Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/shHLxUHAmWi7sC9-Vbk_w0YecX0.roa
File: shHLxUHAmWi7sC9-Vbk_w0YecX0.roa (raw, json)
Hash identifier: JH0Swx30enESY+rEj/ne04HVvOPMbUjQaCfDdkxL60E=
Subject key identifier: B2:11:CB:C5:41:C0:99:68:BB:B0:2F:7E:55:B9:3F:C3:46:1E:71:7D
Certificate issuer: /CN=b05d28d16626bc5dcabf2e915435782b96e14071
Certificate serial: 01990A7D6EB468167F19054B5FED5061567F
Authority key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/shHLxUHAmWi7sC9-Vbk_w0YecX0.roa
Signing time: Tue 02 Sep 2025 12:53:36 +0000
ROA not before: Tue 02 Sep 2025 12:53:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202553
IP address blocks: 147.181.4.0/22 maxlen: 24
147.181.8.0/22 maxlen: 24
147.181.12.0/22 maxlen: 24
147.181.16.0/23 maxlen: 24
147.181.32.0/22 maxlen: 24
147.181.36.0/22 maxlen: 24
147.181.44.0/22 maxlen: 24
147.181.48.0/22 maxlen: 22
147.181.52.0/22 maxlen: 22
2a04:9a00:1001::/48 maxlen: 48
2a04:9a00:1002::/48 maxlen: 48
2a04:9a00:1003::/48 maxlen: 48
2a04:9a00:1005::/48 maxlen: 48
2a04:9a00:1006::/48 maxlen: 48
2a04:9a00:1007::/48 maxlen: 48
2a04:9a00:100e::/48 maxlen: 48
2a04:9a05:1000::/36 maxlen: 36
2a04:9a05:1000::/47 maxlen: 48
2a04:9a05:1010::/44 maxlen: 48
2a04:9a05:1020::/44 maxlen: 48
2a04:9a05:1030::/44 maxlen: 48
2a04:9a05:1040::/44 maxlen: 48
2a04:9a05:1050::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:0a:7d:6e:b4:68:16:7f:19:05:4b:5f:ed:50:61:56:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b05d28d16626bc5dcabf2e915435782b96e14071
Validity
Not Before: Sep 2 12:53:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b211cbc541c09968bbb02f7e55b93fc3461e717d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:3b:15:db:d8:09:9f:29:f7:ef:62:65:8b:11:
c9:03:13:0d:e3:31:28:6e:80:60:4e:d8:f6:6d:27:
25:33:c8:85:ab:15:68:0d:41:cf:84:ac:7a:fc:70:
d5:7b:85:c4:56:77:9e:1b:42:00:cb:ed:a0:6f:8c:
69:34:40:41:19:d0:ee:55:a5:8f:6e:98:98:b4:6d:
69:00:b9:87:c4:15:7a:f5:7f:10:a6:94:19:57:25:
e8:d3:d2:92:34:ed:91:44:63:d6:b9:8b:44:76:77:
7e:59:9d:f9:e1:c9:b5:2d:47:8d:94:af:9b:43:b1:
b8:1e:a2:02:20:09:d2:b1:a4:a2:99:28:d0:60:c4:
35:fe:b9:5b:1c:1b:6a:e1:34:62:bf:88:e9:90:1d:
89:c6:f3:22:ae:a6:c9:9e:0a:d4:57:df:bc:fa:23:
e8:cc:b0:69:4b:77:28:78:24:1a:89:e7:75:6c:e6:
35:00:8d:c7:b1:82:8a:1d:7e:15:bf:94:3e:49:f3:
d8:3d:10:fd:2b:31:74:3c:32:9a:0e:66:1c:74:f0:
03:06:8d:88:99:2e:92:08:9b:be:6b:58:b4:e5:ec:
0e:2b:90:4f:f2:61:58:1f:5c:5d:53:49:00:8e:99:
0c:2d:19:2e:a2:e6:54:d7:4c:e5:92:b9:ef:9c:7c:
50:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:11:CB:C5:41:C0:99:68:BB:B0:2F:7E:55:B9:3F:C3:46:1E:71:7D
X509v3 Authority Key Identifier:
keyid:B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/shHLxUHAmWi7sC9-Vbk_w0YecX0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.181.4.0-147.181.17.255
147.181.32.0/21
147.181.44.0-147.181.55.255
