Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/6OVwVn3VQiaAA7Ib2JPqmAlUHFI.roa
File: 6OVwVn3VQiaAA7Ib2JPqmAlUHFI.roa (raw, json)
Hash identifier: 8clCDLskVl+sWVebw0y41zKbT0aArg7vOWcNCobO8x0=
Subject key identifier: E8:E5:70:56:7D:D5:42:26:80:03:B2:1B:D8:93:EA:98:09:54:1C:52
Certificate issuer: /CN=49216f5c165b827a7fd73d8107aebd2f63c63e24
Certificate serial: 0198BD773B0C96FA88F1BFC2895DC6181AE1
Authority key identifier: 49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/6OVwVn3VQiaAA7Ib2JPqmAlUHFI.roa
Signing time: Mon 18 Aug 2025 13:56:04 +0000
ROA not before: Mon 18 Aug 2025 13:56:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215826
IP address blocks: 178.17.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:bd:77:3b:0c:96:fa:88:f1:bf:c2:89:5d:c6:18:1a:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49216f5c165b827a7fd73d8107aebd2f63c63e24
Validity
Not Before: Aug 18 13:56:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e8e570567dd542268003b21bd893ea9809541c52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:23:6e:92:23:60:8c:d8:0c:9b:7c:ce:57:83:
50:ef:cb:21:57:73:a6:df:eb:5b:b7:50:48:dc:84:
18:0d:93:11:ea:d3:b1:9a:90:dd:8f:ea:ad:35:dd:
e5:bb:8d:48:a1:cd:8b:09:3b:02:8c:68:c6:69:90:
d1:33:ee:f5:b2:21:79:bc:13:5f:82:0f:d5:18:40:
10:c2:8b:0f:cc:0f:b1:19:54:18:fc:b3:5a:87:4a:
87:17:44:bc:70:3e:66:2e:6a:2c:2b:39:78:78:9d:
69:24:d9:8b:ad:c5:64:7d:f5:5b:fa:1e:58:11:d2:
c2:13:60:2e:7c:d3:01:31:ad:aa:70:e9:79:bd:87:
77:2b:e1:cb:a6:61:45:1e:67:92:b5:ec:06:cb:87:
92:4e:03:fa:aa:34:91:3a:09:af:f2:d6:74:c3:7f:
c7:9c:2b:16:8e:48:d9:38:be:e6:5b:03:cd:6d:61:
92:5b:09:f8:6b:cb:64:ab:3f:54:c0:56:36:25:09:
16:29:ee:7d:78:16:2c:f6:de:72:1e:c2:00:51:63:
19:d0:a8:9e:15:42:15:f2:52:53:73:33:41:52:37:
25:e4:04:cd:82:59:58:fb:94:cc:06:8c:44:a3:85:
d9:8f:06:0e:e8:d2:bb:57:ee:1d:80:fc:5e:81:66:
2a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:E5:70:56:7D:D5:42:26:80:03:B2:1B:D8:93:EA:98:09:54:1C:52
X509v3 Authority Key Identifier:
keyid:49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/6OVwVn3VQiaAA7Ib2JPqmAlUHFI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.17.62.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:5e:47:3b:08:58:f8:86:97:77:9e:7d:e8:04:36:87:0a:95:
33:32:4e:b5:b5:b9:36:1d:07:24:75:18:0e:12:2d:ce:81:af:
d0:8c:c7:54:5e:3e:23:1f:ef:b4:5a:13:dc:7d:ea:65:99:60:
61:46:63:9c:9e:58:f5:25:ea:52:d8:3f:18:75:58:74:88:ab:
da:ac:61:7f:d7:ef:d9:ee:63:8a:49:e2:84:58:7d:d9:8c:0d:
dd:b8:c6:4f:a0:5f:ee:a4:53:54:da:b2:64:0e:77:19:c7:93:
e9:59:8e:eb:e4:db:b6:0e:ef:35:a5:61:f3:c2:1f:9b:33:5c:
15:68:55:02:2c:61:91:0c:e6:9e:5c:e4:9d:66:fa:87:4f:d9:
3b:6d:9b:cf:29:90:d1:45:03:6d:23:4a:01:35:1a:b4:8e:6a:
d3:0b:19:bc:21:fb:1b:51:0f:e7:a2:31:24:8a:46:33:57:97:
d0:f0:0d:27:ab:33:73:ce:41:ca:e8:e2:da:e3:69:db:5f:00:
87:cf:d6:75:ba:26:5b:aa:79:b0:40:c4:c8:03:04:96:d4:eb:
9a:3c:24:4f:90:1a:6e:29:0b:48:13:55:1c:11:72:d7:cc:a9:
ec:7c:d4:11:8e:d3:70:21:f5:2f:cc:a2:3f:0e:05:1c:92:10:
93:5a:42:17
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZi9dzsMlvqI8b/CiV3GGBrhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5MjE2ZjVjMTY1YjgyN2E3ZmQ3M2Q4MTA3YWViZDJmNjNj
NjNlMjQwHhcNMjUwODE4MTM1NjA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOGU1NzA1NjdkZDU0MjI2ODAwM2IyMWJkODkzZWE5ODA5NTQxYzUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3iNukiNgjNgMm3zOV4NQ78shV3Om
3+tbt1BI3IQYDZMR6tOxmpDdj+qtNd3lu41Ioc2LCTsCjGjGaZDRM+71siF5vBNf
gg/VGEAQwosPzA+xGVQY/LNah0qHF0S8cD5mLmosKzl4eJ1pJNmLrcVkffVb+h5Y
EdLCE2AufNMBMa2qcOl5vYd3K+HLpmFFHmeStewGy4eSTgP6qjSROgmv8tZ0w3/H
nCsWjkjZOL7mWwPNbWGSWwn4a8tkqz9UwFY2JQkWKe59eBYs9t5yHsIAUWMZ0Kie
FUIV8lJTczNBUjcl5ATNgllY+5TMBoxEo4XZjwYO6NK7V+4dgPxegWYqFQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOjlcFZ91UImgAOyG9iT6pgJVBxSMB8GA1UdIwQY
MBaAFEkhb1wWW4J6f9c9gQeuvS9jxj4kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1NGdlhCWmJnbnBfMXoyQkI2NjlMMlBHUGlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi80ODQyYTktOWZjZC00YmI2LWJiMDQt
MGRiYmMyNDllNjU3LzEvNk9Wd1ZuM1ZRaWFBQTdJYjJKUHFtQWxVSEZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi80ODQyYTktOWZjZC00YmI2LWJiMDQtMGRiYmMyNDllNjU3
LzEvU1NGdlhCWmJnbnBfMXoyQkI2NjlMMlBHUGlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAshE+MA0G
CSqGSIb3DQEBCwUAA4IBAQCLXkc7CFj4hpd3nn3oBDaHCpUzMk61tbk2HQckdRgO
Ei3Oga/QjMdUXj4jH++0WhPcfeplmWBhRmOcnlj1JepS2D8YdVh0iKvarGF/1+/Z
7mOKSeKEWH3ZjA3duMZPoF/upFNU2rJkDncZx5PpWY7r5Nu2Du81pWHzwh+bM1wV
aFUCLGGRDOaeXOSdZvqHT9k7bZvPKZDRRQNtI0oBNRq0jmrTCxm8IfsbUQ/nojEk
ikYzV5fQ8A0nqzNzzkHK6OLa42nbXwCHz9Z1uiZbqnmwQMTIAwSW1OuaPCRPkBpu
KQtIE1UcEXLXzKnsfNQRjtNwIfUvzKI/DgUckhCTWkIX
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:14:00 2025 by rpki-client