Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/y6ekWRCuQLwcqqeJ-M4eDh1XZ5Y.roa
File: y6ekWRCuQLwcqqeJ-M4eDh1XZ5Y.roa (raw, json)
Hash identifier: ZEtDzG3nk1m7XFpZZprdY4ZTBCOBYbtLwlVKUfssQ7E=
Subject key identifier: CB:A7:A4:59:10:AE:40:BC:1C:AA:A7:89:F8:CE:1E:0E:1D:57:67:96
Certificate issuer: /CN=a87090c275c34c05c306f3b36063893a0d72782a
Certificate serial: 019809B45351A11AC2588E96F90FBB26540E
Authority key identifier: A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/y6ekWRCuQLwcqqeJ-M4eDh1XZ5Y.roa
Signing time: Mon 14 Jul 2025 16:11:09 +0000
ROA not before: Mon 14 Jul 2025 16:11:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201670
IP address blocks: 185.229.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 12:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:09:b4:53:51:a1:1a:c2:58:8e:96:f9:0f:bb:26:54:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a87090c275c34c05c306f3b36063893a0d72782a
Validity
Not Before: Jul 14 16:11:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cba7a45910ae40bc1caaa789f8ce1e0e1d576796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:3e:59:92:11:c6:6e:c1:63:96:cc:26:9d:ad:
24:e8:22:a5:aa:45:35:1a:f7:ae:92:b5:51:eb:78:
c0:21:09:b6:2c:36:c2:e4:46:dd:2f:5f:6c:8a:91:
e6:5f:8d:4b:c5:e1:8c:a4:53:2f:bc:74:77:79:08:
c1:4d:9a:48:f1:b1:4f:98:90:5c:7b:c4:67:2e:20:
15:90:b8:b6:a7:61:e2:f8:a1:ec:4f:7c:e6:cb:7c:
0d:ef:65:d9:05:db:05:e9:53:16:18:1d:a6:f9:74:
fa:47:09:17:67:84:e0:5d:d1:76:88:4f:46:0b:7f:
dc:45:ca:e8:8d:23:56:e8:d3:1c:7e:c2:79:c9:c2:
a3:97:40:f7:7c:4a:35:e4:6a:02:fc:92:a6:83:de:
f5:dc:22:82:d6:a9:7d:a8:e7:fc:fa:b3:84:77:34:
c4:7a:bc:c6:71:ef:cc:57:72:a2:92:3b:59:23:c2:
98:38:bf:d5:10:a1:e3:ba:b4:1b:ed:b7:2f:4f:3f:
82:c8:b5:49:92:a6:7e:53:9f:8a:e7:da:f7:41:af:
57:eb:38:0f:13:67:a5:8e:89:73:b7:57:2c:0a:37:
7a:28:14:1c:0e:80:48:12:4c:1b:70:c4:0e:73:b3:
f8:ac:a6:91:4f:2f:31:e9:2a:3b:31:2f:56:fc:16:
83:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:A7:A4:59:10:AE:40:BC:1C:AA:A7:89:F8:CE:1E:0E:1D:57:67:96
X509v3 Authority Key Identifier:
keyid:A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/y6ekWRCuQLwcqqeJ-M4eDh1XZ5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.229.64.0/24
Signature Algorithm: sha256WithRSAEncryption
53:48:50:c6:5b:d7:1d:27:bc:59:5a:0e:42:20:17:fa:50:61:
62:dd:0c:39:e2:0a:af:0b:be:9a:8d:65:be:9a:20:a6:83:2d:
0b:b3:89:61:01:21:d7:7f:d3:7d:4f:2d:08:6c:df:82:f1:a2:
ed:81:4f:9c:36:eb:b8:d9:be:04:55:1d:dc:bc:77:78:9a:5a:
60:d4:22:87:03:34:53:67:72:42:5a:26:40:24:87:6f:93:35:
25:5a:97:1d:cd:57:b7:e0:65:f9:82:54:d6:d0:6e:4b:23:9c:
da:a1:77:44:da:c8:f4:26:3c:04:ed:f8:0f:d9:43:dd:ce:a1:
4d:63:c9:b3:20:c3:07:70:0e:8c:92:8d:73:23:42:66:e9:d6:
84:18:98:91:7f:30:b3:53:43:59:8e:6b:e7:ef:58:c3:c5:87:
13:1c:eb:b7:be:9f:45:3d:ef:b0:7f:1e:8d:5c:da:91:db:7c:
2a:8f:56:25:19:2b:d3:49:16:af:ad:fc:6d:d0:d9:d3:4a:c5:
81:45:68:f8:ac:33:e2:7b:26:f5:cb:78:1a:c3:6a:a4:65:8d:
fc:cb:70:5a:40:20:8c:78:82:14:e6:dd:0e:b8:bf:09:7a:6f:
73:76:0f:36:34:2e:5c:32:ae:a7:c0:f9:0e:23:b8:1d:56:45:
7c:9c:ab:76
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZgJtFNRoRrCWI6W+Q+7JlQOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4NzA5MGMyNzVjMzRjMDVjMzA2ZjNiMzYwNjM4OTNhMGQ3
Mjc4MmEwHhcNMjUwNzE0MTYxMTA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYmE3YTQ1OTEwYWU0MGJjMWNhYWE3ODlmOGNlMWUwZTFkNTc2Nzk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0z5ZkhHGbsFjlswmna0k6CKlqkU1
GveukrVR63jAIQm2LDbC5EbdL19sipHmX41LxeGMpFMvvHR3eQjBTZpI8bFPmJBc
e8RnLiAVkLi2p2Hi+KHsT3zmy3wN72XZBdsF6VMWGB2m+XT6RwkXZ4TgXdF2iE9G
C3/cRcrojSNW6NMcfsJ5ycKjl0D3fEo15GoC/JKmg9713CKC1ql9qOf8+rOEdzTE
erzGce/MV3KikjtZI8KYOL/VEKHjurQb7bcvTz+CyLVJkqZ+U5+K59r3Qa9X6zgP
E2eljolzt1csCjd6KBQcDoBIEkwbcMQOc7P4rKaRTy8x6So7MS9W/BaD+QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMunpFkQrkC8HKqnifjOHg4dV2eWMB8GA1UdIwQY
MBaAFKhwkMJ1w0wFwwbzs2BjiToNcngqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEt
YjU3YTM2ZjJhZmNkLzEveTZla1dSQ3VRTHdjcXFlSi1NNGVEaDFYWjVZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEtYjU3YTM2ZjJhZmNk
LzEvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueVAMA0G
CSqGSIb3DQEBCwUAA4IBAQBTSFDGW9cdJ7xZWg5CIBf6UGFi3Qw54gqvC76ajWW+
miCmgy0Ls4lhASHXf9N9Ty0IbN+C8aLtgU+cNuu42b4EVR3cvHd4mlpg1CKHAzRT
Z3JCWiZAJIdvkzUlWpcdzVe34GX5glTW0G5LI5zaoXdE2sj0JjwE7fgP2UPdzqFN
Y8mzIMMHcA6Mko1zI0Jm6daEGJiRfzCzU0NZjmvn71jDxYcTHOu3vp9FPe+wfx6N
XNqR23wqj1YlGSvTSRavrfxt0NnTSsWBRWj4rDPieyb1y3gaw2qkZY38y3BaQCCM
eIIU5t0OuL8Jem9zdg82NC5cMq6nwPkOI7gdVkV8nKt2
-----END CERTIFICATE-----
Generated at Sun Jul 20 18:20:52 2025 by rpki-client