Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/hT48KCBTZZmgjWNR0omilLv1234.roa
File: hT48KCBTZZmgjWNR0omilLv1234.roa (raw, json)
Hash identifier: RA3O16mDot75n7YV1dkz8IBPV2SpMqJkQ3E7/vV2VHo=
Subject key identifier: 85:3E:3C:28:20:53:65:99:A0:8D:63:51:D2:89:A2:94:BB:F5:DB:7E
Certificate issuer: /CN=a2b12e8df3abd5559f9cf9680af65dd16589de86
Certificate serial: 0197F83BF70E6106C1879505D2F19D832CEE
Authority key identifier: A2:B1:2E:8D:F3:AB:D5:55:9F:9C:F9:68:0A:F6:5D:D1:65:89:DE:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/orEujfOr1VWfnPloCvZd0WWJ3oY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/hT48KCBTZZmgjWNR0omilLv1234.roa
Signing time: Fri 11 Jul 2025 06:46:08 +0000
ROA not before: Fri 11 Jul 2025 06:46:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 46.236.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/orEujfOr1VWfnPloCvZd0WWJ3oY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/orEujfOr1VWfnPloCvZd0WWJ3oY.mft
rsync://rpki.ripe.net/repository/DEFAULT/orEujfOr1VWfnPloCvZd0WWJ3oY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 07:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:f8:3b:f7:0e:61:06:c1:87:95:05:d2:f1:9d:83:2c:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2b12e8df3abd5559f9cf9680af65dd16589de86
Validity
Not Before: Jul 11 06:46:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=853e3c2820536599a08d6351d289a294bbf5db7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:25:4d:d7:5c:99:b4:14:8c:9f:52:d6:92:1e:
ba:5a:4c:ef:e6:22:af:7b:54:be:69:c9:c6:0d:1b:
2d:08:2c:ab:00:40:4d:0a:8a:c0:e2:8d:f0:b1:14:
fb:3f:88:ec:2e:ff:a0:0a:68:bb:0a:e9:4b:10:f5:
16:05:9c:87:ae:83:0f:59:ce:12:96:fe:0b:2e:ee:
d5:be:4f:b9:37:9a:3b:b1:b3:4b:4a:e6:b7:87:a0:
7e:7f:7d:b4:d0:46:6a:2c:81:04:da:d9:11:10:38:
79:64:32:8b:9b:7a:cb:b4:aa:0a:34:70:ff:a5:34:
14:55:f8:26:91:23:ae:7d:9b:4c:39:42:ef:b0:25:
07:e5:3d:3f:f4:fc:e6:54:c6:84:90:99:8c:c2:99:
ef:bc:7b:37:60:ca:c6:c2:c3:c1:bb:45:b7:1a:25:
4b:56:6b:4a:8b:9f:32:a9:27:bb:0b:ba:0c:1e:96:
ce:c4:17:bc:1d:37:29:9a:5b:c1:1c:b4:53:22:14:
ba:15:6c:c9:38:17:48:48:82:46:9a:2e:ce:24:4e:
74:0c:35:de:c0:da:4a:27:c8:b4:4d:35:00:c2:2a:
fe:07:b3:85:d8:46:17:f7:4f:32:c9:c9:e6:b8:ad:
67:1b:5e:64:24:9a:47:be:ce:a0:1e:7f:eb:f1:99:
1c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:3E:3C:28:20:53:65:99:A0:8D:63:51:D2:89:A2:94:BB:F5:DB:7E
X509v3 Authority Key Identifier:
keyid:A2:B1:2E:8D:F3:AB:D5:55:9F:9C:F9:68:0A:F6:5D:D1:65:89:DE:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/orEujfOr1VWfnPloCvZd0WWJ3oY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/hT48KCBTZZmgjWNR0omilLv1234.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/orEujfOr1VWfnPloCvZd0WWJ3oY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.236.207.0/24
