Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/LDrl5yQ6YgLU4GfM_arnmSz23dU.roa
File: LDrl5yQ6YgLU4GfM_arnmSz23dU.roa (raw, json)
Hash identifier: iKaltE4AvPH8VGJ9xiua62Njowdj21H1MidVFZwr7hc=
Subject key identifier: 2C:3A:E5:E7:24:3A:62:02:D4:E0:67:CC:FD:AA:E7:99:2C:F6:DD:D5
Certificate issuer: /CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Certificate serial: 0196D0E413FDAE7B830872F380AC2AFD0FD7
Authority key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/LDrl5yQ6YgLU4GfM_arnmSz23dU.roa
Signing time: Wed 14 May 2025 22:22:10 +0000
ROA not before: Wed 14 May 2025 22:22:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200202
IP address blocks: 195.216.180.0/24 maxlen: 24
195.216.187.0/24 maxlen: 24
195.216.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d0:e4:13:fd:ae:7b:83:08:72:f3:80:ac:2a:fd:0f:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Validity
Not Before: May 14 22:22:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2c3ae5e7243a6202d4e067ccfdaae7992cf6ddd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:75:c2:4e:3d:2b:c1:e4:53:25:23:f1:af:63:
d0:f5:ea:ec:9c:12:21:d7:32:6e:3d:fb:1c:8a:54:
d1:0c:80:d4:eb:02:d0:c2:4a:2d:60:5f:42:a1:18:
97:bd:a4:41:72:dd:ae:b6:33:12:3b:80:30:4e:85:
bb:71:56:6a:44:79:47:7c:4d:12:4b:10:34:2d:c0:
e0:96:eb:cb:f6:a1:fd:10:35:fc:07:56:4e:40:2b:
b9:b4:c1:f4:78:3e:bb:73:03:1b:db:64:9f:ec:43:
50:87:67:e6:26:62:bf:43:f6:07:95:48:c1:4a:9b:
d1:5a:4c:d1:17:a2:23:6d:54:a6:24:e7:bf:b3:90:
d1:68:5e:10:66:26:b6:79:62:56:8f:6d:47:cf:3e:
7e:02:b2:72:11:53:4b:73:94:12:f6:61:1e:d8:f9:
a3:74:2b:98:80:3a:c9:9c:dc:9f:4e:21:46:6b:f4:
c2:ad:90:1b:6d:aa:70:da:4f:f1:e5:59:53:42:b1:
d6:6c:b2:fc:bd:df:a7:cd:bb:30:03:3e:55:c7:4f:
34:d8:c8:10:89:7e:d7:31:27:a5:c1:97:8b:34:dd:
c6:68:b3:c1:09:d3:0b:c9:c2:e5:b9:30:57:fc:67:
5d:ac:be:c3:c2:79:63:91:25:00:af:0e:2e:b1:10:
76:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:3A:E5:E7:24:3A:62:02:D4:E0:67:CC:FD:AA:E7:99:2C:F6:DD:D5
X509v3 Authority Key Identifier:
keyid:65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/LDrl5yQ6YgLU4GfM_arnmSz23dU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.216.180.0/24
195.216.187.0/24
195.216.190.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:0c:04:45:72:ca:56:39:6b:eb:2c:2c:0a:fe:ac:77:1f:09:
c5:1d:3e:56:d0:6c:a8:02:0b:5f:d2:66:66:ff:07:3e:1d:69:
fd:4c:ea:4c:ab:60:e2:ac:b6:e1:11:ba:66:c6:33:f2:9b:82:
