Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/AgHhdFIVbhSxp_Ce6ZQK7tJjzDA.roa
File: AgHhdFIVbhSxp_Ce6ZQK7tJjzDA.roa (raw, json)
Hash identifier: 2xw4pjgmaeFc2E8tx2jGw1C8I1RJmUolHegoZ2xzlhE=
Subject key identifier: 02:01:E1:74:52:15:6E:14:B1:A7:F0:9E:E9:94:0A:EE:D2:63:CC:30
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 0198E2347216C671A555F48D801FCC12640D
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/AgHhdFIVbhSxp_Ce6ZQK7tJjzDA.roa
Signing time: Mon 25 Aug 2025 17:09:04 +0000
ROA not before: Mon 25 Aug 2025 17:09:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50385
IP address blocks: 178.253.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 02:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e2:34:72:16:c6:71:a5:55:f4:8d:80:1f:cc:12:64:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Aug 25 17:09:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0201e17452156e14b1a7f09ee9940aeed263cc30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a7:08:90:ac:51:69:78:b6:92:3a:ec:b5:29:
05:43:ca:fa:26:6d:32:fe:82:4d:1f:da:95:d7:8a:
c3:5f:20:cf:8f:ea:64:bb:de:a6:3d:19:1a:3a:4f:
45:b9:7e:55:1e:3e:2f:f7:2e:df:03:18:3a:cd:64:
38:fe:9d:b5:4a:ea:ab:8d:10:f0:92:61:99:ad:cd:
54:38:3b:ad:74:42:1c:d1:1b:f3:1c:7b:c9:ea:f1:
28:c3:24:d2:90:a6:ea:43:aa:a6:3b:c9:3c:ef:39:
65:e7:72:52:d4:f4:91:61:e4:33:52:7a:29:67:b6:
e2:ef:96:66:c0:45:02:2a:aa:33:ef:07:fb:b7:bc:
f0:ca:13:71:1b:20:e3:2d:51:6c:e7:d8:41:79:a3:
af:d0:75:88:8d:85:4f:b3:c0:d9:bc:6d:61:28:77:
aa:84:49:26:c4:6f:51:b7:00:84:d9:f1:25:06:32:
e8:ea:58:31:ef:1b:60:27:50:43:f0:1f:17:80:b8:
b5:a6:10:a6:0b:87:32:79:ce:51:97:33:d2:fd:d0:
f8:42:70:37:bb:bf:54:92:8f:c4:2b:e8:24:b4:3e:
fc:f6:7f:e4:38:c7:47:e9:2c:4f:fc:fa:d6:d2:72:
e3:44:61:3a:dd:36:0d:c4:de:d2:07:93:6e:80:fd:
c6:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:01:E1:74:52:15:6E:14:B1:A7:F0:9E:E9:94:0A:EE:D2:63:CC:30
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/AgHhdFIVbhSxp_Ce6ZQK7tJjzDA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.253.245.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:17:a9:8f:96:eb:66:2a:b2:36:5c:cb:1d:2d:5c:33:86:32:
8e:60:66:04:c8:a1:77:63:86:1a:9c:a7:8c:25:15:d2:08:98:
f1:35:da:86:c0:79:91:ad:e1:30:3d:2f:96:3c:3a:2a:a7:bf:
83:73:95:0d:98:0b:1d:27:1b:76:19:57:ab:3a:8b:f5:70:69:
95:a3:11:35:79:69:4d:47:7a:90:6a:4b:89:d5:56:c1:1b:0b:
d7:20:9b:71:c7:0c:f6:13:bb:8b:74:6f:eb:0d:d3:2a:fc:63:
09:b8:00:e7:28:1f:c9:c3:81:8d:f4:92:7f:fc:c6:01:05:d8:
98:6d:74:ca:a7:b0:a3:e9:24:1a:0e:7b:a6:81:08:cb:78:eb:
d2:03:b0:88:c3:f0:8f:28:c8:bf:95:f6:59:b6:9c:cb:7f:c5:
84:a4:33:65:06:2e:61:5b:ce:c4:74:14:6c:58:9a:14:64:47:
e5:55:0a:36:0f:5c:b1:d5:96:95:7f:d9:d6:df:62:ef:a4:a3:
01:c8:80:f1:f8:d8:98:c3:65:e2:1a:f8:95:67:c3:8b:f0:6b:
3f:91:ea:ea:c6:0f:e0:0d:0e:77:fb:9c:48:62:c9:b7:81:a8:
f8:e4:28:95:9a:05:e8:e8:51:49:25:3b:59:7e:dd:76:8b:b9:
9b:69:15:b1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZjiNHIWxnGlVfSNgB/MEmQNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj
N2U5MTUwHhcNMjUwODI1MTcwOTA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMjAxZTE3NDUyMTU2ZTE0YjFhN2YwOWVlOTk0MGFlZWQyNjNjYzMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsacIkKxRaXi2kjrstSkFQ8r6Jm0y
/oJNH9qV14rDXyDPj+pku96mPRkaOk9FuX5VHj4v9y7fAxg6zWQ4/p21SuqrjRDw
kmGZrc1UODutdEIc0RvzHHvJ6vEowyTSkKbqQ6qmO8k87zll53JS1PSRYeQzUnop
Z7bi75ZmwEUCKqoz7wf7t7zwyhNxGyDjLVFs59hBeaOv0HWIjYVPs8DZvG1hKHeq
hEkmxG9RtwCE2fElBjLo6lgx7xtgJ1BD8B8XgLi1phCmC4cyec5RlzPS/dD4QnA3
u79Uko/EK+gktD789n/kOMdH6SxP/PrW0nLjRGE63TYNxN7SB5NugP3GLQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAIB4XRSFW4UsafwnumUCu7SY8wwMB8GA1UdIwQY
MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt
ZmFlNWRiZWQzYjFiLzEvQWdIaGRGSVZiaFN4cF9DZTZaUUs3dEpqekRBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi
LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsv31MA0G
CSqGSIb3DQEBCwUAA4IBAQBNF6mPlutmKrI2XMsdLVwzhjKOYGYEyKF3Y4YanKeM
JRXSCJjxNdqGwHmRreEwPS+WPDoqp7+Dc5UNmAsdJxt2GVerOov1cGmVoxE1eWlN
R3qQakuJ1VbBGwvXIJtxxwz2E7uLdG/rDdMq/GMJuADnKB/Jw4GN9JJ//MYBBdiY
bXTKp7Cj6SQaDnumgQjLeOvSA7CIw/CPKMi/lfZZtpzLf8WEpDNlBi5hW87EdBRs
WJoUZEflVQo2D1yx1ZaVf9nW32LvpKMByIDx+NiYw2XiGviVZ8OL8Gs/kerqxg/g
DQ53+5xIYsm3gaj45CiVmgXo6FFJJTtZft12i7mbaRWx
-----END CERTIFICATE-----
Generated at Sat Sep 6 07:56:23 2025 by rpki-client