Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/eYe0ntoHsn5C9aoZKH_cB21Bfys.roa
File: eYe0ntoHsn5C9aoZKH_cB21Bfys.roa (raw, json)
Hash identifier: rbiYcU0iwzMDkl2hqOmLPRmcdqv8DqvFIgub7i+wD8o=
Subject key identifier: 79:87:B4:9E:DA:07:B2:7E:42:F5:AA:19:28:7F:DC:07:6D:41:7F:2B
Certificate issuer: /CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Certificate serial: 0198F135925F6BE0B60E510C448A575BC51F
Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/eYe0ntoHsn5C9aoZKH_cB21Bfys.roa
Signing time: Thu 28 Aug 2025 15:04:36 +0000
ROA not before: Thu 28 Aug 2025 15:04:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2914
IP address blocks: 84.46.203.0/24 maxlen: 24
84.46.211.0/24 maxlen: 24
84.46.214.0/24 maxlen: 24
86.38.128.0/24 maxlen: 24
86.38.129.0/24 maxlen: 24
86.38.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:f1:35:92:5f:6b:e0:b6:0e:51:0c:44:8a:57:5b:c5:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Validity
Not Before: Aug 28 15:04:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7987b49eda07b27e42f5aa19287fdc076d417f2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a6:e1:8c:d0:9b:ea:c8:83:2b:9f:7c:82:24:
8f:80:db:03:aa:8d:a6:33:28:f7:d5:94:c8:9c:31:
6c:66:82:10:41:3f:8d:cb:07:6e:d7:68:6d:15:f6:
18:20:fb:91:47:4f:86:0e:ad:7a:2c:63:42:a6:ca:
04:90:e2:61:27:c5:e4:39:df:3c:6d:f8:ab:22:36:
28:ca:05:a2:a8:7b:40:19:80:f7:c9:b9:42:07:21:
0f:5d:ab:75:6e:39:2e:c6:b5:19:ce:ee:98:93:18:
f9:fc:57:bf:85:4e:5d:bb:11:47:4e:f3:b7:8c:4a:
16:d8:f8:e1:23:d7:ca:94:43:e2:65:c9:c4:55:42:
8e:58:d0:a4:d1:76:97:88:fe:79:f1:ce:bd:98:05:
80:e0:f1:81:0d:30:8e:a7:8a:e2:2d:ea:f8:61:1b:
75:d8:4c:20:7c:c9:a0:97:0b:6a:f9:3b:41:b8:5b:
49:18:a7:23:55:25:85:90:0e:9a:4e:c7:5a:44:11:
9e:6d:df:0e:1c:cf:60:32:38:a5:b0:a9:87:d9:e3:
f5:6f:fb:39:99:63:86:7c:d0:5d:f3:a8:c9:62:ee:
27:95:fb:b2:96:fc:94:84:9d:ec:eb:2a:2d:51:3b:
c8:54:ac:2e:a4:ac:60:96:73:99:71:36:d3:80:ac:
d1:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:87:B4:9E:DA:07:B2:7E:42:F5:AA:19:28:7F:DC:07:6D:41:7F:2B
X509v3 Authority Key Identifier:
keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/eYe0ntoHsn5C9aoZKH_cB21Bfys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.46.203.0/24
84.46.211.0/24
84.46.214.0/24
86.38.128.0/23
86.38.158.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:fd:69:ef:9e:57:18:30:0f:e2:a6:9f:39:a1:bb:00:af:a1:
f9:d2:52:d6:e4:17:3d:20:06:17:51:f4:6f:ee:36:6b:d5:ff:
