ac5681c50c68a6
Certificate serial: 0198328F9020AFD3214A2A924CC4F26232A9
Authority key identifier: 88:EA:52:55:F8:8D:4B:95:71:89:C1:42:F8:AC:56:81:C5:0C:68:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iOpSVfiNS5VxicFC-KxWgcUMaKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/bb8727-78f7-401f-9339-e7ce26884be6/1/AhbInrBuBxUhLDDb6t4H_dnP0SQ.roa
Signing time: Tue 22 Jul 2025 14:35:25 +0000
ROA not before: Tue 22 Jul 2025 14:35:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202787
IP address blocks: 185.137.8.0/24 maxlen: 24
185.137.9.0/24 maxlen: 24
185.137.10.0/24 maxlen: 24
185.137.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/bb8727-78f7-401f-9339-e7ce26884be6/1/iOpSVfiNS5VxicFC-KxWgcUMaKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/bb8727-78f7-401f-9339-e7ce26884be6/1/iOpSVfiNS5VxicFC-KxWgcUMaKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/iOpSVfiNS5VxicFC-KxWgcUMaKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:32:8f:90:20:af:d3:21:4a:2a:92:4c:c4:f2:62:32:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88ea5255f88d4b957189c142f8ac5681c50c68a6
Validity
Not Before: Jul 22 14:35:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0216c89eb06e0715212c30dbeade07fdd9cfd124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:95:c0:12:f6:5e:ee:fb:5f:0d:56:10:2c:90:
a7:d6:e7:b3:be:ca:b7:e8:67:c0:f0:e3:1e:c8:3a:
05:11:79:99:c4:1d:99:b9:4b:55:d2:e4:eb:3c:6c:
fa:8a:ec:68:4e:6f:85:6b:a1:3d:96:37:4f:fc:0f:
55:53:69:eb:75:3c:10:95:bf:6c:0e:b3:55:7e:cd:
9f:af:0d:af:1d:5a:eb:98:38:85:79:49:2f:80:5e:
8e:f6:c2:3a:aa:dd:66:bc:02:c4:ad:3f:63:a2:63:
de:0d:80:e6:f7:26:fe:bd:78:b1:29:53:81:d1:9e:
7b:8f:db:34:66:48:82:17:65:2f:66:86:dc:2e:ca:
ba:67:fd:73:11:14:5f:6e:e3:d4:53:a6:70:7d:a9:
0a:85:8c:01:ff:40:cf:e3:2c:f2:7a:e5:00:24:20:
b5:45:6f:7d:4c:d5:65:60:fb:0d:02:66:cd:97:58:
1e:70:b2:aa:0c:08:f1:ea:08:aa:9a:14:d5:e3:3f:
36:1a:08:c8:5b:48:a0:5e:aa:62:7f:ca:6a:21:16:
2e:b4:e2:1f:c2:56:af:d5:ad:a3:db:3a:94:27:1c:
ce:04:d0:c8:a1:83:8c:88:d5:ac:de:37:1e:ad:8e:
3b:db:09:b6:cf:12:5d:8b:93:32:e5:16:b1:9e:e1:
ee:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:16:C8:9E:B0:6E:07:15:21:2C:30:DB:EA:DE:07:FD:D9:CF:D1:24
X509v3 Authority Key Identifier:
keyid:88:EA:52:55:F8:8D:4B:95:71:89:C1:42:F8:AC:56:81:C5:0C:68:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iOpSVfiNS5VxicFC-KxWgcUMaKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/bb8727-78f7-401f-9339-e7ce26884be6/1/AhbInrBuBxUhLDDb6t4H_dnP0SQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/bb8727-78f7-401f-9339-e7ce26884be6/1/iOpSVfiNS5VxicFC-KxWgcUMaKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.137.8.0/22
