Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/007297-c443-427e-a0e7-7dc0057ed96d/1/1tP7MN3eKeKtm53rAKSfnbkNmmg.roa
File: 1tP7MN3eKeKtm53rAKSfnbkNmmg.roa (raw, json)
Hash identifier: mXaQQJLZCqFGrov9mkF92azLvy6kGuslWIYPm+eaW+k=
Subject key identifier: D6:D3:FB:30:DD:DE:29:E2:AD:9B:9D:EB:00:A4:9F:9D:B9:0D:9A:68
Certificate issuer: /CN=81cfb7c0c2349e80fee51b4783153512cd9da1d2
Certificate serial: 019A15459331798D09D523AE7D5EDEB98292
Authority key identifier: 81:CF:B7:C0:C2:34:9E:80:FE:E5:1B:47:83:15:35:12:CD:9D:A1:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gc-3wMI0noD-5RtHgxU1Es2dodI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/007297-c443-427e-a0e7-7dc0057ed96d/1/1tP7MN3eKeKtm53rAKSfnbkNmmg.roa
Signing time: Fri 24 Oct 2025 08:11:12 +0000
ROA not before: Fri 24 Oct 2025 08:11:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210449
IP address blocks: 178.211.141.0/24 maxlen: 24
2a13:7600::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/007297-c443-427e-a0e7-7dc0057ed96d/1/gc-3wMI0noD-5RtHgxU1Es2dodI.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/007297-c443-427e-a0e7-7dc0057ed96d/1/gc-3wMI0noD-5RtHgxU1Es2dodI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gc-3wMI0noD-5RtHgxU1Es2dodI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:15:45:93:31:79:8d:09:d5:23:ae:7d:5e:de:b9:82:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cfb7c0c2349e80fee51b4783153512cd9da1d2
Validity
Not Before: Oct 24 08:11:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d6d3fb30ddde29e2ad9b9deb00a49f9db90d9a68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:41:ba:39:82:9e:27:cd:a4:30:3d:87:f7:5a:
9b:dc:f3:64:84:8e:36:96:0a:6b:67:db:e5:ab:16:
9c:6b:65:54:7c:b2:93:6e:cf:85:c2:3a:40:d6:f4:
c2:5c:41:96:68:5f:92:72:92:50:b2:a0:6d:18:88:
71:4e:50:ce:39:1f:c1:b6:d9:3e:dc:ef:9c:e1:d5:
26:af:e0:2e:29:6e:33:e6:41:df:01:0d:5f:e9:ca:
b8:c8:77:29:4e:ea:d2:a0:47:c3:9e:f3:b2:a7:d1:
d8:8c:c1:3c:8d:f6:7f:99:eb:ac:6d:0b:d0:fb:15:
cb:f1:3c:12:98:09:55:54:c5:29:83:f9:8a:aa:16:
f4:0b:bb:38:7d:ec:ad:78:10:93:f1:b7:35:cc:4d:
e2:99:42:df:a0:28:8f:b7:22:48:8d:4d:3d:ed:da:
ac:ba:bf:3b:b9:3b:a1:46:78:62:e6:1e:ee:29:f8:
80:3b:29:e0:62:91:b5:3b:64:5d:73:e9:05:96:bb:
e3:53:9a:ac:40:e7:c0:50:a1:08:0c:c7:26:06:7f:
7d:6d:f4:6a:23:1d:7d:e4:03:a0:f5:1b:8f:9f:af:
2f:67:39:60:a2:7c:30:08:2f:e6:a1:57:15:67:f5:
98:7c:9a:88:c9:51:5f:df:e8:e6:d7:f9:04:f6:1f:
87:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:D3:FB:30:DD:DE:29:E2:AD:9B:9D:EB:00:A4:9F:9D:B9:0D:9A:68
X509v3 Authority Key Identifier:
keyid:81:CF:B7:C0:C2:34:9E:80:FE:E5:1B:47:83:15:35:12:CD:9D:A1:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gc-3wMI0noD-5RtHgxU1Es2dodI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/007297-c443-427e-a0e7-7dc0057ed96d/1/1tP7MN3eKeKtm53rAKSfnbkNmmg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/007297-c443-427e-a0e7-7dc0057ed96d/1/gc-3wMI0noD-5RtHgxU1Es2dodI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.211.141.0/24
