Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/0660e4-8d5d-43b9-8c89-b5a428b7d14c/1/_Yf7Te2uvhwWX_l1JN9UjpNgrZY.roa
File: _Yf7Te2uvhwWX_l1JN9UjpNgrZY.roa (raw, json)
Hash identifier: f5+J7yt13fqQYgFUTN4kcse4XeHLgbH6pOCZG6b6MbQ=
Subject key identifier: FD:87:FB:4D:ED:AE:BE:1C:16:5F:F9:75:24:DF:54:8E:93:60:AD:96
Certificate issuer: /CN=36fedfeccfd00f577cb791f8e43aa659262e93db
Certificate serial: 0197F464AF9A7439C09B154297EC98AEF1B4
Authority key identifier: 36:FE:DF:EC:CF:D0:0F:57:7C:B7:91:F8:E4:3A:A6:59:26:2E:93:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nv7f7M_QD1d8t5H45DqmWSYuk9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/0660e4-8d5d-43b9-8c89-b5a428b7d14c/1/_Yf7Te2uvhwWX_l1JN9UjpNgrZY.roa
Signing time: Thu 10 Jul 2025 12:52:08 +0000
ROA not before: Thu 10 Jul 2025 12:52:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198706
IP address blocks: 91.213.229.0/24 maxlen: 24
185.56.240.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/0660e4-8d5d-43b9-8c89-b5a428b7d14c/1/Nv7f7M_QD1d8t5H45DqmWSYuk9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/0660e4-8d5d-43b9-8c89-b5a428b7d14c/1/Nv7f7M_QD1d8t5H45DqmWSYuk9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nv7f7M_QD1d8t5H45DqmWSYuk9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:f4:64:af:9a:74:39:c0:9b:15:42:97:ec:98:ae:f1:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36fedfeccfd00f577cb791f8e43aa659262e93db
Validity
Not Before: Jul 10 12:52:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fd87fb4dedaebe1c165ff97524df548e9360ad96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:33:66:e7:3f:ec:b9:c7:22:0c:1f:a6:bb:81:
1f:73:ba:b7:20:5c:ba:5f:10:b8:5b:22:a2:84:c6:
c7:87:eb:8c:07:ce:45:c4:c4:c9:67:c9:66:01:e1:
5b:13:d8:01:4e:80:79:57:13:1e:72:a0:a3:79:42:
7c:5a:51:53:62:2c:4e:28:57:91:10:fb:f1:19:69:
b7:ff:d1:ed:a8:d5:66:57:82:5b:9c:45:d7:54:df:
8a:e6:84:37:5b:f1:c4:f7:d5:54:2c:de:4b:73:31:
43:51:e8:2a:48:19:0d:05:95:4e:3b:88:11:42:d1:
80:9b:5d:d0:e3:1a:a7:28:83:b1:b8:db:a2:4f:22:
29:f2:5e:5d:66:ff:cc:a0:4b:f7:44:ac:91:d3:4c:
14:c4:46:9b:ad:87:f7:88:9f:c3:37:f1:ac:88:9d:
42:8d:3a:4b:ad:64:11:34:37:41:91:7c:01:73:b1:
ab:56:9a:71:7d:b7:b4:94:e2:f8:74:d7:6e:55:38:
65:f2:fe:c1:6f:dd:77:bd:d9:96:93:0e:48:d2:32:
e1:7d:6f:3e:04:1a:b8:79:26:e2:a8:d0:04:a8:fa:
71:e0:70:94:46:2d:0b:96:fe:c4:1b:85:4d:6f:1c:
f2:fe:26:32:37:d8:77:93:25:28:7c:db:7e:4b:53:
c4:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:87:FB:4D:ED:AE:BE:1C:16:5F:F9:75:24:DF:54:8E:93:60:AD:96
X509v3 Authority Key Identifier:
keyid:36:FE:DF:EC:CF:D0:0F:57:7C:B7:91:F8:E4:3A:A6:59:26:2E:93:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nv7f7M_QD1d8t5H45DqmWSYuk9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/0660e4-8d5d-43b9-8c89-b5a428b7d14c/1/_Yf7Te2uvhwWX_l1JN9UjpNgrZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/0660e4-8d5d-43b9-8c89-b5a428b7d14c/1/Nv7f7M_QD1d8t5H45DqmWSYuk9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.229.0/24
