Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/ea29f2-c340-4d61-b5bb-b853dff8765c/1/K7ic-zhbgHQLwKvBl_huVj85IK0.roa
File: K7ic-zhbgHQLwKvBl_huVj85IK0.roa (raw, json)
Hash identifier: qx1tt36I8aNDXu23dLTLfip5Qoh5WTo9OBCgqtsC1fQ=
Subject key identifier: 2B:B8:9C:FB:38:5B:80:74:0B:C0:AB:C1:97:F8:6E:56:3F:39:20:AD
Certificate issuer: /CN=3188fae3ebbb3d74feeddcf507f83e67db8850a2
Certificate serial: 01980D29A0A23A532890A437CC027CDE302D
Authority key identifier: 31:88:FA:E3:EB:BB:3D:74:FE:ED:DC:F5:07:F8:3E:67:DB:88:50:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYj64-u7PXT-7dz1B_g-Z9uIUKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/ea29f2-c340-4d61-b5bb-b853dff8765c/1/K7ic-zhbgHQLwKvBl_huVj85IK0.roa
Signing time: Tue 15 Jul 2025 08:18:08 +0000
ROA not before: Tue 15 Jul 2025 08:18:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197965
IP address blocks: 93.180.72.0/21 maxlen: 24
185.176.16.0/22 maxlen: 24
2a00:4c40::/32 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/ea29f2-c340-4d61-b5bb-b853dff8765c/1/MYj64-u7PXT-7dz1B_g-Z9uIUKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/ea29f2-c340-4d61-b5bb-b853dff8765c/1/MYj64-u7PXT-7dz1B_g-Z9uIUKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYj64-u7PXT-7dz1B_g-Z9uIUKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:0d:29:a0:a2:3a:53:28:90:a4:37:cc:02:7c:de:30:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3188fae3ebbb3d74feeddcf507f83e67db8850a2
Validity
Not Before: Jul 15 08:18:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2bb89cfb385b80740bc0abc197f86e563f3920ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f6:1f:03:71:bf:1f:99:a5:7d:5c:d7:61:c4:
e0:5e:0f:94:eb:51:67:c5:b2:aa:28:31:c3:85:89:
9b:03:28:2e:a6:09:bb:13:84:17:41:52:fa:46:db:
ed:76:0c:82:fa:52:61:b0:e0:a9:21:b4:b1:05:fc:
54:0e:75:72:b0:3e:42:33:ef:e7:6c:4c:07:05:ea:
f6:d3:3a:c2:50:78:84:ff:1f:14:61:a4:95:81:6a:
f7:24:18:d9:f0:30:8c:38:af:1b:3c:6a:93:80:ba:
4a:39:fb:7a:f5:d8:d1:fc:ef:88:88:05:d0:7d:5d:
be:7d:29:a5:17:57:c7:7f:30:df:48:e3:c4:5c:9c:
d2:98:32:1b:9e:c0:4d:67:69:aa:5a:90:b1:00:63:
85:e8:4e:5e:90:0b:30:0d:a4:87:ec:68:f5:03:31:
bb:de:ce:2e:cc:d5:7f:f1:c2:f0:85:6e:89:7a:57:
10:3b:53:34:15:6c:59:5c:20:1a:6d:b9:f3:f5:e2:
89:f9:44:a6:90:8e:69:3b:c6:5b:7c:54:09:e4:ef:
49:73:fb:ba:55:67:da:14:80:87:71:87:c7:db:83:
80:f2:0e:49:1d:b1:d8:ca:3e:43:aa:3d:58:5f:23:
3a:8b:13:d8:16:a9:9d:62:b2:6e:27:7e:99:7f:ea:
f4:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:B8:9C:FB:38:5B:80:74:0B:C0:AB:C1:97:F8:6E:56:3F:39:20:AD
X509v3 Authority Key Identifier:
keyid:31:88:FA:E3:EB:BB:3D:74:FE:ED:DC:F5:07:F8:3E:67:DB:88:50:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYj64-u7PXT-7dz1B_g-Z9uIUKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/ea29f2-c340-4d61-b5bb-b853dff8765c/1/K7ic-zhbgHQLwKvBl_huVj85IK0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/ea29f2-c340-4d61-b5bb-b853dff8765c/1/MYj64-u7PXT-7dz1B_g-Z9uIUKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.180.72.0/21
