Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/DkrqBWdKXLO6zlgYF9nBanc3tCY.roa
File: DkrqBWdKXLO6zlgYF9nBanc3tCY.roa (raw, json)
Hash identifier: D0HuRt9BsDF5UOb7SYENCbRIf9DzDWOZO4bE+KdMZlU=
Subject key identifier: 0E:4A:EA:05:67:4A:5C:B3:BA:CE:58:18:17:D9:C1:6A:77:37:B4:26
Certificate issuer: /CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Certificate serial: 019836E5C7BA1E9DB829D584891F57AAC763
Authority key identifier: FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/DkrqBWdKXLO6zlgYF9nBanc3tCY.roa
Signing time: Wed 23 Jul 2025 10:48:05 +0000
ROA not before: Wed 23 Jul 2025 10:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 193.36.162.0/24 maxlen: 24
212.87.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft
rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 07:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:36:e5:c7:ba:1e:9d:b8:29:d5:84:89:1f:57:aa:c7:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Validity
Not Before: Jul 23 10:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0e4aea05674a5cb3bace581817d9c16a7737b426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d0:35:e9:7a:14:32:d2:39:01:14:20:fb:17:
52:b7:a2:07:58:5a:e1:17:1c:99:bc:9e:40:66:39:
09:aa:06:ec:2d:5a:5e:da:cc:0d:98:97:82:8d:d1:
c7:4d:b9:c4:fb:0f:5d:5d:28:90:16:11:e6:fc:52:
4e:35:29:73:2e:e8:b3:4c:bb:45:bf:5f:5a:cf:7e:
1e:e0:dd:7e:b8:ca:c2:83:e0:27:9c:d0:6d:d4:4c:
ab:da:95:77:d2:b1:fa:d2:32:23:63:1d:5f:b4:7f:
cd:89:dc:4a:5f:dd:d6:83:42:a3:15:96:b7:b4:b2:
68:d3:3a:15:b8:ac:75:fd:0f:05:06:0e:20:17:a3:
2f:b3:1a:c2:b2:4d:27:fb:9a:01:7c:ee:0b:c1:40:
18:54:cd:97:8f:22:dd:f0:b6:88:68:be:c8:a1:fb:
1d:72:2e:d5:f7:3b:40:b4:eb:e3:ca:c8:f2:0c:f5:
6b:6c:b7:55:45:af:ca:fd:3a:01:9c:0d:fb:74:ef:
c3:03:6a:90:5a:c5:9e:79:24:2c:b7:de:30:ad:b2:
15:96:51:c2:fa:fa:fa:be:d2:90:06:d3:41:f0:7d:
09:28:fa:9a:46:bb:cb:9d:86:12:a4:c2:b0:02:62:
16:f2:5f:a9:28:9d:87:06:b2:19:b8:af:45:b0:23:
a5:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:4A:EA:05:67:4A:5C:B3:BA:CE:58:18:17:D9:C1:6A:77:37:B4:26
X509v3 Authority Key Identifier:
keyid:FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/DkrqBWdKXLO6zlgYF9nBanc3tCY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.36.162.0/24
212.87.201.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:5d:1c:e3:d2:a6:57:41:ab:41:54:73:07:71:5c:bd:b6:61:
ec:fb:c1:93:c9:bd:a9:cf:17:6e:37:1c:79:e8:c4:4f:4b:65:
