Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/bcf167-b618-48d3-9a4e-d7b6063dca37/1/e_eTwiNNMcQ4o0jzDx1xFsQsG94.roa
File: e_eTwiNNMcQ4o0jzDx1xFsQsG94.roa (raw, json)
Hash identifier: seoVMpKmPgqnMRcR+q+n2pzafdcrF6s2SXMZuzyjNMM=
Subject key identifier: 7B:F7:93:C2:23:4D:31:C4:38:A3:48:F3:0F:1D:71:16:C4:2C:1B:DE
Certificate issuer: /CN=ae52db82090b343f89f7c637cf41a94bcfd4346a
Certificate serial: 0199E409E88CBAA79A37A9479992C04408EE
Authority key identifier: AE:52:DB:82:09:0B:34:3F:89:F7:C6:37:CF:41:A9:4B:CF:D4:34:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rlLbggkLND-J98Y3z0GpS8_UNGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/bcf167-b618-48d3-9a4e-d7b6063dca37/1/e_eTwiNNMcQ4o0jzDx1xFsQsG94.roa
Signing time: Tue 14 Oct 2025 18:44:38 +0000
ROA not before: Tue 14 Oct 2025 18:44:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34674
IP address blocks: 128.140.176.0/21 maxlen: 21
128.140.176.0/22 maxlen: 22
128.140.176.0/23 maxlen: 23
128.140.178.0/23 maxlen: 23
128.140.180.0/22 maxlen: 22
128.140.180.0/23 maxlen: 23
128.140.182.0/23 maxlen: 23
128.140.184.0/23 maxlen: 23
128.140.184.0/24 maxlen: 24
128.140.185.0/24 maxlen: 24
185.184.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/bcf167-b618-48d3-9a4e-d7b6063dca37/1/rlLbggkLND-J98Y3z0GpS8_UNGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/bcf167-b618-48d3-9a4e-d7b6063dca37/1/rlLbggkLND-J98Y3z0GpS8_UNGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/rlLbggkLND-J98Y3z0GpS8_UNGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e4:09:e8:8c:ba:a7:9a:37:a9:47:99:92:c0:44:08:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae52db82090b343f89f7c637cf41a94bcfd4346a
Validity
Not Before: Oct 14 18:44:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7bf793c2234d31c438a348f30f1d7116c42c1bde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:46:ee:1d:46:f0:46:dd:09:49:8b:bd:d4:43:
2c:14:b7:30:44:ce:b1:b8:60:4c:62:2e:78:31:1e:
14:d9:7d:24:c2:73:ad:41:e8:57:c3:8c:a0:85:78:
ec:36:50:57:23:fd:b6:63:61:ff:23:2f:5f:ee:de:
0b:28:62:ba:a8:21:1e:90:6c:a6:1f:ed:cf:85:d3:
21:3e:7d:86:74:5a:d7:f3:ee:1c:d3:1b:cf:1c:da:
fd:2c:12:f6:6a:c6:84:42:db:7a:82:3a:e7:c7:24:
20:1b:f6:df:a9:29:18:3d:78:b0:15:af:f3:6c:8c:
08:46:28:61:be:06:d0:ab:bc:42:7f:0c:63:94:42:
e1:f0:fc:bf:53:9c:bf:fa:bc:e2:29:08:d3:4e:dc:
a6:80:b5:6b:e0:97:05:00:f3:85:c4:d4:a5:0f:f3:
2d:94:7b:82:f3:b7:f1:6a:70:57:a6:ee:fa:05:d2:
46:cf:74:94:69:95:d0:19:69:6a:cd:f6:90:6c:1d:
e0:1f:a4:d0:90:34:90:cf:e2:43:dd:18:1d:af:47:
54:bf:34:bd:ad:60:06:ad:14:de:11:71:58:40:4a:
b8:95:0b:10:54:95:33:45:a1:45:be:8b:99:21:67:
0a:29:76:a0:18:3f:b0:f0:90:b7:e0:ff:7d:88:9e:
1e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:F7:93:C2:23:4D:31:C4:38:A3:48:F3:0F:1D:71:16:C4:2C:1B:DE
X509v3 Authority Key Identifier:
keyid:AE:52:DB:82:09:0B:34:3F:89:F7:C6:37:CF:41:A9:4B:CF:D4:34:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rlLbggkLND-J98Y3z0GpS8_UNGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/bcf167-b618-48d3-9a4e-d7b6063dca37/1/e_eTwiNNMcQ4o0jzDx1xFsQsG94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/bcf167-b618-48d3-9a4e-d7b6063dca37/1/rlLbggkLND-J98Y3z0GpS8_UNGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.140.176.0-128.140.185.255
185.184.60.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:53:2a:55:8e:68:b9:43:5b:30:d2:c8:32:18:34:9c:a8:e9:
23:56:36:24:39:12:1a:c9:b2:92:5b:8c:41:86:c6:3d:8c:c6:
65:4a:6a:2c:14:12:42:48:7c:48:7c:87:dd:3e:3b:53:09:70:
57:af:83:6c:1d:a0:14:a6:59:4b:ad:ab:5f:d2:29:5d:a1:4b:
cd:31:96:29:ca:a9:ba:4c:3d:08:ed:bd:7d:43:5a:2a:90:36:
85:ab:f2:99:75:c5:36:5a:ff:85:6d:15:26:65:ab:ef:f7:aa:
55:b2:22:bc:0a:97:85:01:aa:50:2e:dc:8e:53:70:ae:b7:67:
50:79:e3:7b:5f:d7:97:c1:74:17:68:5c:d4:40:fd:88:43:38:
ac:4b:89:c0:e7:8b:a8:5d:92:16:94:fd:12:93:97:eb:ff:0f:
81:76:9d:58:b2:65:a3:6f:be:d2:16:c3:c6:6e:21:8b:8f:23:
b7:d8:09:c5:38:7b:ac:58:e1:f6:05:2d:06:c3:95:e2:74:13:
62:b5:30:c8:74:ec:e5:1f:7b:fa:db:a1:1c:48:8e:b3:4c:04:
66:7c:52:61:f8:06:4c:1a:74:e6:68:3e:6d:47:63:5b:43:56:
5e:d7:47:ae:a4:1e:b3:70:f7:a5:7e:7f:67:30:c2:22:86:16:
d8:f0:00:4d
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAZnkCeiMuqeaN6lHmZLARAjuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlNTJkYjgyMDkwYjM0M2Y4OWY3YzYzN2NmNDFhOTRiY2Zk
NDM0NmEwHhcNMjUxMDE0MTg0NDM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YmY3OTNjMjIzNGQzMWM0MzhhMzQ4ZjMwZjFkNzExNmM0MmMxYmRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4EbuHUbwRt0JSYu91EMsFLcwRM6x
uGBMYi54MR4U2X0kwnOtQehXw4yghXjsNlBXI/22Y2H/Iy9f7t4LKGK6qCEekGym
H+3PhdMhPn2GdFrX8+4c0xvPHNr9LBL2asaEQtt6gjrnxyQgG/bfqSkYPXiwFa/z
bIwIRihhvgbQq7xCfwxjlELh8Py/U5y/+rziKQjTTtymgLVr4JcFAPOFxNSlD/Mt
lHuC87fxanBXpu76BdJGz3SUaZXQGWlqzfaQbB3gH6TQkDSQz+JD3Rgdr0dUvzS9
rWAGrRTeEXFYQEq4lQsQVJUzRaFFvouZIWcKKXagGD+w8JC34P99iJ4e7QIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFHv3k8IjTTHEOKNI8w8dcRbELBveMB8GA1UdIwQY
MBaAFK5S24IJCzQ/iffGN89BqUvP1DRqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmxMYmdna0xORC1KOThZM3owR3BTOF9VTkdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9iY2YxNjctYjYxOC00OGQzLTlhNGUt
ZDdiNjA2M2RjYTM3LzEvZV9lVHdpTk5NY1E0bzBqekR4MXhGc1FzRzk0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9iY2YxNjctYjYxOC00OGQzLTlhNGUtZDdiNjA2M2RjYTM3
LzEvcmxMYmdna0xORC1KOThZM3owR3BTOF9VTkdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBASAjLAD
BAGAjLgDBAC5uDwwDQYJKoZIhvcNAQELBQADggEBALJTKlWOaLlDWzDSyDIYNJyo
6SNWNiQ5EhrJspJbjEGGxj2MxmVKaiwUEkJIfEh8h90+O1MJcFevg2wdoBSmWUut
q1/SKV2hS80xlinKqbpMPQjtvX1DWiqQNoWr8pl1xTZa/4VtFSZlq+/3qlWyIrwK
l4UBqlAu3I5TcK63Z1B543tf15fBdBdoXNRA/YhDOKxLicDni6hdkhaU/RKTl+v/
D4F2nViyZaNvvtIWw8ZuIYuPI7fYCcU4e6xY4fYFLQbDleJ0E2K1MMh07OUfe/rb
oRxIjrNMBGZ8UmH4BkwadOZoPm1HY1tDVl7XR66kHrNw96V+f2cwwiKGFtjwAE0=
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:36:09 2025 by rpki-client