Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/euBBsPSZDk2hi4oMNwl8jWUt_ZQ.roa
File: euBBsPSZDk2hi4oMNwl8jWUt_ZQ.roa (raw, json)
Hash identifier: +ITOQ37NY3K8KZwFVE/U+tAJpUP5s6XRPDFSdyZ1pcc=
Subject key identifier: 7A:E0:41:B0:F4:99:0E:4D:A1:8B:8A:0C:37:09:7C:8D:65:2D:FD:94
Certificate issuer: /CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9
Certificate serial: 019867677028CA1C033C58F3EE857FE663FE
Authority key identifier: 4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/euBBsPSZDk2hi4oMNwl8jWUt_ZQ.roa
Signing time: Fri 01 Aug 2025 20:51:28 +0000
ROA not before: Fri 01 Aug 2025 20:51:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62976
IP address blocks: 159.197.128.0/18 maxlen: 24
159.197.192.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:67:67:70:28:ca:1c:03:3c:58:f3:ee:85:7f:e6:63:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9
Validity
Not Before: Aug 1 20:51:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7ae041b0f4990e4da18b8a0c37097c8d652dfd94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:cf:73:8f:df:fc:20:44:e9:5f:c4:8d:e4:35:
09:03:79:85:da:a4:19:87:a4:a8:b4:55:33:ad:b1:
d0:42:16:ec:11:9e:fa:b9:54:fb:2f:d3:46:d4:eb:
32:d5:9b:ce:59:f4:fe:3b:6c:20:36:99:1d:fe:da:
99:85:e0:45:b0:d5:b8:ce:6c:b4:6b:3d:dc:85:44:
83:e4:8d:3f:5c:3f:30:b5:4e:7b:4a:0b:a9:db:a1:
08:fc:64:26:1a:59:95:b8:a5:b7:a2:d0:a2:ac:e4:
e9:dd:6a:b5:7a:a7:a0:bc:68:15:c8:29:25:44:1f:
a3:de:bc:74:e1:e3:81:1b:89:09:99:e3:ac:4c:c6:
6b:9c:08:27:c8:27:b1:b2:98:5b:00:e6:5a:d0:e0:
33:73:72:24:ce:4b:0e:0b:00:39:1a:dd:d8:4f:28:
4b:bf:08:43:27:68:fc:b6:46:1c:5c:c3:72:a3:15:
84:d2:9b:39:38:bf:80:42:f0:9b:87:94:0a:c3:3c:
e3:1b:99:5d:76:fa:f8:e3:70:f7:ad:e5:07:83:07:
6e:00:48:ac:60:da:3c:1b:06:5b:93:05:bb:a6:b4:
48:6d:34:df:44:47:80:31:72:e1:bd:f3:b6:9e:13:
97:8b:87:44:a5:1a:e8:e6:fb:90:9b:04:8d:0d:1a:
16:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:E0:41:B0:F4:99:0E:4D:A1:8B:8A:0C:37:09:7C:8D:65:2D:FD:94
X509v3 Authority Key Identifier:
keyid:4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/euBBsPSZDk2hi4oMNwl8jWUt_ZQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.197.128.0-159.197.223.255
Signature Algorithm: sha256WithRSAEncryption
60:63:b4:54:28:7b:38:50:ac:35:d1:71:14:7f:4e:3e:0f:61:
97:a3:61:ca:85:e3:6c:1f:19:10:b4:98:30:81:bb:0c:e5:0f:
9c:67:8b:02:09:bb:36:68:71:46:da:11:8a:3c:7e:ab:c9:db:
ac:70:68:7a:00:1d:e3:0f:52:9f:06:4f:59:9b:6a:93:da:39:
42:99:66:40:10:cf:43:df:65:a8:3e:bc:af:c5:0e:9c:a3:f9:
98:20:c3:e9:1e:ce:19:01:c4:a6:a4:83:e6:97:80:b1:3b:8c:
6f:60:21:e7:c3:7d:47:9b:4f:c8:92:ac:8c:58:cf:48:8d:33:
35:91:76:1f:91:3b:84:86:c4:b8:22:69:5f:f3:76:dc:ec:05:
8b:aa:88:ef:21:b9:77:41:dd:68:cd:6d:e8:42:33:42:3f:d6:
89:e1:0d:6e:ae:b1:f2:18:c8:2b:d0:2b:dc:27:d1:ab:2c:2f:
df:d8:2f:cc:ef:7f:53:e5:8b:0f:57:82:ac:c5:1d:ae:c3:ed:
e5:3f:71:32:57:6b:27:db:03:d0:47:15:05:67:bf:04:e5:60:
e1:81:db:65:7a:d0:61:0c:da:cf:a3:ba:c1:51:8f:11:a3:c6:
0c:0f:da:71:d0:de:55:4d:28:31:e6:4f:76:98:21:12:b7:9e:
1c:0b:97:e4
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZhnZ3AoyhwDPFjz7oV/5mP+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkZDk1NGQzYzc3YzljNGUzN2VlYmY3NTNkODZmM2RjZjA5
MWQ0YTkwHhcNMjUwODAxMjA1MTI4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YWUwNDFiMGY0OTkwZTRkYTE4YjhhMGMzNzA5N2M4ZDY1MmRmZDk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo89zj9/8IETpX8SN5DUJA3mF2qQZ
h6SotFUzrbHQQhbsEZ76uVT7L9NG1Osy1ZvOWfT+O2wgNpkd/tqZheBFsNW4zmy0
az3chUSD5I0/XD8wtU57Sgup26EI/GQmGlmVuKW3otCirOTp3Wq1eqegvGgVyCkl
RB+j3rx04eOBG4kJmeOsTMZrnAgnyCexsphbAOZa0OAzc3IkzksOCwA5Gt3YTyhL
vwhDJ2j8tkYcXMNyoxWE0ps5OL+AQvCbh5QKwzzjG5lddvr443D3reUHgwduAEis
YNo8GwZbkwW7prRIbTTfREeAMXLhvfO2nhOXi4dEpRro5vuQmwSNDRoWLQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFHrgQbD0mQ5NoYuKDDcJfI1lLf2UMB8GA1UdIwQY
MBaAFE3ZVNPHfJxON+6/dT2G89zwkdSpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGRsVTA4ZDhuRTQzN3I5MVBZYnozUENSMUtrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC83YTJhOTktMTQ2Yy00NzgxLWEzMDIt
ZWI3YWFhNjgyOGJlLzEvZXVCQnNQU1pEazJoaTRvTU53bDhqV1V0X1pRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC83YTJhOTktMTQ2Yy00NzgxLWEzMDItZWI3YWFhNjgyOGJl
LzEvVGRsVTA4ZDhuRTQzN3I5MVBZYnozUENSMUtrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAefxYAD
BAWfxcAwDQYJKoZIhvcNAQELBQADggEBAGBjtFQoezhQrDXRcRR/Tj4PYZejYcqF
42wfGRC0mDCBuwzlD5xniwIJuzZocUbaEYo8fqvJ26xwaHoAHeMPUp8GT1mbapPa
OUKZZkAQz0PfZag+vK/FDpyj+Zggw+kezhkBxKakg+aXgLE7jG9gIefDfUebT8iS
rIxYz0iNMzWRdh+RO4SGxLgiaV/zdtzsBYuqiO8huXdB3WjNbehCM0I/1onhDW6u
sfIYyCvQK9wn0assL9/YL8zvf1Pliw9XgqzFHa7D7eU/cTJXayfbA9BHFQVnvwTl
YOGB22V60GEM2s+jusFRjxGjxgwP2nHQ3lVNKDHmT3aYIRK3nhwLl+Q=
-----END CERTIFICATE-----
Generated at Wed Aug 6 11:12:34 2025 by rpki-client