c6:53:e9:01:fb:33:3e:30:fc:a9:3a:2f:4a:33:5f:c7:6b:d8:
e7:e5:89:9a:20:39:21:ce:a7:da:58:37:a2:44:b0:48:7e:49:
e6:87:1d:b6:d6:fd:d0:c6:ed:ef:b0:fb:1f:7e:da:b6:d5:ae:
8e:7d:31:ae:e3:70:73:7d:da:8a:d3:2f:58:8d:f0:6a:4b:82:
f9:eb:3c:b5:bd:0f:7b:34:ca:39:04:c4:f5:95:44:4c:e3:cb:
eb:d1:04:57:c4:a3:6b:0d:75:27:5f:43:05:df:d6:34:21:17:
2e:cc:ab:35:87:e1:75:d1:80:74:c7:f7:bd:89:f5:27:7d:94:
5a:07:66:e5:5d:73:93:60:a5:07:54:23:6b:97:0e:01:5c:72:
72:7c:83:b3:e8:07:92:7a:ab:63:01:e0:15:72:d3:72:d2:fa:
22:9b:0a:9f:c1:98:6c:f3:a9:fd:ff:92:c6:2d:4f:da:b7:7f:
a6:26:f4:49:f7:e6:fc:7f:81:b5:06:e2:94:29:4e:66:2a:fa:
d3:89:b3:ee:68:d4:28:f4:b0:1e:2e:ee:a3:13:cf:96:fd:44:
f5:89:b1:63
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZg25ce6Hp24KdWEiR9XqsdjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmODIzMDlhNjgxNDY3OGFkNzJlM2YzMWE0ZmUwMjcyZjQw
YmQ5ODYwHhcNMjUwNzIzMTA0ODA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZTRhZWEwNTY3NGE1Y2IzYmFjZTU4MTgxN2Q5YzE2YTc3MzdiNDI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNA16XoUMtI5ARQg+xdSt6IHWFrh
FxyZvJ5AZjkJqgbsLVpe2swNmJeCjdHHTbnE+w9dXSiQFhHm/FJONSlzLuizTLtF
v19az34e4N1+uMrCg+AnnNBt1Eyr2pV30rH60jIjYx1ftH/NidxKX93Wg0KjFZa3
tLJo0zoVuKx1/Q8FBg4gF6MvsxrCsk0n+5oBfO4LwUAYVM2XjyLd8LaIaL7Iofsd
ci7V9ztAtOvjysjyDPVrbLdVRa/K/ToBnA37dO/DA2qQWsWeeSQst94wrbIVllHC
+vr6vtKQBtNB8H0JKPqaRrvLnYYSpMKwAmIW8l+pKJ2HBrIZuK9FsCOlGQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFA5K6gVnSlyzus5YGBfZwWp3N7QmMB8GA1UdIwQY
MBaAFP+CMJpoFGeK1y4/MaT+AnL0C9mGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzRJd21tZ1VaNHJYTGo4eHBQNENjdlFMMllZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC85ZmE4M2QtYjJhMy00NWU0LTg0OTkt
ZjUyNTgxNjQwMmJkLzEvRGtycUJXZEtYTE82emxnWUY5bkJhbmMzdENZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC85ZmE4M2QtYjJhMy00NWU0LTg0OTktZjUyNTgxNjQwMmJk
LzEvXzRJd21tZ1VaNHJYTGo4eHBQNENjdlFMMllZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwSSiAwQA
1FfJMA0GCSqGSIb3DQEBCwUAA4IBAQC4XRzj0qZXQatBVHMHcVy9tmHs+8GTyb2p
zxduNxx56MRPS2XGU+kB+zM+MPypOi9KM1/Ha9jn5YmaIDkhzqfaWDeiRLBIfknm
hx221v3Qxu3vsPsfftq21a6OfTGu43BzfdqK0y9YjfBqS4L56zy1vQ97NMo5BMT1
lURM48vr0QRXxKNrDXUnX0MF39Y0IRcuzKs1h+F10YB0x/e9ifUnfZRaB2blXXOT
YKUHVCNrlw4BXHJyfIOz6AeSeqtjAeAVctNy0voimwqfwZhs86n9/5LGLU/at3+m
JvRJ9+b8f4G1BuKUKU5mKvrTibPuaNQo9LAeLu6jE8+W/UT1ibFj
-----END CERTIFICATE-----
Generated at Fri Jul 25 12:52:45 2025 by rpki-client