Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/6LvfCWQhJwJjQ7yfxm8_2iB8ajA.roa
File: 6LvfCWQhJwJjQ7yfxm8_2iB8ajA.roa (raw, json)
Hash identifier: VVZpFqNQIGYIg2vRxvGNX/HI0x30XQ+fKGPR57+uciQ=
Subject key identifier: E8:BB:DF:09:64:21:27:02:63:43:BC:9F:C6:6F:3F:DA:20:7C:6A:30
Certificate issuer: /CN=5dfb074d47b7e0bc891ed06ea8fc67e38ecf50a1
Certificate serial: 0197F0D965CE68D579ED61EAC6FBB0571B2B
Authority key identifier: 5D:FB:07:4D:47:B7:E0:BC:89:1E:D0:6E:A8:FC:67:E3:8E:CF:50:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfsHTUe34LyJHtBuqPxn447PUKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/6LvfCWQhJwJjQ7yfxm8_2iB8ajA.roa
Signing time: Wed 09 Jul 2025 20:21:08 +0000
ROA not before: Wed 09 Jul 2025 20:21:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203437
IP address blocks: 79.135.112.0/21 maxlen: 21
193.218.8.0/22 maxlen: 22
194.77.185.0/24 maxlen: 24
194.105.40.0/21 maxlen: 21
2a02:db00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XfsHTUe34LyJHtBuqPxn447PUKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 02:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:f0:d9:65:ce:68:d5:79:ed:61:ea:c6:fb:b0:57:1b:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dfb074d47b7e0bc891ed06ea8fc67e38ecf50a1
Validity
Not Before: Jul 9 20:21:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e8bbdf09642127026343bc9fc66f3fda207c6a30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9f:07:f9:f8:e0:75:a5:82:42:aa:7d:e8:48:
08:a3:71:30:45:d8:a3:c5:ad:c3:63:a5:4d:2e:79:
cc:9b:de:9e:73:75:6c:87:e3:1e:bd:63:a9:49:4c:
93:f5:51:cf:1d:d1:ba:62:4e:90:a1:87:00:e1:e8:
0c:f4:bd:a4:3a:0f:82:d9:e8:4d:9b:e1:c1:dc:6a:
52:5e:5f:a5:f4:c8:5f:fd:b1:93:fb:4b:23:c5:13:
e6:b5:9a:7f:52:ae:06:f8:0b:4c:b0:3a:f2:7a:49:
78:36:2e:0d:32:be:4c:e2:45:64:7e:ca:e0:a8:11:
26:3b:5e:3d:a2:13:eb:8a:a8:26:84:5e:3e:c1:6f:
83:01:10:77:f8:a4:f2:8c:01:15:a7:06:d2:15:5c:
0f:44:e7:db:b0:fb:14:af:9c:6c:c6:09:2b:f2:82:
f9:cd:7d:cb:38:a7:0e:de:8f:86:f2:ec:d8:9b:23:
1b:55:e9:b5:1d:80:2d:73:7e:bd:ad:ac:6f:13:78:
a1:75:a0:f3:c6:84:f3:9d:ef:3b:38:75:f1:0b:72:
cc:3d:40:5d:57:85:1b:fe:75:33:66:32:13:b8:dc:
db:f8:11:5d:a7:ca:83:d8:52:5b:56:d5:5a:96:72:
5c:4f:7e:1d:c3:30:f6:ce:09:64:a9:cb:35:9c:bb:
10:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:BB:DF:09:64:21:27:02:63:43:BC:9F:C6:6F:3F:DA:20:7C:6A:30
X509v3 Authority Key Identifier:
keyid:5D:FB:07:4D:47:B7:E0:BC:89:1E:D0:6E:A8:FC:67:E3:8E:CF:50:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfsHTUe34LyJHtBuqPxn447PUKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/6LvfCWQhJwJjQ7yfxm8_2iB8ajA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.135.112.0/21
