Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/flT0rlNauOXStzroCqDwedgvmO8.roa
File: flT0rlNauOXStzroCqDwedgvmO8.roa (raw, json)
Hash identifier: 8zjBPUweiTtjRooUddXczYMKyn0J34pB87VyPU3GTV8=
Subject key identifier: 7E:54:F4:AE:53:5A:B8:E5:D2:B7:3A:E8:0A:A0:F0:79:D8:2F:98:EF
Certificate issuer: /CN=60dad95ba2b1eb3dd7738002fc68aa95588c3bf1
Certificate serial: 0197F84F2FD8970057210A0447C173FDC61C
Authority key identifier: 60:DA:D9:5B:A2:B1:EB:3D:D7:73:80:02:FC:68:AA:95:58:8C:3B:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/flT0rlNauOXStzroCqDwedgvmO8.roa
Signing time: Fri 11 Jul 2025 07:07:08 +0000
ROA not before: Fri 11 Jul 2025 07:07:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21887
IP address blocks: 178.157.48.0/20 maxlen: 24
185.239.68.0/22 maxlen: 24
212.50.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:f8:4f:2f:d8:97:00:57:21:0a:04:47:c1:73:fd:c6:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60dad95ba2b1eb3dd7738002fc68aa95588c3bf1
Validity
Not Before: Jul 11 07:07:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7e54f4ae535ab8e5d2b73ae80aa0f079d82f98ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:40:52:27:c5:37:0f:de:29:e9:bf:96:dc:a3:
c7:f4:79:25:8a:1d:37:57:c3:51:75:22:74:8d:37:
d3:35:b6:e4:a5:dc:0f:de:37:e2:9a:29:88:02:1b:
f1:4a:e7:c0:f0:b0:2f:53:b9:cf:bc:55:99:f8:0a:
1e:d5:e4:05:71:68:89:42:e4:a5:48:bc:70:eb:d7:
f7:47:ef:d2:70:e3:11:5c:55:e1:4e:f5:82:7b:14:
9f:78:79:88:f7:09:0f:1d:a4:67:a2:b3:22:9e:df:
53:40:02:8d:ca:5f:f1:5e:b2:19:c1:50:a5:63:f3:
11:d3:c4:98:09:e6:19:2f:12:dd:3e:b8:08:6b:4e:
b0:f8:d3:9d:f1:7f:22:2f:f7:ba:cf:f7:84:9a:07:
a1:26:d3:83:50:3e:ff:02:13:db:3b:c5:b0:41:90:
f2:28:48:63:0f:ca:f1:46:99:53:84:9c:78:a2:72:
fd:8a:28:b0:53:6c:b0:b3:8a:5a:90:6e:a5:b9:4d:
62:9a:a1:15:23:ad:f7:56:2a:c4:89:37:7f:0b:bb:
9c:c7:b7:ba:4e:ce:80:8b:6f:0e:a2:a8:d2:ae:99:
68:91:93:fa:28:dd:d5:fe:dd:8b:18:a0:6f:e5:32:
d1:59:6a:ef:27:37:55:91:3f:7a:e1:6e:ab:22:df:
1b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:54:F4:AE:53:5A:B8:E5:D2:B7:3A:E8:0A:A0:F0:79:D8:2F:98:EF
X509v3 Authority Key Identifier:
keyid:60:DA:D9:5B:A2:B1:EB:3D:D7:73:80:02:FC:68:AA:95:58:8C:3B:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/flT0rlNauOXStzroCqDwedgvmO8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.157.48.0/20
185.239.68.0/22
212.50.224.0/19
Signature Algorithm: sha256WithRSAEncryption
26:bc:ea:1a:26:ce:cf:6f:b4:7d:14:8f:21:fb:76:7c:37:b0:
