Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/TegvrcGr9hvS3QzCUzNC4Vk9MNo.roa
File: TegvrcGr9hvS3QzCUzNC4Vk9MNo.roa (raw, json)
Hash identifier: dGQ+Dmdb8WOfaB6xqwKHrQFmTJRWT1NHWnYcNG0jTyw=
Subject key identifier: 4D:E8:2F:AD:C1:AB:F6:1B:D2:DD:0C:C2:53:33:42:E1:59:3D:30:DA
Certificate issuer: /CN=0c5140282591f9912f9639ee1412b6d1dcff0861
Certificate serial: 0197EDC178777543C81209F95BA5CF70FF13
Authority key identifier: 0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/TegvrcGr9hvS3QzCUzNC4Vk9MNo.roa
Signing time: Wed 09 Jul 2025 05:56:08 +0000
ROA not before: Wed 09 Jul 2025 05:56:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211970
IP address blocks: 185.234.245.0/24 maxlen: 24
188.72.0.0/24 maxlen: 24
188.72.2.0/24 maxlen: 24
188.72.3.0/24 maxlen: 24
188.72.51.0/24 maxlen: 24
188.72.56.0/24 maxlen: 24
188.72.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ed:c1:78:77:75:43:c8:12:09:f9:5b:a5:cf:70:ff:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c5140282591f9912f9639ee1412b6d1dcff0861
Validity
Not Before: Jul 9 05:56:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4de82fadc1abf61bd2dd0cc2533342e1593d30da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:64:f0:96:85:d3:07:d4:3e:25:ba:c2:5e:67:
b4:75:c0:4d:06:8c:af:3b:71:af:7f:8e:e2:a0:75:
7a:ca:0f:38:da:5c:a5:45:84:e7:65:3d:c4:36:33:
e2:a6:ce:fc:17:87:a8:e4:4f:4e:08:45:4c:a0:14:
1f:de:b4:d7:88:d9:e6:16:7f:c2:69:b9:cc:0e:29:
ca:b8:bc:84:1d:72:08:2a:f6:86:74:7a:3f:00:2d:
5a:18:cb:eb:57:fc:8a:a6:7e:88:7b:3c:41:04:bd:
b4:ac:01:1b:83:f6:90:62:9a:79:f3:0e:e2:14:30:
18:37:76:88:1d:63:e8:57:d4:9a:c4:d3:ab:40:0d:
03:1f:09:34:88:c3:a3:2a:9b:99:e7:b9:73:16:ab:
f3:b4:b3:48:1c:52:a9:40:7d:2f:e8:2a:e9:b8:0c:
85:14:41:ba:44:5e:50:75:0f:25:a4:71:9a:7b:d9:
c0:a7:65:59:20:9a:07:27:79:21:64:05:ca:17:f2:
0d:ed:15:ea:e5:56:92:57:d1:c6:ea:e9:09:8a:f4:
4c:a1:45:e3:4e:cb:bd:83:c0:ab:26:cf:5a:b9:92:
9e:46:9c:24:2e:0f:49:69:08:67:93:df:49:54:97:
5e:5f:d0:2b:52:27:a6:39:25:ce:e2:f9:b7:84:29:
ff:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:E8:2F:AD:C1:AB:F6:1B:D2:DD:0C:C2:53:33:42:E1:59:3D:30:DA
X509v3 Authority Key Identifier:
keyid:0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/TegvrcGr9hvS3QzCUzNC4Vk9MNo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.234.245.0/24
188.72.0.0/24
188.72.2.0/23
188.72.51.0/24
188.72.56.0/23
Signature Algorithm: sha256WithRSAEncryption
