Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/DivuYSIZ0IbHdUyOmrKzT5RvjmU.roa
File: DivuYSIZ0IbHdUyOmrKzT5RvjmU.roa (raw, json)
Hash identifier: KjjcUzYlaXAgYY3xR+AgJhW+w3tZ/CR+0bNP9/27Jqc=
Subject key identifier: 0E:2B:EE:61:22:19:D0:86:C7:75:4C:8E:9A:B2:B3:4F:94:6F:8E:65
Certificate issuer: /CN=321ec194107843848cd36330232b5f6a43791db4
Certificate serial: 0197172BC8A9E659450CC63412E5E0E43CBF
Authority key identifier: 32:1E:C1:94:10:78:43:84:8C:D3:63:30:23:2B:5F:6A:43:79:1D:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mh7BlBB4Q4SM02MwIytfakN5HbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/DivuYSIZ0IbHdUyOmrKzT5RvjmU.roa
Signing time: Wed 28 May 2025 13:53:54 +0000
ROA not before: Wed 28 May 2025 13:53:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8075
IP address blocks: 155.231.208.0/24 maxlen: 24
155.231.209.0/24 maxlen: 24
195.104.225.0/24 maxlen: 24
195.105.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/Mh7BlBB4Q4SM02MwIytfakN5HbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/Mh7BlBB4Q4SM02MwIytfakN5HbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mh7BlBB4Q4SM02MwIytfakN5HbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Jun 2025 16:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:17:2b:c8:a9:e6:59:45:0c:c6:34:12:e5:e0:e4:3c:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=321ec194107843848cd36330232b5f6a43791db4
Validity
Not Before: May 28 13:53:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0e2bee612219d086c7754c8e9ab2b34f946f8e65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:29:32:96:6e:5f:cd:70:23:4b:0b:b7:66:8f:
12:2d:fa:d7:44:4e:f8:c2:fe:04:e1:01:89:c4:ac:
34:00:f1:bf:fb:74:c0:c6:59:c3:98:af:f8:91:62:
26:24:90:b4:f9:1d:79:92:55:31:90:be:22:a4:5c:
1b:02:c7:1a:b6:53:83:60:cd:ab:28:d8:89:1c:dc:
d1:87:e3:e2:20:78:fb:6a:91:7b:3f:6a:4f:6a:d7:
27:34:0a:64:3d:2c:9e:f0:49:f3:d9:98:5a:32:da:
5e:b7:23:05:68:af:15:61:e4:87:9f:0f:fa:bf:99:
c2:0e:fa:45:86:f6:e0:c8:ac:d6:36:6f:54:0d:8a:
8e:22:fb:30:ba:a1:03:1c:b7:e0:b8:5d:54:8c:d7:
ed:a1:3b:4d:be:7b:08:de:b5:9e:d4:d1:1c:d2:30:
75:f2:d4:58:84:01:4c:c0:74:7c:7c:7f:56:18:9a:
92:6c:2a:5e:58:d2:db:fb:3c:7c:f2:1d:79:46:1b:
ec:1e:f8:92:5b:cd:2d:a9:24:3d:9b:dc:dd:d4:5a:
b5:92:32:1e:0e:54:19:b9:83:79:37:b1:b8:29:79:
02:0b:6f:0d:b7:75:83:3f:49:28:ea:bc:7c:29:60:
87:46:26:ef:67:cc:f8:61:7b:82:3e:f9:ff:9b:f4:
ce:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:2B:EE:61:22:19:D0:86:C7:75:4C:8E:9A:B2:B3:4F:94:6F:8E:65
X509v3 Authority Key Identifier:
keyid:32:1E:C1:94:10:78:43:84:8C:D3:63:30:23:2B:5F:6A:43:79:1D:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mh7BlBB4Q4SM02MwIytfakN5HbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/DivuYSIZ0IbHdUyOmrKzT5RvjmU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/Mh7BlBB4Q4SM02MwIytfakN5HbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.231.208.0/23