7c:a2:ec:a5:0f:fd:89:17:32:07:ab:c1:5c:5e:30:79:fa:e9:
42:6e:37:2f:78:f1:74:84:c8:41:72:9e:6a:24:a5:95:19:00:
e0:99:b1:48:b0:10:98:d3:4a:5a:1d:7b:40:82:3b:ab:ab:b5:
f0:50:b3:a2:85:45:4d:55:21:10:97:3f:bb:f4:27:7f:53:c9:
9d:ab:11:a0:4e:c8:00:b1:48:97:7b:9e:07:c6:b6:f8:5d:0f:
86:ff:31:8f:e4:1b:9b:34:6e:6f:48:6d:23:0b:2b:0f:68:cf:
7a:bb:35:26:1c:d9:f4:38:07:88:61:1f:af:87:63:f6:a1:88:
d9:0b:6d:f6:cf:8d:6d:01:b9:21:3f:e1:15:a5:bd:36:ee:e1:
4a:79:c1:37:2d:08:9a:7e:e3:f5:e6:d2:28:4e:35:ba:48:53:
9b:05:b8:47:a4:6a:22:d8:5c:d3:de:e6:0a:b0:82:9e:f7:cb:
d5:bc:f7:30:73:c1:97:f2:23:4b:f0:29:e7:40:34:85:d8:ff:
86:26:06:9a:b8:a6:2b:4a:43:f1:7c:bb:c8:e2:c8:69:d3:38:
81:f5:7d:1b:de:97:f2:fb:ac:a0:da:24:46:0f:57:23:83:0f:
b4:ef:4e:dd
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZf4Ty/YlwBXIQoER8Fz/cYcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwZGFkOTViYTJiMWViM2RkNzczODAwMmZjNjhhYTk1NTg4
YzNiZjEwHhcNMjUwNzExMDcwNzA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZTU0ZjRhZTUzNWFiOGU1ZDJiNzNhZTgwYWEwZjA3OWQ4MmY5OGVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzEBSJ8U3D94p6b+W3KPH9Hklih03
V8NRdSJ0jTfTNbbkpdwP3jfimimIAhvxSufA8LAvU7nPvFWZ+Aoe1eQFcWiJQuSl
SLxw69f3R+/ScOMRXFXhTvWCexSfeHmI9wkPHaRnorMint9TQAKNyl/xXrIZwVCl
Y/MR08SYCeYZLxLdPrgIa06w+NOd8X8iL/e6z/eEmgehJtODUD7/AhPbO8WwQZDy
KEhjD8rxRplThJx4onL9iiiwU2yws4pakG6luU1imqEVI633VirEiTd/C7ucx7e6
Ts6Ai28OoqjSrplokZP6KN3V/t2LGKBv5TLRWWrvJzdVkT964W6rIt8bswIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFH5U9K5TWrjl0rc66Aqg8HnYL5jvMB8GA1UdIwQY
MBaAFGDa2Vuises913OAAvxoqpVYjDvxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWU5yWlc2S3g2ejNYYzRBQ19HaXFsVmlNT19FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi80NDhiYTAtYTQzOC00ZjU5LTg4NWIt
NDIxOGIyYjY5NjNhLzEvZmxUMHJsTmF1T1hTdHpyb0NxRHdlZGd2bU84LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi80NDhiYTAtYTQzOC00ZjU5LTg4NWItNDIxOGIyYjY5NjNh
LzEvWU5yWlc2S3g2ejNYYzRBQ19HaXFsVmlNT19FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQEsp0wAwQC
ue9EAwQF1DLgMA0GCSqGSIb3DQEBCwUAA4IBAQAmvOoaJs7Pb7R9FI8h+3Z8N7B8
ouylD/2JFzIHq8FcXjB5+ulCbjcvePF0hMhBcp5qJKWVGQDgmbFIsBCY00paHXtA
gjurq7XwULOihUVNVSEQlz+79Cd/U8mdqxGgTsgAsUiXe54Hxrb4XQ+G/zGP5Bub
NG5vSG0jCysPaM96uzUmHNn0OAeIYR+vh2P2oYjZC232z41tAbkhP+EVpb027uFK
ecE3LQiafuP15tIoTjW6SFObBbhHpGoi2FzT3uYKsIKe98vVvPcwc8GX8iNL8Cnn
QDSF2P+GJgaauKYrSkPxfLvI4shp0ziB9X0b3pfy+6yg2iRGD1cjgw+0707d
-----END CERTIFICATE-----
Generated at Sun Jul 27 13:15:36 2025 by rpki-client