Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/b3fece-905f-4cb3-9a9a-e5afe263f0a2/1/1j10fGgoumz7WTH368PI_luQFZo.roa
File: 1j10fGgoumz7WTH368PI_luQFZo.roa (raw, json)
Hash identifier: I8kLuezU2XygaqC04v/laZ7klhdBf+W1z6e/cSddoJA=
Subject key identifier: D6:3D:74:7C:68:28:BA:6C:FB:59:31:F7:EB:C3:C8:FE:5B:90:15:9A
Certificate issuer: /CN=f8b7600e781f9305b88ca4931a7db009f8c72b3a
Certificate serial: 01986463A61634E06908A6DFB391EFB468AC
Authority key identifier: F8:B7:60:0E:78:1F:93:05:B8:8C:A4:93:1A:7D:B0:09:F8:C7:2B:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-LdgDngfkwW4jKSTGn2wCfjHKzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/b3fece-905f-4cb3-9a9a-e5afe263f0a2/1/1j10fGgoumz7WTH368PI_luQFZo.roa
Signing time: Fri 01 Aug 2025 06:48:28 +0000
ROA not before: Fri 01 Aug 2025 06:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207173
IP address blocks: 185.160.186.0/24 maxlen: 24
185.160.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/b3fece-905f-4cb3-9a9a-e5afe263f0a2/1/1-LdgDngfkwW4jKSTGn2wCfjHKzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/b3fece-905f-4cb3-9a9a-e5afe263f0a2/1/1-LdgDngfkwW4jKSTGn2wCfjHKzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-LdgDngfkwW4jKSTGn2wCfjHKzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:64:63:a6:16:34:e0:69:08:a6:df:b3:91:ef:b4:68:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8b7600e781f9305b88ca4931a7db009f8c72b3a
Validity
Not Before: Aug 1 06:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d63d747c6828ba6cfb5931f7ebc3c8fe5b90159a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:29:7b:2c:4e:2f:df:64:73:b6:1b:f6:c3:ec:
ec:cb:91:4e:e0:eb:60:90:d4:8a:f6:a2:4f:de:42:
ed:2b:1b:8c:bd:c9:9d:b2:ae:e9:a4:d1:9f:46:aa:
17:19:8d:d3:61:05:11:b8:2c:6b:63:e4:8b:7c:cf:
24:64:8e:96:fa:ef:21:1f:df:9d:34:83:f9:cc:7d:
ce:78:3e:b5:41:fe:9f:8f:f8:01:ac:e9:4a:6f:da:
e1:7d:52:2c:23:44:a7:f1:b1:cb:2e:4c:94:f6:c2:
b5:59:54:75:1c:58:37:02:3c:9e:fd:42:da:ac:33:
c4:37:bb:8a:94:91:89:e1:7b:92:2d:0d:8d:89:08:
14:73:c0:48:8b:36:c7:99:8b:b6:57:ee:9f:e6:3b:
b4:36:46:47:49:b8:f2:67:9c:4c:67:35:65:d4:fa:
01:14:42:cf:a5:e1:c3:70:cf:ff:3a:19:40:7f:88:
4d:44:a6:c8:31:3f:1b:bf:25:b2:f1:35:b5:06:8a:
ce:54:1d:d3:23:61:a2:8d:d6:d3:69:fb:e9:fd:82:
66:62:f5:17:b2:38:65:81:c7:c9:f6:c2:ce:b3:9a:
e3:5d:ad:2f:45:07:6d:78:94:ac:45:8b:3c:3f:07:
88:7d:db:61:1b:f9:9e:19:b4:a4:9f:3a:5b:e5:08:
c3:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:3D:74:7C:68:28:BA:6C:FB:59:31:F7:EB:C3:C8:FE:5B:90:15:9A
X509v3 Authority Key Identifier:
keyid:F8:B7:60:0E:78:1F:93:05:B8:8C:A4:93:1A:7D:B0:09:F8:C7:2B:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LdgDngfkwW4jKSTGn2wCfjHKzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b3fece-905f-4cb3-9a9a-e5afe263f0a2/1/1j10fGgoumz7WTH368PI_luQFZo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b3fece-905f-4cb3-9a9a-e5afe263f0a2/1/1-LdgDngfkwW4jKSTGn2wCfjHKzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.160.186.0/23
