Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/B0O_LVZOeXeK0TN10n1ApguBGn8.roa
File: B0O_LVZOeXeK0TN10n1ApguBGn8.roa (raw, json)
Hash identifier: EZZ+TM2jZP4EeNyl/htoPbsmB56YV/lMUbeTJ1gItwI=
Subject key identifier: 07:43:BF:2D:56:4E:79:77:8A:D1:33:75:D2:7D:40:A6:0B:81:1A:7F
Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial: 0198E881995ED7B616C23C9FDD50249BE466
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/B0O_LVZOeXeK0TN10n1ApguBGn8.roa
Signing time: Tue 26 Aug 2025 22:31:04 +0000
ROA not before: Tue 26 Aug 2025 22:31:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7922
IP address blocks: 78.31.205.0/24 maxlen: 24
103.130.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 19:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e8:81:99:5e:d7:b6:16:c2:3c:9f:dd:50:24:9b:e4:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Validity
Not Before: Aug 26 22:31:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0743bf2d564e79778ad13375d27d40a60b811a7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f8:6a:d7:33:c1:a3:54:b3:61:b8:3d:ed:f0:
cb:49:81:de:6e:be:d5:6f:6f:14:8e:c2:c7:d5:06:
14:89:7e:90:83:b5:88:90:7c:6a:3b:07:65:1c:6b:
7f:c9:cc:de:43:c6:d7:85:92:de:7b:07:9d:34:e5:
ce:53:e7:02:3f:49:0a:e9:73:e8:b6:54:43:96:0e:
af:7e:e7:a8:fb:7c:95:ef:3b:f7:5d:ad:72:63:c3:
ca:c1:fe:70:4c:96:a7:84:c8:47:5d:fe:d1:ea:6a:
d9:f1:3d:57:af:91:3c:02:63:37:15:7e:8a:28:56:
71:db:0f:b2:31:b6:98:9f:31:e1:3f:33:d5:b0:01:
4a:70:80:f1:6e:de:7c:2d:a0:06:92:20:e5:fb:a8:
59:e6:6c:3f:9c:2e:2c:a4:9b:1d:3d:c4:65:09:eb:
7d:a0:fd:ef:36:bf:30:24:40:49:28:d6:8b:b9:c4:
53:e8:cb:df:ed:ee:b7:12:a6:27:c6:1f:da:64:9b:
f7:76:3c:01:97:9a:df:f0:f8:88:85:15:65:21:eb:
0e:77:98:a6:fe:b6:cf:54:d0:93:a5:21:df:bb:78:
11:f5:ed:41:57:33:09:9c:e8:a2:06:3d:98:d4:bf:
62:c8:42:47:af:ae:ea:d2:35:0e:6b:76:15:55:3e:
2b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:43:BF:2D:56:4E:79:77:8A:D1:33:75:D2:7D:40:A6:0B:81:1A:7F
X509v3 Authority Key Identifier:
keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/B0O_LVZOeXeK0TN10n1ApguBGn8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.31.205.0/24
103.130.178.0/24
Signature Algorithm: sha256WithRSAEncryption
16:3d:64:64:c6:18:d7:bc:67:28:fb:eb:d5:d6:57:9d:1c:98:
be:b9:30:9c:6f:09:8f:e2:55:f4:12:71:83:6d:a0:01:bd:b7:
08:7e:de:4c:c3:ce:e3:01:12:0f:70:53:5c:85:4a:0f:5c:5d:
7a:f4:0d:e3:86:e1:33:eb:56:78:7e:69:77:3c:97:44:86:9f:
66:cd:a4:f9:f1:37:22:5a:89:50:01:5d:08:21:08:c4:90:0b:
87:f0:ec:21:b0:22:e4:57:51:5b:b3:e7:92:5b:e8:34:49:68:
98:ea:8b:0c:c1:cb:92:4f:0c:4a:fa:79:7f:a1:08:36:92:9b:
67:af:a6:a1:f9:bd:20:44:69:fe:84:81:f8:9c:45:7e:89:99:
7c:4b:61:bd:85:d4:01:af:c1:59:ff:f6:03:97:12:85:f0:f0:
f6:9b:ba:e5:10:6d:a0:b3:38:e3:20:f6:7a:44:6f:e7:a5:ab:
7e:95:ea:e7:7b:87:ef:b1:57:cc:c5:27:88:4b:4d:87:62:99:
fe:70:2e:8f:f9:99:60:2c:78:29:3a:ab:29:51:52:fa:4a:61:
7d:ea:b2:93:e4:54:19:3c:be:a3:85:5e:09:df:eb:b8:11:7d:
cd:a5:59:73:92:71:58:86:b9:20:87:d0:c5:d5:b6:a4:bb:62:
96:7f:24:b5
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZjogZle17YWwjyf3VAkm+RmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyYjc4ZjY2ODJmYzM5YzU1YjQxZDQ4ZjgwYjg4MzhkNWQy
ZGJmMDcwHhcNMjUwODI2MjIzMTA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNzQzYmYyZDU2NGU3OTc3OGFkMTMzNzVkMjdkNDBhNjBiODExYTdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPhq1zPBo1SzYbg97fDLSYHebr7V
b28UjsLH1QYUiX6Qg7WIkHxqOwdlHGt/yczeQ8bXhZLeewedNOXOU+cCP0kK6XPo
tlRDlg6vfueo+3yV7zv3Xa1yY8PKwf5wTJanhMhHXf7R6mrZ8T1Xr5E8AmM3FX6K
KFZx2w+yMbaYnzHhPzPVsAFKcIDxbt58LaAGkiDl+6hZ5mw/nC4spJsdPcRlCet9
oP3vNr8wJEBJKNaLucRT6Mvf7e63EqYnxh/aZJv3djwBl5rf8PiIhRVlIesOd5im
/rbPVNCTpSHfu3gR9e1BVzMJnOiiBj2Y1L9iyEJHr67q0jUOa3YVVT4rUQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFAdDvy1WTnl3itEzddJ9QKYLgRp/MB8GA1UdIwQY
MBaAFHK3j2aC/DnFW0HUj4C4g41dLb8HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEt
ZjNlNTA2YWVhYTAxLzEvQjBPX0xWWk9lWGVLMFROMTBuMUFwZ3VCR244LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEtZjNlNTA2YWVhYTAx
LzEvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATh/NAwQA
Z4KyMA0GCSqGSIb3DQEBCwUAA4IBAQAWPWRkxhjXvGco++vV1ledHJi+uTCcbwmP
4lX0EnGDbaABvbcIft5Mw87jARIPcFNchUoPXF169A3jhuEz61Z4fml3PJdEhp9m
zaT58TciWolQAV0IIQjEkAuH8OwhsCLkV1Fbs+eSW+g0SWiY6osMwcuSTwxK+nl/
oQg2kptnr6ah+b0gRGn+hIH4nEV+iZl8S2G9hdQBr8FZ//YDlxKF8PD2m7rlEG2g
szjjIPZ6RG/npat+lerne4fvsVfMxSeIS02HYpn+cC6P+ZlgLHgpOqspUVL6SmF9
6rKT5FQZPL6jhV4J3+u4EX3NpVlzknFYhrkgh9DF1baku2KWfyS1
-----END CERTIFICATE-----
Generated at Sat Sep 6 04:38:13 2025 by rpki-client