Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/1VXvbDpj35hpaFQZ8UXzXybD-bg.roa
File: 1VXvbDpj35hpaFQZ8UXzXybD-bg.roa (raw, json)
Hash identifier: ilxkB+Px1Xt9GikiES31bq5CQR5LG9QlAhVrMmrXVW4=
Subject key identifier: D5:55:EF:6C:3A:63:DF:98:69:68:54:19:F1:45:F3:5F:26:C3:F9:B8
Certificate issuer: /CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
Certificate serial: 0197A2058CC83A71643F8AC1C55B68D91F18
Authority key identifier: 67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/1VXvbDpj35hpaFQZ8UXzXybD-bg.roa
Signing time: Tue 24 Jun 2025 12:59:22 +0000
ROA not before: Tue 24 Jun 2025 12:59:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210512
IP address blocks: 91.195.125.0/24 maxlen: 24
91.229.112.0/23 maxlen: 23
193.9.17.0/24 maxlen: 24
213.108.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 16:57:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:a2:05:8c:c8:3a:71:64:3f:8a:c1:c5:5b:68:d9:1f:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
Validity
Not Before: Jun 24 12:59:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d555ef6c3a63df9869685419f145f35f26c3f9b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:20:1a:ea:16:ee:66:10:17:65:25:01:11:96:
5b:46:d5:be:fb:28:91:a8:48:15:6c:11:e3:e9:6a:
b0:7f:a4:11:8f:dd:31:e3:e9:bd:74:ef:6d:a6:b5:
46:57:47:f1:8f:4f:63:55:ca:4a:30:c1:e3:85:c6:
47:06:e7:ae:8d:e8:4b:bd:a2:33:ba:4e:c3:6c:a9:
27:0e:f5:2a:69:0c:a9:6d:dc:55:82:07:de:30:b4:
07:5d:34:6b:fb:df:f7:9e:b7:30:e1:4b:6d:7d:00:
c1:c3:ad:32:5c:3d:a5:6f:ea:fd:0d:d9:60:f7:78:
5c:95:f8:6b:1e:08:a3:93:51:2c:a6:14:c5:7a:58:
46:0c:a6:ec:0d:3f:d9:1d:cc:47:5d:f2:53:02:22:
ad:be:66:10:88:3d:ad:1c:1d:27:c3:df:d5:a2:0b:
b2:67:8e:c2:cb:2f:f5:c3:1e:a1:19:f8:d9:37:f8:
26:07:03:74:ef:f1:53:78:e4:6b:77:73:37:9d:26:
92:31:92:51:14:2c:97:67:22:5d:e1:69:36:1b:a1:
2a:73:a7:c9:d0:de:ea:f9:b2:9b:04:ef:32:a4:1f:
0e:3f:7f:27:b2:00:0f:18:52:33:ce:c9:fa:2c:f3:
84:e4:90:cc:9e:3a:5d:43:d3:e0:2c:8f:04:f1:06:
ab:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:55:EF:6C:3A:63:DF:98:69:68:54:19:F1:45:F3:5F:26:C3:F9:B8
X509v3 Authority Key Identifier:
keyid:67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/1VXvbDpj35hpaFQZ8UXzXybD-bg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.195.125.0/24
91.229.112.0/23
193.9.17.0/24
213.108.133.0/24
Signature Algorithm: sha256WithRSAEncryption
15:5d:53:7a:6c:13:c1:23:df:5b:6c:f1:8b:87:36:8e:f7:00:
6e:dd:b9:e3:5b:23:05:bf:66:30:7a:19:ca:53:71:60:12:be:
