Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/1-sC3cWe2F3PAwnVpZHmzL2-YyzM.roa
File: 1-sC3cWe2F3PAwnVpZHmzL2-YyzM.roa (raw, json)
Hash identifier: jSHFfqsR9pRFIPbrJJKcr/kC6tLUL1fQJt8OCh8d1xg=
Subject key identifier: FA:C0:B7:71:67:B6:17:73:C0:C2:75:69:64:79:B3:2F:6F:98:CB:33
Certificate issuer: /CN=ac0852af5a8e436b2d4da72e92b64114e1f4d15f
Certificate serial: 0198801DB68FAE6C487AE1955DC731D7758F
Authority key identifier: AC:08:52:AF:5A:8E:43:6B:2D:4D:A7:2E:92:B6:41:14:E1:F4:D1:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAhSr1qOQ2stTacukrZBFOH00V8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/1-sC3cWe2F3PAwnVpZHmzL2-YyzM.roa
Signing time: Wed 06 Aug 2025 16:01:27 +0000
ROA not before: Wed 06 Aug 2025 16:01:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 91.108.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rAhSr1qOQ2stTacukrZBFOH00V8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:1d:b6:8f:ae:6c:48:7a:e1:95:5d:c7:31:d7:75:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac0852af5a8e436b2d4da72e92b64114e1f4d15f
Validity
Not Before: Aug 6 16:01:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fac0b77167b61773c0c275696479b32f6f98cb33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fd:45:f3:43:c3:d0:20:0a:b8:57:5c:a4:86:
05:83:95:22:5c:9a:3b:1c:26:c5:9b:2d:1b:c3:2c:
63:ff:b7:02:17:f5:15:93:36:04:c0:c8:cc:5a:3a:
ec:87:ce:ed:68:95:f6:15:9f:8b:1c:bc:15:2d:c3:
9c:5d:87:50:d3:11:1d:00:45:dc:e5:4f:79:64:55:
6f:91:e3:00:cc:3b:4f:2f:49:49:65:43:7d:ae:4c:
da:46:8b:5a:01:bd:4b:64:4f:88:5b:5e:69:1a:51:
62:57:f0:3b:c1:e1:b7:d6:3f:02:30:2a:2a:69:60:
2b:44:ce:0f:e6:49:65:73:02:52:30:79:0a:06:5f:
53:c5:cc:d8:2c:d8:c4:14:d5:6d:cd:31:6e:aa:24:
8a:0e:2d:08:09:8b:3b:77:cd:46:ab:fe:e2:f7:08:
41:9a:e3:19:bf:e7:bf:d1:08:06:0d:89:ef:96:7e:
46:37:3e:38:d6:f0:11:68:dc:87:5a:d8:6a:38:6c:
a7:b3:a5:13:e5:6f:55:4e:df:1c:4b:a2:2c:80:67:
c0:e9:a6:a1:e4:a1:62:0e:67:fe:e5:66:89:8b:b9:
65:90:cf:e0:f1:4c:28:07:f3:ba:8f:6c:6b:3a:84:
a8:af:32:b1:43:83:7b:eb:1c:15:d0:39:9f:79:8e:
6d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:C0:B7:71:67:B6:17:73:C0:C2:75:69:64:79:B3:2F:6F:98:CB:33
X509v3 Authority Key Identifier:
keyid:AC:08:52:AF:5A:8E:43:6B:2D:4D:A7:2E:92:B6:41:14:E1:F4:D1:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAhSr1qOQ2stTacukrZBFOH00V8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/1-sC3cWe2F3PAwnVpZHmzL2-YyzM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.108.186.0/24
Signature Algorithm: sha256WithRSAEncryption
