Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/437ae5-c2ab-4c71-9d06-fec6c2701eda/1/2ryCMfD1Ln9s9uK30p2xGwbPvZs.roa
File: 2ryCMfD1Ln9s9uK30p2xGwbPvZs.roa (raw, json)
Hash identifier: HosOnV9hDSdmgzB23paQvxVL2xXpxC5WvD+woMUjUXc=
Subject key identifier: DA:BC:82:31:F0:F5:2E:7F:6C:F6:E2:B7:D2:9D:B1:1B:06:CF:BD:9B
Certificate issuer: /CN=748e99a31f3582400ab5dfa777c60d16acaeddb3
Certificate serial: 01973AB879ACDCB10D579D5765FF753C9F32
Authority key identifier: 74:8E:99:A3:1F:35:82:40:0A:B5:DF:A7:77:C6:0D:16:AC:AE:DD:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dI6Zox81gkAKtd-nd8YNFqyu3bM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/437ae5-c2ab-4c71-9d06-fec6c2701eda/1/2ryCMfD1Ln9s9uK30p2xGwbPvZs.roa
Signing time: Wed 04 Jun 2025 11:34:17 +0000
ROA not before: Wed 04 Jun 2025 11:34:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41174
IP address blocks: 185.84.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/437ae5-c2ab-4c71-9d06-fec6c2701eda/1/dI6Zox81gkAKtd-nd8YNFqyu3bM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/437ae5-c2ab-4c71-9d06-fec6c2701eda/1/dI6Zox81gkAKtd-nd8YNFqyu3bM.mft
rsync://rpki.ripe.net/repository/DEFAULT/dI6Zox81gkAKtd-nd8YNFqyu3bM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:3a:b8:79:ac:dc:b1:0d:57:9d:57:65:ff:75:3c:9f:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=748e99a31f3582400ab5dfa777c60d16acaeddb3
Validity
Not Before: Jun 4 11:34:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dabc8231f0f52e7f6cf6e2b7d29db11b06cfbd9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:6c:f6:2e:5a:bf:75:30:51:71:7e:27:9c:d7:
70:b0:92:a8:7b:92:18:2c:00:28:3d:63:dc:86:fa:
34:c3:10:7a:5a:96:24:b0:8e:f0:0f:9f:6f:01:a3:
e3:a8:55:37:6c:13:2e:3d:c2:fd:4a:3b:02:53:44:
1a:42:8c:93:87:59:2c:02:9e:60:a5:21:66:ef:51:
79:8c:d5:a1:1b:7d:0b:2a:9e:59:b3:24:eb:21:b1:
a3:34:1d:1f:93:a7:f6:23:6f:37:01:ac:9d:a3:18:
4d:09:0e:7b:a1:79:7d:f8:f5:17:ff:00:45:5d:45:
d8:13:cd:77:31:1a:3b:b1:c3:9a:5e:0a:6a:fc:d1:
bc:22:b2:52:91:e4:a3:2f:5a:4a:68:99:8f:b7:eb:
d0:c3:34:a4:e2:74:82:f6:12:5c:b4:b4:53:69:26:
9f:24:0e:4d:fe:0f:f1:9b:ea:c4:e3:17:14:52:00:
2a:c7:69:55:3e:cf:79:16:70:39:ed:a0:96:1e:cc:
97:0a:23:49:33:23:cf:78:01:9d:98:0f:6a:0f:01:
a5:b1:c2:cf:2b:a6:40:5e:bd:1c:d7:f4:df:86:c5:
1f:db:56:96:f5:8d:e6:96:03:f2:d9:92:4e:64:b7:
6a:c7:7f:4b:23:37:8c:c7:59:86:f4:03:89:8b:bf:
3b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:BC:82:31:F0:F5:2E:7F:6C:F6:E2:B7:D2:9D:B1:1B:06:CF:BD:9B
X509v3 Authority Key Identifier:
keyid:74:8E:99:A3:1F:35:82:40:0A:B5:DF:A7:77:C6:0D:16:AC:AE:DD:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dI6Zox81gkAKtd-nd8YNFqyu3bM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/437ae5-c2ab-4c71-9d06-fec6c2701eda/1/2ryCMfD1Ln9s9uK30p2xGwbPvZs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/437ae5-c2ab-4c71-9d06-fec6c2701eda/1/dI6Zox81gkAKtd-nd8YNFqyu3bM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.84.54.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:58:e5:ab:bb:80:a9:dc:f5:bc:2c:2c:fd:0b:e9:a6:e9:02:
8d:95:f5:ec:86:5f:e7:5f:38:dc:ee:e8:8a:13:5b:d0:dd:ad:
28:6c:98:1b:9b:cd:66:b8:44:de:73:37:99:13:ae:eb:7f:b2:
cb:e9:6b:d0:c1:0c:b1:fa:6d:a3:50:f0:63:db:50:78:c9:cc:
99:97:3d:cf:f9:6e:6c:bc:24:1a:57:95:ff:4d:be:c9:05:12:
b8:0d:2c:13:d7:85:f0:45:de:4b:26:40:a2:88:81:03:ed:81:
37:e7:46:63:26:21:18:61:9f:22:8e:5d:70:64:f1:0a:d3:1e:
cc:fc:92:24:3b:be:56:df:f7:60:a8:b9:7c:8f:02:3b:25:02:
6b:a5:91:ac:fb:8c:20:77:fc:73:49:15:b6:0b:6f:70:0d:fd:
da:de:b8:f6:8a:65:7e:db:1b:f4:e6:48:8c:f4:b8:71:38:a9:
d7:64:45:84:1c:b3:af:1e:2a:9b:67:0c:e1:44:8d:48:16:32:
ed:37:79:06:7c:51:da:93:15:35:d3:26:bd:fa:5b:4a:8a:db:
9b:f3:b9:d9:5e:03:9d:eb:f3:35:47:28:02:f3:0f:03:be:e4:
ba:ad:f3:d6:2a:4d:ad:1e:86:e1:f8:52:f6:86:0c:87:99:5c:
9c:53:54:2e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZc6uHms3LENV51XZf91PJ8yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OGU5OWEzMWYzNTgyNDAwYWI1ZGZhNzc3YzYwZDE2YWNh
ZWRkYjMwHhcNMjUwNjA0MTEzNDE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYWJjODIzMWYwZjUyZTdmNmNmNmUyYjdkMjlkYjExYjA2Y2ZiZDliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzWz2Llq/dTBRcX4nnNdwsJKoe5IY
LAAoPWPchvo0wxB6WpYksI7wD59vAaPjqFU3bBMuPcL9SjsCU0QaQoyTh1ksAp5g
pSFm71F5jNWhG30LKp5ZsyTrIbGjNB0fk6f2I283AaydoxhNCQ57oXl9+PUX/wBF
XUXYE813MRo7scOaXgpq/NG8IrJSkeSjL1pKaJmPt+vQwzSk4nSC9hJctLRTaSaf
JA5N/g/xm+rE4xcUUgAqx2lVPs95FnA57aCWHsyXCiNJMyPPeAGdmA9qDwGlscLP
K6ZAXr0c1/TfhsUf21aW9Y3mlgPy2ZJOZLdqx39LIzeMx1mG9AOJi7879wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNq8gjHw9S5/bPbit9KdsRsGz72bMB8GA1UdIwQY
MBaAFHSOmaMfNYJACrXfp3fGDRasrt2zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEk2Wm94ODFna0FLdGQtbmQ4WU5GcXl1M2JNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC80MzdhZTUtYzJhYi00YzcxLTlkMDYt
ZmVjNmMyNzAxZWRhLzEvMnJ5Q01mRDFMbjlzOXVLMzBwMnhHd2JQdlpzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC80MzdhZTUtYzJhYi00YzcxLTlkMDYtZmVjNmMyNzAxZWRh
LzEvZEk2Wm94ODFna0FLdGQtbmQ4WU5GcXl1M2JNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuVQ2MA0G
CSqGSIb3DQEBCwUAA4IBAQCmWOWru4Cp3PW8LCz9C+mm6QKNlfXshl/nXzjc7uiK
E1vQ3a0obJgbm81muETeczeZE67rf7LL6WvQwQyx+m2jUPBj21B4ycyZlz3P+W5s
vCQaV5X/Tb7JBRK4DSwT14XwRd5LJkCiiIED7YE350ZjJiEYYZ8ijl1wZPEK0x7M
/JIkO75W3/dgqLl8jwI7JQJrpZGs+4wgd/xzSRW2C29wDf3a3rj2imV+2xv05kiM
9LhxOKnXZEWEHLOvHiqbZwzhRI1IFjLtN3kGfFHakxU10ya9+ltKitub87nZXgOd
6/M1RygC8w8DvuS6rfPWKk2tHobh+FL2hgyHmVycU1Qu
-----END CERTIFICATE-----
Generated at Sun Jun 8 09:12:44 2025 by rpki-client