Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/_p1bqdZFVV-yCNRgEU5D9s9zduA.roa
File: _p1bqdZFVV-yCNRgEU5D9s9zduA.roa (raw, json)
Hash identifier: ceBcN8Y3K7sjyx/xdHHBUfHwwn6/AgpxvZfQOED4K7s=
Subject key identifier: FE:9D:5B:A9:D6:45:55:5F:B2:08:D4:60:11:4E:43:F6:CF:73:76:E0
Certificate issuer: /CN=b6f3db35659133315d2fcf93058dce350a4cb17a
Certificate serial: 0198984C77890D8FF65D033E272F83414207
Authority key identifier: B6:F3:DB:35:65:91:33:31:5D:2F:CF:93:05:8D:CE:35:0A:4C:B1:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tvPbNWWRMzFdL8-TBY3ONQpMsXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/_p1bqdZFVV-yCNRgEU5D9s9zduA.roa
Signing time: Mon 11 Aug 2025 08:43:24 +0000
ROA not before: Mon 11 Aug 2025 08:43:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12706
IP address blocks: 194.44.66.0/24 maxlen: 24
194.44.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tvPbNWWRMzFdL8-TBY3ONQpMsXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Aug 2025 02:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:98:4c:77:89:0d:8f:f6:5d:03:3e:27:2f:83:41:42:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6f3db35659133315d2fcf93058dce350a4cb17a
Validity
Not Before: Aug 11 08:43:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fe9d5ba9d645555fb208d460114e43f6cf7376e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d9:84:3f:17:4b:d8:39:e7:9e:68:e5:1c:85:
04:9c:96:91:a9:f4:51:13:bb:44:3a:94:0f:5a:e1:
b8:94:d3:8b:c4:78:c9:7b:bc:c2:ed:0f:4d:b1:65:
5a:49:b2:2a:2c:a5:62:0f:df:2b:54:72:cb:2d:a0:
b9:34:a8:7a:34:c2:67:83:5c:e3:18:64:35:e9:3d:
9b:26:29:e3:d8:2c:f9:e2:5a:c9:6f:5d:77:61:c6:
8f:2b:85:40:cf:db:b4:3a:26:15:cf:0a:7c:fb:6f:
5e:6a:8e:0a:30:6f:89:3f:85:02:49:4e:74:94:2b:
80:24:5e:29:2a:6a:0f:23:24:a4:2b:d9:e8:e5:4f:
ff:75:5a:3c:82:30:46:e1:9d:a1:fd:1a:f7:bf:8d:
91:e9:d1:bd:b2:a1:90:d2:7e:dc:5b:31:50:2a:b3:
c9:fd:e6:12:42:09:52:da:04:12:48:e1:95:89:15:
0e:8d:10:16:28:14:57:e8:7e:56:4d:b2:3d:37:78:
e8:29:30:5b:73:58:27:7f:a5:54:fa:f8:9a:43:23:
cf:42:47:b7:aa:59:73:14:38:ef:d6:18:2e:6b:05:
35:67:53:8f:bc:f2:d1:8b:37:7a:dc:5b:ec:f3:25:
67:f4:60:47:ad:9b:73:6a:fa:a2:39:26:71:eb:2f:
97:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:9D:5B:A9:D6:45:55:5F:B2:08:D4:60:11:4E:43:F6:CF:73:76:E0
X509v3 Authority Key Identifier:
keyid:B6:F3:DB:35:65:91:33:31:5D:2F:CF:93:05:8D:CE:35:0A:4C:B1:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tvPbNWWRMzFdL8-TBY3ONQpMsXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/_p1bqdZFVV-yCNRgEU5D9s9zduA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.44.66.0/24
