Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/64__ti8-v70UmOgEukqaYVnNiPA.roa
File: 64__ti8-v70UmOgEukqaYVnNiPA.roa (raw, json)
Hash identifier: VerqmgWX+ipN/DN9t0GnBufDYhut1qzOjx4DnJxcXoE=
Subject key identifier: EB:8F:FF:B6:2F:3E:BF:BD:14:98:E8:04:BA:4A:9A:61:59:CD:88:F0
Certificate issuer: /CN=19ee5f16fc144acb98977449faa0ab77de1bdcc9
Certificate serial: 0198EAE7EB7D3C3D544CDD3763914A319EE0
Authority key identifier: 19:EE:5F:16:FC:14:4A:CB:98:97:74:49:FA:A0:AB:77:DE:1B:DC:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/64__ti8-v70UmOgEukqaYVnNiPA.roa
Signing time: Wed 27 Aug 2025 09:42:04 +0000
ROA not before: Wed 27 Aug 2025 09:42:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19905
IP address blocks: 83.111.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 19:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:ea:e7:eb:7d:3c:3d:54:4c:dd:37:63:91:4a:31:9e:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19ee5f16fc144acb98977449faa0ab77de1bdcc9
Validity
Not Before: Aug 27 09:42:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eb8fffb62f3ebfbd1498e804ba4a9a6159cd88f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f8:4a:2b:72:b8:c6:15:97:b8:0e:e8:e3:45:
58:6a:da:37:6d:33:82:03:38:fa:27:7b:9c:7b:d3:
d1:f7:6b:d4:26:49:c3:c3:46:69:94:e4:ad:21:76:
42:f2:bc:a0:9f:ae:ec:b2:9a:a3:b7:50:ac:9f:bf:
bc:b7:00:7b:e3:91:96:ce:a5:6c:de:a5:31:6d:9d:
fe:a4:4f:a0:0e:3c:6b:92:a9:37:40:8d:87:ca:df:
f6:3c:bb:98:b7:62:03:3c:59:fc:2a:41:f5:29:e3:
75:5e:bd:0d:ed:1e:4b:d4:6e:65:79:04:f0:50:43:
fb:4c:b2:bf:b0:a9:bf:9e:56:cd:57:9a:b5:7a:38:
f2:09:96:47:6e:be:b3:e8:05:b0:5c:7a:9b:59:e9:
9a:42:0a:03:72:a4:e4:f8:ff:ae:c2:86:ed:1d:12:
76:8d:5b:33:96:2b:0f:05:4f:27:d9:ed:2c:53:e8:
d9:fc:f4:f0:82:6d:a9:59:87:82:0a:d0:cf:06:82:
ef:0d:9a:bd:fc:97:11:c7:50:bc:34:4a:fd:71:18:
29:75:7f:3c:fb:99:f5:b3:8d:65:cf:08:5e:71:f6:
1d:af:34:e1:c1:31:bb:de:14:4c:f9:fa:92:8a:29:
46:50:76:d7:92:d4:1c:3b:eb:bb:98:9b:ab:ea:73:
ae:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:8F:FF:B6:2F:3E:BF:BD:14:98:E8:04:BA:4A:9A:61:59:CD:88:F0
X509v3 Authority Key Identifier:
keyid:19:EE:5F:16:FC:14:4A:CB:98:97:74:49:FA:A0:AB:77:DE:1B:DC:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/64__ti8-v70UmOgEukqaYVnNiPA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.111.28.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:85:81:21:d8:f0:0b:ba:ac:11:70:06:18:2f:68:1d:c3:b5:
8b:88:b7:55:fd:3a:16:c9:47:21:7a:2b:03:06:2d:fd:9e:33:
12:77:b6:6b:6b:14:8d:9a:bc:b9:c4:da:0f:c1:85:d6:15:c8:
18:9f:06:68:06:d3:49:76:dc:d4:d4:82:4c:8e:f0:14:ac:8c:
8f:be:ae:95:04:d0:5c:f5:8f:d9:cd:51:8e:e2:9b:a8:2d:01:
6c:ec:2b:fd:d7:43:da:23:5b:fe:a5:cc:03:1a:b0:ad:ad:2d:
87:a3:ab:a7:5d:97:89:a5:87:dc:fe:09:f0:a5:6b:84:31:7e:
18:6c:c9:f7:dc:09:18:b0:a0:30:0f:5b:f5:3f:98:75:97:93:
fa:35:fa:c4:5f:80:ba:99:4f:2a:d3:5a:5a:16:32:b3:d9:d2:
1f:28:69:62:64:28:19:07:59:d7:9f:2a:ea:df:b3:ab:d0:a3:
81:94:91:78:96:6e:72:90:31:4a:07:ed:76:48:75:28:57:75:
82:23:63:07:8a:c9:eb:b3:5c:ba:82:f1:ca:a3:7f:ab:9c:75:
64:d0:34:ee:9d:03:c3:e3:db:66:2b:11:0f:49:c6:1e:39:9b:
78:36:76:0a:a5:e8:29:78:89:30:f9:59:4c:00:90:68:13:c0:
0e:9a:9a:cb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZjq5+t9PD1UTN03Y5FKMZ7gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5ZWU1ZjE2ZmMxNDRhY2I5ODk3NzQ0OWZhYTBhYjc3ZGUx
YmRjYzkwHhcNMjUwODI3MDk0MjA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYjhmZmZiNjJmM2ViZmJkMTQ5OGU4MDRiYTRhOWE2MTU5Y2Q4OGYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1vhKK3K4xhWXuA7o40VYato3bTOC
Azj6J3uce9PR92vUJknDw0ZplOStIXZC8rygn67sspqjt1Csn7+8twB745GWzqVs
3qUxbZ3+pE+gDjxrkqk3QI2Hyt/2PLuYt2IDPFn8KkH1KeN1Xr0N7R5L1G5leQTw
UEP7TLK/sKm/nlbNV5q1ejjyCZZHbr6z6AWwXHqbWemaQgoDcqTk+P+uwobtHRJ2
jVszlisPBU8n2e0sU+jZ/PTwgm2pWYeCCtDPBoLvDZq9/JcRx1C8NEr9cRgpdX88
+5n1s41lzwhecfYdrzThwTG73hRM+fqSiilGUHbXktQcO+u7mJur6nOuFQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOuP/7YvPr+9FJjoBLpKmmFZzYjwMB8GA1UdIwQY
MBaAFBnuXxb8FErLmJd0Sfqgq3feG9zJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2U1ZkZ2d1VTc3VZbDNSSi1xQ3JkOTRiM01rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC83NDIzNzAtZTEwZi00NTQxLWFhNmMt
NjFhZmI2NmQxZThjLzEvNjRfX3RpOC12NzBVbU9nRXVrcWFZVm5OaVBBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC83NDIzNzAtZTEwZi00NTQxLWFhNmMtNjFhZmI2NmQxZThj
LzEvR2U1ZkZ2d1VTc3VZbDNSSi1xQ3JkOTRiM01rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAU28cMA0G
CSqGSIb3DQEBCwUAA4IBAQAdhYEh2PALuqwRcAYYL2gdw7WLiLdV/ToWyUcheisD
Bi39njMSd7ZraxSNmry5xNoPwYXWFcgYnwZoBtNJdtzU1IJMjvAUrIyPvq6VBNBc
9Y/ZzVGO4puoLQFs7Cv910PaI1v+pcwDGrCtrS2Ho6unXZeJpYfc/gnwpWuEMX4Y
bMn33AkYsKAwD1v1P5h1l5P6NfrEX4C6mU8q01paFjKz2dIfKGliZCgZB1nXnyrq
37Or0KOBlJF4lm5ykDFKB+12SHUoV3WCI2MHisnrs1y6gvHKo3+rnHVk0DTunQPD
49tmKxEPScYeOZt4NnYKpegpeIkw+VlMAJBoE8AOmprL
-----END CERTIFICATE-----
Generated at Sat Sep 6 05:30:55 2025 by rpki-client