Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/hp0A0Koa9dQQ54pxNQGwG-dVcWk.roa
File: hp0A0Koa9dQQ54pxNQGwG-dVcWk.roa (raw, json)
Hash identifier: 90wRcFr9c4/m5fJZ41ap4R95+zSnreS7Qw96HQoXiL0=
Subject key identifier: 86:9D:00:D0:AA:1A:F5:D4:10:E7:8A:71:35:01:B0:1B:E7:55:71:69
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 0197C34B0527C441B6305CEA14F942810820
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/hp0A0Koa9dQQ54pxNQGwG-dVcWk.roa
Signing time: Tue 01 Jul 2025 00:02:42 +0000
ROA not before: Tue 01 Jul 2025 00:02:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 134526
IP address blocks: 194.49.108.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 14:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c3:4b:05:27:c4:41:b6:30:5c:ea:14:f9:42:81:08:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jul 1 00:02:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=869d00d0aa1af5d410e78a713501b01be7557169
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:d2:ce:04:99:22:60:f6:32:4b:c7:77:82:f8:
ea:24:7e:63:9e:5d:2b:c1:6f:9b:44:ac:6f:d6:2f:
9f:79:ac:ae:13:af:2c:9b:f9:32:ae:b9:83:df:74:
e1:33:6c:82:36:79:4b:4a:5e:80:13:cc:f9:44:2f:
73:ff:c8:25:aa:51:5f:87:f1:bd:42:95:48:27:7f:
0f:57:92:32:75:eb:b5:63:4b:e5:e6:7c:87:a6:6c:
e2:b6:b0:45:86:bd:dc:0a:47:3a:19:2d:0e:d1:72:
b6:87:be:6c:47:ae:39:23:69:73:65:42:ce:5e:2a:
2f:09:a8:e4:39:fa:e2:c4:41:d9:9e:a9:27:7c:98:
22:28:ad:7a:a1:bb:66:ee:20:85:7e:a0:4a:90:52:
4a:c1:f6:93:46:2c:ff:fe:07:f5:73:7d:83:84:c0:
26:90:e9:2d:16:16:fa:3b:d3:60:85:d9:81:65:d8:
e3:c8:7a:46:e6:3e:ef:69:ba:04:5c:1a:fc:b9:ba:
32:42:7b:ce:02:1e:4f:16:5d:0e:63:b8:b2:50:d7:
a0:17:a9:ae:da:78:15:79:cf:1c:36:32:9e:3d:94:
68:e9:b4:b3:ea:6b:b1:a3:7c:dc:11:5f:5c:16:39:
cc:9e:bc:36:c5:61:4f:ec:ec:b8:36:91:0c:22:26:
74:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:9D:00:D0:AA:1A:F5:D4:10:E7:8A:71:35:01:B0:1B:E7:55:71:69
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/hp0A0Koa9dQQ54pxNQGwG-dVcWk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.49.108.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:ee:9f:49:15:b0:b6:b0:44:a0:8b:bd:ea:74:d7:1e:1e:e1:
c6:ab:cb:c1:a6:e0:3c:0a:fe:1f:90:3d:9b:bf:73:fb:29:c9:
4f:6b:0b:8f:5f:17:2f:e2:15:a5:65:e8:e1:49:49:75:b5:56:
48:f2:70:49:6b:13:45:d3:6e:6c:96:75:aa:24:d3:c7:be:bb:
6f:18:94:59:4c:a5:1d:f6:5d:03:e7:63:ea:4d:6f:96:9b:5e:
db:66:9d:5f:21:7c:41:3c:3b:3d:48:07:7c:f9:30:cf:e1:e2:
e4:63:1e:14:63:da:8e:c8:2b:f7:dc:aa:b8:b1:ed:21:8e:d9:
38:ac:5f:2c:7a:a2:7a:1b:af:58:39:f6:5e:55:59:e6:87:06:
05:e8:44:64:22:a2:b5:28:1b:6b:92:53:f4:5e:bf:c5:dc:0e:
af:2c:5a:60:5f:8e:4d:61:b3:88:c0:76:ee:f3:ae:26:9f:c6:
ce:4a:72:ac:43:dd:a9:cf:8b:56:c3:ba:28:04:d9:b9:67:af:
6f:03:15:b1:17:a9:30:69:09:bc:2e:39:7b:3c:fc:f3:f6:66:
f4:9a:b4:f3:da:5e:2b:27:c6:f2:ae:8b:ac:eb:e7:4e:c2:49:
a3:bc:f8:66:a8:1a:1a:04:cb:3b:6f:9b:04:63:09:23:6b:3f:
a8:af:f2:f9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZfDSwUnxEG2MFzqFPlCgQggMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjOGZkMWE4YWU1OTk2YzFlNTY5MmMxYThjNDJiZmU5YzNi
YTU3NDUwHhcNMjUwNzAxMDAwMjQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NjlkMDBkMGFhMWFmNWQ0MTBlNzhhNzEzNTAxYjAxYmU3NTU3MTY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8dLOBJkiYPYyS8d3gvjqJH5jnl0r
wW+bRKxv1i+feayuE68sm/kyrrmD33ThM2yCNnlLSl6AE8z5RC9z/8glqlFfh/G9
QpVIJ38PV5Iydeu1Y0vl5nyHpmzitrBFhr3cCkc6GS0O0XK2h75sR645I2lzZULO
XiovCajkOfrixEHZnqknfJgiKK16obtm7iCFfqBKkFJKwfaTRiz//gf1c32DhMAm
kOktFhb6O9NghdmBZdjjyHpG5j7vaboEXBr8uboyQnvOAh5PFl0OY7iyUNegF6mu
2ngVec8cNjKePZRo6bSz6muxo3zcEV9cFjnMnrw2xWFP7Oy4NpEMIiZ03QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIadANCqGvXUEOeKcTUBsBvnVXFpMB8GA1UdIwQY
MBaAFGyP0aiuWZbB5WksGoxCv+nDuldFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMt
ZmVhYzI2ZWFlY2MyLzEvaHAwQTBLb2E5ZFFRNTRweE5RR3dHLWRWY1drLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMtZmVhYzI2ZWFlY2My
LzEvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwjFsMA0G
CSqGSIb3DQEBCwUAA4IBAQC67p9JFbC2sESgi73qdNceHuHGq8vBpuA8Cv4fkD2b
v3P7KclPawuPXxcv4hWlZejhSUl1tVZI8nBJaxNF025slnWqJNPHvrtvGJRZTKUd
9l0D52PqTW+Wm17bZp1fIXxBPDs9SAd8+TDP4eLkYx4UY9qOyCv33Kq4se0hjtk4
rF8seqJ6G69YOfZeVVnmhwYF6ERkIqK1KBtrklP0Xr/F3A6vLFpgX45NYbOIwHbu
864mn8bOSnKsQ92pz4tWw7ooBNm5Z69vAxWxF6kwaQm8Ljl7PPzz9mb0mrTz2l4r
J8byrous6+dOwkmjvPhmqBoaBMs7b5sEYwkjaz+or/L5
-----END CERTIFICATE-----
Generated at Mon Jul 21 21:56:51 2025 by rpki-client