Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/0RiNeaxfc3ixxqgMq3kjExRDa_8.roa
File: 0RiNeaxfc3ixxqgMq3kjExRDa_8.roa (raw, json)
Hash identifier: xbaiXGjy7fJ+ZwX/PzT0jaVewoPns9Qve+McDOCbcPs=
Subject key identifier: D1:18:8D:79:AC:5F:73:78:B1:C6:A8:0C:AB:79:23:13:14:43:6B:FF
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 019855103FDEF3CE382502A53F790E1C4B22
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/0RiNeaxfc3ixxqgMq3kjExRDa_8.roa
Signing time: Tue 29 Jul 2025 07:23:05 +0000
ROA not before: Tue 29 Jul 2025 07:23:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208161
IP address blocks: 81.12.52.0/23 maxlen: 24
87.107.10.0/23 maxlen: 24
87.107.12.0/24 maxlen: 24
87.107.13.0/24 maxlen: 24
87.107.54.0/23 maxlen: 24
87.107.104.0/23 maxlen: 24
87.107.146.0/23 maxlen: 24
87.107.154.0/24 maxlen: 24
87.107.155.0/24 maxlen: 24
87.107.164.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:55:10:3f:de:f3:ce:38:25:02:a5:3f:79:0e:1c:4b:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Jul 29 07:23:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d1188d79ac5f7378b1c6a80cab79231314436bff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1c:c1:b0:c9:41:20:8a:cb:03:7c:8b:fd:83:
f7:fb:b9:fd:cf:c3:81:04:fa:7b:4b:f4:0a:2c:61:
6b:b2:71:b7:47:f0:46:00:1d:24:46:d9:a6:1b:df:
76:4e:5e:ca:6e:38:ce:4d:b0:eb:f0:10:45:8b:c2:
2e:0e:07:e8:36:80:09:f3:98:bb:53:3f:04:f5:d3:
5d:da:ba:13:b3:bc:f5:80:3a:96:ac:c0:d1:85:26:
1d:5d:4f:f1:8e:b4:2e:7c:b4:b4:c4:05:6a:f4:11:
77:59:0c:e2:aa:9b:dc:1f:d5:66:fb:11:6b:d4:ca:
43:d6:25:1c:07:99:72:de:8e:98:0d:df:e5:70:59:
60:ef:44:c9:ab:0e:7e:af:35:06:68:2e:ca:8b:69:
c2:22:48:4c:cd:95:d3:ff:cb:b3:5b:f0:16:44:a7:
55:4b:3a:55:20:4e:bc:c0:4b:ad:b0:61:d7:1d:43:
8d:01:ef:f3:54:e9:5c:b7:6c:d2:9a:74:e3:49:86:
dc:83:6f:a0:44:9d:ad:89:b1:0d:21:6a:22:37:18:
39:c4:68:c4:36:07:14:1a:91:df:e4:5f:a7:45:75:
c5:92:42:23:a1:fa:40:c3:85:52:03:58:67:47:4c:
6d:3c:86:c9:b0:47:d5:54:b7:ce:82:e1:66:d5:72:
ed:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:18:8D:79:AC:5F:73:78:B1:C6:A8:0C:AB:79:23:13:14:43:6B:FF
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/0RiNeaxfc3ixxqgMq3kjExRDa_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.12.52.0/23
87.107.10.0-87.107.13.255
87.107.54.0/23
87.107.104.0/23
87.107.146.0/23
87.107.154.0/23
87.107.164.0/23
Signature Algorithm: sha256WithRSAEncryption