IPv6:
2a13:7600::/29
Signature Algorithm: sha256WithRSAEncryption
0c:7d:3a:64:45:bd:d5:41:66:31:df:c1:be:e6:df:b5:44:20:
05:25:54:cf:ab:40:18:35:a7:b2:8d:1b:ae:70:bb:79:d2:45:
73:6c:8d:99:f0:4c:be:6b:e6:80:ad:29:d8:93:21:8c:d3:f0:
46:18:6f:87:a9:cd:d4:bf:1d:91:d1:3d:cb:5a:17:e6:be:da:
30:2d:27:fc:d0:03:83:b9:c6:c3:ff:7b:a3:96:50:bd:31:06:
87:46:f5:6a:dc:14:f1:b5:a1:83:92:71:77:82:af:df:73:b8:
73:b4:33:92:9a:56:26:85:ca:12:67:7c:c3:94:1c:d7:7d:f7:
78:31:04:76:2c:20:fa:b8:be:44:32:3e:93:b1:63:0e:1c:98:
25:c9:34:bc:c6:92:15:24:e0:61:23:69:c6:10:97:d6:c1:ea:
bf:80:d7:f2:14:66:74:3b:bd:39:2b:e4:53:1e:43:68:ad:b7:
cf:1e:28:06:42:1a:e0:57:03:7e:1f:32:fc:44:23:4a:cf:fa:
35:08:7e:7b:85:4a:e1:d9:7d:f8:16:00:77:d6:33:b4:d5:76:
09:e1:c3:8f:f1:01:6e:d0:08:ca:48:52:3a:41:6f:a1:97:0c:
57:4c:e8:aa:d3:48:60:a2:6f:02:a5:57:c5:e7:e4:45:5c:08:
60:e5:89:2f
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZoVRZMxeY0J1SOufV7euYKSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxY2ZiN2MwYzIzNDllODBmZWU1MWI0NzgzMTUzNTEyY2Q5
ZGExZDIwHhcNMjUxMDI0MDgxMTEyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNmQzZmIzMGRkZGUyOWUyYWQ5YjlkZWIwMGE0OWY5ZGI5MGQ5YTY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEG6OYKeJ82kMD2H91qb3PNkhI42
lgprZ9vlqxaca2VUfLKTbs+FwjpA1vTCXEGWaF+ScpJQsqBtGIhxTlDOOR/Bttk+
3O+c4dUmr+AuKW4z5kHfAQ1f6cq4yHcpTurSoEfDnvOyp9HYjME8jfZ/meusbQvQ
+xXL8TwSmAlVVMUpg/mKqhb0C7s4feyteBCT8bc1zE3imULfoCiPtyJIjU097dqs
ur87uTuhRnhi5h7uKfiAOyngYpG1O2Rdc+kFlrvjU5qsQOfAUKEIDMcmBn99bfRq
Ix195AOg9RuPn68vZzlgonwwCC/moVcVZ/WYfJqIyVFf3+jm1/kE9h+HBQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFNbT+zDd3inirZud6wCkn525DZpoMB8GA1UdIwQY
MBaAFIHPt8DCNJ6A/uUbR4MVNRLNnaHSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2MtM3dNSTBub0QtNVJ0SGd4VTFFczJkb2RJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8wMDcyOTctYzQ0My00MjdlLWEwZTct
N2RjMDA1N2VkOTZkLzEvMXRQN01OM2VLZUt0bTUzckFLU2ZuYmtObW1nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy8wMDcyOTctYzQ0My00MjdlLWEwZTctN2RjMDA1N2VkOTZk
LzEvZ2MtM3dNSTBub0QtNVJ0SGd4VTFFczJkb2RJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAstONMA0E
AgACMAcDBQMqE3YAMA0GCSqGSIb3DQEBCwUAA4IBAQAMfTpkRb3VQWYx38G+5t+1
RCAFJVTPq0AYNaeyjRuucLt50kVzbI2Z8Ey+a+aArSnYkyGM0/BGGG+Hqc3Uvx2R
0T3LWhfmvtowLSf80AODucbD/3ujllC9MQaHRvVq3BTxtaGDknF3gq/fc7hztDOS
mlYmhcoSZ3zDlBzXffd4MQR2LCD6uL5EMj6TsWMOHJglyTS8xpIVJOBhI2nGEJfW
weq/gNfyFGZ0O705K+RTHkNorbfPHigGQhrgVwN+HzL8RCNKz/o1CH57hUrh2X34
FgB31jO01XYJ4cOP8QFu0AjKSFI6QW+hlwxXTOiq00hgom8CpVfF5+RFXAhg5Ykv
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:56:33 2025 by rpki-client