185.56.240.0/22
Signature Algorithm: sha256WithRSAEncryption
64:fc:da:13:5b:92:7d:9a:28:66:e5:87:09:21:95:6a:b4:4d:
cc:8a:2b:e8:15:7c:4e:6b:0c:80:b8:15:5d:ec:58:9f:dc:a5:
20:9e:e7:fb:3e:46:8e:cb:e2:41:da:b5:32:e8:f8:e7:0c:6e:
27:42:f7:0e:2a:64:6e:a6:c8:0e:21:bb:07:8a:28:88:5c:93:
1e:e3:72:12:a0:c2:35:58:8f:89:87:fe:0f:43:df:4d:71:18:
37:cf:75:8e:54:a9:bc:50:3f:67:db:e2:ba:20:c4:24:da:6a:
82:35:0a:fc:eb:94:33:d7:dd:f2:06:90:00:72:cf:02:25:dc:
64:53:28:93:81:9a:22:0e:33:7d:0f:c1:08:8b:ab:9b:2a:9f:
51:22:73:fb:95:07:17:2f:d2:1e:9a:5f:d6:7e:c1:c6:82:8e:
29:03:af:fa:4e:5d:55:f7:00:17:40:60:71:a3:f5:4f:0c:f9:
03:4b:83:db:26:6f:4d:82:55:7c:9d:ba:72:55:f0:d3:4a:10:
c0:d9:6c:76:d7:1f:83:84:86:32:32:79:82:82:17:8c:3d:fa:
66:4a:00:34:32:71:b5:80:e6:a0:21:56:90:b8:05:3c:3f:e2:
eb:07:bd:3c:a0:06:3e:fe:2b:01:43:f9:51:f6:39:d8:b2:3e:
d6:ac:64:04
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZf0ZK+adDnAmxVCl+yYrvG0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2ZmVkZmVjY2ZkMDBmNTc3Y2I3OTFmOGU0M2FhNjU5MjYy
ZTkzZGIwHhcNMjUwNzEwMTI1MjA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZDg3ZmI0ZGVkYWViZTFjMTY1ZmY5NzUyNGRmNTQ4ZTkzNjBhZDk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTNm5z/succiDB+mu4Efc7q3IFy6
XxC4WyKihMbHh+uMB85FxMTJZ8lmAeFbE9gBToB5VxMecqCjeUJ8WlFTYixOKFeR
EPvxGWm3/9HtqNVmV4JbnEXXVN+K5oQ3W/HE99VULN5LczFDUegqSBkNBZVOO4gR
QtGAm13Q4xqnKIOxuNuiTyIp8l5dZv/MoEv3RKyR00wUxEabrYf3iJ/DN/GsiJ1C
jTpLrWQRNDdBkXwBc7GrVppxfbe0lOL4dNduVThl8v7Bb913vdmWkw5I0jLhfW8+
BBq4eSbiqNAEqPpx4HCURi0Llv7EG4VNbxzy/iYyN9h3kyUofNt+S1PEiQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFP2H+03trr4cFl/5dSTfVI6TYK2WMB8GA1UdIwQY
MBaAFDb+3+zP0A9XfLeR+OQ6plkmLpPbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnY3ZjdNX1FEMWQ4dDVINDVEcW1XU1l1azlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC8wNjYwZTQtOGQ1ZC00M2I5LThjODkt
YjVhNDI4YjdkMTRjLzEvX1lmN1RlMnV2aHdXWF9sMUpOOVVqcE5nclpZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC8wNjYwZTQtOGQ1ZC00M2I5LThjODktYjVhNDI4YjdkMTRj
LzEvTnY3ZjdNX1FEMWQ4dDVINDVEcW1XU1l1azlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW9XlAwQC
uTjwMA0GCSqGSIb3DQEBCwUAA4IBAQBk/NoTW5J9mihm5YcJIZVqtE3MiivoFXxO
awyAuBVd7Fif3KUgnuf7PkaOy+JB2rUy6PjnDG4nQvcOKmRupsgOIbsHiiiIXJMe
43ISoMI1WI+Jh/4PQ99NcRg3z3WOVKm8UD9n2+K6IMQk2mqCNQr865Qz193yBpAA
cs8CJdxkUyiTgZoiDjN9D8EIi6ubKp9RInP7lQcXL9Ieml/WfsHGgo4pA6/6Tl1V
9wAXQGBxo/VPDPkDS4PbJm9NglV8nbpyVfDTShDA2Wx21x+DhIYyMnmCgheMPfpm
SgA0MnG1gOagIVaQuAU8P+LrB708oAY+/isBQ/lR9jnYsj7WrGQE
-----END CERTIFICATE-----
Generated at Mon Jul 21 07:30:21 2025 by rpki-client