Signature Algorithm: sha256WithRSAEncryption
6c:a9:26:8b:b0:eb:37:f6:2d:e0:8f:8c:47:16:30:28:ff:b3:
7b:92:3e:3f:7a:e8:24:7d:de:a4:3f:6b:2e:44:fc:6d:87:04:
70:43:2d:5a:91:0d:41:d1:41:8f:2e:37:ca:af:48:60:9c:25:
07:76:e4:92:32:f0:d5:5e:36:89:d1:ee:0d:39:3e:13:0a:1d:
87:12:5e:91:3f:56:13:dc:e0:11:8a:9f:04:ea:f2:56:41:ee:
ec:e6:fb:80:c4:49:1d:ea:89:b9:cf:c8:68:47:15:d0:cd:f8:
8f:8c:f1:ca:68:00:d8:93:89:aa:6f:14:81:4c:a2:21:c4:88:
45:de:46:73:ee:b5:d8:95:38:9c:ad:60:70:91:db:ab:08:c5:
eb:0f:78:74:7b:b3:7d:c2:9e:e9:ed:e9:94:fa:22:21:db:aa:
46:74:14:36:f0:64:ac:e5:1e:4d:2e:ba:82:00:58:c6:2a:83:
a6:91:1e:b2:39:2a:e1:e3:35:14:30:d9:ff:a3:30:3c:fc:4b:
b3:05:f5:47:9a:9e:a8:a3:59:88:f9:90:f2:df:fb:e4:ab:17:
e4:fc:29:02:31:2d:fb:cf:78:2c:a8:a0:61:71:b0:f8:48:a8:
3c:9e:b6:9e:70:1e:ee:3e:8f:7f:b3:23:e7:ad:44:33:60:4d:
a3:37:1c:ab
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZhkY6YWNOBpCKbfs5HvtGisMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4Yjc2MDBlNzgxZjkzMDViODhjYTQ5MzFhN2RiMDA5Zjhj
NzJiM2EwHhcNMjUwODAxMDY0ODI4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNjNkNzQ3YzY4MjhiYTZjZmI1OTMxZjdlYmMzYzhmZTViOTAxNTlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Cl7LE4v32Rzthv2w+zsy5FO4Otg
kNSK9qJP3kLtKxuMvcmdsq7ppNGfRqoXGY3TYQURuCxrY+SLfM8kZI6W+u8hH9+d
NIP5zH3OeD61Qf6fj/gBrOlKb9rhfVIsI0Sn8bHLLkyU9sK1WVR1HFg3Ajye/ULa
rDPEN7uKlJGJ4XuSLQ2NiQgUc8BIizbHmYu2V+6f5ju0NkZHSbjyZ5xMZzVl1PoB
FELPpeHDcM//OhlAf4hNRKbIMT8bvyWy8TW1BorOVB3TI2GijdbTafvp/YJmYvUX
sjhlgcfJ9sLOs5rjXa0vRQdteJSsRYs8PweIfdthG/meGbSknzpb5QjDYwIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFNY9dHxoKLps+1kx9+vDyP5bkBWaMB8GA1UdIwQY
MBaAFPi3YA54H5MFuIykkxp9sAn4xys6MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1MZGdEbmdma3dXNGpLU1RHbjJ3Q2ZqSEt6by5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTIvYjNmZWNlLTkwNWYtNGNiMy05YTlh
LWU1YWZlMjYzZjBhMi8xLzFqMTBmR2dvdW16N1dUSDM2OFBJX2x1UUZaby5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMTIvYjNmZWNlLTkwNWYtNGNiMy05YTlhLWU1YWZlMjYzZjBh
Mi8xLzEtTGRnRG5nZmt3VzRqS1NUR24yd0NmakhLem8uY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAG5oLow
DQYJKoZIhvcNAQELBQADggEBAGypJouw6zf2LeCPjEcWMCj/s3uSPj966CR93qQ/
ay5E/G2HBHBDLVqRDUHRQY8uN8qvSGCcJQd25JIy8NVeNonR7g05PhMKHYcSXpE/
VhPc4BGKnwTq8lZB7uzm+4DESR3qibnPyGhHFdDN+I+M8cpoANiTiapvFIFMoiHE
iEXeRnPutdiVOJytYHCR26sIxesPeHR7s33Cnunt6ZT6IiHbqkZ0FDbwZKzlHk0u
uoIAWMYqg6aRHrI5KuHjNRQw2f+jMDz8S7MF9UeanqijWYj5kPLf++SrF+T8KQIx
LfvPeCyooGFxsPhIqDyetp5wHu4+j3+zI+etRDNgTaM3HKs=
-----END CERTIFICATE-----
Generated at Mon Aug 11 08:41:49 2025 by rpki-client