193.218.8.0/22
194.77.185.0/24
194.105.40.0/21
IPv6:
2a02:db00::/29
Signature Algorithm: sha256WithRSAEncryption
c7:e9:7e:7f:eb:0f:6f:9c:c9:4b:65:bb:98:f3:a1:0e:a1:8a:
3f:f6:11:1d:07:04:c2:32:41:66:04:95:18:5a:28:ce:6f:30:
f4:d0:71:e3:00:87:dd:c5:f3:29:4c:ea:c2:44:7c:d9:b8:4e:
70:28:6c:23:22:60:e0:7b:3d:74:40:67:1b:77:b1:07:52:60:
7d:36:08:13:80:8c:40:0c:ed:56:1d:b4:01:05:81:1c:fa:fc:
04:34:c5:7a:26:a4:b5:b5:32:1c:12:09:00:a5:79:5c:ee:3a:
e7:b5:84:72:a5:6e:d5:f3:71:2c:af:91:c3:b2:da:64:18:f2:
41:ef:cf:15:e1:bb:be:88:63:dd:0d:33:ea:24:3a:90:a0:ae:
90:4a:2f:3b:2d:aa:0a:b9:73:30:22:e7:8c:56:62:53:8a:c3:
b0:8f:64:d4:4d:1c:bb:b0:53:74:f9:fa:92:73:d4:6b:4a:b6:
bf:00:31:c9:93:c7:67:67:9d:be:c9:9c:74:67:f2:c1:33:a0:
3c:15:95:19:8c:32:d5:13:7e:31:c1:72:78:83:30:98:28:ce:
f2:90:45:c0:ef:20:38:b4:ed:5f:58:ad:9a:e1:a3:cf:8c:7d:
30:8d:87:a1:83:60:d3:21:a2:78:90:b6:4f:cd:e0:5c:59:c2:
c0:1d:93:33
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAZfw2WXOaNV57WHqxvuwVxsrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkZmIwNzRkNDdiN2UwYmM4OTFlZDA2ZWE4ZmM2N2UzOGVj
ZjUwYTEwHhcNMjUwNzA5MjAyMTA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOGJiZGYwOTY0MjEyNzAyNjM0M2JjOWZjNjZmM2ZkYTIwN2M2YTMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJ8H+fjgdaWCQqp96EgIo3EwRdij
xa3DY6VNLnnMm96ec3Vsh+MevWOpSUyT9VHPHdG6Yk6QoYcA4egM9L2kOg+C2ehN
m+HB3GpSXl+l9Mhf/bGT+0sjxRPmtZp/Uq4G+AtMsDryekl4Ni4NMr5M4kVkfsrg
qBEmO149ohPriqgmhF4+wW+DARB3+KTyjAEVpwbSFVwPROfbsPsUr5xsxgkr8oL5
zX3LOKcO3o+G8uzYmyMbVem1HYAtc369raxvE3ihdaDzxoTzne87OHXxC3LMPUBd
V4Ub/nUzZjITuNzb+BFdp8qD2FJbVtValnJcT34dwzD2zglkqcs1nLsQpwIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFOi73wlkIScCY0O8n8ZvP9ogfGowMB8GA1UdIwQY
MBaAFF37B01Ht+C8iR7Qbqj8Z+OOz1ChMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGZzSFRVZTM0THlKSHRCdXFQeG40NDdQVUtFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi80MmZjOTItMTY2My00Njg4LWEzMWQt
Y2Y2YTYzZTRlZmI2LzEvNkx2ZkNXUWhKd0pqUTd5ZnhtOF8yaUI4YWpBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi80MmZjOTItMTY2My00Njg4LWEzMWQtY2Y2YTYzZTRlZmI2
LzEvWGZzSFRVZTM0THlKSHRCdXFQeG40NDdQVUtFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQDT4dwAwQC
wdoIAwQAwk25AwQDwmkoMA0EAgACMAcDBQMqAtsAMA0GCSqGSIb3DQEBCwUAA4IB
AQDH6X5/6w9vnMlLZbuY86EOoYo/9hEdBwTCMkFmBJUYWijObzD00HHjAIfdxfMp
TOrCRHzZuE5wKGwjImDgez10QGcbd7EHUmB9NggTgIxADO1WHbQBBYEc+vwENMV6
JqS1tTIcEgkApXlc7jrntYRypW7V83Esr5HDstpkGPJB788V4bu+iGPdDTPqJDqQ
oK6QSi87LaoKuXMwIueMVmJTisOwj2TUTRy7sFN0+fqSc9RrSra/ADHJk8dnZ52+
yZx0Z/LBM6A8FZUZjDLVE34xwXJ4gzCYKM7ykEXA7yA4tO1fWK2a4aPPjH0wjYeh
g2DTIaJ4kLZPzeBcWcLAHZMz
-----END CERTIFICATE-----
Generated at Sun Jul 27 10:34:27 2025 by rpki-client