Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/4402b0-2eca-4836-bf22-a967159f887d/1/vB7EJPDt73t8p8TotPU_sHWROHY.roa
File: vB7EJPDt73t8p8TotPU_sHWROHY.roa (raw, json)
Hash identifier: 6l/6E0qhzeK96CRXHer3vPg535yUVFUT7RPrrAcfouQ=
Subject key identifier: BC:1E:C4:24:F0:ED:EF:7B:7C:A7:C4:E8:B4:F5:3F:B0:75:91:38:76
Certificate issuer: /CN=1366b960a6f1f04439f09186f9ecf531a9ce2648
Certificate serial: 01985B1832E43B57B8F50C4F5E079F0C3D1B
Authority key identifier: 13:66:B9:60:A6:F1:F0:44:39:F0:91:86:F9:EC:F5:31:A9:CE:26:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E2a5YKbx8EQ58JGG-ez1ManOJkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/4402b0-2eca-4836-bf22-a967159f887d/1/vB7EJPDt73t8p8TotPU_sHWROHY.roa
Signing time: Wed 30 Jul 2025 11:29:29 +0000
ROA not before: Wed 30 Jul 2025 11:29:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20115
IP address blocks: 194.150.220.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/4402b0-2eca-4836-bf22-a967159f887d/1/E2a5YKbx8EQ58JGG-ez1ManOJkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/4402b0-2eca-4836-bf22-a967159f887d/1/E2a5YKbx8EQ58JGG-ez1ManOJkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/E2a5YKbx8EQ58JGG-ez1ManOJkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5b:18:32:e4:3b:57:b8:f5:0c:4f:5e:07:9f:0c:3d:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1366b960a6f1f04439f09186f9ecf531a9ce2648
Validity
Not Before: Jul 30 11:29:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bc1ec424f0edef7b7ca7c4e8b4f53fb075913876
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ab:00:6d:80:f0:5e:d7:a7:12:83:e0:68:1b:
bf:31:6e:d9:4d:9d:08:a9:e1:e5:9a:22:ec:69:93:
32:c4:a3:d1:b8:76:1e:31:a0:89:06:1d:a0:c8:62:
4f:45:45:9a:21:d8:46:4a:21:00:a7:0c:43:d7:31:
5f:55:43:e4:6e:e6:92:2f:6e:b3:ad:58:63:21:b5:
7a:ae:e7:a3:1e:4e:7f:28:21:9c:a9:ec:29:ca:57:
a6:7a:7d:e2:fb:6b:96:40:64:bc:f3:fa:f3:de:7f:
b9:79:26:9e:6a:b6:01:4f:55:75:7b:8b:ce:96:f4:
e8:06:e0:75:6f:ab:dc:7e:22:1b:a9:ae:28:4b:57:
54:36:33:59:fa:06:07:bd:ed:0b:d3:ec:e9:bf:48:
02:25:7d:c4:23:d0:ca:84:06:7d:6b:6d:68:71:ae:
3d:3e:48:1c:43:72:b6:9c:75:d3:95:99:5c:f6:3c:
2a:2b:dd:42:46:42:17:a4:9f:17:b8:72:13:8a:5f:
b0:bf:71:2e:02:03:a8:09:a5:fe:57:bb:73:5d:4c:
df:18:46:c4:97:b3:bf:03:69:60:71:d0:73:6a:4a:
ff:d9:72:f4:31:d3:2c:91:f3:64:67:ac:f9:d3:ce:
0a:b4:25:28:ee:a0:15:75:ba:a5:d2:6e:cb:c1:d9:
99:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:1E:C4:24:F0:ED:EF:7B:7C:A7:C4:E8:B4:F5:3F:B0:75:91:38:76
X509v3 Authority Key Identifier:
keyid:13:66:B9:60:A6:F1:F0:44:39:F0:91:86:F9:EC:F5:31:A9:CE:26:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E2a5YKbx8EQ58JGG-ez1ManOJkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4402b0-2eca-4836-bf22-a967159f887d/1/vB7EJPDt73t8p8TotPU_sHWROHY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4402b0-2eca-4836-bf22-a967159f887d/1/E2a5YKbx8EQ58JGG-ez1ManOJkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.150.220.0/23
