Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/Br2XYkCHvC72aVRHi890y0oAZCY.roa
File: Br2XYkCHvC72aVRHi890y0oAZCY.roa (raw, json)
Hash identifier: liAUc/8jtKHDJtMd1Lz3Ey9Fi3Fzo3UvTBAa+7u1hUg=
Subject key identifier: 06:BD:97:62:40:87:BC:2E:F6:69:54:47:8B:CF:74:CB:4A:00:64:26
Certificate issuer: /CN=ee28d94d484033f77e6f9381a02da3e242167dae
Certificate serial: 0197E3FCC4C2D72CF645D8EC2C9D1F664141
Authority key identifier: EE:28:D9:4D:48:40:33:F7:7E:6F:93:81:A0:2D:A3:E2:42:16:7D:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7ijZTUhAM_d-b5OBoC2j4kIWfa4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/Br2XYkCHvC72aVRHi890y0oAZCY.roa
Signing time: Mon 07 Jul 2025 08:24:42 +0000
ROA not before: Mon 07 Jul 2025 08:24:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210707
IP address blocks: 45.156.116.0/24 maxlen: 24
45.156.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/7ijZTUhAM_d-b5OBoC2j4kIWfa4.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/7ijZTUhAM_d-b5OBoC2j4kIWfa4.mft
rsync://rpki.ripe.net/repository/DEFAULT/7ijZTUhAM_d-b5OBoC2j4kIWfa4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:e3:fc:c4:c2:d7:2c:f6:45:d8:ec:2c:9d:1f:66:41:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee28d94d484033f77e6f9381a02da3e242167dae
Validity
Not Before: Jul 7 08:24:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=06bd97624087bc2ef66954478bcf74cb4a006426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:75:6d:d1:23:cb:19:8b:87:32:6b:8f:9b:55:
9d:d6:68:5d:35:a9:a7:4f:56:97:ce:7f:59:1d:86:
f3:f8:b4:f6:ce:0f:11:1d:16:ac:48:d4:91:7d:9c:
7f:23:b4:7b:f7:23:9b:e1:e5:cb:cd:c7:27:bb:ce:
61:d3:1a:97:40:7e:51:cb:d5:64:6d:35:82:38:bd:
5e:7b:ba:de:5a:af:07:d2:64:a7:48:95:f7:54:a9:
94:bc:21:b3:e2:56:28:4a:3d:94:3f:bb:20:06:47:
95:7d:e9:52:50:3c:9f:f1:6c:8f:9d:1c:b7:ca:b4:
a1:8f:c1:15:37:2f:a0:40:41:20:0b:cd:e5:bb:2a:
cf:84:c2:31:15:f9:11:86:43:00:b5:ec:a2:84:7c:
e9:21:11:7a:48:da:2f:fa:bf:31:84:41:f2:18:ca:
33:92:bd:4b:0a:58:45:0b:00:4a:0f:8d:cf:91:52:
3e:34:7c:35:12:04:c1:27:5b:c2:40:72:93:ec:ce:
ac:3a:e3:77:58:02:2b:b9:01:a5:ba:5b:7a:b6:2f:
e7:44:b3:51:ba:2c:ac:23:45:0d:97:e2:af:1b:70:
b1:f2:94:87:18:0a:29:20:5f:66:2f:0f:7c:ed:16:
07:bc:82:8e:ac:2d:e4:77:84:2a:77:69:ad:60:e7:
20:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:BD:97:62:40:87:BC:2E:F6:69:54:47:8B:CF:74:CB:4A:00:64:26
X509v3 Authority Key Identifier:
keyid:EE:28:D9:4D:48:40:33:F7:7E:6F:93:81:A0:2D:A3:E2:42:16:7D:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ijZTUhAM_d-b5OBoC2j4kIWfa4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/Br2XYkCHvC72aVRHi890y0oAZCY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/7ijZTUhAM_d-b5OBoC2j4kIWfa4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.116.0/23
