Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/60Uc6sWL8HeGHc-OkPZOflf5Uw8.roa
File: 60Uc6sWL8HeGHc-OkPZOflf5Uw8.roa (raw, json)
Hash identifier: nJ1bH2DQlY7R0jtbNOoT1NBDFxAupOTT0/tX0ARgKNo=
Subject key identifier: EB:45:1C:EA:C5:8B:F0:77:86:1D:CF:8E:90:F6:4E:7E:57:F9:53:0F
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 019732D4D3449BFBD01306DFB1EC718E7263
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/60Uc6sWL8HeGHc-OkPZOflf5Uw8.roa
Signing time: Mon 02 Jun 2025 22:48:17 +0000
ROA not before: Mon 02 Jun 2025 22:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 45.138.210.0/24 maxlen: 32
185.117.20.0/24 maxlen: 32
185.117.21.0/24 maxlen: 32
185.211.49.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:32:d4:d3:44:9b:fb:d0:13:06:df:b1:ec:71:8e:72:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jun 2 22:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eb451ceac58bf077861dcf8e90f64e7e57f9530f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:0d:fb:0a:c1:19:8c:3f:7e:29:b3:e9:6a:13:
b1:fa:20:47:4b:9d:af:b8:c6:fc:fc:80:c7:6e:a1:
0f:c5:0d:2c:ec:1e:62:da:7e:63:f4:44:b6:92:11:
58:94:32:3f:ab:4b:1d:3a:b0:0a:bc:e3:15:fa:e5:
7c:4c:03:21:4c:5f:32:dd:e2:cf:71:10:32:a7:72:
a8:63:de:6a:b8:3f:fe:57:59:66:8e:9e:45:11:50:
6a:f3:1f:c3:ae:00:4f:e5:c1:85:04:07:5a:d6:e1:
ab:98:11:ee:8b:9e:54:7d:63:8c:6b:21:79:a1:42:
b2:87:9f:fc:e7:8d:24:f6:5e:36:05:ca:4a:88:e1:
4b:5c:03:50:dc:44:36:22:49:8f:21:df:08:59:38:
fb:e6:d6:79:41:64:a9:ce:81:5c:b1:39:a3:6c:4d:
e2:6b:f7:be:80:25:72:f1:e1:58:d2:d1:43:c3:a3:
c8:36:4c:a9:88:c4:8c:3b:8f:2c:e4:2b:06:cd:b2:
28:44:cd:fd:d0:fe:ee:c4:4a:6b:b6:32:6e:b0:ef:
74:f5:c5:21:72:5d:03:f6:da:45:e4:34:27:ed:ad:
da:3a:23:0b:ab:3f:69:fc:4c:7d:5a:45:2c:d1:2b:
4b:39:8e:9e:ad:42:5b:b4:ec:ed:c6:56:eb:05:0b:
bf:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:45:1C:EA:C5:8B:F0:77:86:1D:CF:8E:90:F6:4E:7E:57:F9:53:0F
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/60Uc6sWL8HeGHc-OkPZOflf5Uw8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.210.0/24
185.117.20.0/23
185.211.49.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:70:3d:16:61:f0:8c:b4:77:02:3d:5d:21:ec:a1:48:8b:4d:
cf:9f:ba:c1:c0:00:72:66:49:1b:ec:22:33:f1:6c:4f:80:a2:
19:47:93:5d:b2:6b:e5:99:dc:e9:ec:ba:49:f7:c6:64:89:16:
5d:8a:6e:fc:34:c1:55:66:86:c1:8b:ee:26:e3:03:01:21:cd:
84:34:8a:24:d4:0d:2e:c5:b7:01:78:45:97:da:90:88:df:87:
07:53:5a:7c:27:ef:81:f2:e9:34:b9:37:60:46:f0:95:7d:d5:
1e:75:c6:20:37:73:8f:76:d5:d6:a1:88:9b:d9:89:65:55:26:
d9:c7:a3:8c:5a:10:65:73:83:2e:d5:59:73:85:f4:cc:89:e9:
bd:c5:64:be:64:c7:c7:d7:f5:df:83:c1:b8:12:14:d2:2d:d6:
84:90:24:03:57:e8:4f:4d:64:6a:f5:91:c8:3f:63:5e:4e:0e:
5f:6b:fa:0b:ea:9e:d0:17:ad:14:6b:6a:07:c9:d9:e1:ab:34:
1b:96:d4:11:2b:bc:1d:fb:60:92:74:b8:b4:3e:76:db:ca:5c:
b7:12:c1:8a:3d:39:c6:cb:95:0c:9f:fd:99:09:21:c2:12:6f:
27:73:9d:68:40:fc:66:be:be:0e:41:86:2c:56:88:e7:a5:eb:
f6:28:12:d7
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZcy1NNEm/vQEwbfsexxjnJjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjOGZkMWE4YWU1OTk2YzFlNTY5MmMxYThjNDJiZmU5YzNi
YTU3NDUwHhcNMjUwNjAyMjI0ODE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYjQ1MWNlYWM1OGJmMDc3ODYxZGNmOGU5MGY2NGU3ZTU3Zjk1MzBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Q37CsEZjD9+KbPpahOx+iBHS52v
uMb8/IDHbqEPxQ0s7B5i2n5j9ES2khFYlDI/q0sdOrAKvOMV+uV8TAMhTF8y3eLP
cRAyp3KoY95quD/+V1lmjp5FEVBq8x/DrgBP5cGFBAda1uGrmBHui55UfWOMayF5
oUKyh5/8540k9l42BcpKiOFLXANQ3EQ2IkmPId8IWTj75tZ5QWSpzoFcsTmjbE3i
a/e+gCVy8eFY0tFDw6PINkypiMSMO48s5CsGzbIoRM390P7uxEprtjJusO909cUh
cl0D9tpF5DQn7a3aOiMLqz9p/Ex9WkUs0StLOY6erUJbtOztxlbrBQu/iQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFOtFHOrFi/B3hh3PjpD2Tn5X+VMPMB8GA1UdIwQY
MBaAFGyP0aiuWZbB5WksGoxCv+nDuldFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMt
ZmVhYzI2ZWFlY2MyLzEvNjBVYzZzV0w4SGVHSGMtT2tQWk9mbGY1VXc4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMtZmVhYzI2ZWFlY2My
LzEvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALYrSAwQB
uXUUAwQAudMxMA0GCSqGSIb3DQEBCwUAA4IBAQCdcD0WYfCMtHcCPV0h7KFIi03P
n7rBwAByZkkb7CIz8WxPgKIZR5Ndsmvlmdzp7LpJ98ZkiRZdim78NMFVZobBi+4m
4wMBIc2ENIok1A0uxbcBeEWX2pCI34cHU1p8J++B8uk0uTdgRvCVfdUedcYgN3OP
dtXWoYib2YllVSbZx6OMWhBlc4Mu1VlzhfTMiem9xWS+ZMfH1/Xfg8G4EhTSLdaE
kCQDV+hPTWRq9ZHIP2NeTg5fa/oL6p7QF60Ua2oHydnhqzQbltQRK7wd+2CSdLi0
Pnbbyly3EsGKPTnGy5UMn/2ZCSHCEm8nc51oQPxmvr4OQYYsVojnpev2KBLX
-----END CERTIFICATE-----
Generated at Sat Jun 7 08:00:16 2025 by rpki-client