Signature Algorithm: sha256WithRSAEncryption
c9:25:00:47:d1:4b:4b:90:3a:89:ca:5e:ca:0d:65:46:35:15:
03:58:be:6f:aa:43:1c:06:8f:33:9f:37:4a:7c:44:b1:1b:31:
d6:86:f8:4b:74:eb:df:05:fb:b7:65:03:f6:6c:57:06:b0:fe:
d4:e3:8f:24:e3:da:aa:24:2b:95:f4:43:b1:ff:65:15:7c:86:
7e:e7:38:cb:3b:30:ef:01:eb:49:77:ad:9b:a3:66:32:77:2d:
c9:69:46:a2:8b:1d:42:fd:8e:21:30:81:af:e6:7c:a6:8f:45:
46:5d:54:22:41:f7:a4:49:8d:63:51:e4:ca:df:87:8a:1b:17:
a4:d6:b8:ca:bc:ee:d4:ba:12:0e:9c:5b:f6:a5:f5:16:74:4e:
33:7a:3d:82:0d:ec:00:cb:ad:8e:35:f3:a1:3e:ec:f4:9f:8b:
0a:2a:24:96:38:9e:0c:77:e3:f5:ac:f1:df:8e:dc:cc:94:54:
16:31:38:ba:05:72:be:94:e5:93:bd:88:4e:98:07:99:46:1a:
4c:5c:34:4f:cd:4d:89:a2:74:e8:27:4d:d1:63:cf:70:d7:56:
cf:c6:e7:e0:dd:b9:39:16:69:b1:58:e1:57:db:1d:36:f1:16:
fd:8f:65:0d:d7:e7:17:43:37:d9:ed:71:85:0d:12:54:42:8f:
51:c5:0c:ee
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZhbGDLkO1e49QxPXgefDD0bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzNjZiOTYwYTZmMWYwNDQzOWYwOTE4NmY5ZWNmNTMxYTlj
ZTI2NDgwHhcNMjUwNzMwMTEyOTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYzFlYzQyNGYwZWRlZjdiN2NhN2M0ZThiNGY1M2ZiMDc1OTEzODc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKsAbYDwXtenEoPgaBu/MW7ZTZ0I
qeHlmiLsaZMyxKPRuHYeMaCJBh2gyGJPRUWaIdhGSiEApwxD1zFfVUPkbuaSL26z
rVhjIbV6ruejHk5/KCGcqewpylemen3i+2uWQGS88/rz3n+5eSaearYBT1V1e4vO
lvToBuB1b6vcfiIbqa4oS1dUNjNZ+gYHve0L0+zpv0gCJX3EI9DKhAZ9a21oca49
PkgcQ3K2nHXTlZlc9jwqK91CRkIXpJ8XuHITil+wv3EuAgOoCaX+V7tzXUzfGEbE
l7O/A2lgcdBzakr/2XL0MdMskfNkZ6z5084KtCUo7qAVdbql0m7LwdmZhwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLwexCTw7e97fKfE6LT1P7B1kTh2MB8GA1UdIwQY
MBaAFBNmuWCm8fBEOfCRhvns9TGpziZIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTJhNVlLYng4RVE1OEpHRy1lejFNYW5PSmtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni80NDAyYjAtMmVjYS00ODM2LWJmMjIt
YTk2NzE1OWY4ODdkLzEvdkI3RUpQRHQ3M3Q4cDhUb3RQVV9zSFdST0hZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni80NDAyYjAtMmVjYS00ODM2LWJmMjItYTk2NzE1OWY4ODdk
LzEvRTJhNVlLYng4RVE1OEpHRy1lejFNYW5PSmtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwpbcMA0G
CSqGSIb3DQEBCwUAA4IBAQDJJQBH0UtLkDqJyl7KDWVGNRUDWL5vqkMcBo8znzdK
fESxGzHWhvhLdOvfBfu3ZQP2bFcGsP7U448k49qqJCuV9EOx/2UVfIZ+5zjLOzDv
AetJd62bo2Yydy3JaUaiix1C/Y4hMIGv5nymj0VGXVQiQfekSY1jUeTK34eKGxek
1rjKvO7UuhIOnFv2pfUWdE4zej2CDewAy62ONfOhPuz0n4sKKiSWOJ4Md+P1rPHf
jtzMlFQWMTi6BXK+lOWTvYhOmAeZRhpMXDRPzU2JonToJ03RY89w11bPxufg3bk5
FmmxWOFX2x028Rb9j2UN1+cXQzfZ7XGFDRJUQo9RxQzu
-----END CERTIFICATE-----
Generated at Sun Aug 10 18:19:28 2025 by rpki-client