Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/1kQumq_e6uZMuznoqft2SVzuZ3Q.roa
File: 1kQumq_e6uZMuznoqft2SVzuZ3Q.roa (raw, json)
Hash identifier: O5Pgdgj19C5uGPu9CgP8o2xOs0u0sxX5vxusIg1OjbY=
Subject key identifier: D6:44:2E:9A:AF:DE:EA:E6:4C:BB:39:E8:A9:FB:76:49:5C:EE:67:74
Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Certificate serial: 01973FD2F206B44FCCD16A3DDF32AC0ECBF8
Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/1kQumq_e6uZMuznoqft2SVzuZ3Q.roa
Signing time: Thu 05 Jun 2025 11:21:18 +0000
ROA not before: Thu 05 Jun 2025 11:21:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29802
IP address blocks: 147.185.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:3f:d2:f2:06:b4:4f:cc:d1:6a:3d:df:32:ac:0e:cb:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Validity
Not Before: Jun 5 11:21:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d6442e9aafdeeae64cbb39e8a9fb76495cee6774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ae:ab:b7:ac:1c:73:46:4f:e7:26:e2:76:12:
4e:4b:0a:e7:60:86:5c:af:0a:cf:19:c0:dd:88:52:
74:c9:c4:82:07:b5:51:49:fc:76:42:f7:70:34:9b:
73:5b:9f:98:09:92:ff:ff:69:9d:ac:a5:57:90:50:
4f:1a:73:d2:ec:a3:e9:c3:f7:82:52:2c:36:e9:cb:
7d:01:86:95:1c:0b:15:43:85:da:0e:1c:09:80:ac:
b8:34:6d:c8:fd:84:76:0b:5c:59:dd:5b:3c:cb:a8:
73:a0:73:55:bc:eb:ec:9a:61:26:a4:58:cc:15:ac:
99:3a:84:e8:0c:a4:92:9f:2d:07:d3:7e:23:21:75:
ba:9f:93:21:64:aa:92:39:0e:ba:8b:47:2d:b7:e8:
df:21:07:c1:7b:40:24:b5:90:25:e1:0c:63:43:82:
86:cb:f3:b9:7a:eb:57:e3:eb:f0:5f:3e:c4:94:71:
73:d0:ee:47:ac:09:9b:f7:42:13:42:91:92:fe:cc:
91:e5:61:9d:3a:70:15:0e:5d:51:53:03:91:02:76:
63:7b:46:1e:7a:b6:00:60:b1:65:62:10:a4:bc:21:
1f:cf:98:ff:c7:8c:6a:32:48:5e:e7:fb:81:0b:fe:
73:a3:89:1c:ae:0d:9b:c2:c9:d3:43:64:c4:ac:c8:
b5:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:44:2E:9A:AF:DE:EA:E6:4C:BB:39:E8:A9:FB:76:49:5C:EE:67:74
X509v3 Authority Key Identifier:
keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/1kQumq_e6uZMuznoqft2SVzuZ3Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.185.196.0/24
Signature Algorithm: sha256WithRSAEncryption
47:a0:aa:5d:c2:7b:ba:15:95:e8:05:be:7c:0a:c2:ef:f5:ca:
fa:15:a0:d5:c6:a3:18:b5:42:4a:17:93:20:3f:ea:f9:19:d0:
bd:ea:a1:cc:82:a0:e4:0a:65:10:2e:1a:9d:0c:e0:db:2b:e2:
ab:64:3e:a5:90:b1:da:da:67:43:d6:68:c9:57:80:5a:c1:e7:
