Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/bb1K_Kif6va25O83C_r1u6xc-aI.roa
File: bb1K_Kif6va25O83C_r1u6xc-aI.roa (raw, json)
Hash identifier: 9AhK38DKNzMs4icQ2cykILK7FLsKzFyBe+/qjC+W1Rg=
Subject key identifier: 6D:BD:4A:FC:A8:9F:EA:F6:B6:E4:EF:37:0B:FA:F5:BB:AC:5C:F9:A2
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01975A0B955D41522E3556BFBF46B995EA9D
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/bb1K_Kif6va25O83C_r1u6xc-aI.roa
Signing time: Tue 10 Jun 2025 13:33:17 +0000
ROA not before: Tue 10 Jun 2025 13:33:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214159
IP address blocks: 84.32.208.0/24 maxlen: 24
88.216.214.0/24 maxlen: 24
88.216.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5a:0b:95:5d:41:52:2e:35:56:bf:bf:46:b9:95:ea:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jun 10 13:33:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6dbd4afca89feaf6b6e4ef370bfaf5bbac5cf9a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f3:20:94:ba:55:a2:6c:0e:1a:62:50:c4:c6:
e9:9d:7c:09:4f:bc:94:aa:d2:a9:67:4f:ae:41:81:
b8:d5:04:96:63:20:80:1e:1c:c8:8d:d5:52:a0:44:
82:93:77:9b:21:16:99:83:ac:e0:fd:b0:d0:e4:95:
76:28:72:3d:92:3c:05:b0:17:ea:b9:58:eb:fb:d8:
98:b9:e5:fc:93:fe:80:63:4a:9a:86:e6:05:c8:08:
f2:f3:02:68:72:4d:63:ca:1e:87:a1:e5:56:cc:58:
94:b1:c0:da:be:0b:48:89:99:9d:d7:4f:2d:ba:40:
72:ee:76:40:ed:5d:2f:40:92:78:68:f7:00:5c:37:
c2:54:47:8c:81:5e:9b:10:40:dc:06:25:d5:c2:09:
ef:24:60:23:c7:8a:5b:36:20:bf:7c:6e:e1:90:c6:
f1:ba:39:56:21:57:f0:e6:60:91:8e:95:59:38:50:
c1:1b:7f:ed:8a:87:a1:e0:c6:8d:36:38:6b:f5:8e:
e2:1d:4a:0e:8c:c4:7c:e9:fb:48:76:d7:97:55:2a:
95:5e:94:68:a3:f2:5c:bd:3f:ac:2f:5f:80:c3:8e:
fd:d2:0d:1a:b1:3a:05:e7:1f:89:39:27:91:96:a6:
a8:0a:45:62:0a:2e:ba:50:f0:42:55:43:18:67:4a:
59:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:BD:4A:FC:A8:9F:EA:F6:B6:E4:EF:37:0B:FA:F5:BB:AC:5C:F9:A2
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/bb1K_Kif6va25O83C_r1u6xc-aI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.208.0/24
88.216.214.0/24
88.216.223.0/24
Signature Algorithm: sha256WithRSAEncryption
55:31:b4:c5:b8:2e:c8:6d:ef:03:bf:d6:46:b4:52:76:0b:9a:
ed:3e:2d:16:05:93:92:ee:4a:73:0f:8a:95:b3:56:64:de:d5:
29:75:92:99:71:65:fd:53:ab:e9:e7:b5:99:ef:46:1b:1d:63:
5b:57:98:a9:5b:39:53:3a:4d:c9:4e:c0:58:07:e5:0e:1c:ed:
14:e7:b8:e4:1f:2b:89:d5:55:4f:ce:c4:36:be:75:9a:31:42:
35:35:bc:b1:f3:b7:e7:06:ae:7e:ef:f7:b9:b9:d5:b2:a8:58:
f0:d2:59:54:8a:c7:bd:0b:03:6a:3f:17:50:2e:ad:27:60:cc:
97:c9:8e:a1:51:41:27:10:5c:3f:59:01:43:af:9f:66:05:68:
36:c2:18:65:b9:7e:3c:14:76:33:e0:c5:1a:9f:1f:62:b9:69:
b9:37:c4:52:25:65:b5:3b:1e:5b:01:7e:14:e8:a8:99:6c:6f:
f7:e1:2c:85:a9:67:f1:e0:7e:ba:7c:84:cc:8a:5f:e0:be:28:
28:0b:b5:51:29:e0:26:78:b6:8d:37:b9:db:71:af:6c:15:d5:
54:70:6b:b5:35:fe:2b:e7:5c:e1:2d:3b:89:21:ea:72:e4:e8:
42:19:d3:7f:e7:77:cb:c4:f4:3d:58:8c:0d:7c:64:dc:9d:5e:
88:d0:2d:79
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZdaC5VdQVIuNVa/v0a5leqdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjUwNjEwMTMzMzE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZGJkNGFmY2E4OWZlYWY2YjZlNGVmMzcwYmZhZjViYmFjNWNmOWEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovMglLpVomwOGmJQxMbpnXwJT7yU
qtKpZ0+uQYG41QSWYyCAHhzIjdVSoESCk3ebIRaZg6zg/bDQ5JV2KHI9kjwFsBfq
uVjr+9iYueX8k/6AY0qahuYFyAjy8wJock1jyh6HoeVWzFiUscDavgtIiZmd108t
ukBy7nZA7V0vQJJ4aPcAXDfCVEeMgV6bEEDcBiXVwgnvJGAjx4pbNiC/fG7hkMbx
ujlWIVfw5mCRjpVZOFDBG3/tioeh4MaNNjhr9Y7iHUoOjMR86ftIdteXVSqVXpRo
o/JcvT+sL1+Aw4790g0asToF5x+JOSeRlqaoCkViCi66UPBCVUMYZ0pZcQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFG29Svyon+r2tuTvNwv69busXPmiMB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvYmIxS19LaWY2dmEyNU84M0NfcjF1NnhjLWFJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAVCDQAwQA
WNjWAwQAWNjfMA0GCSqGSIb3DQEBCwUAA4IBAQBVMbTFuC7Ibe8Dv9ZGtFJ2C5rt
Pi0WBZOS7kpzD4qVs1Zk3tUpdZKZcWX9U6vp57WZ70YbHWNbV5ipWzlTOk3JTsBY
B+UOHO0U57jkHyuJ1VVPzsQ2vnWaMUI1Nbyx87fnBq5+7/e5udWyqFjw0llUise9
CwNqPxdQLq0nYMyXyY6hUUEnEFw/WQFDr59mBWg2whhluX48FHYz4MUanx9iuWm5
N8RSJWW1Ox5bAX4U6KiZbG/34SyFqWfx4H66fITMil/gvigoC7VRKeAmeLaNN7nb
ca9sFdVUcGu1Nf4r51zhLTuJIepy5OhCGdN/53fLxPQ9WIwNfGTcnV6I0C15
-----END CERTIFICATE-----
Generated at Sat Jun 14 13:01:23 2025 by rpki-client