Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/738MIG4RjPj69BYI3kWu1K50x4w.roa
File: 738MIG4RjPj69BYI3kWu1K50x4w.roa (raw, json)
Hash identifier: M5edAAh1Id/c3Xbzqj7r2SpycCheXlPTfjQfib+VwuA=
Subject key identifier: EF:7F:0C:20:6E:11:8C:F8:FA:F4:16:08:DE:45:AE:D4:AE:74:C7:8C
Certificate issuer: /CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Certificate serial: 01981C42550064C34EEBF2A608551806E5C8
Authority key identifier: C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/738MIG4RjPj69BYI3kWu1K50x4w.roa
Signing time: Fri 18 Jul 2025 06:39:25 +0000
ROA not before: Fri 18 Jul 2025 06:39:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 93.127.156.0/23 maxlen: 24
93.127.160.0/24 maxlen: 24
93.127.161.0/24 maxlen: 24
93.127.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 14:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:1c:42:55:00:64:c3:4e:eb:f2:a6:08:55:18:06:e5:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Validity
Not Before: Jul 18 06:39:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ef7f0c206e118cf8faf41608de45aed4ae74c78c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2f:f9:c8:e3:eb:9c:4e:cb:72:94:10:54:39:
ce:87:7c:d0:74:03:c7:16:df:f7:8c:33:80:6c:37:
06:4b:1e:b3:cb:e4:f7:e6:2c:a7:9b:2d:3c:b9:ab:
41:ef:39:10:73:8e:e3:93:a7:72:9d:5a:20:18:49:
d3:f1:8d:9a:91:19:2e:5b:ed:6f:c2:23:54:c0:36:
d4:08:91:f2:a9:75:0b:cb:e0:00:0c:3c:89:b2:d3:
8d:69:58:f8:98:0e:9a:69:5a:d0:26:07:a6:77:5c:
cc:1b:d8:cd:22:b6:12:1a:3d:dd:16:48:fb:54:11:
d1:7f:3b:2e:db:ae:10:33:3f:48:95:89:70:0b:c7:
9e:78:be:78:5d:99:7a:83:4a:cb:72:b0:26:8c:10:
32:d2:13:97:b2:84:7f:7c:86:55:e3:b0:cd:ee:2a:
c4:7c:57:16:97:df:c1:09:a7:ab:04:97:50:51:55:
46:91:75:e7:b3:13:8d:09:9f:a1:d1:f4:a7:b1:95:
c6:ac:33:2d:72:4c:01:2b:b9:4a:d1:80:91:bc:5d:
56:7f:0f:8a:cc:0e:60:9c:ef:d9:8b:ff:7e:e4:e2:
4c:10:b4:80:25:05:40:9f:70:52:e3:04:1d:5e:67:
26:c1:5d:a9:ee:f7:c5:09:ea:11:5e:88:e4:bd:d6:
14:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:7F:0C:20:6E:11:8C:F8:FA:F4:16:08:DE:45:AE:D4:AE:74:C7:8C
X509v3 Authority Key Identifier:
keyid:C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/738MIG4RjPj69BYI3kWu1K50x4w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.127.156.0/23
93.127.160.0/23
93.127.184.0/24
Signature Algorithm: sha256WithRSAEncryption
95:08:07:57:6f:4f:30:78:cd:23:59:ee:2a:5c:8b:e6:00:25:
33:c4:d6:09:d2:3a:9f:e9:cd:c2:cc:78:65:61:a9:25:50:ad:
2b:a2:66:b6:58:46:25:39:15:05:ed:a2:2c:80:20:90:29:a2:
76:9e:62:44:46:8b:4e:67:23:8d:eb:42:9b:a9:62:5c:e2:ae:
9d:1d:c5:08:4b:da:9b:dc:db:90:c8:0b:48:c3:f5:0a:d2:94:
e3:27:a9:09:2f:24:26:f7:08:37:9e:27:f4:51:dc:15:f6:d5:
31:ab:fa:de:6f:80:17:76:2f:01:80:b1:2d:98:0c:62:0a:8f:
19:41:22:c8:ef:7f:d6:01:b5:8d:47:d7:86:e3:a0:02:6d:6f:
70:bd:64:39:c3:a0:91:e1:e6:35:65:c1:77:9b:bb:c7:3d:3e:
cd:5c:df:ac:19:7e:c5:59:39:58:77:29:12:ff:4a:30:64:8d:
22:69:80:ef:78:b9:88:bc:cb:af:96:e6:03:23:0c:8c:28:8a:
fd:b8:f9:2c:16:d8:1b:4a:1b:44:ec:f1:7a:41:34:69:fe:47:
0f:8d:e7:33:ea:15:47:8f:04:e4:ad:25:bf:9a:b1:76:a2:75:
7a:54:44:d3:37:1e:13:69:a3:71:6d:96:53:7b:39:86:43:8f:
33:08:8c:4b
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZgcQlUAZMNO6/KmCFUYBuXIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzNzhiYzNiZDM1MGVlZGM0ZjM3N2MyMjQ1NTZiMjUwZGE2
ZGRlNmYwHhcNMjUwNzE4MDYzOTI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZjdmMGMyMDZlMTE4Y2Y4ZmFmNDE2MDhkZTQ1YWVkNGFlNzRjNzhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzy/5yOPrnE7LcpQQVDnOh3zQdAPH
Ft/3jDOAbDcGSx6zy+T35iynmy08uatB7zkQc47jk6dynVogGEnT8Y2akRkuW+1v
wiNUwDbUCJHyqXULy+AADDyJstONaVj4mA6aaVrQJgemd1zMG9jNIrYSGj3dFkj7
VBHRfzsu264QMz9IlYlwC8eeeL54XZl6g0rLcrAmjBAy0hOXsoR/fIZV47DN7irE
fFcWl9/BCaerBJdQUVVGkXXnsxONCZ+h0fSnsZXGrDMtckwBK7lK0YCRvF1Wfw+K
zA5gnO/Zi/9+5OJMELSAJQVAn3BS4wQdXmcmwV2p7vfFCeoRXojkvdYUzQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFO9/DCBuEYz4+vQWCN5FrtSudMeMMB8GA1UdIwQY
MBaAFMN4vDvTUO7cTzd8IkVWslDabd5vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzNpOE85TlE3dHhQTjN3aVJWYXlVTnB0M204LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iZTY2ZTQtZjE0Yi00YjMxLWJkYWYt
NDQxNDU1OGZkY2JiLzEvNzM4TUlHNFJqUGo2OUJZSTNrV3UxSzUweDR3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9iZTY2ZTQtZjE0Yi00YjMxLWJkYWYtNDQxNDU1OGZkY2Ji
LzEvdzNpOE85TlE3dHhQTjN3aVJWYXlVTnB0M204LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBXX+cAwQB
XX+gAwQAXX+4MA0GCSqGSIb3DQEBCwUAA4IBAQCVCAdXb08weM0jWe4qXIvmACUz
xNYJ0jqf6c3CzHhlYaklUK0roma2WEYlORUF7aIsgCCQKaJ2nmJERotOZyON60Kb
qWJc4q6dHcUIS9qb3NuQyAtIw/UK0pTjJ6kJLyQm9wg3nif0UdwV9tUxq/reb4AX
di8BgLEtmAxiCo8ZQSLI73/WAbWNR9eG46ACbW9wvWQ5w6CR4eY1ZcF3m7vHPT7N
XN+sGX7FWTlYdykS/0owZI0iaYDveLmIvMuvluYDIwyMKIr9uPksFtgbShtE7PF6
QTRp/kcPjecz6hVHjwTkrSW/mrF2onV6VETTNx4TaaNxbZZTezmGQ48zCIxL
-----END CERTIFICATE-----
Generated at Wed Jul 23 23:29:12 2025 by rpki-client