Signature Algorithm: sha256WithRSAEncryption
80:30:ef:ea:4a:c0:89:19:d6:68:4e:9b:c0:45:a2:8c:d5:95:
c2:08:c8:cc:93:be:5f:f2:21:8c:84:52:b7:e0:67:8f:01:34:
7b:ad:cf:89:ee:eb:8b:e2:d8:ee:d9:34:d9:d5:73:95:5d:61:
95:ed:51:55:52:cf:aa:05:65:66:01:ea:1b:00:d6:25:ff:ef:
5b:af:ef:5c:06:13:79:06:68:b2:31:5a:8f:3f:57:a4:0c:39:
d3:49:a9:5c:bc:22:1f:ec:27:98:be:d3:35:c2:4f:33:20:a3:
8b:a4:28:1b:04:ea:0f:ed:20:43:9a:71:8c:76:19:2d:4d:2d:
e1:3b:90:13:c7:19:eb:62:86:38:85:4b:c0:3b:0b:f8:f9:3a:
86:4d:b6:b5:a4:2c:5d:74:1d:37:70:73:14:ad:23:52:3c:99:
54:b4:1a:55:a1:e6:b8:21:de:ea:39:bf:04:b9:19:d7:c4:f0:
8f:ce:75:92:7f:72:7d:5d:61:5d:eb:9c:fa:26:c6:58:e1:91:
4c:a1:9a:9e:e0:86:74:a3:c8:a3:5b:95:e2:eb:44:76:d0:ba:
20:89:e5:98:6a:38:30:ae:dc:c3:80:8d:93:db:57:58:c4:cb:
66:a8:b9:49:6a:88:0b:f7:4c:99:70:9c:5c:06:8e:70:9d:61:
69:4a:cf:57
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZfj/MTC1yz2RdjsLJ0fZkFBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMjhkOTRkNDg0MDMzZjc3ZTZmOTM4MWEwMmRhM2UyNDIx
NjdkYWUwHhcNMjUwNzA3MDgyNDQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNmJkOTc2MjQwODdiYzJlZjY2OTU0NDc4YmNmNzRjYjRhMDA2NDI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3Vt0SPLGYuHMmuPm1Wd1mhdNamn
T1aXzn9ZHYbz+LT2zg8RHRasSNSRfZx/I7R79yOb4eXLzccnu85h0xqXQH5Ry9Vk
bTWCOL1ee7reWq8H0mSnSJX3VKmUvCGz4lYoSj2UP7sgBkeVfelSUDyf8WyPnRy3
yrShj8EVNy+gQEEgC83luyrPhMIxFfkRhkMAteyihHzpIRF6SNov+r8xhEHyGMoz
kr1LClhFCwBKD43PkVI+NHw1EgTBJ1vCQHKT7M6sOuN3WAIruQGlult6ti/nRLNR
uiysI0UNl+KvG3Cx8pSHGAopIF9mLw987RYHvIKOrC3kd4Qqd2mtYOcgywIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAa9l2JAh7wu9mlUR4vPdMtKAGQmMB8GA1UdIwQY
MBaAFO4o2U1IQDP3fm+TgaAto+JCFn2uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2lqWlRVaEFNX2QtYjVPQm9DMmo0a0lXZmE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9lYWRiZjgtOGU0NC00MjcxLWE3MmIt
MGM3NTZmZDI0OGM4LzEvQnIyWFlrQ0h2QzcyYVZSSGk4OTB5MG9BWkNZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC9lYWRiZjgtOGU0NC00MjcxLWE3MmItMGM3NTZmZDI0OGM4
LzEvN2lqWlRVaEFNX2QtYjVPQm9DMmo0a0lXZmE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLZx0MA0G
CSqGSIb3DQEBCwUAA4IBAQCAMO/qSsCJGdZoTpvARaKM1ZXCCMjMk75f8iGMhFK3
4GePATR7rc+J7uuL4tju2TTZ1XOVXWGV7VFVUs+qBWVmAeobANYl/+9br+9cBhN5
BmiyMVqPP1ekDDnTSalcvCIf7CeYvtM1wk8zIKOLpCgbBOoP7SBDmnGMdhktTS3h
O5ATxxnrYoY4hUvAOwv4+TqGTba1pCxddB03cHMUrSNSPJlUtBpVoea4Id7qOb8E
uRnXxPCPznWSf3J9XWFd65z6JsZY4ZFMoZqe4IZ0o8ijW5Xi60R20LogieWYajgw
rtzDgI2T21dYxMtmqLlJaogL90yZcJxcBo5wnWFpSs9X
-----END CERTIFICATE-----
Generated at Wed Jul 23 23:58:21 2025 by rpki-client