Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1-ptKpAdhYg0lpyDSLNoY2JFsweU.roa
File: 1-ptKpAdhYg0lpyDSLNoY2JFsweU.roa (raw, json)
Hash identifier: LCRmAWuaoXOhglOe5eF6Ov4S5w9K3wC333PSQAuDENE=
Subject key identifier: FA:9B:4A:A4:07:61:62:0D:25:A7:20:D2:2C:DA:18:D8:91:6C:C1:E5
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01981D60E3C348B091C33414A83FD923AD24
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1-ptKpAdhYg0lpyDSLNoY2JFsweU.roa
Signing time: Fri 18 Jul 2025 11:52:25 +0000
ROA not before: Fri 18 Jul 2025 11:52:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215826
IP address blocks: 194.33.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 14:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:1d:60:e3:c3:48:b0:91:c3:34:14:a8:3f:d9:23:ad:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jul 18 11:52:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fa9b4aa40761620d25a720d22cda18d8916cc1e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:41:39:e2:d7:d7:b0:f9:f0:b4:74:70:a1:ae:
4a:28:c6:7d:5b:02:58:de:64:b0:26:bc:71:97:04:
fc:64:b3:5c:5d:76:25:94:88:47:fc:53:e4:67:b2:
29:2e:01:fa:03:99:c9:b6:00:22:8e:1c:b7:38:82:
6c:f0:15:4a:34:b1:2f:90:32:3c:35:6e:0c:38:94:
11:33:55:9c:d7:d2:00:54:8b:5f:63:32:6e:0e:c5:
6e:79:b3:b2:7e:d2:d3:d7:8c:6f:3e:da:f8:86:f7:
6b:11:6d:bc:7a:c8:70:11:88:4b:7f:c0:98:b2:31:
ff:eb:5b:c8:35:bf:ad:83:d4:99:cc:34:61:c4:b4:
25:e5:11:cf:9c:cd:dc:1d:10:68:a7:b6:81:15:74:
3a:24:c7:ca:ab:66:3d:78:41:82:ef:9f:90:50:06:
a2:b7:75:93:77:2c:47:ef:b9:88:3b:2a:2e:d2:ae:
79:e8:48:cb:ee:49:eb:0b:73:d6:6c:d5:3a:53:2e:
04:a0:66:30:74:57:a2:5e:8f:ff:3f:0c:7f:e7:f5:
ee:89:05:8a:99:f6:c4:cd:38:e3:84:3c:81:7e:a9:
72:2f:88:42:8f:ba:1c:2e:ce:63:3a:d1:66:2d:4f:
ee:c4:86:f0:e5:a1:55:81:da:97:0c:7a:e2:57:6a:
67:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:9B:4A:A4:07:61:62:0D:25:A7:20:D2:2C:DA:18:D8:91:6C:C1:E5
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1-ptKpAdhYg0lpyDSLNoY2JFsweU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.33.61.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:69:4e:15:7d:9a:8f:20:8a:04:ba:06:d2:f5:9a:c9:39:f4:
6d:30:95:55:4d:71:d7:08:71:91:fd:38:d4:5d:2f:08:ee:5b:
6d:01:90:e6:62:6f:a7:9f:30:41:22:76:cf:6e:e9:21:56:a7:
a1:d9:7d:1d:b9:08:11:cd:5a:64:03:63:bb:6d:57:98:90:97:
01:65:45:3e:63:c7:7a:ff:6e:8f:e1:75:57:90:3f:b6:b2:d1:
b4:0a:4d:fd:da:24:50:fa:bb:6c:1d:f8:c6:fa:02:b6:f4:ab:
53:fe:01:3a:9c:2a:cc:12:9c:7e:a7:66:67:29:73:cd:8d:61:
db:b5:af:83:31:64:03:fb:4a:7b:ee:d4:f1:82:81:32:d8:a6:
2e:ab:a0:bd:ff:05:8f:f1:e5:01:d4:81:21:79:94:40:83:24:
3a:77:ed:ed:0d:68:d2:e8:5c:07:60:00:43:af:27:87:96:ee:
83:8b:03:f0:19:e7:16:1f:a1:5e:3f:a5:10:d0:7f:5e:0f:a4:
5b:f6:40:b0:78:eb:07:f9:4a:9a:75:73:0b:f8:6e:01:5a:e0:
07:7c:89:cf:7d:f5:8f:d3:87:34:8e:c6:8f:26:db:37:e7:bf:
70:d2:82:3c:d8:5f:c6:1e:3e:1e:9d:ac:11:5c:49:df:63:9e:
99:b8:3b:6b
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZgdYOPDSLCRwzQUqD/ZI60kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjUwNzE4MTE1MjI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYTliNGFhNDA3NjE2MjBkMjVhNzIwZDIyY2RhMThkODkxNmNjMWU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEE54tfXsPnwtHRwoa5KKMZ9WwJY
3mSwJrxxlwT8ZLNcXXYllIhH/FPkZ7IpLgH6A5nJtgAijhy3OIJs8BVKNLEvkDI8
NW4MOJQRM1Wc19IAVItfYzJuDsVuebOyftLT14xvPtr4hvdrEW28eshwEYhLf8CY
sjH/61vINb+tg9SZzDRhxLQl5RHPnM3cHRBop7aBFXQ6JMfKq2Y9eEGC75+QUAai
t3WTdyxH77mIOyou0q556EjL7knrC3PWbNU6Uy4EoGYwdFeiXo//Pwx/5/XuiQWK
mfbEzTjjhDyBfqlyL4hCj7ocLs5jOtFmLU/uxIbw5aFVgdqXDHriV2pnxwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPqbSqQHYWINJacg0izaGNiRbMHlMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvMS1wdEtwQWRoWWcwbHB5RFNMTm9ZMkpGc3dlVS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvYzAvNDlhZGM2LWJhODktNDAzZi1hZGE5LThjNTAwN2MyYTRi
Ni8xL2ZWV2FyN19Ba3hKQzRkWTNLWXp4M1NJLVRDWS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMIhPTAN
BgkqhkiG9w0BAQsFAAOCAQEAnWlOFX2ajyCKBLoG0vWayTn0bTCVVU1x1whxkf04
1F0vCO5bbQGQ5mJvp58wQSJ2z27pIVanodl9HbkIEc1aZANju21XmJCXAWVFPmPH
ev9uj+F1V5A/trLRtApN/dokUPq7bB34xvoCtvSrU/4BOpwqzBKcfqdmZylzzY1h
27WvgzFkA/tKe+7U8YKBMtimLqugvf8Fj/HlAdSBIXmUQIMkOnft7Q1o0uhcB2AA
Q68nh5bug4sD8BnnFh+hXj+lENB/Xg+kW/ZAsHjrB/lKmnVzC/huAVrgB3yJz331
j9OHNI7GjybbN+e/cNKCPNhfxh4+Hp2sEVxJ32Oembg7aw==
-----END CERTIFICATE-----
Generated at Wed Jul 23 23:19:59 2025 by rpki-client