Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/IBgfrxWhXBZOI-DlQ41i_RVuVvw.roa
File: IBgfrxWhXBZOI-DlQ41i_RVuVvw.roa (raw, json)
Hash identifier: zgZQgbjuVu+YpGT3aVoq8bqG5hVZWMTD8bGc2Eaibz4=
Subject key identifier: 20:18:1F:AF:15:A1:5C:16:4E:23:E0:E5:43:8D:62:FD:15:6E:56:FC
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01986BC72637900CC1974E19D3F3945B6208
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/IBgfrxWhXBZOI-DlQ41i_RVuVvw.roa
Signing time: Sat 02 Aug 2025 17:14:30 +0000
ROA not before: Sat 02 Aug 2025 17:14:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 398704
IP address blocks: 217.60.0.0/21 maxlen: 24
217.60.188.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 00:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:6b:c7:26:37:90:0c:c1:97:4e:19:d3:f3:94:5b:62:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 2 17:14:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=20181faf15a15c164e23e0e5438d62fd156e56fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:92:f4:1d:45:d3:9e:dc:8c:b2:3a:be:4e:d9:
5e:0e:d4:e4:0c:2b:06:6d:93:14:2f:82:35:4d:a2:
17:12:25:74:ea:3d:93:3b:e8:e4:0a:c4:34:95:ea:
28:db:b2:fc:48:d7:cb:b0:65:b0:df:d0:8f:e8:78:
fa:50:b3:4a:0c:b9:50:8c:7a:2f:00:bf:af:d4:6a:
2b:28:72:8b:d3:19:76:20:1a:06:9f:5b:33:6d:83:
0f:bd:fd:f0:91:57:f8:14:6f:02:af:69:99:bb:39:
58:2d:41:cd:07:bc:f4:ba:be:d4:59:00:7a:5a:86:
f4:78:9d:e7:04:3e:6d:61:97:8f:99:54:67:27:66:
18:b6:58:27:08:bb:ea:1f:db:7c:75:bb:99:2c:74:
e2:6e:17:ab:24:cf:f7:5d:9c:00:a5:dc:fe:45:4b:
7b:9b:60:91:3c:45:26:6a:93:53:3e:12:f4:0c:06:
8a:86:b9:2e:f0:b0:52:c5:38:a3:51:1d:2b:9a:fb:
4c:22:f6:0e:fc:30:22:3e:f5:8c:ed:ff:ea:59:dd:
af:b7:f6:a0:7d:bd:54:d4:13:b0:ba:12:f3:f4:79:
53:69:da:3f:32:da:db:30:fa:30:7e:8f:05:5f:ac:
23:73:8d:c9:b9:09:1f:64:5d:73:e4:8b:cd:7b:ef:
7b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:18:1F:AF:15:A1:5C:16:4E:23:E0:E5:43:8D:62:FD:15:6E:56:FC
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/IBgfrxWhXBZOI-DlQ41i_RVuVvw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.60.0.0/21
217.60.188.0/22
Signature Algorithm: sha256WithRSAEncryption
89:a7:14:e1:cd:55:a8:4c:2f:0a:15:1c:12:54:2c:25:6b:3c:
f4:d6:0e:9f:80:80:13:c9:86:c0:92:cc:47:14:3d:a7:79:a1:
f2:9a:22:72:ec:f6:56:e0:59:6b:93:cc:5e:a0:35:61:1f:9c:
b0:e7:53:7c:e3:fc:6f:6d:73:f7:7c:b8:bb:72:41:97:94:35:
02:48:c3:ea:82:fd:05:37:c1:fc:5f:29:3a:8f:10:22:08:de:
36:bf:2b:ce:55:89:7a:6c:ec:4c:48:9e:dd:74:a7:08:cd:ef:
39:ae:04:21:2c:e9:61:12:c8:2c:01:be:de:d2:06:2f:92:19:
5e:d3:62:0a:3d:86:03:2e:c0:67:e9:1b:4e:c8:3a:bc:9a:23:
d8:16:8b:09:0e:60:e8:0f:62:27:8f:c0:16:2e:53:60:3b:41:
9e:9b:bc:1e:3a:99:a7:d9:ad:d0:18:e7:79:34:0f:18:6c:a8:
4a:51:78:ce:b2:6f:da:86:5a:c1:47:5f:c6:c2:20:00:ed:3c:
2e:f4:5c:38:3d:c6:dd:71:d8:b4:82:c2:45:91:d2:17:03:4f:
a7:0a:a5:24:88:fd:f4:59:a7:4c:8b:6d:53:da:89:4c:38:36:
e1:d8:84:39:a0:a6:17:ba:d9:a2:23:b9:9b:82:7f:5c:47:4a:
07:28:c9:9d
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZhrxyY3kAzBl04Z0/OUW2IIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwODAyMTcxNDMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMDE4MWZhZjE1YTE1YzE2NGUyM2UwZTU0MzhkNjJmZDE1NmU1NmZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ZL0HUXTntyMsjq+TtleDtTkDCsG
bZMUL4I1TaIXEiV06j2TO+jkCsQ0leoo27L8SNfLsGWw39CP6Hj6ULNKDLlQjHov
AL+v1GorKHKL0xl2IBoGn1szbYMPvf3wkVf4FG8Cr2mZuzlYLUHNB7z0ur7UWQB6
Wob0eJ3nBD5tYZePmVRnJ2YYtlgnCLvqH9t8dbuZLHTibherJM/3XZwApdz+RUt7
m2CRPEUmapNTPhL0DAaKhrku8LBSxTijUR0rmvtMIvYO/DAiPvWM7f/qWd2vt/ag
fb1U1BOwuhLz9HlTado/MtrbMPowfo8FX6wjc43JuQkfZF1z5IvNe+97eQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFCAYH68VoVwWTiPg5UONYv0Vblb8MB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvSUJnZnJ4V2hYQlpPSS1EbFE0MWlfUlZ1VnZ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQD2TwAAwQC
2Ty8MA0GCSqGSIb3DQEBCwUAA4IBAQCJpxThzVWoTC8KFRwSVCwlazz01g6fgIAT
yYbAksxHFD2neaHymiJy7PZW4Flrk8xeoDVhH5yw51N84/xvbXP3fLi7ckGXlDUC
SMPqgv0FN8H8Xyk6jxAiCN42vyvOVYl6bOxMSJ7ddKcIze85rgQhLOlhEsgsAb7e
0gYvkhle02IKPYYDLsBn6RtOyDq8miPYFosJDmDoD2Inj8AWLlNgO0Gem7weOpmn
2a3QGOd5NA8YbKhKUXjOsm/ahlrBR1/GwiAA7Twu9Fw4Pcbdcdi0gsJFkdIXA0+n
CqUkiP30WadMi21T2olMODbh2IQ5oKYXutmiI7mbgn9cR0oHKMmd
-----END CERTIFICATE-----
Generated at Mon Aug 4 08:32:31 2025 by rpki-client