195.104.225.0/24
195.105.26.0/24
Signature Algorithm: sha256WithRSAEncryption
43:cb:5e:2d:4d:1f:a4:7a:91:3a:93:8b:58:b9:14:6b:dd:45:
c1:54:7c:8c:5f:10:e6:14:27:29:3a:56:e3:54:a5:81:d2:b3:
16:e2:3f:6c:51:8c:ee:bd:35:7f:ef:47:d3:ef:be:e3:54:98:
1e:27:80:2e:f7:57:b5:ab:ca:25:18:a2:f4:c1:e9:c4:4a:97:
ec:e1:0b:ef:b3:48:3c:eb:67:b8:95:ae:20:85:15:a6:50:03:
f2:8b:b0:dc:ff:1e:2d:77:9a:9e:89:9e:cf:70:35:49:a1:fa:
5c:b5:7f:14:a4:54:5d:1a:51:a2:9e:05:ff:76:f0:3c:9e:e8:
ea:de:df:08:5c:27:3e:0d:17:80:db:ee:71:59:8e:98:42:31:
52:f0:79:77:15:3e:1f:ae:e4:f1:5c:e1:99:36:72:f6:1c:5b:
b1:6e:65:09:5e:77:69:c4:34:e1:db:e3:ac:48:fb:1e:7e:83:
9d:8b:fc:6a:eb:b3:f6:5e:68:27:09:a1:8c:cb:df:b2:ad:3a:
1d:f9:70:5f:6b:e3:43:3c:59:a6:e4:13:4a:4e:27:c0:de:29:
ef:2d:51:84:c7:77:6c:ca:8b:31:fe:de:03:b5:c6:cc:18:1c:
b1:52:5a:d0:3f:19:b0:44:cd:6e:d8:89:9c:23:38:d2:dd:ae:
ac:74:ca:c8
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZcXK8ip5llFDMY0EuXg5Dy/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyMWVjMTk0MTA3ODQzODQ4Y2QzNjMzMDIzMmI1ZjZhNDM3
OTFkYjQwHhcNMjUwNTI4MTM1MzU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZTJiZWU2MTIyMTlkMDg2Yzc3NTRjOGU5YWIyYjM0Zjk0NmY4ZTY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCkylm5fzXAjSwu3Zo8SLfrXRE74
wv4E4QGJxKw0APG/+3TAxlnDmK/4kWImJJC0+R15klUxkL4ipFwbAscatlODYM2r
KNiJHNzRh+PiIHj7apF7P2pPatcnNApkPSye8Enz2ZhaMtpetyMFaK8VYeSHnw/6
v5nCDvpFhvbgyKzWNm9UDYqOIvswuqEDHLfguF1UjNftoTtNvnsI3rWe1NEc0jB1
8tRYhAFMwHR8fH9WGJqSbCpeWNLb+zx88h15RhvsHviSW80tqSQ9m9zd1Fq1kjIe
DlQZuYN5N7G4KXkCC28Nt3WDP0ko6rx8KWCHRibvZ8z4YXuCPvn/m/TOiQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFA4r7mEiGdCGx3VMjpqys0+Ub45lMB8GA1UdIwQY
MBaAFDIewZQQeEOEjNNjMCMrX2pDeR20MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWg3QmxCQjRRNFNNMDJNd0l5dGZha041SGJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9mMTQ1OGYtYmRjMy00ZTRiLTlmNjgt
M2E2MTFjMDkzYTJjLzEvRGl2dVlTSVowSWJIZFV5T21yS3pUNVJ2am1VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi9mMTQ1OGYtYmRjMy00ZTRiLTlmNjgtM2E2MTFjMDkzYTJj
LzEvTWg3QmxCQjRRNFNNMDJNd0l5dGZha041SGJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBm+fQAwQA
w2jhAwQAw2kaMA0GCSqGSIb3DQEBCwUAA4IBAQBDy14tTR+kepE6k4tYuRRr3UXB
VHyMXxDmFCcpOlbjVKWB0rMW4j9sUYzuvTV/70fT777jVJgeJ4Au91e1q8olGKL0
wenESpfs4Qvvs0g862e4la4ghRWmUAPyi7Dc/x4td5qeiZ7PcDVJofpctX8UpFRd
GlGingX/dvA8nujq3t8IXCc+DReA2+5xWY6YQjFS8Hl3FT4fruTxXOGZNnL2HFux
bmUJXndpxDTh2+OsSPsefoOdi/xq67P2XmgnCaGMy9+yrTod+XBfa+NDPFmm5BNK
TifA3invLVGEx3dsyosx/t4DtcbMGByxUlrQPxmwRM1u2ImcIzjS3a6sdMrI
-----END CERTIFICATE-----
Generated at Wed Jun 4 21:54:49 2025 by rpki-client