Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/1e2a0e-9514-4d70-903d-85706645e734/1/_Iiv0K8HtxNOiK-4RlHFx1wKlbg.roa
File: _Iiv0K8HtxNOiK-4RlHFx1wKlbg.roa (raw, json)
Hash identifier: FdNGdivbErVK+wy3cLN3R/5P7Vdb7XC+9BhTqtmgBiE=
Subject key identifier: FC:88:AF:D0:AF:07:B7:13:4E:88:AF:B8:46:51:C5:C7:5C:0A:95:B8
Certificate issuer: /CN=0bfa7348d6c1d7186328328720730f684fa20edc
Certificate serial: 0197FA21312D2F3CC83B6BF6CB70133482F0
Authority key identifier: 0B:FA:73:48:D6:C1:D7:18:63:28:32:87:20:73:0F:68:4F:A2:0E:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_pzSNbB1xhjKDKHIHMPaE-iDtw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/1e2a0e-9514-4d70-903d-85706645e734/1/_Iiv0K8HtxNOiK-4RlHFx1wKlbg.roa
Signing time: Fri 11 Jul 2025 15:36:08 +0000
ROA not before: Fri 11 Jul 2025 15:36:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13208
IP address blocks: 185.57.212.0/22 maxlen: 22
213.133.195.0/24 maxlen: 24
213.133.199.0/24 maxlen: 24
213.133.208.0/22 maxlen: 22
213.133.214.0/24 maxlen: 24
213.133.216.0/24 maxlen: 24
213.133.218.0/24 maxlen: 24
213.133.220.0/24 maxlen: 24
213.133.221.0/24 maxlen: 24
213.133.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/1e2a0e-9514-4d70-903d-85706645e734/1/C_pzSNbB1xhjKDKHIHMPaE-iDtw.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/1e2a0e-9514-4d70-903d-85706645e734/1/C_pzSNbB1xhjKDKHIHMPaE-iDtw.mft
rsync://rpki.ripe.net/repository/DEFAULT/C_pzSNbB1xhjKDKHIHMPaE-iDtw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 18:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:fa:21:31:2d:2f:3c:c8:3b:6b:f6:cb:70:13:34:82:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bfa7348d6c1d7186328328720730f684fa20edc
Validity
Not Before: Jul 11 15:36:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fc88afd0af07b7134e88afb84651c5c75c0a95b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:61:df:fc:5b:83:ad:ab:e8:2b:ae:d2:48:d6:
65:86:df:30:7c:c3:27:2a:5b:00:ab:72:70:26:c9:
14:49:f6:a4:c6:0c:6e:98:7f:68:b9:3d:7e:74:48:
bd:de:9c:41:d9:ae:64:8c:8b:2d:97:32:8a:43:06:
e4:8a:b4:74:91:28:50:63:04:dc:e4:c4:b1:3b:19:
84:a2:9b:ce:8c:f2:06:00:8a:17:18:73:3f:91:48:
b5:4c:48:e5:d2:f0:74:e5:54:ff:2d:4b:35:52:05:
51:91:b8:8f:80:04:7c:2d:e3:22:d3:4f:15:89:b8:
3b:24:54:85:94:3e:16:e2:4c:54:e3:db:af:87:34:
bf:f4:03:1b:89:47:b2:85:c9:e8:19:ae:66:a9:7f:
62:fc:04:44:f3:f7:89:5b:7c:83:4a:29:be:56:fb:
b1:a9:96:f5:eb:0f:63:09:d5:86:35:da:34:e4:c5:
ca:02:f2:a7:6a:56:70:c0:b6:30:61:d7:0b:9f:06:
9a:60:0d:5b:b0:11:05:4f:5d:8d:59:cc:27:01:44:
22:7a:05:73:e1:2a:a2:f5:50:0a:58:c5:fd:63:06:
92:3d:31:64:4f:c8:03:33:e6:49:d9:76:fb:f4:7b:
b9:cd:02:18:8b:bc:88:03:48:34:06:43:15:da:54:
3e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:88:AF:D0:AF:07:B7:13:4E:88:AF:B8:46:51:C5:C7:5C:0A:95:B8
X509v3 Authority Key Identifier:
keyid:0B:FA:73:48:D6:C1:D7:18:63:28:32:87:20:73:0F:68:4F:A2:0E:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_pzSNbB1xhjKDKHIHMPaE-iDtw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1e2a0e-9514-4d70-903d-85706645e734/1/_Iiv0K8HtxNOiK-4RlHFx1wKlbg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1e2a0e-9514-4d70-903d-85706645e734/1/C_pzSNbB1xhjKDKHIHMPaE-iDtw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.57.212.0/22
213.133.195.0/24
213.133.199.0/24
213.133.208.0/22
213.133.214.0/24
213.133.216.0/24
213.133.218.0/24
213.133.220.0/23
213.133.223.0/24
Signature Algorithm: sha256WithRSAEncryption
91:30:ec:8c:f1:05:cd:47:df:1f:1c:d9:69:1f:0f:0b:3e:2b:
31:fd:75:e3:57:c2:3b:ff:b6:0e:46:2c:79:71:80:12:43:57:
8d:9c:dc:9f:b8:75:f2:af:b2:a6:58:5b:38:19:33:5b:3b:1a:
96:2b:3a:53:ea:3a:72:79:99:f7:ef:1a:c9:cf:11:bb:b0:6b:
d1:d8:0d:14:95:f9:60:b4:74:35:79:0c:7a:04:76:af:81:8e:
27:76:c0:bb:9a:34:79:09:2b:e3:16:2d:42:bb:2e:b8:43:5c:
b7:90:48:82:d4:da:49:b1:44:12:4d:5f:49:c4:fe:71:f6:db:
04:37:2d:c7:19:a2:14:2f:8e:0e:e2:b1:1f:38:d7:04:27:0e:
9f:f3:56:98:58:27:98:b2:35:7c:00:4b:23:e5:2f:01:fa:6a:
08:0e:e9:8d:0f:79:1a:fd:d8:e4:bd:0c:0c:c4:77:12:78:7c:
cc:64:e8:16:0c:35:5f:99:0d:a9:6e:10:63:61:52:27:e8:3d:
18:5e:0a:a7:09:a3:76:75:ab:39:03:0a:6e:f2:1e:bc:ed:8a:
22:26:ff:95:c9:af:74:eb:b6:20:14:85:6c:09:6e:dd:33:54:
31:e8:ba:57:20:bf:5d:71:39:bd:34:d0:34:05:51:fa:47:45:
ee:31:2f:e6
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgISAZf6ITEtLzzIO2v2y3ATNILwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiZmE3MzQ4ZDZjMWQ3MTg2MzI4MzI4NzIwNzMwZjY4NGZh
MjBlZGMwHhcNMjUwNzExMTUzNjA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYzg4YWZkMGFmMDdiNzEzNGU4OGFmYjg0NjUxYzVjNzVjMGE5NWI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4GHf/FuDravoK67SSNZlht8wfMMn
KlsAq3JwJskUSfakxgxumH9ouT1+dEi93pxB2a5kjIstlzKKQwbkirR0kShQYwTc
5MSxOxmEopvOjPIGAIoXGHM/kUi1TEjl0vB05VT/LUs1UgVRkbiPgAR8LeMi008V
ibg7JFSFlD4W4kxU49uvhzS/9AMbiUeyhcnoGa5mqX9i/ARE8/eJW3yDSim+Vvux
qZb16w9jCdWGNdo05MXKAvKnalZwwLYwYdcLnwaaYA1bsBEFT12NWcwnAUQiegVz
4Sqi9VAKWMX9YwaSPTFkT8gDM+ZJ2Xb79Hu5zQIYi7yIA0g0BkMV2lQ+eQIDAQAB
o4ICOTCCAjUwHQYDVR0OBBYEFPyIr9CvB7cTToivuEZRxcdcCpW4MB8GA1UdIwQY
MBaAFAv6c0jWwdcYYygyhyBzD2hPog7cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ19welNOYkIxeGhqS0RLSElITVBhRS1pRHR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS8xZTJhMGUtOTUxNC00ZDcwLTkwM2Qt
ODU3MDY2NDVlNzM0LzEvX0lpdjBLOEh0eE5PaUstNFJsSEZ4MXdLbGJnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS8xZTJhMGUtOTUxNC00ZDcwLTkwM2QtODU3MDY2NDVlNzM0
LzEvQ19welNOYkIxeGhqS0RLSElITVBhRS1pRHR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQCuTnUAwQA
1YXDAwQA1YXHAwQC1YXQAwQA1YXWAwQA1YXYAwQA1YXaAwQB1YXcAwQA1YXfMA0G
CSqGSIb3DQEBCwUAA4IBAQCRMOyM8QXNR98fHNlpHw8LPisx/XXjV8I7/7YORix5
cYASQ1eNnNyfuHXyr7KmWFs4GTNbOxqWKzpT6jpyeZn37xrJzxG7sGvR2A0Ulflg
tHQ1eQx6BHavgY4ndsC7mjR5CSvjFi1Cuy64Q1y3kEiC1NpJsUQSTV9JxP5x9tsE
Ny3HGaIUL44O4rEfONcEJw6f81aYWCeYsjV8AEsj5S8B+moIDumND3ka/djkvQwM
xHcSeHzMZOgWDDVfmQ2pbhBjYVIn6D0YXgqnCaN2das5Awpu8h687YoiJv+Vya90
67YgFIVsCW7dM1Qx6LpXIL9dcTm9NNA0BVH6R0XuMS/m
-----END CERTIFICATE-----
Generated at Sat Aug 9 02:48:17 2025 by rpki-client