IPv6:
2a04:9a00:1001::-2a04:9a00:1003:ffff:ffff:ffff:ffff:ffff
2a04:9a00:1005::-2a04:9a00:1007:ffff:ffff:ffff:ffff:ffff
2a04:9a00:100e::/48
2a04:9a05:1000::/36
Signature Algorithm: sha256WithRSAEncryption
6b:94:64:10:8f:c5:e7:1f:22:a1:5e:8b:8d:76:aa:b3:37:ca:
89:cb:28:75:3f:04:d9:53:b6:87:15:0f:42:0c:48:75:ea:dd:
ea:50:1b:e5:12:18:96:19:56:9b:5e:40:a8:84:ac:94:1c:f7:
5e:85:b4:e5:a8:1d:bd:08:ce:d3:33:ad:13:1a:35:35:75:21:
61:5a:ff:1d:96:29:ac:e3:83:0a:35:28:a8:2e:66:00:92:32:
60:0a:9e:d7:d6:47:81:0c:91:79:fb:e6:e1:80:0f:02:d2:42:
94:28:fc:d4:21:29:95:46:a2:2a:6a:db:ed:8f:73:33:55:80:
3b:32:c5:5d:7f:ec:90:90:82:1d:b8:29:f7:ab:58:81:fd:e7:
78:62:a5:94:42:90:86:d9:b3:bd:e7:68:53:a8:fd:d6:e6:24:
82:a1:ec:d4:6d:a4:9f:9f:63:66:f4:17:66:9a:fd:59:3c:e6:
0c:1f:42:83:80:ba:00:3d:f4:8e:fb:60:54:cf:86:28:b9:50:
23:c5:20:1d:f9:19:2a:9a:d0:4b:16:27:06:36:d8:f9:72:15:
33:10:25:08:8b:48:1f:f7:22:6a:2d:fa:59:71:00:f1:17:f0:
bf:2d:f6:e2:ac:44:21:cb:3f:3a:87:12:1c:fe:ae:d5:5a:bd:
90:9c:9f:f3
-----BEGIN CERTIFICATE-----
MIIFWjCCBEKgAwIBAgISAZkKfW60aBZ/GQVLX+1QYVZ/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwNWQyOGQxNjYyNmJjNWRjYWJmMmU5MTU0MzU3ODJiOTZl
MTQwNzEwHhcNMjUwOTAyMTI1MzM2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMjExY2JjNTQxYzA5OTY4YmJiMDJmN2U1NWI5M2ZjMzQ2MWU3MTdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTsV29gJnyn372JlixHJAxMN4zEo
boBgTtj2bSclM8iFqxVoDUHPhKx6/HDVe4XEVneeG0IAy+2gb4xpNEBBGdDuVaWP
bpiYtG1pALmHxBV69X8QppQZVyXo09KSNO2RRGPWuYtEdnd+WZ354cm1LUeNlK+b
Q7G4HqICIAnSsaSimSjQYMQ1/rlbHBtq4TRiv4jpkB2JxvMirqbJngrUV9+8+iPo
zLBpS3coeCQaied1bOY1AI3HsYKKHX4Vv5Q+SfPYPRD9KzF0PDKaDmYcdPADBo2I
mS6SCJu+a1i05ewOK5BP8mFYH1xdU0kAjpkMLRkuouZU10zlkrnvnHxQ3wIDAQAB
o4ICZjCCAmIwHQYDVR0OBBYEFLIRy8VBwJlou7AvflW5P8NGHnF9MB8GA1UdIwQY
MBaAFLBdKNFmJrxdyr8ukVQ1eCuW4UBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0YwbzBXWW12RjNLdnk2UlZEVjRLNWJoUUhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9iYmE5NzMtN2M5Zi00YjExLWI2MTEt
YWQ1NzU1MjJiMzY1LzEvc2hITHhVSEFtV2k3c0M5LVZia193MFllY1gwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9iYmE5NzMtN2M5Zi00YjExLWI2MTEtYWQ1NzU1MjJiMzY1
LzEvc0YwbzBXWW12RjNLdnk2UlZEVjRLNWJoUUhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHwGCCsGAQUFBwEHAQH/BG0wazAoBAIAATAiMAwDBAKTtQQD
BAGTtRADBAOTtSAwDAMEApO1LAMEA5O1MDA/BAIAAjA5MBIDBwAqBJoAEAEDBwIq
BJoAEAAwEgMHACoEmgAQBQMHAyoEmgAQAAMHACoEmgAQDgMGBCoEmgUQMA0GCSqG
SIb3DQEBCwUAA4IBAQBrlGQQj8XnHyKhXouNdqqzN8qJyyh1PwTZU7aHFQ9CDEh1
6t3qUBvlEhiWGVabXkCohKyUHPdehbTlqB29CM7TM60TGjU1dSFhWv8dlims44MK
NSioLmYAkjJgCp7X1keBDJF5++bhgA8C0kKUKPzUISmVRqIqatvtj3MzVYA7MsVd
f+yQkIIduCn3q1iB/ed4YqWUQpCG2bO952hTqP3W5iSCoezUbaSfn2Nm9Bdmmv1Z
POYMH0KDgLoAPfSO+2BUz4YouVAjxSAd+RkqmtBLFicGNtj5chUzECUIi0gf9yJq
LfpZcQDxF/C/LfbirEQhyz86hxIc/q7VWr2QnJ/z
-----END CERTIFICATE-----
Generated at Sun Sep 7 16:17:47 2025 by rpki-client