82:33:52:9b:c9:d9:2a:da:6a:99:eb:79:e0:62:52:05:3b:57:
d4:6f:59:7c:a9:e4:ac:3e:26:14:d7:f0:58:bd:e4:f5:91:c3:
69:39:ae:5f:02:fd:1b:48:59:ae:b5:cc:a4:ed:f7:3b:7c:34:
f2:0d:1b:0a:ef:0b:11:c7:7a:e8:6c:83:5a:23:12:e1:a5:4c:
d5:08:5d:d9:9c:72:8a:84:d9:d1:2a:7c:12:48:8f:75:11:f0:
88:1f:a3:3b:ab:93:be:43:f0:0e:a7:93:15:e5:a2:1c:9a:49:
3a:76:bc:fa:98:ca:32:57:da:3a:df:34:0c:c0:f7:49:6e:87:
b5:4b:ff:2b:19:91:2b:d3:a2:02:0a:e1:4a:01:d0:6f:1a:44:
6f:df:65:7f:ad:43:7b:20:68:da:29:7d:27:65:37:95:31:3b:
e3:28:c7:75:20:64:f1:3c:d0:46:96:ed:99:26:a5:cf:d0:26:
2c:26:81:c7:2d:61:17:2d:96:03:e4:ea:8c:24:7b:fe:b4:f1:
f3:7c:b0:3d:c9:36:32:62:d9:52:10:b2:4e:ad:d1:71:e6:9c:
a1:42:a4:f1:ec:72:d7:5f:5e:98:45:99:eb:fb:d4:a8:69:37:
72:95:ef:17:da:31:96:f5:c2:bc:39:f3:3e:68:c4:39:3c:40:
e7:ae:5a:a2
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgISAZhVED/e8844JQKlP3kOHEsiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwNzc1ZDk0NzFiODVkOTYzZmVmNmQyODM1OTBlMmQ5NDJk
ZDVjMjEwHhcNMjUwNzI5MDcyMzA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMTE4OGQ3OWFjNWY3Mzc4YjFjNmE4MGNhYjc5MjMxMzE0NDM2YmZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRzBsMlBIIrLA3yL/YP3+7n9z8OB
BPp7S/QKLGFrsnG3R/BGAB0kRtmmG992Tl7KbjjOTbDr8BBFi8IuDgfoNoAJ85i7
Uz8E9dNd2roTs7z1gDqWrMDRhSYdXU/xjrQufLS0xAVq9BF3WQziqpvcH9Vm+xFr
1MpD1iUcB5ly3o6YDd/lcFlg70TJqw5+rzUGaC7Ki2nCIkhMzZXT/8uzW/AWRKdV
SzpVIE68wEutsGHXHUONAe/zVOlct2zSmnTjSYbcg2+gRJ2tibENIWoiNxg5xGjE
NgcUGpHf5F+nRXXFkkIjofpAw4VSA1hnR0xtPIbJsEfVVLfOguFm1XLtMQIDAQAB
o4ICNTCCAjEwHQYDVR0OBBYEFNEYjXmsX3N4scaoDKt5IxMUQ2v/MB8GA1UdIwQY
MBaAFAB3XZRxuF2WP+9tKDWQ4tlC3VwhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQt
NzZiMzNlNGNlODIxLzEvMFJpTmVheGZjM2l4eHFnTXEza2pFeFJEYV84LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQtNzZiMzNlNGNlODIx
LzEvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEsGCCsGAQUFBwEHAQH/BDwwOjA4BAIAATAyAwQBUQw0MAwD
BAFXawoDBAFXawwDBAFXazYDBAFXa2gDBAFXa5IDBAFXa5oDBAFXa6QwDQYJKoZI
hvcNAQELBQADggEBAIIzUpvJ2SraapnreeBiUgU7V9RvWXyp5Kw+JhTX8Fi95PWR
w2k5rl8C/RtIWa61zKTt9zt8NPINGwrvCxHHeuhsg1ojEuGlTNUIXdmccoqE2dEq
fBJIj3UR8Igfozurk75D8A6nkxXlohyaSTp2vPqYyjJX2jrfNAzA90luh7VL/ysZ
kSvTogIK4UoB0G8aRG/fZX+tQ3sgaNopfSdlN5UxO+Mox3UgZPE80EaW7Zkmpc/Q
JiwmgcctYRctlgPk6owke/608fN8sD3JNjJi2VIQsk6t0XHmnKFCpPHsctdfXphF
mev71KhpN3KV7xfaMZb1wrw58z5oxDk8QOeuWqI=
-----END CERTIFICATE-----
Generated at Mon Aug 4 15:03:02 2025 by rpki-client