70:c1:9b:67:24:93:bb:0b:d7:5f:61:4c:53:79:e5:b5:2a:8a:
74:d6:49:77:cd:0a:5b:d8:38:a9:f3:92:a3:a1:c3:64:9c:3c:
c5:90:0d:f2:88:9d:a0:da:0e:47:9b:61:bf:6c:e2:96:52:b3:
7f:f2:80:7d:cf:13:47:90:4c:8b:68:20:07:21:59:c8:95:3d:
80:0f:f3:18:5d:37:fd:0a:04:da:37:ac:2e:db:10:fe:c5:f1:
a5:39:e2:4c:ac:0a:e9:21:ed:24:9f:6b:94:8b:89:e5:4d:50:
e3:69:c3:65:79:5e:84:19:45:9a:f5:93:97:6c:cf:09:6f:2f:
46:ff:d1:37:11:09:9a:d2:9c:4d:ff:6a:71:cb:5b:72:47:12:
90:78:16:a2:7c:60:e7:42:72:56:bc:0f:0f:60:1f:2f:6e:d9:
d2:f8:e1:ef:5d:ff:42:75:47:ef:9e:46:53:48:93:3f:55:0d:
81:63:e7:ca:d5:25:73:42:64:ad:61:6a:82:ca:6f:40:b7:c6:
a7:2a:22:fd:75:ff:af:c3:86:dc:87:33:ca:0d:22:bd:3f:1c:
cb:fb:74:00:a3:50:fa:4d:5e:9c:88:cd:4e:92:82:13:03:8b:
ef:6b:db:50:27:62:a1:ec:5c:44:6e:bd:65:e5:13:22:88:46:
3c:90:f7:19
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZiAHbaPrmxIeuGVXccx13WPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjMDg1MmFmNWE4ZTQzNmIyZDRkYTcyZTkyYjY0MTE0ZTFm
NGQxNWYwHhcNMjUwODA2MTYwMTI3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYWMwYjc3MTY3YjYxNzczYzBjMjc1Njk2NDc5YjMyZjZmOThjYjMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvf1F80PD0CAKuFdcpIYFg5UiXJo7
HCbFmy0bwyxj/7cCF/UVkzYEwMjMWjrsh87taJX2FZ+LHLwVLcOcXYdQ0xEdAEXc
5U95ZFVvkeMAzDtPL0lJZUN9rkzaRotaAb1LZE+IW15pGlFiV/A7weG31j8CMCoq
aWArRM4P5kllcwJSMHkKBl9TxczYLNjEFNVtzTFuqiSKDi0ICYs7d81Gq/7i9whB
muMZv+e/0QgGDYnvln5GNz441vARaNyHWthqOGyns6UT5W9VTt8cS6IsgGfA6aah
5KFiDmf+5WaJi7llkM/g8UwoB/O6j2xrOoSorzKxQ4N76xwV0DmfeY5txwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPrAt3FnthdzwMJ1aWR5sy9vmMszMB8GA1UdIwQY
MBaAFKwIUq9ajkNrLU2nLpK2QRTh9NFfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckFoU3IxcU9RMnN0VGFjdWtyWkJGT0gwMFY4LmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny80ZGJjYjItM2E5Ni00ODE3LTk5NzEt
NTAwN2RkZTM1MDQ1LzEvMS1zQzNjV2UyRjNQQXduVnBaSG16TDItWXl6TS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNDcvNGRiY2IyLTNhOTYtNDgxNy05OTcxLTUwMDdkZGUzNTA0
NS8xL3JBaFNyMXFPUTJzdFRhY3VrclpCRk9IMDBWOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFtsujAN
BgkqhkiG9w0BAQsFAAOCAQEAcMGbZySTuwvXX2FMU3nltSqKdNZJd80KW9g4qfOS
o6HDZJw8xZAN8oidoNoOR5thv2zillKzf/KAfc8TR5BMi2ggByFZyJU9gA/zGF03
/QoE2jesLtsQ/sXxpTniTKwK6SHtJJ9rlIuJ5U1Q42nDZXlehBlFmvWTl2zPCW8v
Rv/RNxEJmtKcTf9qcctbckcSkHgWonxg50JyVrwPD2AfL27Z0vjh713/QnVH755G
U0iTP1UNgWPnytUlc0JkrWFqgspvQLfGpyoi/XX/r8OG3Iczyg0ivT8cy/t0AKNQ
+k1enIjNTpKCEwOL72vbUCdioexcRG69ZeUTIohGPJD3GQ==
-----END CERTIFICATE-----
Generated at Wed Aug 13 04:24:11 2025 by rpki-client