Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/1eb97a-83bd-4448-b09e-af64a57ac8d2/1/Sz3A36mpXKvKSviPB0CVSHcpfqc.roa
File: Sz3A36mpXKvKSviPB0CVSHcpfqc.roa (raw, json)
Hash identifier: BsK+1PFvLcgEsmr0LQsXuVFQVVOhDXlPs3qghgET7d4=
Subject key identifier: 4B:3D:C0:DF:A9:A9:5C:AB:CA:4A:F8:8F:07:40:95:48:77:29:7E:A7
Certificate issuer: /CN=d2628e069b5ed8b4559343b5b67f5ab4f92251fe
Certificate serial: 0198137A2BC67E13146DA717EC57DDB15252
Authority key identifier: D2:62:8E:06:9B:5E:D8:B4:55:93:43:B5:B6:7F:5A:B4:F9:22:51:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0mKOBpte2LRVk0O1tn9atPkiUf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/1eb97a-83bd-4448-b09e-af64a57ac8d2/1/Sz3A36mpXKvKSviPB0CVSHcpfqc.roa
Signing time: Wed 16 Jul 2025 13:43:50 +0000
ROA not before: Wed 16 Jul 2025 13:43:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34984
IP address blocks: 185.183.164.0/22 maxlen: 24
185.183.164.0/24 maxlen: 24
185.183.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/1eb97a-83bd-4448-b09e-af64a57ac8d2/1/0mKOBpte2LRVk0O1tn9atPkiUf4.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/1eb97a-83bd-4448-b09e-af64a57ac8d2/1/0mKOBpte2LRVk0O1tn9atPkiUf4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0mKOBpte2LRVk0O1tn9atPkiUf4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 14:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:13:7a:2b:c6:7e:13:14:6d:a7:17:ec:57:dd:b1:52:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2628e069b5ed8b4559343b5b67f5ab4f92251fe
Validity
Not Before: Jul 16 13:43:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4b3dc0dfa9a95cabca4af88f0740954877297ea7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:8c:1a:17:4b:d5:ad:45:9a:ba:9b:28:95:28:
55:22:98:92:42:af:59:02:08:b4:45:04:05:8c:ec:
97:8b:38:5b:73:9a:ea:33:8c:36:03:60:75:0f:e6:
8f:d6:2f:9b:f7:62:74:31:30:97:7c:10:e0:23:b1:
6b:db:3f:52:a6:43:61:f2:8c:62:33:27:89:fe:32:
a2:d2:b0:53:41:fb:7b:59:4e:4d:c5:40:6a:d9:b2:
ee:1d:41:b9:79:98:2b:bd:7c:ff:fc:ef:45:29:fe:
0b:7e:90:c4:bc:c2:98:c6:bd:5d:66:ac:42:ad:e8:
d4:66:32:ba:44:72:f7:6c:5e:6b:fb:6f:66:dc:93:
8a:d2:f2:e7:ee:ba:e4:73:eb:95:03:5a:fa:ea:26:
f8:02:31:aa:7e:f1:f8:d6:cf:b8:72:6c:2a:b0:13:
da:53:5a:8b:04:7e:e2:a4:f2:fa:a8:a7:d2:b0:cb:
16:0f:a0:52:25:40:93:16:e7:82:01:da:92:66:05:
26:0f:89:0a:f9:a3:6b:1e:10:d0:5b:48:93:08:fb:
b3:25:e0:fa:06:af:65:94:48:0c:e6:46:56:d9:34:
04:75:47:20:53:9d:57:79:88:13:3f:73:1c:2b:57:
c6:96:40:8b:63:51:9c:7b:f1:28:32:b9:b7:43:a8:
8d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:3D:C0:DF:A9:A9:5C:AB:CA:4A:F8:8F:07:40:95:48:77:29:7E:A7
X509v3 Authority Key Identifier:
keyid:D2:62:8E:06:9B:5E:D8:B4:55:93:43:B5:B6:7F:5A:B4:F9:22:51:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mKOBpte2LRVk0O1tn9atPkiUf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1eb97a-83bd-4448-b09e-af64a57ac8d2/1/Sz3A36mpXKvKSviPB0CVSHcpfqc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1eb97a-83bd-4448-b09e-af64a57ac8d2/1/0mKOBpte2LRVk0O1tn9atPkiUf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.183.164.0/22
Signature Algorithm: sha256WithRSAEncryption
45:10:b0:31:e6:29:fc:3d:e5:8c:69:0e:30:20:a5:63:5e:06:
e6:04:a8:15:b3:f7:12:e3:25:87:4a:1f:74:90:f4:ec:34:ce:
f0:e8:2a:a9:3a:d3:c4:26:70:e9:9d:a4:4c:4d:0c:83:2f:f4:
e8:ad:d7:52:fe:0f:ee:ef:a5:96:24:2b:1e:91:b1:b4:6f:88:
51:c8:6d:5f:4e:b7:5d:84:19:b4:d3:16:d6:61:4b:eb:93:e7:
53:a2:39:91:e4:e6:f1:30:c5:d8:45:2b:fb:b5:57:15:d9:64:
47:9d:79:f1:58:27:46:ed:8d:b6:92:fe:9d:12:63:8f:e6:d5:
c6:a8:51:03:92:24:7e:ee:4f:c2:81:19:cb:87:97:b9:6f:f4:
0f:65:a8:e2:20:a6:79:82:35:bf:b6:7d:1a:80:f1:5c:b3:c6:
f6:ae:c8:81:e7:22:59:43:05:c8:07:d2:9a:f2:32:4a:b2:66:
59:30:cd:36:08:03:02:c6:6e:ff:14:70:b6:b6:24:b3:47:da:
77:59:76:e0:9f:38:8e:d5:c9:73:20:1d:d9:da:32:a6:3d:1a:
1d:e7:cd:d7:36:72:ba:d9:cb:5d:9a:19:a6:ba:04:98:f7:8c:
9f:48:16:90:8b:a9:17:62:4d:36:72:a5:84:f8:9a:e6:ab:a8:
ba:b3:f0:ae
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZgTeivGfhMUbacX7FfdsVJSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyNjI4ZTA2OWI1ZWQ4YjQ1NTkzNDNiNWI2N2Y1YWI0Zjky
MjUxZmUwHhcNMjUwNzE2MTM0MzUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YjNkYzBkZmE5YTk1Y2FiY2E0YWY4OGYwNzQwOTU0ODc3Mjk3ZWE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4IwaF0vVrUWaupsolShVIpiSQq9Z
Agi0RQQFjOyXizhbc5rqM4w2A2B1D+aP1i+b92J0MTCXfBDgI7Fr2z9SpkNh8oxi
MyeJ/jKi0rBTQft7WU5NxUBq2bLuHUG5eZgrvXz//O9FKf4LfpDEvMKYxr1dZqxC
rejUZjK6RHL3bF5r+29m3JOK0vLn7rrkc+uVA1r66ib4AjGqfvH41s+4cmwqsBPa
U1qLBH7ipPL6qKfSsMsWD6BSJUCTFueCAdqSZgUmD4kK+aNrHhDQW0iTCPuzJeD6
Bq9llEgM5kZW2TQEdUcgU51XeYgTP3McK1fGlkCLY1Gce/EoMrm3Q6iNHQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEs9wN+pqVyrykr4jwdAlUh3KX6nMB8GA1UdIwQY
MBaAFNJijgabXti0VZNDtbZ/WrT5IlH+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMG1LT0JwdGUyTFJWazBPMXRuOWF0UGtpVWY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8xZWI5N2EtODNiZC00NDQ4LWIwOWUt
YWY2NGE1N2FjOGQyLzEvU3ozQTM2bXBYS3ZLU3ZpUEIwQ1ZTSGNwZnFjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC8xZWI5N2EtODNiZC00NDQ4LWIwOWUtYWY2NGE1N2FjOGQy
LzEvMG1LT0JwdGUyTFJWazBPMXRuOWF0UGtpVWY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCubekMA0G
CSqGSIb3DQEBCwUAA4IBAQBFELAx5in8PeWMaQ4wIKVjXgbmBKgVs/cS4yWHSh90
kPTsNM7w6CqpOtPEJnDpnaRMTQyDL/TorddS/g/u76WWJCsekbG0b4hRyG1fTrdd
hBm00xbWYUvrk+dTojmR5ObxMMXYRSv7tVcV2WRHnXnxWCdG7Y22kv6dEmOP5tXG
qFEDkiR+7k/CgRnLh5e5b/QPZajiIKZ5gjW/tn0agPFcs8b2rsiB5yJZQwXIB9Ka
8jJKsmZZMM02CAMCxm7/FHC2tiSzR9p3WXbgnziO1clzIB3Z2jKmPRod583XNnK6
2ctdmhmmugSY94yfSBaQi6kXYk02cqWE+Jrmq6i6s/Cu
-----END CERTIFICATE-----
Generated at Wed Jul 23 18:16:54 2025 by rpki-client