Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/xtO8K8gU2NuYRw1_GbpdGRd3zhQ.roa
File: xtO8K8gU2NuYRw1_GbpdGRd3zhQ.roa (raw, json)
Hash identifier: 6xBBsXMne/V0DNK57hL+vR0I99KZ2fP45EMjpBaEGFc=
Subject key identifier: C6:D3:BC:2B:C8:14:D8:DB:98:47:0D:7F:19:BA:5D:19:17:77:CE:14
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 0198387F05630FF80521F18A46DAF07688C5
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/xtO8K8gU2NuYRw1_GbpdGRd3zhQ.roa
Signing time: Wed 23 Jul 2025 18:15:05 +0000
ROA not before: Wed 23 Jul 2025 18:15:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 178.239.115.0/24 maxlen: 24
185.95.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 09:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:38:7f:05:63:0f:f8:05:21:f1:8a:46:da:f0:76:88:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: Jul 23 18:15:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c6d3bc2bc814d8db98470d7f19ba5d191777ce14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3d:07:a7:b6:7d:54:87:c1:0a:74:d2:84:ae:
fb:d3:4d:7f:d5:2f:e6:d4:70:ea:29:c4:5b:27:5f:
27:d1:fd:4c:fe:13:75:45:35:9e:ef:51:91:d9:25:
78:7f:a2:02:c2:35:b6:03:9c:a0:ba:43:6b:a2:80:
ec:d0:6f:93:40:2f:df:3e:f8:5f:11:58:d9:ee:ce:
5b:af:c4:c4:a3:62:ca:f6:dd:ca:a6:29:96:63:e7:
91:8e:8e:9d:83:bb:90:a7:17:75:a9:d8:ce:b5:76:
bb:df:e3:57:93:7a:ee:e5:e4:fb:0d:5f:e0:d5:50:
9b:38:f2:a7:52:92:ca:7a:c8:4a:2e:86:ec:45:4e:
1d:c9:ca:41:0c:d5:c3:2e:f4:b1:1a:53:01:38:8f:
55:c5:b2:3a:51:63:40:3a:aa:32:c4:7b:97:96:47:
2f:48:2e:16:c5:ee:da:88:10:5d:55:86:f1:06:54:
2c:45:1d:84:fd:fb:21:5f:23:0f:60:01:5e:16:8f:
6a:0b:9e:e2:32:52:8d:f9:b3:b9:ff:61:4d:55:3a:
bd:54:f8:87:5f:e3:be:6d:87:21:e6:40:e0:89:1e:
b8:13:d4:a7:a9:c7:83:62:6e:5c:01:fa:92:0b:65:
bf:cc:f5:6b:eb:d8:5d:07:83:34:39:37:c6:6e:2a:
1b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:D3:BC:2B:C8:14:D8:DB:98:47:0D:7F:19:BA:5D:19:17:77:CE:14
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/xtO8K8gU2NuYRw1_GbpdGRd3zhQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.115.0/24
185.95.157.0/24
Signature Algorithm: sha256WithRSAEncryption
47:42:a3:8b:ec:48:fb:a9:7b:20:c0:2d:f2:b0:89:9a:4a:b9:
25:85:00:0f:c2:36:6d:bb:41:b1:8d:1f:d4:01:08:2b:f5:1e:
58:f1:17:c9:8d:36:c0:ba:d9:52:04:19:cf:8f:a4:97:23:17:
9c:3b:e4:76:3e:24:a7:85:c1:e2:76:33:81:a6:1a:18:cf:02:
0d:36:63:53:b1:7f:b5:f4:72:69:a2:c6:97:03:e9:a4:d3:ec:
15:e4:bc:c4:cc:7f:62:18:39:8a:e6:18:50:76:b2:20:ee:db:
7d:6b:dd:b3:0f:e8:09:f2:86:1c:a1:c7:85:43:13:f0:9b:7e:
4d:3d:43:90:fd:13:ca:26:7f:f6:af:9c:42:09:3b:79:22:1e:
d4:c4:da:fc:82:ff:b8:fd:87:86:9f:14:54:87:55:46:0d:89:
34:83:6e:1b:42:c3:07:c8:ca:06:91:6e:f2:1a:87:8c:9f:38:
7d:91:25:e3:8f:81:bf:3d:5a:82:f4:da:97:d4:44:04:50:b1:
bf:3c:d1:d1:39:95:62:34:79:28:56:c3:53:52:96:42:f6:27:
ee:d2:74:72:eb:e1:cc:1a:dd:33:3f:71:db:51:43:e9:e2:6c:
7f:e3:21:f0:5d:97:ad:05:fd:a5:1e:8f:c4:13:31:73:9e:5d:
a4:08:d2:c6
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZg4fwVjD/gFIfGKRtrwdojFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5ZDJkYWZmMWM1YmI2MWEwYWM4YjNjYWVhZDRiOGExZmEy
ODRkMGYwHhcNMjUwNzIzMTgxNTA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNmQzYmMyYmM4MTRkOGRiOTg0NzBkN2YxOWJhNWQxOTE3NzdjZTE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuj0Hp7Z9VIfBCnTShK77001/1S/m
1HDqKcRbJ18n0f1M/hN1RTWe71GR2SV4f6ICwjW2A5ygukNrooDs0G+TQC/fPvhf
EVjZ7s5br8TEo2LK9t3KpimWY+eRjo6dg7uQpxd1qdjOtXa73+NXk3ru5eT7DV/g
1VCbOPKnUpLKeshKLobsRU4dycpBDNXDLvSxGlMBOI9VxbI6UWNAOqoyxHuXlkcv
SC4Wxe7aiBBdVYbxBlQsRR2E/fshXyMPYAFeFo9qC57iMlKN+bO5/2FNVTq9VPiH
X+O+bYch5kDgiR64E9SnqceDYm5cAfqSC2W/zPVr69hdB4M0OTfGbiobtQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMbTvCvIFNjbmEcNfxm6XRkXd84UMB8GA1UdIwQY
MBaAFCnS2v8cW7YaCsizyurUuKH6KE0PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3Zjgt
NGY1N2Q5Y2Y1Y2FhLzEveHRPOEs4Z1UyTnVZUncxX0dicGRHUmQzemhRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3ZjgtNGY1N2Q5Y2Y1Y2Fh
LzEvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAsu9zAwQA
uV+dMA0GCSqGSIb3DQEBCwUAA4IBAQBHQqOL7Ej7qXsgwC3ysImaSrklhQAPwjZt
u0GxjR/UAQgr9R5Y8RfJjTbAutlSBBnPj6SXIxecO+R2PiSnhcHidjOBphoYzwIN
NmNTsX+19HJposaXA+mk0+wV5LzEzH9iGDmK5hhQdrIg7tt9a92zD+gJ8oYcoceF
QxPwm35NPUOQ/RPKJn/2r5xCCTt5Ih7UxNr8gv+4/YeGnxRUh1VGDYk0g24bQsMH
yMoGkW7yGoeMnzh9kSXjj4G/PVqC9NqX1EQEULG/PNHROZViNHkoVsNTUpZC9ifu
0nRy6+HMGt0zP3HbUUPp4mx/4yHwXZetBf2lHo/EEzFznl2kCNLG
-----END CERTIFICATE-----
Generated at Mon Aug 4 16:05:08 2025 by rpki-client