a4:4c:7a:be:54:49:4f:65:ad:a5:e3:1f:82:58:5d:bc:a8:0c:
67:84:c0:8b:cb:74:91:53:d9:ba:e7:8e:39:b9:62:24:db:cf:
64:01:b9:b0:af:53:0d:dc:a2:36:20:29:1f:47:cc:e0:e0:c3:
3a:98:d6:79:8f:17:dc:cf:11:64:8b:f7:4a:b4:c8:0e:7e:7f:
7e:32:16:b7:7b:cd:18:c6:45:ed:7a:e0:cc:3f:9c:ca:91:18:
ed:f6:f0:0f:1e:4e:ad:c4:24:77:83:19:63:c4:45:96:b5:bb:
95:f7:3f:6a:5c:28:cb:26:d3:0f:1b:d0:69:fc:12:d2:d3:8e:
0e:90:1a:63:e2:7a:42:77:87:d4:bb:3c:de:58:45:91:c9:56:
03:2b:32:14:1b:78:3b:55:36:69:fe:71:b6:ed:ee:a9:ab:70:
44:4d:b6:c1:53:6b:77:cd:21:74:4a:e3:85:11:e3:84:39:f9:
88:15:0c:4d:ba:8b:ae:3b:91:d9:bb:2e:8f:f0:70:aa:b4:4d:
31:8b:9e:3a
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZbQ5BP9rnuDCHLzgKwq/Q/XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1YjdkNjY5OTgzNWJmZTlhODA4MWRmYzExNGRmMWJmNmQy
MTVkYTcwHhcNMjUwNTE0MjIyMjEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYzNhZTVlNzI0M2E2MjAyZDRlMDY3Y2NmZGFhZTc5OTJjZjZkZGQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3XCTj0rweRTJSPxr2PQ9ersnBIh
1zJuPfscilTRDIDU6wLQwkotYF9CoRiXvaRBct2utjMSO4AwToW7cVZqRHlHfE0S
SxA0LcDgluvL9qH9EDX8B1ZOQCu5tMH0eD67cwMb22Sf7ENQh2fmJmK/Q/YHlUjB
SpvRWkzRF6IjbVSmJOe/s5DRaF4QZia2eWJWj21Hzz5+ArJyEVNLc5QS9mEe2Pmj
dCuYgDrJnNyfTiFGa/TCrZAbbapw2k/x5VlTQrHWbLL8vd+nzbswAz5Vx0802MgQ
iX7XMSelwZeLNN3GaLPBCdMLycLluTBX/GddrL7DwnljkSUArw4usRB2MQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFCw65eckOmIC1OBnzP2q55ks9t3VMB8GA1UdIwQY
MBaAFGW31mmYNb/pqAgd/BFN8b9tIV2nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmJmV2FaZzF2LW1vQ0IzOEVVM3h2MjBoWGFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8wMjVlZTgtM2Y0Ny00NTdkLThkNDct
OWU0MTNlYmY0MmYzLzEvTERybDV5UTZZZ0xVNEdmTV9hcm5tU3oyM2RVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC8wMjVlZTgtM2Y0Ny00NTdkLThkNDctOWU0MTNlYmY0MmYz
LzEvWmJmV2FaZzF2LW1vQ0IzOEVVM3h2MjBoWGFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAw9i0AwQA
w9i7AwQAw9i+MA0GCSqGSIb3DQEBCwUAA4IBAQBsDARFcspWOWvrLCwK/qx3HwnF
HT5W0GyoAgtf0mZm/wc+HWn9TOpMq2DirLbhEbpmxjPym4KkTHq+VElPZa2l4x+C
WF28qAxnhMCLy3SRU9m65445uWIk289kAbmwr1MN3KI2ICkfR8zg4MM6mNZ5jxfc
zxFki/dKtMgOfn9+Mha3e80YxkXteuDMP5zKkRjt9vAPHk6txCR3gxljxEWWtbuV
9z9qXCjLJtMPG9Bp/BLS044OkBpj4npCd4fUuzzeWEWRyVYDKzIUG3g7VTZp/nG2
7e6pq3BETbbBU2t3zSF0SuOFEeOEOfmIFQxNuouuO5HZuy6P8HCqtE0xi546
-----END CERTIFICATE-----
Generated at Sat Jun 7 19:51:49 2025 by rpki-client