Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/p2_7XpLZT8F42rihOd0TzCMxmCo.roa
File: p2_7XpLZT8F42rihOd0TzCMxmCo.roa (raw, json)
Hash identifier: f2RKPMbWax0ofSjG9a3ohFFR7biXce7y0gFKOZaUepQ=
Subject key identifier: A7:6F:FB:5E:92:D9:4F:C1:78:DA:B8:A1:39:DD:13:CC:23:31:98:2A
Certificate issuer: /CN=a60cee7582e9759be016c931ab34d9285d2fc8b4
Certificate serial: 0198C211831C535397B63230A96B8BD0A2BD
Authority key identifier: A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/p2_7XpLZT8F42rihOd0TzCMxmCo.roa
Signing time: Tue 19 Aug 2025 11:23:04 +0000
ROA not before: Tue 19 Aug 2025 11:23:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 87.248.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 05:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c2:11:83:1c:53:53:97:b6:32:30:a9:6b:8b:d0:a2:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a60cee7582e9759be016c931ab34d9285d2fc8b4
Validity
Not Before: Aug 19 11:23:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a76ffb5e92d94fc178dab8a139dd13cc2331982a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:03:a4:78:b8:46:9c:9d:b1:f5:fa:e3:78:24:
9f:64:ab:60:c1:cd:d7:ae:7e:7a:31:84:92:da:da:
9d:85:36:d3:19:80:42:6f:47:fc:d8:ea:15:ad:2e:
e2:47:49:36:36:bf:66:f2:38:7f:fd:52:41:0f:c3:
e0:cf:ab:b7:0d:bb:a4:71:7b:c5:9b:7f:a4:35:df:
4f:ce:a2:39:75:85:31:24:99:10:11:01:62:93:df:
c3:c1:2a:94:85:38:44:7d:d8:60:c2:e4:fc:eb:24:
b4:01:6c:4f:99:0c:1b:14:4c:2d:49:3e:8f:af:96:
b0:14:f9:5a:b8:75:e9:34:88:e5:9c:bd:e2:85:75:
28:e4:26:6a:7d:65:6c:a0:f8:e4:a7:4e:98:b1:cf:
78:d6:ba:ce:b5:77:b1:a4:06:60:37:e6:fe:dc:7a:
97:25:22:30:c7:f2:df:e3:98:37:41:77:b5:ba:99:
eb:c2:b3:75:3d:06:fb:f2:f2:03:fa:15:14:f2:3e:
ab:9b:9c:1f:2d:aa:7c:1e:5c:29:e8:30:70:80:f0:
3e:6f:0a:8d:9d:15:64:03:c1:f4:47:40:95:d9:04:
99:e4:93:71:56:eb:ea:b6:44:d2:9e:fd:a6:ee:7c:
3f:4c:ec:f5:f3:b6:9c:bd:0e:d4:5e:dc:fe:c0:34:
ac:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:6F:FB:5E:92:D9:4F:C1:78:DA:B8:A1:39:DD:13:CC:23:31:98:2A
X509v3 Authority Key Identifier:
keyid:A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/p2_7XpLZT8F42rihOd0TzCMxmCo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.143.0/24
Signature Algorithm: sha256WithRSAEncryption
55:19:f4:67:5b:5a:5d:86:3a:4d:26:b4:8b:f0:0b:be:37:88:
9f:f1:ca:d1:5b:7b:dd:89:c3:3b:1d:f2:42:9e:69:42:d1:e2:
26:3e:de:04:7f:ce:07:97:c5:48:16:be:de:24:40:6e:e7:fd:
b1:a5:c5:ae:bc:7e:46:59:a4:ef:53:55:1a:33:93:1d:6b:e8:
9f:2c:79:e6:e1:b0:dd:a5:70:fe:5d:de:7f:00:e7:da:9b:bc:
89:f7:b7:1b:74:cd:00:e5:6b:3a:f9:fe:f1:2b:5e:9a:1c:1b:
57:83:f7:5f:58:98:92:58:d7:46:90:ce:58:0c:a1:4a:8f:94:
b8:17:28:6a:89:34:3b:ee:cf:3d:c7:b2:42:12:6d:3d:2e:5f:
23:93:e8:8a:14:3f:00:22:bc:5c:52:0d:96:6a:fd:c4:7a:5e:
05:f2:4f:8d:9d:57:80:3d:cd:51:4a:bc:70:1e:5d:c9:5c:c6:
7b:80:0c:7c:42:16:0e:ae:07:93:eb:53:d4:26:21:f2:91:a3:
3a:99:5e:a7:00:06:78:e7:ce:db:0b:3f:3a:ff:99:5a:6f:88:
c1:14:3c:ac:8e:79:4d:b5:28:9a:50:a2:f2:bc:ca:4f:ab:31:
b6:ed:c7:e3:d1:52:a4:57:33:b2:1a:a8:8e:7d:5d:d3:6f:b7:
6c:76:dd:0a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZjCEYMcU1OXtjIwqWuL0KK9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2MGNlZTc1ODJlOTc1OWJlMDE2YzkzMWFiMzRkOTI4NWQy
ZmM4YjQwHhcNMjUwODE5MTEyMzA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNzZmZmI1ZTkyZDk0ZmMxNzhkYWI4YTEzOWRkMTNjYzIzMzE5ODJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwOkeLhGnJ2x9frjeCSfZKtgwc3X
rn56MYSS2tqdhTbTGYBCb0f82OoVrS7iR0k2Nr9m8jh//VJBD8Pgz6u3DbukcXvF
m3+kNd9PzqI5dYUxJJkQEQFik9/DwSqUhThEfdhgwuT86yS0AWxPmQwbFEwtST6P
r5awFPlauHXpNIjlnL3ihXUo5CZqfWVsoPjkp06Ysc941rrOtXexpAZgN+b+3HqX
JSIwx/Lf45g3QXe1upnrwrN1PQb78vID+hUU8j6rm5wfLap8Hlwp6DBwgPA+bwqN
nRVkA8H0R0CV2QSZ5JNxVuvqtkTSnv2m7nw/TOz187acvQ7UXtz+wDSspQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKdv+16S2U/BeNq4oTndE8wjMZgqMB8GA1UdIwQY
MBaAFKYM7nWC6XWb4BbJMas02ShdL8i0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGd6dWRZTHBkWnZnRnNreHF6VFpLRjB2eUxRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9kZWNhZDAtMjZkYS00YjlhLWIxYTct
ZDNiMzhjZTlkYzM0LzEvcDJfN1hwTFpUOEY0MnJpaE9kMFR6Q014bUNvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9kZWNhZDAtMjZkYS00YjlhLWIxYTctZDNiMzhjZTlkYzM0
LzEvcGd6dWRZTHBkWnZnRnNreHF6VFpLRjB2eUxRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV/iPMA0G
CSqGSIb3DQEBCwUAA4IBAQBVGfRnW1pdhjpNJrSL8Au+N4if8crRW3vdicM7HfJC
nmlC0eImPt4Ef84Hl8VIFr7eJEBu5/2xpcWuvH5GWaTvU1UaM5Mda+ifLHnm4bDd
pXD+Xd5/AOfam7yJ97cbdM0A5Ws6+f7xK16aHBtXg/dfWJiSWNdGkM5YDKFKj5S4
FyhqiTQ77s89x7JCEm09Ll8jk+iKFD8AIrxcUg2Wav3Eel4F8k+NnVeAPc1RSrxw
Hl3JXMZ7gAx8QhYOrgeT61PUJiHykaM6mV6nAAZ4587bCz86/5lab4jBFDysjnlN
tSiaUKLyvMpPqzG27cfj0VKkVzOyGqiOfV3Tb7dsdt0K
-----END CERTIFICATE-----
Generated at Wed Aug 20 10:46:08 2025 by rpki-client