Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/xcqi1G8tytJ2yUHhU5QYf0Y_Ovk.roa
File: xcqi1G8tytJ2yUHhU5QYf0Y_Ovk.roa (raw, json)
Hash identifier: OuLcHzFv8gCjZ50gByVbvBsUIYLEedqYV0FASZ8Y/ug=
Subject key identifier: C5:CA:A2:D4:6F:2D:CA:D2:76:C9:41:E1:53:94:18:7F:46:3F:3A:F9
Certificate issuer: /CN=b6f3db35659133315d2fcf93058dce350a4cb17a
Certificate serial: 0198984D61E0FD02087168341F12305400BA
Authority key identifier: B6:F3:DB:35:65:91:33:31:5D:2F:CF:93:05:8D:CE:35:0A:4C:B1:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tvPbNWWRMzFdL8-TBY3ONQpMsXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/xcqi1G8tytJ2yUHhU5QYf0Y_Ovk.roa
Signing time: Mon 11 Aug 2025 08:44:24 +0000
ROA not before: Mon 11 Aug 2025 08:44:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15461
IP address blocks: 194.44.38.0/23 maxlen: 23
194.44.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tvPbNWWRMzFdL8-TBY3ONQpMsXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Aug 2025 02:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:98:4d:61:e0:fd:02:08:71:68:34:1f:12:30:54:00:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6f3db35659133315d2fcf93058dce350a4cb17a
Validity
Not Before: Aug 11 08:44:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c5caa2d46f2dcad276c941e15394187f463f3af9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b5:b4:0c:72:15:a4:ef:9b:c2:9b:6d:d6:2f:
d7:f2:94:75:ee:2f:38:08:04:34:a3:81:ec:9c:5f:
ad:f0:f0:ed:d8:28:24:c5:1c:fe:da:7b:2e:26:3a:
58:30:b7:bc:65:76:d1:2e:43:27:44:56:ca:19:15:
d1:b3:18:c3:85:4b:20:29:b3:0d:dd:2b:d3:0b:72:
f6:46:ea:70:88:b5:93:60:4d:0b:50:af:ee:39:fd:
b8:4c:80:bc:64:dc:66:6e:6b:47:bc:3d:6a:d9:f9:
8b:aa:af:74:c6:1b:a9:93:f8:ca:d5:ff:89:54:ca:
e7:71:86:b3:31:9c:3a:95:92:c8:a4:89:84:a6:a7:
62:30:b3:65:b8:64:ca:1b:9c:62:38:a7:08:c3:bf:
89:d0:d4:3e:ea:01:93:af:0d:f0:e4:12:d0:87:57:
8b:ba:e1:c5:c8:63:24:e5:99:4c:e4:8b:f5:e2:11:
d9:65:05:c7:bb:ff:57:97:43:2f:a3:94:61:76:50:
8d:9d:c5:26:24:53:ce:64:8c:f7:33:c0:05:e9:1b:
4b:3e:4f:9e:c3:2f:6f:e1:4c:ec:ef:1c:2b:99:b4:
cc:9f:e9:b7:7d:07:53:fe:f0:0b:45:d2:37:fc:74:
1b:84:fe:e4:04:ba:92:6d:87:91:9a:b8:f9:05:ab:
a8:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:CA:A2:D4:6F:2D:CA:D2:76:C9:41:E1:53:94:18:7F:46:3F:3A:F9
X509v3 Authority Key Identifier:
keyid:B6:F3:DB:35:65:91:33:31:5D:2F:CF:93:05:8D:CE:35:0A:4C:B1:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tvPbNWWRMzFdL8-TBY3ONQpMsXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/xcqi1G8tytJ2yUHhU5QYf0Y_Ovk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.44.38.0/23