Signature Algorithm: sha256WithRSAEncryption
a3:5e:c2:fc:8c:32:f3:4f:9e:1d:5c:2b:17:86:98:20:43:b3:
7c:19:af:c3:33:6a:f1:27:4f:79:45:d2:e4:be:16:42:2b:ee:
a2:6f:75:6c:56:5b:d1:98:36:52:9e:44:06:95:f5:f3:02:38:
fd:57:3f:0d:a3:81:65:3b:db:99:eb:8b:37:1f:37:7a:93:75:
61:da:82:55:d3:4a:5e:0f:12:d4:38:b6:f2:7c:4b:07:57:f6:
93:3d:37:83:e4:45:f0:0a:22:a1:f3:62:32:ff:7f:09:53:28:
8c:a3:be:a3:3c:d7:36:c1:7a:8c:67:78:cc:c9:50:b1:57:b0:
4b:f5:0d:cc:ec:33:18:78:b8:3f:8d:96:92:b5:36:3e:96:6b:
d8:09:dc:1d:4a:95:d4:c9:cf:77:a8:82:8c:9a:43:a5:95:6f:
83:46:e8:fe:8f:b3:7f:fd:40:9b:dc:54:be:65:7a:4c:39:37:
69:9a:01:d9:c4:b2:91:d5:7e:1d:de:71:f0:f6:7f:95:90:f7:
a2:bb:da:2c:60:54:13:91:d4:23:25:eb:62:6b:06:bc:3d:00:
b1:44:31:c8:b8:f1:5f:77:f5:07:b7:1c:c2:db:b8:f1:da:51:
92:9c:73:d0:2b:b4:2f:e1:9d:61:ed:0c:62:bf:01:93:24:c2:
61:5c:9e:6e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZgyj5Agr9MhSiqSTMTyYjKpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4ZWE1MjU1Zjg4ZDRiOTU3MTg5YzE0MmY4YWM1NjgxYzUw
YzY4YTYwHhcNMjUwNzIyMTQzNTI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMjE2Yzg5ZWIwNmUwNzE1MjEyYzMwZGJlYWRlMDdmZGQ5Y2ZkMTI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJXAEvZe7vtfDVYQLJCn1uezvsq3
6GfA8OMeyDoFEXmZxB2ZuUtV0uTrPGz6iuxoTm+Fa6E9ljdP/A9VU2nrdTwQlb9s
DrNVfs2frw2vHVrrmDiFeUkvgF6O9sI6qt1mvALErT9jomPeDYDm9yb+vXixKVOB
0Z57j9s0ZkiCF2UvZobcLsq6Z/1zERRfbuPUU6ZwfakKhYwB/0DP4yzyeuUAJCC1
RW99TNVlYPsNAmbNl1gecLKqDAjx6giqmhTV4z82GgjIW0igXqpif8pqIRYutOIf
wlav1a2j2zqUJxzOBNDIoYOMiNWs3jcerY472wm2zxJdi5My5RaxnuHufwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAIWyJ6wbgcVISww2+reB/3Zz9EkMB8GA1UdIwQY
MBaAFIjqUlX4jUuVcYnBQvisVoHFDGimMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaU9wU1ZmaU5TNVZ4aWNGQy1LeFdnY1VNYUtZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9iYjg3MjctNzhmNy00MDFmLTkzMzkt
ZTdjZTI2ODg0YmU2LzEvQWhiSW5yQnVCeFVoTEREYjZ0NEhfZG5QMFNRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS9iYjg3MjctNzhmNy00MDFmLTkzMzktZTdjZTI2ODg0YmU2
LzEvaU9wU1ZmaU5TNVZ4aWNGQy1LeFdnY1VNYUtZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuYkIMA0G
CSqGSIb3DQEBCwUAA4IBAQCjXsL8jDLzT54dXCsXhpggQ7N8Ga/DM2rxJ095RdLk
vhZCK+6ib3VsVlvRmDZSnkQGlfXzAjj9Vz8No4FlO9uZ64s3Hzd6k3Vh2oJV00pe
DxLUOLbyfEsHV/aTPTeD5EXwCiKh82Iy/38JUyiMo76jPNc2wXqMZ3jMyVCxV7BL
9Q3M7DMYeLg/jZaStTY+lmvYCdwdSpXUyc93qIKMmkOllW+DRuj+j7N//UCb3FS+
ZXpMOTdpmgHZxLKR1X4d3nHw9n+VkPeiu9osYFQTkdQjJetiawa8PQCxRDHIuPFf
d/UHtxzC27jx2lGSnHPQK7Qv4Z1h7QxivwGTJMJhXJ5u
-----END CERTIFICATE-----
Generated at Sat Aug 23 23:52:53 2025 by rpki-client