b9:6f:4c:0a:63:b6:a1:7c:7b:5c:fb:b8:d7:a7:4a:33:aa:1d:
09:a8:d4:31:e7:fb:64:ef:9f:c8:11:e9:d6:77:e8:91:9d:93:
74:d2:a2:0c:5d:ee:03:86:9f:fc:54:fa:d0:4d:03:59:ce:26:
a6:40:f6:e8:25:33:58:29:8a:ef:96:7d:a1:84:1a:5f:29:7a:
da:0f:36:10:0b:95:1d:ee:4f:15:5f:ef:73:8e:c0:51:6e:0f:
0a:50:66:ef:32:cb:30:32:f1:57:d5:01:b9:9c:c4:77:21:af:
ad:b0:2f:c3:df:f6:8d:61:da:7b:0b:d8:30:68:6f:0d:c4:70:
58:00:8d:7c:a1:9d:d9:8a:07:c6:5e:22:9f:2f:56:a0:dc:0a:
18:7b:7f:08:ea:e0:43:bd:b2:86:02:61:a3:7e:f0:d4:ac:32:
f8:9c:da:26:81:bc:71:2b:65:60:c8:0f:ae:cb:63:56:e7:e5:
05:af:b6:a6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZc/0vIGtE/M0Wo93zKsDsv4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwOGRhOWNmMDBkNGQ1OGI4NTRmZmM2MjAxMGYyMzViMDZk
ZjM1NGEwHhcNMjUwNjA1MTEyMTE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNjQ0MmU5YWFmZGVlYWU2NGNiYjM5ZThhOWZiNzY0OTVjZWU2Nzc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAta6rt6wcc0ZP5ybidhJOSwrnYIZc
rwrPGcDdiFJ0ycSCB7VRSfx2QvdwNJtzW5+YCZL//2mdrKVXkFBPGnPS7KPpw/eC
Uiw26ct9AYaVHAsVQ4XaDhwJgKy4NG3I/YR2C1xZ3Vs8y6hzoHNVvOvsmmEmpFjM
FayZOoToDKSSny0H034jIXW6n5MhZKqSOQ66i0ctt+jfIQfBe0AktZAl4QxjQ4KG
y/O5eutX4+vwXz7ElHFz0O5HrAmb90ITQpGS/syR5WGdOnAVDl1RUwORAnZje0Ye
erYAYLFlYhCkvCEfz5j/x4xqMkhe5/uBC/5zo4kcrg2bwsnTQ2TErMi1tQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNZELpqv3urmTLs56Kn7dklc7md0MB8GA1UdIwQY
MBaAFNCNqc8A1NWLhU/8YgEPI1sG3zVKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEkycHp3RFUxWXVGVF94aUFROGpXd2JmTlVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9mZWJlZjgtYTBlYS00YzdlLTg4MDYt
MjBlMTk3ODBjYjJlLzEvMWtRdW1xX2U2dVpNdXpub3FmdDJTVnp1WjNRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9mZWJlZjgtYTBlYS00YzdlLTg4MDYtMjBlMTk3ODBjYjJl
LzEvMEkycHp3RFUxWXVGVF94aUFROGpXd2JmTlVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk7nEMA0G
CSqGSIb3DQEBCwUAA4IBAQBHoKpdwnu6FZXoBb58CsLv9cr6FaDVxqMYtUJKF5Mg
P+r5GdC96qHMgqDkCmUQLhqdDODbK+KrZD6lkLHa2mdD1mjJV4Bawee5b0wKY7ah
fHtc+7jXp0ozqh0JqNQx5/tk75/IEenWd+iRnZN00qIMXe4Dhp/8VPrQTQNZziam
QPboJTNYKYrvln2hhBpfKXraDzYQC5Ud7k8VX+9zjsBRbg8KUGbvMsswMvFX1QG5
nMR3Ia+tsC/D3/aNYdp7C9gwaG8NxHBYAI18oZ3ZigfGXiKfL1ag3AoYe38I6uBD
vbKGAmGjfvDUrDL4nNomgbxxK2VgyA+uy2NW5+UFr7am
-----END CERTIFICATE-----
Generated at Sun Jun 15 08:04:39 2025 by rpki-client