c9:a4:71:b4:6f:78:92:a2:e4:b8:95:e9:da:dd:63:e8:1a:12:
b3:6a:36:51:f2:ab:38:37:b4:82:d5:9c:1f:e5:3e:14:f8:3f:
ee:5d:1c:cb:ec:c2:03:2c:5b:33:58:ee:f5:10:e5:6c:80:db:
92:a6:5e:52:f4:b1:e8:bb:ac:e1:7a:33:a6:8f:b0:c5:6f:6e:
ab:56:fd:13:b9:82:31:52:a3:f2:5a:18:e1:45:85:16:e9:13:
db:39:c2:6a:84:48:77:b9:ed:c7:87:4f:81:82:3b:77:58:23:
8b:44:0b:c7:70:df:ea:5b:c5:92:1d:99:86:06:79:f9:3d:35:
31:20:74:5c:35:21:82:41:13:c2:3f:27:76:5f:ff:cb:fb:da:
ee:48:1d:74:c2:65:f7:d2:79:e9:99:0f:95:a0:f7:60:f0:09:
e4:79:a1:7b:fd:3f:7d:5f:23:f5:67:ac:af:a8:80:23:0e:21:
5e:59:9f:6f:65:01:a6:9c:a2:61:38:76:c8:a1:a8:20:39:bd:
de:af:12:11:fc:9b:98:a8:2b:20:81:f8:40:fa:ce:03:d3:ca:
cf:7c:29:a2
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZeiBYzIOnFkP4rBxVto2R8YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3OTU1YjFhYTFjMDI4NGQyODQzYjk2ZjI2YzVmZTc1MWU2
Njk0NmYwHhcNMjUwNjI0MTI1OTIyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNTU1ZWY2YzNhNjNkZjk4Njk2ODU0MTlmMTQ1ZjM1ZjI2YzNmOWI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1CAa6hbuZhAXZSUBEZZbRtW++yiR
qEgVbBHj6Wqwf6QRj90x4+m9dO9tprVGV0fxj09jVcpKMMHjhcZHBueujehLvaIz
uk7DbKknDvUqaQypbdxVggfeMLQHXTRr+9/3nrcw4UttfQDBw60yXD2lb+r9Ddlg
93hclfhrHgijk1EsphTFelhGDKbsDT/ZHcxHXfJTAiKtvmYQiD2tHB0nw9/Voguy
Z47Cyy/1wx6hGfjZN/gmBwN07/FTeORrd3M3nSaSMZJRFCyXZyJd4Wk2G6Eqc6fJ
0N7q+bKbBO8ypB8OP38nsgAPGFIzzsn6LPOE5JDMnjpdQ9PgLI8E8QarMwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFNVV72w6Y9+YaWhUGfFF818mw/m4MB8GA1UdIwQY
MBaAFGeVWxqhwChNKEO5bybF/nUeZpRvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjVWYkdxSEFLRTBvUTdsdkpzWC1kUjVtbEc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi82MzE5MjUtNmIwZS00ZWE1LTkxZDct
MDhhZDk0MTAxZDdlLzEvMVZYdmJEcGozNWhwYUZRWjhVWHpYeWJELWJnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi82MzE5MjUtNmIwZS00ZWE1LTkxZDctMDhhZDk0MTAxZDdl
LzEvWjVWYkdxSEFLRTBvUTdsdkpzWC1kUjVtbEc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAW8N9AwQB
W+VwAwQAwQkRAwQA1WyFMA0GCSqGSIb3DQEBCwUAA4IBAQAVXVN6bBPBI99bbPGL
hzaO9wBu3bnjWyMFv2YwehnKU3FgEr7JpHG0b3iSouS4lena3WPoGhKzajZR8qs4
N7SC1Zwf5T4U+D/uXRzL7MIDLFszWO71EOVsgNuSpl5S9LHou6zhejOmj7DFb26r
Vv0TuYIxUqPyWhjhRYUW6RPbOcJqhEh3ue3Hh0+Bgjt3WCOLRAvHcN/qW8WSHZmG
Bnn5PTUxIHRcNSGCQRPCPyd2X//L+9ruSB10wmX30nnpmQ+VoPdg8AnkeaF7/T99
XyP1Z6yvqIAjDiFeWZ9vZQGmnKJhOHbIoaggOb3erxIR/JuYqCsggfhA+s4D08rP
fCmi
-----END CERTIFICATE-----
Generated at Tue Jul 1 19:12:07 2025 by rpki-client