Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/cEQi14kKuKL4ZWozyPewcuSD5kQ.roa
File: cEQi14kKuKL4ZWozyPewcuSD5kQ.roa (raw, json)
Hash identifier: AQa4zimuZDO+7ACyM4KJjx7KQcRwuoNCJUovJ5T5Vck=
Subject key identifier: 70:44:22:D7:89:0A:B8:A2:F8:65:6A:33:C8:F7:B0:72:E4:83:E6:44
Certificate issuer: /CN=36614bae96c1337d797bd966e7d6a82a88df9d29
Certificate serial: 019889B1893E82EF51900B852003A9A8DE26
Authority key identifier: 36:61:4B:AE:96:C1:33:7D:79:7B:D9:66:E7:D6:A8:2A:88:DF:9D:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NmFLrpbBM315e9lm59aoKojfnSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/cEQi14kKuKL4ZWozyPewcuSD5kQ.roa
Signing time: Fri 08 Aug 2025 12:39:30 +0000
ROA not before: Fri 08 Aug 2025 12:39:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212041
IP address blocks: 193.228.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/NmFLrpbBM315e9lm59aoKojfnSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 Aug 2025 13:39:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:b1:89:3e:82:ef:51:90:0b:85:20:03:a9:a8:de:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36614bae96c1337d797bd966e7d6a82a88df9d29
Validity
Not Before: Aug 8 12:39:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=704422d7890ab8a2f8656a33c8f7b072e483e644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0c:cc:e1:fd:7d:52:ad:0b:31:59:c5:ab:e7:
17:63:a4:fc:9b:ea:3c:82:df:4a:fa:d7:a4:47:16:
6f:5f:ed:81:9f:69:8e:c5:ea:ba:2e:3c:d0:df:6a:
62:dd:b2:95:e6:62:8c:c3:10:d3:a8:a5:b3:16:5b:
e1:aa:17:6b:2e:aa:ba:6e:1d:58:76:f2:e5:d7:a2:
87:61:19:c6:cc:1c:51:d2:c6:a7:32:5d:1f:ee:10:
ee:db:1a:ca:35:21:6c:c6:17:2b:11:f2:7f:2e:a5:
91:ef:b8:9a:12:b6:74:26:ef:3b:78:a6:78:20:20:
09:a8:99:8a:98:69:64:f9:0a:c7:19:46:1c:9e:23:
5a:cc:2d:b2:5a:eb:b8:1e:be:68:93:39:fa:4c:4d:
60:3d:95:f8:dc:03:d3:f3:2b:19:21:84:89:e0:f0:
e5:f9:d8:59:b7:45:a2:de:91:49:15:27:24:38:15:
63:37:7c:6b:4b:55:94:dc:72:f0:1a:f5:0f:c9:5b:
82:9a:f9:0e:82:fb:fa:f3:c1:04:4a:c8:ba:e3:be:
76:23:fc:23:b8:d9:f8:16:35:b3:2d:3a:46:3c:da:
40:ca:c8:cb:a3:13:54:08:15:25:77:e1:ef:f6:24:
aa:05:f9:73:5a:b3:67:07:3b:3b:4d:db:cf:ce:66:
77:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:44:22:D7:89:0A:B8:A2:F8:65:6A:33:C8:F7:B0:72:E4:83:E6:44
X509v3 Authority Key Identifier:
keyid:36:61:4B:AE:96:C1:33:7D:79:7B:D9:66:E7:D6:A8:2A:88:DF:9D:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NmFLrpbBM315e9lm59aoKojfnSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/cEQi14kKuKL4ZWozyPewcuSD5kQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.228.138.0/24