68:59:d6:c7:46:2a:51:ca:44:65:29:bd:2a:5a:d7:bc:29:f6:
b4:f7:f9:4d:d9:a8:3d:77:20:96:53:21:3f:e3:e1:72:f2:56:
21:11:90:f9:f2:11:1d:78:48:d8:9f:57:cc:55:4e:e2:ca:ec:
ec:80:d2:bf:41:b2:3f:37:2e:88:77:74:0b:91:82:11:2d:55:
8d:cc:fc:45:0d:2c:e6:65:0d:ac:74:ed:fc:bb:07:4d:ea:57:
c1:1d:91:9f:1a:2e:57:3b:d3:2f:54:12:58:9a:59:05:05:97:
9d:eb:a5:3d:82:43:43:61:81:92:04:f5:e1:24:6c:ac:ca:74:
4b:b0:4e:af:0b:1f:1b:ea:05:45:bd:34:97:d1:42:2a:9b:28:
e2:7d:38:95:13:39:7e:01:16:2a:33:fc:bf:c1:cc:aa:52:0f:
d7:de:f6:27:46:d2:4e:98:8a:66:91:07:5a:13:17:fb:00:a4:
f3:d6:a5:09:1e:a9:96:54:e0:bf:f0:82:0d:4e:72:e2:72:b0:
fd:7d:ed:74:93:42:1f:8c:6b:b9:cf:84:99:64:9e:4f:f8:a2:
ea:73:8a:0c
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZjxNZJfa+C2DlEMRIpXW8UfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwZGQ4MWE4MzNkOWIwNDNjN2ZmZDYzNWE1OTg3ZjUzNjk3
MTE4MGQwHhcNMjUwODI4MTUwNDM2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OTg3YjQ5ZWRhMDdiMjdlNDJmNWFhMTkyODdmZGMwNzZkNDE3ZjJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKbhjNCb6siDK598giSPgNsDqo2m
Myj31ZTInDFsZoIQQT+Nywdu12htFfYYIPuRR0+GDq16LGNCpsoEkOJhJ8XkOd88
bfirIjYoygWiqHtAGYD3yblCByEPXat1bjkuxrUZzu6Ykxj5/Fe/hU5duxFHTvO3
jEoW2PjhI9fKlEPiZcnEVUKOWNCk0XaXiP558c69mAWA4PGBDTCOp4riLer4YRt1
2EwgfMmglwtq+TtBuFtJGKcjVSWFkA6aTsdaRBGebd8OHM9gMjilsKmH2eP1b/s5
mWOGfNBd86jJYu4nlfuylvyUhJ3s6yotUTvIVKwupKxglnOZcTbTgKzRnQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFHmHtJ7aB7J+QvWqGSh/3AdtQX8rMB8GA1UdIwQY
MBaAFPDdgagz2bBDx//WNaWYf1NpcRgNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOE4yQnFEUFpzRVBIXzlZMXBaaF9VMmx4R0EwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9hOGViZTQtZDBiMy00ZTdkLWFmMjUt
MDQ2ODA0MjQ4NmRjLzEvZVllMG50b0hzbjVDOWFvWktIX2NCMjFCZnlzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS9hOGViZTQtZDBiMy00ZTdkLWFmMjUtMDQ2ODA0MjQ4NmRj
LzEvOE4yQnFEUFpzRVBIXzlZMXBaaF9VMmx4R0EwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAVC7LAwQA
VC7TAwQAVC7WAwQBViaAAwQAViaeMA0GCSqGSIb3DQEBCwUAA4IBAQAs/WnvnlcY
MA/ipp85obsAr6H50lLW5Bc9IAYXUfRv7jZr1f9oWdbHRipRykRlKb0qWte8Kfa0
9/lN2ag9dyCWUyE/4+Fy8lYhEZD58hEdeEjYn1fMVU7iyuzsgNK/QbI/Ny6Id3QL
kYIRLVWNzPxFDSzmZQ2sdO38uwdN6lfBHZGfGi5XO9MvVBJYmlkFBZed66U9gkND
YYGSBPXhJGysynRLsE6vCx8b6gVFvTSX0UIqmyjifTiVEzl+ARYqM/y/wcyqUg/X
3vYnRtJOmIpmkQdaExf7AKTz1qUJHqmWVOC/8IINTnLicrD9fe10k0IfjGu5z4SZ
ZJ5P+KLqc4oM
-----END CERTIFICATE-----
Generated at Sun Sep 7 13:19:23 2025 by rpki-client