Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/ADwJyFTnSoqJo76cybY4gze7w-A.roa
File: ADwJyFTnSoqJo76cybY4gze7w-A.roa (raw, json)
Hash identifier: ywnZb2Gs7P4sK9InqI7FaEEZlSRwjtQHnM1qlayDDgw=
Subject key identifier: 00:3C:09:C8:54:E7:4A:8A:89:A3:BE:9C:C9:B6:38:83:37:BB:C3:E0
Certificate issuer: /CN=085787e65eb4fcd66e3340b62ade47ca00919dce
Certificate serial: 01981346A0E898B32020652228D6C3579236
Authority key identifier: 08:57:87:E6:5E:B4:FC:D6:6E:33:40:B6:2A:DE:47:CA:00:91:9D:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CFeH5l60_NZuM0C2Kt5HygCRnc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/ADwJyFTnSoqJo76cybY4gze7w-A.roa
Signing time: Wed 16 Jul 2025 12:47:32 +0000
ROA not before: Wed 16 Jul 2025 12:47:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215602
IP address blocks: 164.138.201.0/24 maxlen: 24
194.164.244.0/24 maxlen: 24
2a0c:28c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CFeH5l60_NZuM0C2Kt5HygCRnc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 06:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:13:46:a0:e8:98:b3:20:20:65:22:28:d6:c3:57:92:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=085787e65eb4fcd66e3340b62ade47ca00919dce
Validity
Not Before: Jul 16 12:47:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=003c09c854e74a8a89a3be9cc9b6388337bbc3e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:40:2b:84:50:d6:4e:81:7a:a5:07:50:62:76:
a9:a6:bb:2d:3e:24:88:85:4b:7a:34:95:86:f7:3d:
97:e0:a5:8f:f5:f3:67:71:74:c8:bc:76:97:6c:1a:
d6:00:06:10:c0:7e:19:75:8b:55:76:7a:53:a9:dc:
4d:ce:ac:a2:1a:d0:44:e3:af:87:78:e0:13:2e:ea:
a9:5d:0f:e0:43:3f:ba:3b:99:86:ec:6f:f2:67:b9:
0c:7b:b3:73:35:d7:e4:81:79:04:8b:ad:62:c1:91:
81:83:97:6b:e4:08:05:7b:6a:27:25:1e:e0:a7:03:
21:fc:00:14:80:66:98:d7:bf:f6:ae:2f:e2:c0:d5:
71:ac:af:56:67:03:53:5d:58:ca:4f:78:05:26:e8:
8a:a7:31:02:fc:a2:b2:47:67:2a:60:cf:b1:8c:b9:
1c:b8:3c:14:55:fe:7d:58:73:c1:7e:e2:a1:8b:16:
07:52:ce:15:69:1e:f3:b4:0e:ca:66:1a:08:bf:22:
9c:10:6e:d8:6e:d4:50:be:8e:83:14:9c:e5:66:e3:
e3:e3:c1:4e:14:c5:fe:af:a2:a7:e9:af:8c:a4:3f:
8a:8b:75:64:a5:e9:59:0c:5c:4c:ce:ac:6b:c7:fa:
9c:74:18:3e:5d:90:db:87:f9:be:22:06:81:41:0c:
1e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:3C:09:C8:54:E7:4A:8A:89:A3:BE:9C:C9:B6:38:83:37:BB:C3:E0
X509v3 Authority Key Identifier:
keyid:08:57:87:E6:5E:B4:FC:D6:6E:33:40:B6:2A:DE:47:CA:00:91:9D:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CFeH5l60_NZuM0C2Kt5HygCRnc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/ADwJyFTnSoqJo76cybY4gze7w-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.138.201.0/24