194.44.179.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:37:cd:0a:5a:16:2b:29:b2:7d:12:a2:49:08:73:d3:4f:2a:
9e:16:b7:a9:d3:fe:38:94:2b:ba:5d:2c:e1:66:b1:ea:ef:39:
c7:42:58:f7:df:8f:c5:01:ce:34:b0:04:aa:1d:89:92:2f:20:
b4:a4:96:39:7d:24:7a:1d:77:39:d6:ee:78:32:a6:54:8d:c1:
4c:6f:42:56:e3:13:d3:e8:5e:6b:96:cc:3a:71:b0:cd:29:c0:
2a:f4:d2:bf:28:59:5a:50:12:54:e4:e7:02:34:00:58:b8:4a:
56:1d:ed:5a:55:a6:ea:00:4a:73:1a:39:8e:6b:0b:eb:8a:df:
9a:93:03:b6:d2:34:0f:f1:cd:92:5f:38:20:82:e1:f6:9e:3b:
94:70:52:7f:b7:35:f3:bc:36:b3:47:1c:ff:f9:b8:a5:0a:46:
9e:16:ba:20:61:78:d6:2d:09:9b:b0:8b:12:e3:ed:7f:ab:31:
1e:f0:36:52:df:c4:e3:25:53:cf:93:ab:cf:39:92:7d:76:15:
fa:e5:14:4c:37:60:21:66:2d:f1:8b:d8:c1:1c:21:d9:9d:9d:
01:57:0f:fb:eb:89:94:f9:27:2e:a4:55:bb:99:43:c4:e3:9a:
6f:02:97:f2:6f:0b:c2:b6:52:09:9a:92:9e:78:d1:54:29:ff:
af:05:a8:80
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZiYTWHg/QIIcWg0HxIwVAC6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2ZjNkYjM1NjU5MTMzMzE1ZDJmY2Y5MzA1OGRjZTM1MGE0
Y2IxN2EwHhcNMjUwODExMDg0NDI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNWNhYTJkNDZmMmRjYWQyNzZjOTQxZTE1Mzk0MTg3ZjQ2M2YzYWY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7W0DHIVpO+bwptt1i/X8pR17i84
CAQ0o4HsnF+t8PDt2CgkxRz+2nsuJjpYMLe8ZXbRLkMnRFbKGRXRsxjDhUsgKbMN
3SvTC3L2RupwiLWTYE0LUK/uOf24TIC8ZNxmbmtHvD1q2fmLqq90xhupk/jK1f+J
VMrncYazMZw6lZLIpImEpqdiMLNluGTKG5xiOKcIw7+J0NQ+6gGTrw3w5BLQh1eL
uuHFyGMk5ZlM5Iv14hHZZQXHu/9Xl0Mvo5RhdlCNncUmJFPOZIz3M8AF6RtLPk+e
wy9v4Uzs7xwrmbTMn+m3fQdT/vALRdI3/HQbhP7kBLqSbYeRmrj5BauorwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMXKotRvLcrSdslB4VOUGH9GPzr5MB8GA1UdIwQY
MBaAFLbz2zVlkTMxXS/PkwWNzjUKTLF6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHZQYk5XV1JNekZkTDgtVEJZM09OUXBNc1hvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC83MGJmZmUtYjRmMy00NDllLTgxZWQt
NTQ5ZWU2ZDMwZmI2LzEveGNxaTFHOHR5dEoyeVVIaFU1UVlmMFlfT3ZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC83MGJmZmUtYjRmMy00NDllLTgxZWQtNTQ5ZWU2ZDMwZmI2
LzEvdHZQYk5XV1JNekZkTDgtVEJZM09OUXBNc1hvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBwiwmAwQA
wiyzMA0GCSqGSIb3DQEBCwUAA4IBAQCdN80KWhYrKbJ9EqJJCHPTTyqeFrep0/44
lCu6XSzhZrHq7znHQlj334/FAc40sASqHYmSLyC0pJY5fSR6HXc51u54MqZUjcFM
b0JW4xPT6F5rlsw6cbDNKcAq9NK/KFlaUBJU5OcCNABYuEpWHe1aVabqAEpzGjmO
awvrit+akwO20jQP8c2SXzggguH2njuUcFJ/tzXzvDazRxz/+bilCkaeFrogYXjW
LQmbsIsS4+1/qzEe8DZS38TjJVPPk6vPOZJ9dhX65RRMN2AhZi3xi9jBHCHZnZ0B
Vw/764mU+ScupFW7mUPE45pvApfybwvCtlIJmpKeeNFUKf+vBaiA
-----END CERTIFICATE-----
Generated at Thu Aug 21 10:28:53 2025 by rpki-client