Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/SUd0redJ4FMMlRcu7czlTq1U0Mc.roa
File: SUd0redJ4FMMlRcu7czlTq1U0Mc.roa (raw, json)
Hash identifier: b9KSsWj5shoQQbBJjpuPhSjRjTqW3WdNivTdrACYMnY=
Subject key identifier: 49:47:74:AD:E7:49:E0:53:0C:95:17:2E:ED:CC:E5:4E:AD:54:D0:C7
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 01985F6016F0C0BF724DC3C8A9C9E1F19200
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/SUd0redJ4FMMlRcu7czlTq1U0Mc.roa
Signing time: Thu 31 Jul 2025 07:26:29 +0000
ROA not before: Thu 31 Jul 2025 07:26:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62387
IP address blocks: 79.132.64.0/19 maxlen: 19
79.132.64.0/22 maxlen: 22
79.132.68.0/22 maxlen: 22
79.132.80.0/22 maxlen: 22
79.132.84.0/22 maxlen: 22
79.132.88.0/22 maxlen: 22
79.132.92.0/22 maxlen: 22
79.135.136.0/22 maxlen: 22
85.234.160.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 08:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5f:60:16:f0:c0:bf:72:4d:c3:c8:a9:c9:e1:f1:92:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jul 31 07:26:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=494774ade749e0530c95172eedcce54ead54d0c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:25:c2:c9:aa:42:27:f4:4d:ff:27:cd:b2:49:
22:47:97:1f:c3:78:06:e5:b4:be:5e:a0:02:97:a1:
4f:21:87:c9:71:98:a5:34:7e:2d:25:15:d0:5b:be:
a1:1f:85:9e:1c:6a:22:7f:b8:19:da:f2:e2:9b:d2:
58:d3:b4:d9:76:87:99:e6:8c:bc:3f:86:8e:da:c5:
78:65:06:bc:5d:e3:60:82:ba:48:84:97:53:c7:57:
02:89:92:f3:40:a8:be:21:1c:b7:89:b4:17:f4:f3:
aa:78:a2:c5:d1:fc:4b:de:ee:9b:62:c6:1d:10:26:
8b:4d:2c:33:57:9f:22:d2:0f:f6:16:ff:bb:bf:2c:
b6:6d:d3:37:ff:ce:1b:08:31:00:e5:41:25:bb:a7:
64:19:cd:35:ed:44:4b:1a:45:cc:be:6b:f0:19:e7:
f6:5d:7e:4c:20:f8:e9:f8:65:65:06:b7:f4:fb:00:
86:6f:09:45:9d:b9:7c:c5:33:98:b6:66:b7:a0:81:
30:68:cb:30:09:b8:76:58:0b:0e:24:c5:d3:9d:ea:
88:a7:57:e2:ae:8d:b3:4f:f0:26:73:8f:b1:8e:c1:
80:93:67:cf:a4:7f:fd:c6:1f:21:27:c3:4b:de:36:
01:12:e3:71:53:2b:c0:5a:74:90:96:e1:f6:71:29:
25:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:47:74:AD:E7:49:E0:53:0C:95:17:2E:ED:CC:E5:4E:AD:54:D0:C7
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/SUd0redJ4FMMlRcu7czlTq1U0Mc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.132.64.0/19
79.135.136.0/22
85.234.160.0/19
Signature Algorithm: sha256WithRSAEncryption
21:b3:35:58:b3:74:f8:97:24:f7:3a:d3:a1:11:ff:6d:8c:a2:
3a:da:b7:41:a2:5e:16:99:50:e4:c0:eb:ac:4d:f8:e4:3d:f7:
9e:44:7d:63:cc:f5:29:d1:40:23:50:4e:d6:c0:58:4a:60:58:
ae:ce:6d:79:c2:cf:42:73:e5:a1:91:d6:82:cc:db:de:2f:02:
ca:0d:95:4a:56:91:88:23:08:e1:e9:d3:1a:9a:a8:02:1a:dc:
da:62:85:7a:d3:3c:06:39:15:bb:92:16:2b:bd:f5:1e:70:14:
f1:bf:db:a5:24:a4:09:3a:34:d5:3e:27:c3:6d:78:30:b1:0d:
2e:84:f4:0f:93:82:b7:a0:fd:70:c6:f9:3d:83:32:79:63:56:
48:a2:d5:01:61:ab:e8:90:69:a4:f8:79:24:22:2f:47:1b:c2:
5d:89:12:39:07:d4:ad:61:fb:55:a1:7b:3e:1a:1c:1e:1a:46:
45:ae:b6:ae:44:83:69:44:88:da:09:ca:88:3e:86:8f:d1:96:
56:4c:50:5b:f6:6e:19:4b:de:2a:cd:d8:8e:18:da:e7:93:76:
04:93:22:73:ba:67:fb:7b:4f:24:39:c6:fc:61:c9:72:3c:68:
10:96:a2:17:be:0c:89:6d:75:b3:b5:77:41:2c:34:3c:d7:a3:
ee:41:c1:5d
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZhfYBbwwL9yTcPIqcnh8ZIAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiMDk1MmM4YmE4ZGFkYjFkMzRkZTZjNmE5Mzg2NGE2MDlm
YzQxZWMwHhcNMjUwNzMxMDcyNjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OTQ3NzRhZGU3NDllMDUzMGM5NTE3MmVlZGNjZTU0ZWFkNTRkMGM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSXCyapCJ/RN/yfNskkiR5cfw3gG
5bS+XqACl6FPIYfJcZilNH4tJRXQW76hH4WeHGoif7gZ2vLim9JY07TZdoeZ5oy8
P4aO2sV4ZQa8XeNggrpIhJdTx1cCiZLzQKi+IRy3ibQX9POqeKLF0fxL3u6bYsYd
ECaLTSwzV58i0g/2Fv+7vyy2bdM3/84bCDEA5UElu6dkGc017URLGkXMvmvwGef2
XX5MIPjp+GVlBrf0+wCGbwlFnbl8xTOYtma3oIEwaMswCbh2WAsOJMXTneqIp1fi
ro2zT/Amc4+xjsGAk2fPpH/9xh8hJ8NL3jYBEuNxUyvAWnSQluH2cSklcQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFElHdK3nSeBTDJUXLu3M5U6tVNDHMB8GA1UdIwQY
MBaAFKsJUsi6ja2x003mxqk4ZKYJ/EHsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAt
NTU1NGQ2ZTE2ODZmLzEvU1VkMHJlZEo0Rk1NbFJjdTdjemxUcTFVME1jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAtNTU1NGQ2ZTE2ODZm
LzEvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQFT4RAAwQC
T4eIAwQFVeqgMA0GCSqGSIb3DQEBCwUAA4IBAQAhszVYs3T4lyT3OtOhEf9tjKI6
2rdBol4WmVDkwOusTfjkPfeeRH1jzPUp0UAjUE7WwFhKYFiuzm15ws9Cc+WhkdaC
zNveLwLKDZVKVpGIIwjh6dMamqgCGtzaYoV60zwGORW7khYrvfUecBTxv9ulJKQJ
OjTVPifDbXgwsQ0uhPQPk4K3oP1wxvk9gzJ5Y1ZIotUBYavokGmk+HkkIi9HG8Jd
iRI5B9StYftVoXs+GhweGkZFrrauRINpRIjaCcqIPoaP0ZZWTFBb9m4ZS94qzdiO
GNrnk3YEkyJzumf7e08kOcb8YclyPGgQlqIXvgyJbXWztXdBLDQ816PuQcFd
-----END CERTIFICATE-----
Generated at Fri Aug 8 13:07:50 2025 by rpki-client