Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/V8rwHt-KBtkyfMDcY6GbBS5O3lg.roa
File: V8rwHt-KBtkyfMDcY6GbBS5O3lg.roa (raw, json)
Hash identifier: VKRjbMp2cA/7F+gIKAoYPT0t4kmN1vcNg+P5YqdMBPI=
Subject key identifier: 57:CA:F0:1E:DF:8A:06:D9:32:7C:C0:DC:63:A1:9B:05:2E:4E:DE:58
Certificate issuer: /CN=edcc2d279130d1a1bb3ee5a3b5f3323057b3c4fd
Certificate serial: 01981D37B04612433DC0A94407B68B1E7BBF
Authority key identifier: ED:CC:2D:27:91:30:D1:A1:BB:3E:E5:A3:B5:F3:32:30:57:B3:C4:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/V8rwHt-KBtkyfMDcY6GbBS5O3lg.roa
Signing time: Fri 18 Jul 2025 11:07:25 +0000
ROA not before: Fri 18 Jul 2025 11:07:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41033
IP address blocks: 185.235.184.0/24 maxlen: 24
185.235.185.0/24 maxlen: 24
185.235.187.0/24 maxlen: 24
2a0d:7100::/48 maxlen: 48
2a0d:7100:1::/48 maxlen: 48
2a0d:7100:2::/48 maxlen: 48
2a0d:7100:3::/48 maxlen: 48
2a0d:7100:4::/48 maxlen: 48
2a0d:7100:5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 14:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:1d:37:b0:46:12:43:3d:c0:a9:44:07:b6:8b:1e:7b:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edcc2d279130d1a1bb3ee5a3b5f3323057b3c4fd
Validity
Not Before: Jul 18 11:07:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=57caf01edf8a06d9327cc0dc63a19b052e4ede58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6a:ba:d1:f3:ac:5a:5f:0f:8c:c5:c0:c3:fe:
26:39:7b:31:4f:dc:07:43:b3:ef:f2:6b:7e:be:99:
88:b9:78:24:bc:93:35:a5:77:85:d3:d7:b2:37:59:
87:d6:5b:1c:6d:5b:00:65:a8:c1:45:1b:fa:d0:b4:
8c:c5:2f:cf:4b:de:d6:dc:e4:0f:67:9a:df:ca:32:
30:06:3c:97:82:6b:8f:64:ad:98:1c:ea:e9:11:31:
b2:cd:61:6f:ef:52:9b:16:6c:f3:1f:ee:7a:68:cc:
a9:ea:49:db:13:93:f0:49:93:23:f9:c8:06:eb:2a:
e8:8f:bc:2e:61:a3:78:ea:72:45:be:2b:3d:e0:38:
3c:7a:5e:0e:da:4b:2d:c1:99:8c:6b:6d:32:0d:83:
80:91:8b:b4:93:83:00:2e:bc:9e:53:00:4e:6f:1e:
73:90:95:bb:8a:05:91:db:8d:23:ac:1f:37:53:3e:
fd:cf:fb:8a:b8:69:46:15:2d:1b:b2:eb:5e:24:04:
74:b1:e7:b6:40:89:39:79:e2:61:12:19:d8:14:db:
1e:3e:ab:9e:7a:13:1c:85:43:3a:97:c2:c6:09:30:
d0:a7:51:d5:80:ba:a9:d8:ab:63:1e:14:f3:e9:dc:
dd:08:72:db:7b:9f:f7:10:b2:c4:9c:4e:68:fb:27:
4a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:CA:F0:1E:DF:8A:06:D9:32:7C:C0:DC:63:A1:9B:05:2E:4E:DE:58
X509v3 Authority Key Identifier:
keyid:ED:CC:2D:27:91:30:D1:A1:BB:3E:E5:A3:B5:F3:32:30:57:B3:C4:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/V8rwHt-KBtkyfMDcY6GbBS5O3lg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.184.0/23
185.235.187.0/24
IPv6:
2a0d:7100::-2a0d:7100:5:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
26:b1:93:f6:25:4e:6d:e3:fc:5d:87:f1:9a:bc:1f:80:d9:54:
84:3b:da:c1:84:d9:b7:bd:d7:40:c7:9f:bd:c0:b5:49:20:69:
21:8e:47:13:ae:8b:ba:60:1e:54:5f:d7:de:97:af:97:81:55:
98:ed:85:54:2d:42:2a:f6:8c:30:71:33:59:f8:09:13:36:41:
93:61:7e:51:ad:53:03:2b:70:22:db:25:d5:a3:78:65:fe:86:
44:0c:9d:f4:0b:6f:f7:9b:3f:4f:33:1b:fe:61:fa:d8:d1:f9:
23:ad:64:b4:0d:42:ee:d8:f6:1f:aa:f6:d0:d4:95:57:a7:06:
5f:7d:66:3c:46:96:59:e3:c4:cf:45:75:f7:5f:41:29:82:10:
0f:20:11:ba:a2:56:a2:4f:48:44:96:5c:3e:88:2a:9f:9f:51:
d4:15:6d:ae:1e:42:06:1f:9a:8f:9f:e7:4d:bb:bf:0c:75:43:
42:ef:96:c4:01:19:02:82:9b:05:67:5a:25:82:d2:fd:dd:69:
1d:90:d0:3e:42:08:86:9e:8e:fc:b0:60:23:0a:4d:d4:e8:62:
3e:c8:67:8c:83:d6:b1:ee:35:9e:22:92:93:e2:88:ba:4e:bd:
28:9f:e1:f6:4d:64:f6:74:28:cb:48:71:27:e9:2b:e3:e4:71:
31:dd:af:2b
-----BEGIN CERTIFICATE-----
MIIFHDCCBASgAwIBAgISAZgdN7BGEkM9wKlEB7aLHnu/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkY2MyZDI3OTEzMGQxYTFiYjNlZTVhM2I1ZjMzMjMwNTdi
M2M0ZmQwHhcNMjUwNzE4MTEwNzI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1N2NhZjAxZWRmOGEwNmQ5MzI3Y2MwZGM2M2ExOWIwNTJlNGVkZTU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGq60fOsWl8PjMXAw/4mOXsxT9wH
Q7Pv8mt+vpmIuXgkvJM1pXeF09eyN1mH1lscbVsAZajBRRv60LSMxS/PS97W3OQP
Z5rfyjIwBjyXgmuPZK2YHOrpETGyzWFv71KbFmzzH+56aMyp6knbE5PwSZMj+cgG
6yroj7wuYaN46nJFvis94Dg8el4O2kstwZmMa20yDYOAkYu0k4MALryeUwBObx5z
kJW7igWR240jrB83Uz79z/uKuGlGFS0bsuteJAR0see2QIk5eeJhEhnYFNsePque
ehMchUM6l8LGCTDQp1HVgLqp2KtjHhTz6dzdCHLbe5/3ELLEnE5o+ydKpQIDAQAB
o4ICKDCCAiQwHQYDVR0OBBYEFFfK8B7figbZMnzA3GOhmwUuTt5YMB8GA1UdIwQY
MBaAFO3MLSeRMNGhuz7lo7XzMjBXs8T9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2N3dEo1RXcwYUc3UHVXanRmTXlNRmV6eFAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83MjQzYjgtYThmOS00NTIwLTgwYzEt
MDU2NWYzMzdkY2JlLzEvVjhyd0h0LUtCdGt5Zk1EY1k2R2JCUzVPM2xnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83MjQzYjgtYThmOS00NTIwLTgwYzEtMDU2NWYzMzdkY2Jl
LzEvN2N3dEo1RXcwYUc3UHVXanRmTXlNRmV6eFAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD4GCCsGAQUFBwEHAQH/BC8wLTASBAIAATAMAwQBueu4AwQA
ueu7MBcEAgACMBEwDwMEACoNcQMHASoNcQAABDANBgkqhkiG9w0BAQsFAAOCAQEA
JrGT9iVObeP8XYfxmrwfgNlUhDvawYTZt73XQMefvcC1SSBpIY5HE66LumAeVF/X
3pevl4FVmO2FVC1CKvaMMHEzWfgJEzZBk2F+Ua1TAytwItsl1aN4Zf6GRAyd9Atv
95s/TzMb/mH62NH5I61ktA1C7tj2H6r20NSVV6cGX31mPEaWWePEz0V1919BKYIQ
DyARuqJWok9IRJZcPogqn59R1BVtrh5CBh+aj5/nTbu/DHVDQu+WxAEZAoKbBWda
JYLS/d1pHZDQPkIIhp6O/LBgIwpN1OhiPshnjIPWse41niKSk+KIuk69KJ/h9k1k
9nQoy0hxJ+kr4+RxMd2vKw==
-----END CERTIFICATE-----
Generated at Mon Jul 28 18:01:01 2025 by rpki-client