Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/arl_yEtpP4DDXrmQ6KVg-jQ2qHc.roa
File: arl_yEtpP4DDXrmQ6KVg-jQ2qHc.roa (raw, json)
Hash identifier: 5M1R6GNVKpG+HzSwMNPMjsqeNhJUUjm69hOu68qG2wo=
Subject key identifier: 6A:B9:7F:C8:4B:69:3F:80:C3:5E:B9:90:E8:A5:60:FA:34:36:A8:77
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 0198C0EC8B21C166C268C2A5B24D4DDFE4B0
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/arl_yEtpP4DDXrmQ6KVg-jQ2qHc.roa
Signing time: Tue 19 Aug 2025 06:03:04 +0000
ROA not before: Tue 19 Aug 2025 06:03:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 77.246.212.0/22 maxlen: 22
88.80.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c0:ec:8b:21:c1:66:c2:68:c2:a5:b2:4d:4d:df:e4:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Aug 19 06:03:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6ab97fc84b693f80c35eb990e8a560fa3436a877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:06:a2:0c:56:12:85:de:9d:23:c3:c3:ad:c2:
55:cf:73:c3:4b:87:ba:3b:29:0f:af:5e:0a:5b:fe:
8c:85:03:1d:05:99:83:f4:e3:2e:2a:75:a2:19:b6:
ce:6a:dd:15:a7:5b:d8:49:73:87:3b:3f:0e:38:12:
9a:f9:d2:73:2b:c1:0e:f3:14:44:bf:48:a3:c0:f3:
8c:c6:56:42:65:77:c1:b7:6b:06:a9:14:d1:3a:a9:
65:02:a4:7d:71:13:be:fd:5f:a7:0a:71:71:a2:bf:
a4:8e:eb:69:ab:bb:cc:1f:5e:4c:c4:89:e7:b9:21:
ae:20:1a:8b:44:75:6a:a8:ec:43:7c:43:3a:96:d5:
fe:00:57:d5:d1:36:1a:51:76:b6:7a:ba:13:72:ef:
1c:bc:0f:fd:52:45:df:5d:39:8c:63:b5:d9:05:f5:
ba:af:e9:88:92:01:04:8b:23:0e:09:b8:ab:03:c5:
eb:9e:8a:31:f3:b9:50:64:2b:7a:74:2d:45:b8:ef:
fb:cb:cd:f6:e7:86:6c:4b:8d:5c:2e:1c:aa:47:54:
41:c0:e2:f4:01:f8:ed:ba:8f:fe:5d:7d:c2:f9:2d:
46:04:46:10:60:7c:7b:fc:d1:11:1d:05:a0:4e:84:
4e:15:db:6e:47:9f:1e:40:29:97:b5:23:f7:f2:20:
c4:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:B9:7F:C8:4B:69:3F:80:C3:5E:B9:90:E8:A5:60:FA:34:36:A8:77
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/arl_yEtpP4DDXrmQ6KVg-jQ2qHc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.246.212.0/22
88.80.141.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:6a:d5:91:67:e9:96:b4:89:00:b4:37:21:b0:df:b3:ea:bb:
1c:8f:b7:d1:90:7a:f6:be:3b:bc:d3:64:33:ce:1e:2f:01:da:
86:0a:f1:7c:f9:aa:a4:c1:68:03:03:1d:ee:ea:0a:bc:60:97:
dc:87:a8:39:f0:40:aa:7a:7e:a0:fe:52:44:70:7c:dc:bb:68:
16:60:19:a9:8f:64:4c:93:56:7c:bb:6f:53:f8:16:70:93:de:
a6:45:d1:f0:fe:63:e3:f5:35:75:2b:6c:63:7e:71:8f:8b:d4:
4b:dc:8f:78:c3:4b:e5:9b:71:f7:2d:4d:bb:66:78:79:ce:e2:
d9:1d:fa:5f:c3:70:67:68:71:65:92:09:7f:c8:c8:d0:0c:23:
f5:ca:cf:80:b8:e9:19:c3:c2:62:54:4c:74:53:83:0c:85:9d:
21:fd:7b:a4:ad:b3:80:c1:0c:3d:83:f6:91:10:3d:cd:97:37:
f6:1e:65:23:df:52:75:49:dd:92:1a:49:bd:81:93:3c:83:3c:
eb:d4:77:30:99:53:4f:2b:d0:4c:af:86:e4:df:38:e8:07:79:
ae:48:97:2d:6c:7b:8c:e4:d3:c1:32:fc:84:f9:46:18:f0:07:
79:a6:64:bf:74:47:b3:a0:82:ce:56:ed:79:d4:cb:2b:df:a8:
19:ed:31:07
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZjA7IshwWbCaMKlsk1N3+SwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxMjRmYmExZTQwMWMwM2U1YmExY2Q3N2FlOWVlMzljZmQ2
MzFiZmIwHhcNMjUwODE5MDYwMzA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YWI5N2ZjODRiNjkzZjgwYzM1ZWI5OTBlOGE1NjBmYTM0MzZhODc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQaiDFYShd6dI8PDrcJVz3PDS4e6
OykPr14KW/6MhQMdBZmD9OMuKnWiGbbOat0Vp1vYSXOHOz8OOBKa+dJzK8EO8xRE
v0ijwPOMxlZCZXfBt2sGqRTROqllAqR9cRO+/V+nCnFxor+kjutpq7vMH15MxInn
uSGuIBqLRHVqqOxDfEM6ltX+AFfV0TYaUXa2eroTcu8cvA/9UkXfXTmMY7XZBfW6
r+mIkgEEiyMOCbirA8Xrnoox87lQZCt6dC1FuO/7y83254ZsS41cLhyqR1RBwOL0
Afjtuo/+XX3C+S1GBEYQYHx7/NERHQWgToROFdtuR58eQCmXtSP38iDEuwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGq5f8hLaT+Aw165kOilYPo0Nqh3MB8GA1UdIwQY
MBaAFFEk+6HkAcA+W6HNd66e45z9Yxv7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEt
YWI4ZjFmMzM4N2VlLzEvYXJsX3lFdHBQNEREWHJtUTZLVmctalEycUhjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEtYWI4ZjFmMzM4N2Vl
LzEvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCTfbUAwQA
WFCNMA0GCSqGSIb3DQEBCwUAA4IBAQA6atWRZ+mWtIkAtDchsN+z6rscj7fRkHr2
vju802Qzzh4vAdqGCvF8+aqkwWgDAx3u6gq8YJfch6g58ECqen6g/lJEcHzcu2gW
YBmpj2RMk1Z8u29T+BZwk96mRdHw/mPj9TV1K2xjfnGPi9RL3I94w0vlm3H3LU27
Znh5zuLZHfpfw3BnaHFlkgl/yMjQDCP1ys+AuOkZw8JiVEx0U4MMhZ0h/XukrbOA
wQw9g/aRED3Nlzf2HmUj31J1Sd2SGkm9gZM8gzzr1HcwmVNPK9BMr4bk3zjoB3mu
SJctbHuM5NPBMvyE+UYY8Ad5pmS/dEezoILOVu151Msr36gZ7TEH
-----END CERTIFICATE-----
Generated at Wed Aug 20 10:45:32 2025 by rpki-client