54:14:34:0b:d1:03:c0:aa:1c:0f:40:76:c9:c9:d1:4f:e7:7e:
bb:ce:d7:3e:36:dd:8d:f6:df:e8:4b:9c:43:25:c6:66:14:69:
dc:de:cd:09:fc:62:6d:3a:9f:7b:02:5a:40:4e:55:6b:56:4e:
b3:05:e7:19:ea:9b:83:f7:86:35:67:01:6b:23:e6:7c:05:88:
f6:7c:03:1e:a1:29:72:43:0c:15:18:0b:ce:0e:35:3b:14:b1:
c5:71:6f:41:61:ee:a4:e2:3d:40:68:ed:b1:ed:80:ab:41:a4:
0e:e5:ab:77:30:50:8e:7f:22:8b:c0:c1:81:66:07:e5:cb:6a:
60:42:e4:a4:d8:64:b4:46:4a:2b:59:40:50:ab:1a:f6:ab:83:
29:87:c7:3f:bc:6e:f3:94:ee:89:c2:fe:8f:3b:15:76:cd:77:
a6:2f:f6:9f:56:02:10:91:69:ae:cc:81:a4:f7:cc:1d:ef:43:
7a:71:48:21:90:2c:2b:de:51:19:69:e1:7a:58:14:d8:73:6f:
01:8d:30:b5:c3:5d:48:ba:9a:8f:c5:a5:04:77:08:62:23:70:
41:2d:ec:45:0e:40:2f:cb:44:1c:0a:c2:38:c9:c1:f2:fa:f5:
bd:1f:25:63:2a:24:20:2e:de:68:b4:63:2e:2b:1e:8a:8b:a7:
f7:40:a5:96
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZftwXh3dUPIEgn5W6XPcP8TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjNTE0MDI4MjU5MWY5OTEyZjk2MzllZTE0MTJiNmQxZGNm
ZjA4NjEwHhcNMjUwNzA5MDU1NjA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZGU4MmZhZGMxYWJmNjFiZDJkZDBjYzI1MzMzNDJlMTU5M2QzMGRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA32TwloXTB9Q+JbrCXme0dcBNBoyv
O3Gvf47ioHV6yg842lylRYTnZT3ENjPips78F4eo5E9OCEVMoBQf3rTXiNnmFn/C
abnMDinKuLyEHXIIKvaGdHo/AC1aGMvrV/yKpn6IezxBBL20rAEbg/aQYpp58w7i
FDAYN3aIHWPoV9SaxNOrQA0DHwk0iMOjKpuZ57lzFqvztLNIHFKpQH0v6CrpuAyF
FEG6RF5QdQ8lpHGae9nAp2VZIJoHJ3khZAXKF/IN7RXq5VaSV9HG6ukJivRMoUXj
Tsu9g8CrJs9auZKeRpwkLg9JaQhnk99JVJdeX9ArUiemOSXO4vm3hCn/pQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFE3oL63Bq/Yb0t0MwlMzQuFZPTDaMB8GA1UdIwQY
MBaAFAxRQCglkfmRL5Y57hQSttHc/whhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wNTU0YTItZDNkOS00ZmM0LThlZDUt
ZGU5MTQ2OWQzNzcyLzEvVGVndnJjR3I5aHZTM1F6Q1V6TkM0Vms5TU5vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy8wNTU0YTItZDNkOS00ZmM0LThlZDUtZGU5MTQ2OWQzNzcy
LzEvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAuer1AwQA
vEgAAwQBvEgCAwQAvEgzAwQBvEg4MA0GCSqGSIb3DQEBCwUAA4IBAQBUFDQL0QPA
qhwPQHbJydFP5367ztc+Nt2N9t/oS5xDJcZmFGnc3s0J/GJtOp97AlpATlVrVk6z
BecZ6puD94Y1ZwFrI+Z8BYj2fAMeoSlyQwwVGAvODjU7FLHFcW9BYe6k4j1AaO2x
7YCrQaQO5at3MFCOfyKLwMGBZgfly2pgQuSk2GS0RkorWUBQqxr2q4Mph8c/vG7z
lO6Jwv6POxV2zXemL/afVgIQkWmuzIGk98wd70N6cUghkCwr3lEZaeF6WBTYc28B
jTC1w11IupqPxaUEdwhiI3BBLexFDkAvy0QcCsI4ycHy+vW9HyVjKiQgLt5otGMu
Kx6Ki6f3QKWW
-----END CERTIFICATE-----
Generated at Sun Jul 27 10:28:26 2025 by rpki-client