185.176.16.0/22
IPv6:
2a00:4c40::/32
Signature Algorithm: sha256WithRSAEncryption
54:66:71:d1:13:40:b6:32:b8:9b:22:af:e2:89:4d:4f:bf:14:
7a:c7:74:4d:59:21:04:a3:6f:2e:3e:45:10:0a:4a:fd:e5:9b:
c8:2a:87:60:0a:0d:13:63:24:96:b9:77:1d:69:80:3e:99:0e:
86:66:0a:f6:d1:e1:6d:fa:24:9e:ba:7c:82:b6:39:f1:4e:c2:
df:04:bf:35:f2:98:c5:75:e9:33:6d:44:4e:ac:44:bb:e2:a5:
3c:48:27:41:17:bc:c0:78:71:56:90:63:e5:c9:b9:6a:93:f7:
cb:c3:bb:5b:e9:c4:6d:87:72:f5:11:65:9a:10:b7:a1:ef:fa:
87:00:f9:04:f2:f8:89:6b:79:0a:e9:3a:14:ae:ce:2f:9c:c8:
70:20:8a:91:57:c7:4d:51:ce:0c:0e:0b:5a:9b:96:30:85:2d:
cf:00:fe:0d:e9:61:70:3b:da:70:4e:17:20:3d:3a:03:56:f9:
83:d2:85:91:dc:d7:c7:b8:48:27:a8:07:41:60:fd:35:c3:8a:
64:d2:68:ab:f3:ac:9d:5c:29:b1:e9:46:34:0d:ab:2f:1d:07:
96:fb:73:40:14:b9:36:4b:0d:b9:7b:45:6d:a6:b0:74:18:06:
dc:25:27:a4:bc:12:df:7a:09:9b:5f:29:46:71:c6:a0:76:66:
18:24:39:5f
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZgNKaCiOlMokKQ3zAJ83jAtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxODhmYWUzZWJiYjNkNzRmZWVkZGNmNTA3ZjgzZTY3ZGI4
ODUwYTIwHhcNMjUwNzE1MDgxODA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYmI4OWNmYjM4NWI4MDc0MGJjMGFiYzE5N2Y4NmU1NjNmMzkyMGFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2vYfA3G/H5mlfVzXYcTgXg+U61Fn
xbKqKDHDhYmbAygupgm7E4QXQVL6RtvtdgyC+lJhsOCpIbSxBfxUDnVysD5CM+/n
bEwHBer20zrCUHiE/x8UYaSVgWr3JBjZ8DCMOK8bPGqTgLpKOft69djR/O+IiAXQ
fV2+fSmlF1fHfzDfSOPEXJzSmDIbnsBNZ2mqWpCxAGOF6E5ekAswDaSH7Gj1AzG7
3s4uzNV/8cLwhW6JelcQO1M0FWxZXCAabbnz9eKJ+USmkI5pO8ZbfFQJ5O9Jc/u6
VWfaFICHcYfH24OA8g5JHbHYyj5Dqj1YXyM6ixPYFqmdYrJuJ36Zf+r05wIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFCu4nPs4W4B0C8CrwZf4blY/OSCtMB8GA1UdIwQY
MBaAFDGI+uPruz10/u3c9Qf4PmfbiFCiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVlqNjQtdTdQWFQtN2R6MUJfZy1aOXVJVUtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9lYTI5ZjItYzM0MC00ZDYxLWI1YmIt
Yjg1M2RmZjg3NjVjLzEvSzdpYy16aGJnSFFMd0t2QmxfaHVWajg1SUswLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9lYTI5ZjItYzM0MC00ZDYxLWI1YmItYjg1M2RmZjg3NjVj
LzEvTVlqNjQtdTdQWFQtN2R6MUJfZy1aOXVJVUtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDXbRIAwQC
ubAQMA0EAgACMAcDBQAqAExAMA0GCSqGSIb3DQEBCwUAA4IBAQBUZnHRE0C2Mrib
Iq/iiU1PvxR6x3RNWSEEo28uPkUQCkr95ZvIKodgCg0TYySWuXcdaYA+mQ6GZgr2
0eFt+iSeunyCtjnxTsLfBL818pjFdekzbUROrES74qU8SCdBF7zAeHFWkGPlyblq
k/fLw7tb6cRth3L1EWWaELeh7/qHAPkE8viJa3kK6ToUrs4vnMhwIIqRV8dNUc4M
Dgtam5YwhS3PAP4N6WFwO9pwThcgPToDVvmD0oWR3NfHuEgnqAdBYP01w4pk0mir
86ydXCmx6UY0DasvHQeW+3NAFLk2Sw25e0VtprB0GAbcJSekvBLfegmbXylGccag
dmYYJDlf
-----END CERTIFICATE-----
Generated at Sun Jul 27 10:29:58 2025 by rpki-client