194.44.233.0/24
Signature Algorithm: sha256WithRSAEncryption
af:03:20:0a:63:e4:46:1e:de:58:96:f5:07:6e:7d:1a:23:e5:
0d:62:48:97:04:b4:4f:92:a0:43:b2:04:dc:ab:13:9b:db:e9:
01:18:98:db:d3:53:20:72:5c:4d:6a:2c:8f:a8:e5:fe:21:ca:
5d:7c:c1:0f:73:33:b7:a7:15:1a:6d:d8:66:dd:ff:dd:5f:e0:
5f:7c:5e:78:b8:3f:eb:15:6d:1a:47:02:e5:67:b2:b8:8b:61:
38:07:6a:21:18:18:fe:72:13:b1:9a:58:fc:c7:76:ab:41:e2:
2d:7f:d0:ce:2f:fe:49:1f:07:39:4b:27:63:d1:d5:01:69:dd:
0d:73:fe:86:66:78:ac:8e:c1:d2:d8:e8:44:bd:52:6e:81:30:
20:d8:4c:c3:fa:e9:48:c1:96:45:1c:9f:fc:0a:26:d7:8d:9d:
12:ec:ca:57:32:05:c7:c6:e8:ee:20:2b:9d:e7:79:e2:46:65:
40:78:af:0a:53:de:79:35:ce:75:df:90:04:01:7f:3a:7b:78:
9b:50:68:c6:36:48:c3:e2:c3:4b:01:7b:2c:b3:36:90:15:dc:
49:a7:77:41:fb:74:67:35:e7:fa:9c:45:b1:b3:be:f3:3e:88:
b4:84:23:4b:84:3f:59:69:a7:b3:c6:4f:f5:4f:40:6f:d1:99:
9a:a5:c7:2e
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZiYTHeJDY/2XQM+Jy+DQUIHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2ZjNkYjM1NjU5MTMzMzE1ZDJmY2Y5MzA1OGRjZTM1MGE0
Y2IxN2EwHhcNMjUwODExMDg0MzI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZTlkNWJhOWQ2NDU1NTVmYjIwOGQ0NjAxMTRlNDNmNmNmNzM3NmUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdmEPxdL2DnnnmjlHIUEnJaRqfRR
E7tEOpQPWuG4lNOLxHjJe7zC7Q9NsWVaSbIqLKViD98rVHLLLaC5NKh6NMJng1zj
GGQ16T2bJinj2Cz54lrJb113YcaPK4VAz9u0OiYVzwp8+29eao4KMG+JP4UCSU50
lCuAJF4pKmoPIySkK9no5U//dVo8gjBG4Z2h/Rr3v42R6dG9sqGQ0n7cWzFQKrPJ
/eYSQglS2gQSSOGViRUOjRAWKBRX6H5WTbI9N3joKTBbc1gnf6VU+viaQyPPQke3
qllzFDjv1hguawU1Z1OPvPLRizd63Fvs8yVn9GBHrZtzavqiOSZx6y+XnQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFP6dW6nWRVVfsgjUYBFOQ/bPc3bgMB8GA1UdIwQY
MBaAFLbz2zVlkTMxXS/PkwWNzjUKTLF6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHZQYk5XV1JNekZkTDgtVEJZM09OUXBNc1hvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC83MGJmZmUtYjRmMy00NDllLTgxZWQt
NTQ5ZWU2ZDMwZmI2LzEvX3AxYnFkWkZWVi15Q05SZ0VVNUQ5czl6ZHVBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC83MGJmZmUtYjRmMy00NDllLTgxZWQtNTQ5ZWU2ZDMwZmI2
LzEvdHZQYk5XV1JNekZkTDgtVEJZM09OUXBNc1hvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwixCAwQA
wizpMA0GCSqGSIb3DQEBCwUAA4IBAQCvAyAKY+RGHt5YlvUHbn0aI+UNYkiXBLRP
kqBDsgTcqxOb2+kBGJjb01MgclxNaiyPqOX+IcpdfMEPczO3pxUabdhm3f/dX+Bf
fF54uD/rFW0aRwLlZ7K4i2E4B2ohGBj+chOxmlj8x3arQeItf9DOL/5JHwc5Sydj
0dUBad0Nc/6GZnisjsHS2OhEvVJugTAg2EzD+ulIwZZFHJ/8CibXjZ0S7MpXMgXH
xujuICud53niRmVAeK8KU955Nc5135AEAX86e3ibUGjGNkjD4sNLAXssszaQFdxJ
p3dB+3RnNef6nEWxs77zPoi0hCNLhD9Zaaezxk/1T0Bv0Zmapccu
-----END CERTIFICATE-----
Generated at Thu Aug 21 10:29:33 2025 by rpki-client