Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/38179c-25ab-4368-8cf8-57e593cf9a4e/1/K7bHv-ntCkLHGgtD3GP4pZg-0HE.roa
File: K7bHv-ntCkLHGgtD3GP4pZg-0HE.roa (raw, json)
Hash identifier: sF0L1bfvPm8HvYASjwb0jRSaCB2jonmzTiMF+U2X9qc=
Subject key identifier: 2B:B6:C7:BF:E9:ED:0A:42:C7:1A:0B:43:DC:63:F8:A5:98:3E:D0:71
Certificate issuer: /CN=2b051ef23060eb51bfd8c79795f6a4daf48a3aa0
Certificate serial: 0196D0469B4D2468E7C6B34740B6E920BF00
Authority key identifier: 2B:05:1E:F2:30:60:EB:51:BF:D8:C7:97:95:F6:A4:DA:F4:8A:3A:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KwUe8jBg61G_2MeXlfak2vSKOqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/38179c-25ab-4368-8cf8-57e593cf9a4e/1/K7bHv-ntCkLHGgtD3GP4pZg-0HE.roa
Signing time: Wed 14 May 2025 19:30:10 +0000
ROA not before: Wed 14 May 2025 19:30:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208485
IP address blocks: 195.234.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/38179c-25ab-4368-8cf8-57e593cf9a4e/1/KwUe8jBg61G_2MeXlfak2vSKOqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/38179c-25ab-4368-8cf8-57e593cf9a4e/1/KwUe8jBg61G_2MeXlfak2vSKOqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KwUe8jBg61G_2MeXlfak2vSKOqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 13:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d0:46:9b:4d:24:68:e7:c6:b3:47:40:b6:e9:20:bf:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b051ef23060eb51bfd8c79795f6a4daf48a3aa0
Validity
Not Before: May 14 19:30:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2bb6c7bfe9ed0a42c71a0b43dc63f8a5983ed071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:cd:17:f0:e5:f9:b2:16:c6:91:17:96:e5:f3:
90:98:b1:5a:cf:ce:38:0d:da:5a:de:08:71:c8:12:
b0:37:ae:19:10:4f:d7:ca:11:75:e9:71:9e:21:4b:
ba:97:1a:d1:6e:18:dc:d8:9d:ca:e7:b8:69:f2:55:
de:e5:c2:d9:29:f1:60:a9:83:4f:2c:70:81:64:cf:
24:90:88:e1:cc:98:da:e7:ed:02:9f:38:80:68:72:
f3:30:cb:47:3f:5e:c1:a1:9c:11:48:97:e8:27:d5:
eb:41:47:13:54:48:0a:f4:88:cb:d0:f6:de:5c:ff:
a3:dd:87:83:2d:6e:a3:38:0e:a8:37:5b:b3:ae:5d:
df:28:37:f9:48:f7:9f:df:98:63:67:a5:0e:6e:d0:
1b:d9:b7:e4:0a:89:4c:3c:ad:05:84:54:30:0c:ef:
d1:e0:8b:9b:3d:28:f4:68:b4:4e:cb:3c:11:70:1a:
5d:bc:c0:b5:5a:09:e7:93:c4:4d:4e:2f:eb:a0:07:
ae:7b:b6:10:9e:27:60:25:91:7c:36:93:19:d4:d3:
0c:6a:8f:72:4f:c8:f2:b5:c7:ee:2a:38:07:fa:58:
5e:54:ac:02:a9:6b:81:5d:7d:5d:e2:a6:ff:42:27:
9f:5a:02:be:fd:b5:6e:79:5c:d8:08:9e:c5:50:92:
c1:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:B6:C7:BF:E9:ED:0A:42:C7:1A:0B:43:DC:63:F8:A5:98:3E:D0:71
X509v3 Authority Key Identifier:
