Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/1-iBeGc5GK4S2dN6uCF2HCrItiXo.roa
File: 1-iBeGc5GK4S2dN6uCF2HCrItiXo.roa (raw, json)
Hash identifier: +Atg18ZWrDmX8o1SUvdzlk15atSl/w2VLIu7oNt59yU=
Subject key identifier: FA:20:5E:19:CE:46:2B:84:B6:74:DE:AE:08:5D:87:0A:B2:2D:89:7A
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 0198DD8F2CEDB962289D1B4B1936513BFC53
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/1-iBeGc5GK4S2dN6uCF2HCrItiXo.roa
Signing time: Sun 24 Aug 2025 19:30:04 +0000
ROA not before: Sun 24 Aug 2025 19:30:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215439
IP address blocks: 64.188.64.0/22 maxlen: 24
77.239.125.0/24 maxlen: 24
144.31.164.0/22 maxlen: 24
144.31.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 17:17:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:dd:8f:2c:ed:b9:62:28:9d:1b:4b:19:36:51:3b:fc:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Aug 24 19:30:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fa205e19ce462b84b674deae085d870ab22d897a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:61:b6:a0:77:e4:e6:8a:0c:9b:3e:ba:83:14:
13:9e:1a:e2:04:84:36:08:ad:84:64:69:19:fc:0e:
12:c8:ef:69:55:07:59:0b:b1:7e:c9:67:a0:a0:00:
1c:c3:8e:0c:43:f0:cf:6b:7a:91:e9:8a:b4:94:04:
ca:ba:35:48:ca:ac:c7:a3:67:74:41:81:4f:8f:87:
2d:ad:48:1d:b2:5a:a6:ab:90:79:10:03:fb:a4:af:
dd:81:75:3a:65:a0:a1:03:70:03:19:b1:b5:d0:c1:
e6:bb:bd:cd:48:b7:23:cd:3e:40:2c:cb:a7:68:70:
10:91:eb:b3:14:b9:51:ad:dc:9d:08:8d:a9:c0:92:
54:2d:95:92:bb:15:fb:5e:c9:b0:2d:75:26:87:4b:
20:d3:30:b8:4a:3a:1d:a8:66:0f:10:e7:f6:63:54:
ac:44:50:e3:60:27:0f:b6:43:fb:59:9a:87:3a:33:
c9:c2:3b:bb:e2:1c:a8:09:4f:34:56:27:36:d8:36:
92:d1:f5:5e:82:ec:1e:15:45:d0:9c:a6:ea:9f:f2:
eb:60:62:ca:5a:c5:f8:d6:07:97:71:95:38:18:1e:
27:8b:29:47:15:37:43:d8:26:a0:da:de:b3:f1:0d:
ab:2d:04:ad:d5:52:2a:25:c9:da:a1:1a:21:cb:e8:
ae:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:20:5E:19:CE:46:2B:84:B6:74:DE:AE:08:5D:87:0A:B2:2D:89:7A
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/1-iBeGc5GK4S2dN6uCF2HCrItiXo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.188.64.0/22
77.239.125.0/24
144.31.164.0/22
144.31.212.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:51:db:60:5b:6b:e8:7f:c1:2b:fc:ed:03:13:44:67:d0:75:
e7:3b:d8:be:d0:2f:7e:8d:37:fe:43:c7:b9:5d:c6:b0:59:cf:
22:0e:af:12:4d:72:42:e3:0b:0b:62:ac:f4:e0:fd:d3:97:b1:
1d:07:6b:7e:fc:0b:62:7f:4c:ac:88:89:1e:48:86:61:02:88:
12:8d:b4:44:e4:8f:78:29:c1:ee:f2:c8:59:1f:86:ad:b4:6c:
94:8a:21:43:85:28:91:e5:a1:54:4f:13:e3:a8:b6:4c:14:96:
96:45:ff:43:18:e8:3c:24:7f:ee:14:d7:61:59:ad:47:e4:ba:
30:90:88:92:39:0a:1e:d6:b5:5e:e5:e9:1c:c8:26:ee:12:d3:
a6:c1:99:6a:d9:5d:6a:d0:58:a4:fa:ac:4e:58:54:80:e6:00:
f5:3f:c0:a1:b9:e5:e5:4e:fa:05:3f:1d:5d:e4:f4:e7:9c:34:
3d:2a:61:ba:12:88:c5:e6:23:f2:9c:fa:66:bb:9f:4b:c5:5a:
01:e4:cf:7f:a1:3f:5b:b9:73:2f:fc:40:41:39:8b:1f:47:d9:
e4:5a:b1:41:b2:ca:19:16:46:37:25:29:23:4e:7f:e3:51:31:
05:91:6e:99:5a:07:86:94:1a:a9:25:c0:44:f6:b7:cc:44:0a:
34:dc:a1:c2
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgISAZjdjyztuWIonRtLGTZRO/xTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjUwODI0MTkzMDA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYTIwNWUxOWNlNDYyYjg0YjY3NGRlYWUwODVkODcwYWIyMmQ4OTdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumG2oHfk5ooMmz66gxQTnhriBIQ2
CK2EZGkZ/A4SyO9pVQdZC7F+yWegoAAcw44MQ/DPa3qR6Yq0lATKujVIyqzHo2d0
QYFPj4ctrUgdslqmq5B5EAP7pK/dgXU6ZaChA3ADGbG10MHmu73NSLcjzT5ALMun
aHAQkeuzFLlRrdydCI2pwJJULZWSuxX7XsmwLXUmh0sg0zC4SjodqGYPEOf2Y1Ss
RFDjYCcPtkP7WZqHOjPJwju74hyoCU80Vic22DaS0fVeguweFUXQnKbqn/LrYGLK
WsX41geXcZU4GB4niylHFTdD2Cag2t6z8Q2rLQSt1VIqJcnaoRohy+iuUQIDAQAB
o4ICHDCCAhgwHQYDVR0OBBYEFPogXhnORiuEtnTerghdhwqyLYl6MB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvMS1pQmVHYzVHSzRTMmRONnVDRjJIQ3JJdGlYby5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvYzMvMzhmMTI4LWVhODItNDU1NS1iNTE0LTE0Mzk2N2E4ZmUw
OC8xL0hKWS1QU0tFZlVac0ppd2doNHduZ05pRUFBTS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAxBggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEAkC8QAME
AE3vfQMEApAfpAMEAJAf1DANBgkqhkiG9w0BAQsFAAOCAQEAflHbYFtr6H/BK/zt
AxNEZ9B15zvYvtAvfo03/kPHuV3GsFnPIg6vEk1yQuMLC2Ks9OD905exHQdrfvwL
Yn9MrIiJHkiGYQKIEo20ROSPeCnB7vLIWR+GrbRslIohQ4UokeWhVE8T46i2TBSW
lkX/QxjoPCR/7hTXYVmtR+S6MJCIkjkKHta1XuXpHMgm7hLTpsGZatldatBYpPqs
TlhUgOYA9T/Aobnl5U76BT8dXeT055w0PSphuhKIxeYj8pz6ZrufS8VaAeTPf6E/
W7lzL/xAQTmLH0fZ5FqxQbLKGRZGNyUpI05/41ExBZFumVoHhpQaqSXARPa3zEQK
NNyhwg==
-----END CERTIFICATE-----
Generated at Fri Sep 5 21:54:55 2025 by rpki-client