Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/e2V3iL-uocdOIPUhO2ww3JIX-7M.roa
File: e2V3iL-uocdOIPUhO2ww3JIX-7M.roa (raw, json)
Hash identifier: b3B9MhMBUvAQVqS/GvgXTcCqWa1oJVBigVQ6uwvtX+0=
Subject key identifier: 7B:65:77:88:BF:AE:A1:C7:4E:20:F5:21:3B:6C:30:DC:92:17:FB:B3
Certificate issuer: /CN=e1ef9694aa48d81279e8ede430795f2768d2dd52
Certificate serial: 0198BE8723BD3EBFC926DCB5BE73EE57E744
Authority key identifier: E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/e2V3iL-uocdOIPUhO2ww3JIX-7M.roa
Signing time: Mon 18 Aug 2025 18:53:04 +0000
ROA not before: Mon 18 Aug 2025 18:53:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 401163
IP address blocks: 62.164.192.0/24 maxlen: 24
62.164.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 23:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:be:87:23:bd:3e:bf:c9:26:dc:b5:be:73:ee:57:e7:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1ef9694aa48d81279e8ede430795f2768d2dd52
Validity
Not Before: Aug 18 18:53:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7b657788bfaea1c74e20f5213b6c30dc9217fbb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:1f:8c:b1:13:9e:83:6b:49:08:5a:69:d6:18:
4d:39:2e:0b:23:7b:b3:27:fc:a3:0e:48:9e:be:1d:
be:bb:a7:8c:e3:df:65:e4:04:c3:6b:e6:da:17:ff:
65:2d:8b:20:e6:f0:16:aa:4c:67:ed:ab:44:91:e9:
eb:0e:ad:f9:4e:af:bd:3d:63:34:a2:0b:b6:f8:80:
b0:73:9a:48:49:33:41:f8:7b:45:18:41:77:48:e8:
f9:b3:99:45:fa:6a:b4:84:df:70:39:66:47:8a:5a:
fc:8f:08:de:8b:3d:88:cb:cf:bc:9b:d5:b2:8f:c8:
79:55:92:85:1f:71:9d:75:74:cb:99:4f:d5:9c:5d:
4c:0b:4c:5f:ea:22:f1:8f:5e:67:00:d9:86:10:ed:
19:31:e5:1b:d1:5d:50:84:89:20:23:7f:ce:25:7c:
08:29:0d:52:2a:da:a4:ac:73:a1:a2:6a:98:3b:52:
17:7b:d0:44:02:c2:e2:ba:bc:a4:1e:29:5b:30:59:
98:90:c6:23:16:27:04:58:37:6e:87:eb:7e:c8:cc:
e1:b9:d0:08:93:cd:d3:f0:ef:a2:a3:f6:02:e5:21:
f6:11:a5:23:3c:79:39:c7:3a:00:e7:6c:e2:1a:67:
ea:e2:20:aa:51:2a:37:a7:c0:b1:9a:cd:e9:2e:29:
af:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:65:77:88:BF:AE:A1:C7:4E:20:F5:21:3B:6C:30:DC:92:17:FB:B3
X509v3 Authority Key Identifier:
keyid:E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/e2V3iL-uocdOIPUhO2ww3JIX-7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.164.192.0/24
62.164.195.0/24
Signature Algorithm: sha256WithRSAEncryption
85:28:10:00:be:78:e5:f4:68:0e:9b:f5:95:b3:05:a4:bf:e0:
3b:b2:b5:60:ef:03:cb:12:ff:f7:76:96:a5:ec:74:73:c6:5d:
03:c9:11:99:b4:62:e2:a0:86:2b:1f:b5:5d:d6:fb:d5:71:d5:
80:f2:c3:55:ad:13:7d:af:0c:1a:c1:23:a3:4f:b9:f3:de:da:
1a:ad:b7:25:37:28:0c:0a:91:ed:58:8a:08:8d:3c:0c:7e:fd:
27:be:6e:a3:ec:ef:b8:72:bd:7b:8f:17:23:93:9f:e9:13:12:
d8:df:b3:04:f7:29:bd:66:96:88:46:f8:60:c2:45:f9:5c:7a:
02:c0:86:3c:23:ed:a6:1f:b2:ea:27:93:4c:d9:9a:cb:26:7d:
0d:a3:09:66:b4:d4:30:c2:0f:22:38:1e:d8:0c:54:25:ac:7d:
15:41:c4:6f:e4:09:f5:3c:54:4d:fa:22:fd:d9:f1:2a:f5:5c:
98:74:0d:c8:3c:ea:36:a2:f9:b0:bf:cd:e4:70:26:f2:85:c0:
7f:99:01:4a:31:c8:21:be:b6:dd:9a:7d:db:e5:45:26:4a:be:
8e:33:a4:0d:4e:c2:7b:e8:7f:1f:9d:66:37:38:3b:38:b2:6c:
6e:47:22:4d:0b:64:7e:82:7a:f3:a3:03:5d:49:ed:4a:48:c0:
2d:30:56:68
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZi+hyO9Pr/JJty1vnPuV+dEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxZWY5Njk0YWE0OGQ4MTI3OWU4ZWRlNDMwNzk1ZjI3Njhk
MmRkNTIwHhcNMjUwODE4MTg1MzA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YjY1Nzc4OGJmYWVhMWM3NGUyMGY1MjEzYjZjMzBkYzkyMTdmYmIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlB+MsROeg2tJCFpp1hhNOS4LI3uz
J/yjDkievh2+u6eM499l5ATDa+baF/9lLYsg5vAWqkxn7atEkenrDq35Tq+9PWM0
ogu2+ICwc5pISTNB+HtFGEF3SOj5s5lF+mq0hN9wOWZHilr8jwjeiz2Iy8+8m9Wy
j8h5VZKFH3GddXTLmU/VnF1MC0xf6iLxj15nANmGEO0ZMeUb0V1QhIkgI3/OJXwI
KQ1SKtqkrHOhomqYO1IXe9BEAsLiurykHilbMFmYkMYjFicEWDduh+t+yMzhudAI
k83T8O+io/YC5SH2EaUjPHk5xzoA52ziGmfq4iCqUSo3p8Cxms3pLimvowIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHtld4i/rqHHTiD1ITtsMNySF/uzMB8GA1UdIwQY
MBaAFOHvlpSqSNgSeejt5DB5Xydo0t1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGUtV2xLcEkyQko1Nk8za01IbGZKMmpTM1ZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9iMDU2NjctZTg1MC00YzQ1LWFlZTMt
YWRlZDFjNDY5ZWFmLzEvZTJWM2lMLXVvY2RPSVBVaE8yd3czSklYLTdNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9iMDU2NjctZTg1MC00YzQ1LWFlZTMtYWRlZDFjNDY5ZWFm
LzEvNGUtV2xLcEkyQko1Nk8za01IbGZKMmpTM1ZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAPqTAAwQA
PqTDMA0GCSqGSIb3DQEBCwUAA4IBAQCFKBAAvnjl9GgOm/WVswWkv+A7srVg7wPL
Ev/3dpal7HRzxl0DyRGZtGLioIYrH7Vd1vvVcdWA8sNVrRN9rwwawSOjT7nz3toa
rbclNygMCpHtWIoIjTwMfv0nvm6j7O+4cr17jxcjk5/pExLY37ME9ym9ZpaIRvhg
wkX5XHoCwIY8I+2mH7LqJ5NM2ZrLJn0NowlmtNQwwg8iOB7YDFQlrH0VQcRv5An1
PFRN+iL92fEq9VyYdA3IPOo2ovmwv83kcCbyhcB/mQFKMcghvrbdmn3b5UUmSr6O
M6QNTsJ76H8fnWY3ODs4smxuRyJNC2R+gnrzowNdSe1KSMAtMFZo
-----END CERTIFICATE-----
Generated at Thu Aug 21 05:01:57 2025 by rpki-client