Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/lw1Zlz6QKCraxjr64P-Bxwdv55U.roa
File: lw1Zlz6QKCraxjr64P-Bxwdv55U.roa (raw, json)
Hash identifier: 5LWrcVrad4qCaReJlnte0zGH6a0kztBoWFWkcvEC9G4=
Subject key identifier: 97:0D:59:97:3E:90:28:2A:DA:C6:3A:FA:E0:FF:81:C7:07:6F:E7:95
Certificate issuer: /CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Certificate serial: 0197A473784E2EC4FEB7BDBBBC70FB8CC2ED
Authority key identifier: 09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/lw1Zlz6QKCraxjr64P-Bxwdv55U.roa
Signing time: Wed 25 Jun 2025 00:18:40 +0000
ROA not before: Wed 25 Jun 2025 00:18:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 89.187.7.0/24 maxlen: 24
89.187.16.0/24 maxlen: 24
89.187.21.0/24 maxlen: 24
89.187.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Jul 2025 16:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:a4:73:78:4e:2e:c4:fe:b7:bd:bb:bc:70:fb:8c:c2:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Validity
Not Before: Jun 25 00:18:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=970d59973e90282adac63afae0ff81c7076fe795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:da:9a:b1:ee:87:fe:9f:78:2b:74:98:38:19:
d3:ae:e8:a6:c2:40:a0:e2:04:9b:71:d5:a4:89:b8:
92:2d:c7:1a:0b:91:0a:23:92:05:c4:8c:f7:ad:c4:
b9:05:7b:d7:2c:b9:c2:fa:6c:d7:69:d6:e6:01:e6:
19:f8:db:fb:3b:3d:6d:a7:eb:d0:26:fc:d1:87:c8:
57:e5:8e:f4:e2:07:56:f0:1c:24:d7:ae:05:67:a0:
9e:ff:ca:70:73:70:14:8c:d2:04:a6:dc:21:44:d8:
01:41:02:e6:bc:85:70:c6:19:e3:df:5a:ce:f2:fa:
38:a9:cb:a9:bb:3c:e1:e7:08:b4:5e:9b:a9:d0:07:
57:c0:93:4d:97:26:fb:8d:f9:60:21:75:0b:05:8e:
25:69:09:75:c1:34:83:9e:d2:bd:9c:8f:91:93:8c:
85:63:b9:e0:0d:bd:33:77:81:4a:28:ab:37:e8:af:
f0:eb:3e:38:ae:91:3f:d3:80:41:00:28:31:3d:9d:
df:66:48:4e:38:89:fa:03:6b:c0:78:91:03:f8:a5:
3e:65:82:98:53:bf:99:e4:a2:84:1b:1d:c5:13:2f:
40:16:aa:6e:59:a0:0d:d2:b2:7a:ca:04:92:ac:60:
f3:50:61:30:5d:b5:25:b2:b9:72:6e:8b:b4:4a:62:
9e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:0D:59:97:3E:90:28:2A:DA:C6:3A:FA:E0:FF:81:C7:07:6F:E7:95
X509v3 Authority Key Identifier:
keyid:09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/lw1Zlz6QKCraxjr64P-Bxwdv55U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.187.7.0/24
89.187.16.0/24
89.187.21.0/24
89.187.30.0/24
Signature Algorithm: sha256WithRSAEncryption
82:7d:82:4a:10:13:2f:91:4c:3f:03:a5:65:43:bf:96:52:ae:
09:04:82:e5:3b:da:f1:db:bf:61:ce:f8:ee:80:84:21:dc:a1:
6c:2b:54:93:1a:4b:ff:10:3e:19:41:c4:71:0b:26:29:d0:3a:
27:02:f5:73:5e:f7:52:5d:80:40:5b:fb:e8:b0:d3:08:0f:9b:
77:0f:f7:28:fa:ab:2c:ec:b5:80:bf:b1:08:60:72:c8:a9:5b:
ca:d4:52:82:2f:9a:bc:d1:c0:d2:9c:96:af:0a:04:24:b1:b8:
2b:78:26:b8:d7:0c:c4:67:b7:db:94:4f:12:f3:b7:f3:e6:e5:
35:0e:ce:e0:b9:fa:0c:20:a9:2e:0b:fb:68:86:2e:bf:9d:ca:
e8:62:b8:07:5f:ac:a8:d1:ce:f1:96:de:ce:d4:59:35:e6:2d:
15:d7:08:08:fb:ff:ad:02:a0:b8:cf:ea:da:d2:86:35:97:bb:
57:01:7f:79:72:48:ec:13:5d:87:cf:6d:fd:3b:96:ba:b7:84:
68:a3:44:cc:9d:05:dd:ec:e1:6d:b2:7d:ce:d2:c2:59:a6:85:
f5:b4:22:76:47:4e:b3:0a:31:30:79:f1:0a:2c:ca:2b:fb:53:
43:29:b1:fe:97:7d:2f:f3:7e:4e:74:4d:4a:94:b9:48:d3:b2:
af:e5:25:eb
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZekc3hOLsT+t727vHD7jMLtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MWVjN2NjZjBmYTc2MWVkOTliYzVhN2E5ZWMwZDBlZWIw
YmYwNTUwHhcNMjUwNjI1MDAxODQwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NzBkNTk5NzNlOTAyODJhZGFjNjNhZmFlMGZmODFjNzA3NmZlNzk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNqase6H/p94K3SYOBnTruimwkCg
4gSbcdWkibiSLccaC5EKI5IFxIz3rcS5BXvXLLnC+mzXadbmAeYZ+Nv7Oz1tp+vQ
JvzRh8hX5Y704gdW8Bwk164FZ6Ce/8pwc3AUjNIEptwhRNgBQQLmvIVwxhnj31rO
8vo4qcupuzzh5wi0Xpup0AdXwJNNlyb7jflgIXULBY4laQl1wTSDntK9nI+Rk4yF
Y7ngDb0zd4FKKKs36K/w6z44rpE/04BBACgxPZ3fZkhOOIn6A2vAeJED+KU+ZYKY
U7+Z5KKEGx3FEy9AFqpuWaAN0rJ6ygSSrGDzUGEwXbUlsrlybou0SmKeGwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFJcNWZc+kCgq2sY6+uD/gccHb+eVMB8GA1UdIwQY
MBaAFAkex8zw+nYe2ZvFp6nsDQ7rC/BVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1I3SHpQRDZkaDdabThXbnFld05EdXNMOEZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9lNjQ3OGEtN2I3My00NzU4LWFkZGQt
NDVjZmM4NTdkZGRkLzEvbHcxWmx6NlFLQ3JheGpyNjRQLUJ4d2R2NTVVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS9lNjQ3OGEtN2I3My00NzU4LWFkZGQtNDVjZmM4NTdkZGRk
LzEvQ1I3SHpQRDZkaDdabThXbnFld05EdXNMOEZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAWbsHAwQA
WbsQAwQAWbsVAwQAWbseMA0GCSqGSIb3DQEBCwUAA4IBAQCCfYJKEBMvkUw/A6Vl
Q7+WUq4JBILlO9rx279hzvjugIQh3KFsK1STGkv/ED4ZQcRxCyYp0DonAvVzXvdS
XYBAW/vosNMID5t3D/co+qss7LWAv7EIYHLIqVvK1FKCL5q80cDSnJavCgQksbgr
eCa41wzEZ7fblE8S87fz5uU1Ds7gufoMIKkuC/tohi6/ncroYrgHX6yo0c7xlt7O
1Fk15i0V1wgI+/+tAqC4z+ra0oY1l7tXAX95ckjsE12Hz239O5a6t4Roo0TMnQXd
7OFtsn3O0sJZpoX1tCJ2R06zCjEwefEKLMor+1NDKbH+l30v835OdE1KlLlI07Kv
5SXr
-----END CERTIFICATE-----
Generated at Sat Jul 5 22:23:38 2025 by rpki-client