Signature Algorithm: sha256WithRSAEncryption
79:55:4a:35:60:12:07:fb:c4:55:2c:e0:4d:dc:58:6f:70:4e:
26:04:17:d1:69:de:34:bd:4e:e3:9c:05:15:1c:43:32:b7:2e:
29:6f:2b:0d:81:cd:c5:51:d0:b6:17:9a:a3:c0:28:5d:ee:3d:
5f:53:76:f2:03:e7:90:e9:1c:17:26:5f:88:ea:82:07:72:fd:
39:89:56:16:a0:e1:25:46:85:a5:4a:43:79:75:91:cd:35:7b:
7c:08:e2:5e:22:c1:46:92:56:bf:75:03:7b:4a:1b:5b:50:2a:
00:ef:93:1b:0a:2b:66:40:dc:db:9d:c0:53:0a:b9:dd:3b:38:
d0:6d:14:ab:37:07:16:71:7c:52:99:44:9c:6a:5b:66:5a:20:
ae:ba:b5:80:c9:23:a4:ba:31:6d:0e:14:fd:cc:5e:f4:ad:81:
50:a9:a5:48:01:42:e5:f6:88:7e:51:bb:4d:48:1d:9d:61:61:
24:8e:2d:09:5c:21:9c:25:ba:80:e1:f7:be:e0:13:44:92:8b:
4b:79:d5:04:e9:37:3c:52:ca:74:58:3c:04:bb:c9:f2:c9:dc:
dc:b7:cc:1a:1d:7d:66:11:be:e6:a2:0b:96:f3:de:30:e1:cb:
51:47:9d:46:af:c3:9e:5d:b3:d8:a7:b9:c7:1a:32:1f:6c:7b:
bc:88:7e:24
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZf4O/cOYQbBh5UF0vGdgyzuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyYjEyZThkZjNhYmQ1NTU5ZjljZjk2ODBhZjY1ZGQxNjU4
OWRlODYwHhcNMjUwNzExMDY0NjA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NTNlM2MyODIwNTM2NTk5YTA4ZDYzNTFkMjg5YTI5NGJiZjVkYjdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySVN11yZtBSMn1LWkh66Wkzv5iKv
e1S+acnGDRstCCyrAEBNCorA4o3wsRT7P4jsLv+gCmi7CulLEPUWBZyHroMPWc4S
lv4LLu7Vvk+5N5o7sbNLSua3h6B+f3200EZqLIEE2tkREDh5ZDKLm3rLtKoKNHD/
pTQUVfgmkSOufZtMOULvsCUH5T0/9PzmVMaEkJmMwpnvvHs3YMrGwsPBu0W3GiVL
VmtKi58yqSe7C7oMHpbOxBe8HTcpmlvBHLRTIhS6FWzJOBdISIJGmi7OJE50DDXe
wNpKJ8i0TTUAwir+B7OF2EYX908yycnmuK1nG15kJJpHvs6gHn/r8ZkcTQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIU+PCggU2WZoI1jUdKJopS79dt+MB8GA1UdIwQY
MBaAFKKxLo3zq9VVn5z5aAr2XdFlid6GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3JFdWpmT3IxVldmblBsb0N2WmQwV1dKM29ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9lYzQ0ZWEtZWY0My00YjNhLWE2OWEt
YjRjYjYzN2RhOGMzLzEvaFQ0OEtDQlRaWm1naldOUjBvbWlsTHYxMjM0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9lYzQ0ZWEtZWY0My00YjNhLWE2OWEtYjRjYjYzN2RhOGMz
LzEvb3JFdWpmT3IxVldmblBsb0N2WmQwV1dKM29ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALuzPMA0G
CSqGSIb3DQEBCwUAA4IBAQB5VUo1YBIH+8RVLOBN3FhvcE4mBBfRad40vU7jnAUV
HEMyty4pbysNgc3FUdC2F5qjwChd7j1fU3byA+eQ6RwXJl+I6oIHcv05iVYWoOEl
RoWlSkN5dZHNNXt8COJeIsFGkla/dQN7ShtbUCoA75MbCitmQNzbncBTCrndOzjQ
bRSrNwcWcXxSmUScaltmWiCuurWAySOkujFtDhT9zF70rYFQqaVIAULl9oh+UbtN
SB2dYWEkji0JXCGcJbqA4fe+4BNEkotLedUE6Tc8Usp0WDwEu8nyydzct8waHX1m
Eb7moguW894w4ctRR51Gr8OeXbPYp7nHGjIfbHu8iH4k
-----END CERTIFICATE-----
Generated at Wed Jul 23 12:04:24 2025 by rpki-client