keyid:2B:05:1E:F2:30:60:EB:51:BF:D8:C7:97:95:F6:A4:DA:F4:8A:3A:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KwUe8jBg61G_2MeXlfak2vSKOqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/38179c-25ab-4368-8cf8-57e593cf9a4e/1/K7bHv-ntCkLHGgtD3GP4pZg-0HE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/38179c-25ab-4368-8cf8-57e593cf9a4e/1/KwUe8jBg61G_2MeXlfak2vSKOqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.234.153.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:37:40:5c:50:72:f7:de:83:24:e4:7e:46:8f:46:b4:0e:9d:
34:e8:ac:bb:38:b7:9b:60:3e:a6:30:1a:d8:dc:1d:43:f3:fb:
f4:50:32:06:97:1e:d9:18:bd:12:be:7a:bd:a9:ea:0d:6d:e2:
9a:92:ed:97:ed:72:5d:7e:6f:ef:36:17:a5:49:e7:65:01:be:
67:d0:07:ba:e4:03:ba:b9:42:4a:68:7f:43:2c:06:12:2c:e3:
6f:e4:4a:33:57:a9:fc:ad:3a:91:4a:c3:39:8e:93:7d:b2:82:
dd:26:df:d3:3a:a7:9a:fb:26:7d:f9:06:aa:b5:2b:5d:d7:c4:
dd:1f:05:29:bd:04:8d:dd:f0:28:f9:4b:6b:ee:2d:20:5b:6a:
22:a7:be:49:74:8c:c7:8d:8a:47:a7:ab:e6:62:60:a6:af:3d:
8f:42:39:17:8a:cd:fe:02:ef:52:ee:84:b2:0a:ef:ee:13:d7:
ab:a5:dd:02:7b:0b:55:02:49:27:88:3e:c9:d5:0d:f9:4a:eb:
97:43:78:d4:3d:2f:79:96:3b:39:c9:80:8f:bd:65:c5:3c:99:
d8:fe:f7:f7:03:d7:9c:23:f4:0d:8c:23:e9:e9:7b:f6:9c:71:
9a:01:f2:fb:ae:26:fa:de:d0:17:37:ea:dc:be:4a:6f:a9:7c:
6c:68:45:9c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZbQRptNJGjnxrNHQLbpIL8AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiMDUxZWYyMzA2MGViNTFiZmQ4Yzc5Nzk1ZjZhNGRhZjQ4
YTNhYTAwHhcNMjUwNTE0MTkzMDEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYmI2YzdiZmU5ZWQwYTQyYzcxYTBiNDNkYzYzZjhhNTk4M2VkMDcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz80X8OX5shbGkReW5fOQmLFaz844
Ddpa3ghxyBKwN64ZEE/XyhF16XGeIUu6lxrRbhjc2J3K57hp8lXe5cLZKfFgqYNP
LHCBZM8kkIjhzJja5+0CnziAaHLzMMtHP17BoZwRSJfoJ9XrQUcTVEgK9IjL0Pbe
XP+j3YeDLW6jOA6oN1uzrl3fKDf5SPef35hjZ6UObtAb2bfkColMPK0FhFQwDO/R
4IubPSj0aLROyzwRcBpdvMC1Wgnnk8RNTi/roAeue7YQnidgJZF8NpMZ1NMMao9y
T8jytcfuKjgH+lheVKwCqWuBXX1d4qb/QiefWgK+/bVueVzYCJ7FUJLBRwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCu2x7/p7QpCxxoLQ9xj+KWYPtBxMB8GA1UdIwQY
MBaAFCsFHvIwYOtRv9jHl5X2pNr0ijqgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3dVZThqQmc2MUdfMk1lWGxmYWsydlNLT3FBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi8zODE3OWMtMjVhYi00MzY4LThjZjgt
NTdlNTkzY2Y5YTRlLzEvSzdiSHYtbnRDa0xIR2d0RDNHUDRwWmctMEhFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi8zODE3OWMtMjVhYi00MzY4LThjZjgtNTdlNTkzY2Y5YTRl
LzEvS3dVZThqQmc2MUdfMk1lWGxmYWsydlNLT3FBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw+qZMA0G
CSqGSIb3DQEBCwUAA4IBAQCpN0BcUHL33oMk5H5Gj0a0Dp006Ky7OLebYD6mMBrY
3B1D8/v0UDIGlx7ZGL0Svnq9qeoNbeKaku2X7XJdfm/vNhelSedlAb5n0Ae65AO6
uUJKaH9DLAYSLONv5EozV6n8rTqRSsM5jpN9soLdJt/TOqea+yZ9+QaqtStd18Td
HwUpvQSN3fAo+Utr7i0gW2oip75JdIzHjYpHp6vmYmCmrz2PQjkXis3+Au9S7oSy
Cu/uE9erpd0CewtVAkkniD7J1Q35SuuXQ3jUPS95ljs5yYCPvWXFPJnY/vf3A9ec
I/QNjCPp6Xv2nHGaAfL7rib63tAXN+rcvkpvqXxsaEWc
-----END CERTIFICATE-----
Generated at Tue Jun 17 17:13:12 2025 by rpki-client