Signature Algorithm: sha256WithRSAEncryption
03:bd:33:50:7d:1c:c1:24:99:a8:78:06:0a:a2:ad:56:28:f4:
2e:7e:de:f1:25:57:98:be:0f:11:eb:64:a9:a0:f3:8e:a6:84:
82:96:26:3d:32:13:87:7d:a8:b8:d3:62:2d:0e:6d:c9:9b:e8:
7d:9f:50:1a:64:43:a5:ee:51:ec:93:31:69:92:9b:75:e2:b1:
de:2e:34:24:e9:7c:40:a9:11:28:3d:c1:1c:f3:19:dd:bc:e7:
ff:df:e6:51:be:35:26:31:6a:4e:8c:0b:b9:24:c2:b6:e6:26:
a0:73:09:ab:03:db:f1:0d:02:c6:e7:b8:44:38:3b:da:b8:03:
c4:2f:a7:65:c3:9e:97:53:51:ac:dd:b9:ef:de:45:a0:17:61:
a4:40:ac:21:8b:63:10:9b:77:ba:12:28:22:7d:f9:40:d7:2b:
b5:84:90:72:75:4c:ad:a6:af:44:8a:c3:57:b0:91:2c:df:4c:
79:8f:5b:d2:2e:d1:39:f4:95:20:ad:ae:6b:d1:b3:4a:81:a5:
e5:4c:dd:4a:51:39:b9:b5:47:89:cd:c3:e3:48:1b:b1:b2:8a:
7e:b4:b7:c6:b9:32:9e:37:7e:83:5f:d8:70:7a:bb:4c:b4:1a:
23:43:b7:5e:d5:5a:7c:7e:09:71:3b:9b:bc:0b:b4:71:c2:af:
8a:f0:0a:ef
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZiJsYk+gu9RkAuFIAOpqN4mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2NjE0YmFlOTZjMTMzN2Q3OTdiZDk2NmU3ZDZhODJhODhk
ZjlkMjkwHhcNMjUwODA4MTIzOTMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MDQ0MjJkNzg5MGFiOGEyZjg2NTZhMzNjOGY3YjA3MmU0ODNlNjQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowzM4f19Uq0LMVnFq+cXY6T8m+o8
gt9K+tekRxZvX+2Bn2mOxeq6LjzQ32pi3bKV5mKMwxDTqKWzFlvhqhdrLqq6bh1Y
dvLl16KHYRnGzBxR0sanMl0f7hDu2xrKNSFsxhcrEfJ/LqWR77iaErZ0Ju87eKZ4
ICAJqJmKmGlk+QrHGUYcniNazC2yWuu4Hr5okzn6TE1gPZX43APT8ysZIYSJ4PDl
+dhZt0Wi3pFJFSckOBVjN3xrS1WU3HLwGvUPyVuCmvkOgvv688EESsi64752I/wj
uNn4FjWzLTpGPNpAysjLoxNUCBUld+Hv9iSqBflzWrNnBzs7TdvPzmZ3gQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHBEIteJCrii+GVqM8j3sHLkg+ZEMB8GA1UdIwQY
MBaAFDZhS66WwTN9eXvZZufWqCqI350pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTm1GTHJwYkJNMzE1ZTlsbTU5YW9Lb2pmblNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9jZjJjYWItZTE4Mi00ZTliLWE2ZWUt
YWYwMTRmYWJmNGJlLzEvY0VRaTE0a0t1S0w0WldvenlQZXdjdVNENWtRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9jZjJjYWItZTE4Mi00ZTliLWE2ZWUtYWYwMTRmYWJmNGJl
LzEvTm1GTHJwYkJNMzE1ZTlsbTU5YW9Lb2pmblNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAweSKMA0G
CSqGSIb3DQEBCwUAA4IBAQADvTNQfRzBJJmoeAYKoq1WKPQuft7xJVeYvg8R62Sp
oPOOpoSCliY9MhOHfai402ItDm3Jm+h9n1AaZEOl7lHskzFpkpt14rHeLjQk6XxA
qREoPcEc8xndvOf/3+ZRvjUmMWpOjAu5JMK25iagcwmrA9vxDQLG57hEODvauAPE
L6dlw56XU1Gs3bnv3kWgF2GkQKwhi2MQm3e6EigifflA1yu1hJBydUytpq9EisNX
sJEs30x5j1vSLtE59JUgra5r0bNKgaXlTN1KUTm5tUeJzcPjSBuxsop+tLfGuTKe
N36DX9hwertMtBojQ7de1Vp8fglxO5u8C7Rxwq+K8Arv
-----END CERTIFICATE-----
Generated at Wed Aug 13 20:16:50 2025 by rpki-client