194.164.244.0/24
IPv6:
2a0c:28c0::/29
Signature Algorithm: sha256WithRSAEncryption
ad:fc:14:80:5f:ee:87:a0:9f:f1:21:aa:c1:43:9f:25:55:bc:
dc:06:00:f2:a6:2a:30:8f:91:6f:bf:13:06:05:9a:3f:85:fd:
f9:72:de:3f:11:ac:78:48:98:72:da:7b:32:b0:c8:3b:ac:51:
b9:93:60:49:35:94:d0:8e:73:13:f0:d1:97:00:2b:f9:21:ba:
f9:3b:ee:6f:14:3a:bc:15:36:84:96:be:9b:70:e2:ff:57:81:
c7:5e:ce:3c:0f:58:d7:e8:24:0b:1e:69:27:aa:2f:df:bb:4d:
90:1f:9c:f1:c6:13:ab:27:63:ac:bf:75:47:a3:f9:d3:83:71:
ec:04:d4:ef:48:8e:0d:05:b3:4a:83:4b:51:a8:25:e4:36:1f:
ed:8f:fa:6e:e2:27:c6:a6:4f:8b:c8:46:ec:46:bb:b2:6e:68:
0e:af:b0:96:ef:34:e1:5b:b9:b4:3e:f1:35:8f:d3:84:65:18:
61:e3:76:9d:d4:45:5e:a9:57:0c:fb:30:ac:1d:07:ce:8c:e0:
f0:6a:08:b8:a6:75:b4:c2:84:81:ef:7d:3b:22:c2:85:1c:69:
57:32:b0:8a:26:36:8d:cc:ab:02:9e:d2:e2:39:9b:f3:7c:29:
8a:46:b0:c9:e6:6a:5f:46:03:9b:1f:32:e6:df:74:56:c9:d1:
f6:07:70:24
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZgTRqDomLMgIGUiKNbDV5I2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4NTc4N2U2NWViNGZjZDY2ZTMzNDBiNjJhZGU0N2NhMDA5
MTlkY2UwHhcNMjUwNzE2MTI0NzMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMDNjMDljODU0ZTc0YThhODlhM2JlOWNjOWI2Mzg4MzM3YmJjM2UwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0ArhFDWToF6pQdQYnapprstPiSI
hUt6NJWG9z2X4KWP9fNncXTIvHaXbBrWAAYQwH4ZdYtVdnpTqdxNzqyiGtBE46+H
eOATLuqpXQ/gQz+6O5mG7G/yZ7kMe7NzNdfkgXkEi61iwZGBg5dr5AgFe2onJR7g
pwMh/AAUgGaY17/2ri/iwNVxrK9WZwNTXVjKT3gFJuiKpzEC/KKyR2cqYM+xjLkc
uDwUVf59WHPBfuKhixYHUs4VaR7ztA7KZhoIvyKcEG7YbtRQvo6DFJzlZuPj48FO
FMX+r6Kn6a+MpD+Ki3VkpelZDFxMzqxrx/qcdBg+XZDbh/m+IgaBQQweqQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFAA8CchU50qKiaO+nMm2OIM3u8PgMB8GA1UdIwQY
MBaAFAhXh+ZetPzWbjNAtireR8oAkZ3OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0ZlSDVsNjBfTlp1TTBDMkt0NUh5Z0NSbmM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9kMmJiZjYtM2I2OS00NDJlLWI0OTAt
N2U1NGMzMmFiZWQ4LzEvQUR3SnlGVG5Tb3FKbzc2Y3liWTRnemU3dy1BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy9kMmJiZjYtM2I2OS00NDJlLWI0OTAtN2U1NGMzMmFiZWQ4
LzEvQ0ZlSDVsNjBfTlp1TTBDMkt0NUh5Z0NSbmM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQApIrJAwQA
wqT0MA0EAgACMAcDBQMqDCjAMA0GCSqGSIb3DQEBCwUAA4IBAQCt/BSAX+6HoJ/x
IarBQ58lVbzcBgDypiowj5FvvxMGBZo/hf35ct4/Eax4SJhy2nsysMg7rFG5k2BJ
NZTQjnMT8NGXACv5Ibr5O+5vFDq8FTaElr6bcOL/V4HHXs48D1jX6CQLHmknqi/f
u02QH5zxxhOrJ2Osv3VHo/nTg3HsBNTvSI4NBbNKg0tRqCXkNh/tj/pu4ifGpk+L
yEbsRruybmgOr7CW7zThW7m0PvE1j9OEZRhh43ad1EVeqVcM+zCsHQfOjODwagi4
pnW0woSB7307IsKFHGlXMrCKJjaNzKsCntLiOZvzfCmKRrDJ5mpfRgObHzLm33RW
ydH2B3Ak
-----END CERTIFICATE-----
Generated at Mon Aug 4 16:08:39 2025 by rpki-client