Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/KoO3sM7qwS5mA20IsKbDhxcTB1U.roa
File: KoO3sM7qwS5mA20IsKbDhxcTB1U.roa (raw, json)
Hash identifier: tjrHSpdKeLdJHbMSWc5OzlqZez0K6Pu4HPg+UKvTrTM=
Subject key identifier: 2A:83:B7:B0:CE:EA:C1:2E:66:03:6D:08:B0:A6:C3:87:17:13:07:55
Certificate issuer: /CN=d3600cbafd26fee5064fc89f301dfc8e3c1d3ca5
Certificate serial: 019879305BA08B01FFCDF53C277F5EBF3285
Authority key identifier: D3:60:0C:BA:FD:26:FE:E5:06:4F:C8:9F:30:1D:FC:8E:3C:1D:3C:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/02AMuv0m_uUGT8ifMB38jjwdPKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/KoO3sM7qwS5mA20IsKbDhxcTB1U.roa
Signing time: Tue 05 Aug 2025 07:44:29 +0000
ROA not before: Tue 05 Aug 2025 07:44:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208346
IP address blocks: 94.154.132.0/23 maxlen: 24
94.154.132.0/24 maxlen: 24
94.154.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/02AMuv0m_uUGT8ifMB38jjwdPKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/02AMuv0m_uUGT8ifMB38jjwdPKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/02AMuv0m_uUGT8ifMB38jjwdPKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:30:5b:a0:8b:01:ff:cd:f5:3c:27:7f:5e:bf:32:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3600cbafd26fee5064fc89f301dfc8e3c1d3ca5
Validity
Not Before: Aug 5 07:44:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2a83b7b0ceeac12e66036d08b0a6c38717130755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:59:4c:4a:df:8d:35:ee:5d:48:a5:ca:fe:39:
74:94:92:13:f1:24:a4:a9:8c:4c:85:46:2a:20:fe:
53:1d:ad:b7:3a:9d:a6:73:94:73:a6:ef:ee:7f:54:
2d:a7:f7:ae:04:a1:dd:44:b0:77:84:3c:22:fc:ef:
94:a3:ef:de:96:43:3b:8c:1a:f8:c6:d7:e6:f0:82:
47:a7:2b:67:09:ad:c4:7b:34:97:3c:65:96:bf:00:
b3:73:5d:83:7c:45:61:de:9b:06:4f:57:1b:52:ae:
b9:10:24:03:54:28:cc:02:5f:f4:d1:1b:69:56:3f:
bb:8f:68:c4:e0:3c:cc:f8:26:38:62:e2:ec:db:77:
be:ae:e2:62:45:32:69:36:07:b6:f4:bf:99:fb:69:
a0:85:ce:c5:88:94:1f:21:45:05:ec:66:17:38:a8:
13:4c:aa:e3:36:8d:d8:cd:aa:31:3c:a8:cb:80:20:
c1:d4:5a:6f:df:78:3b:2f:08:a0:92:4e:69:aa:5b:
76:d9:76:28:ae:ea:88:8e:93:c9:b7:2c:41:37:da:
8f:59:b4:d2:78:6e:e3:f8:79:74:fe:dd:53:1a:82:
06:80:bd:8e:cb:02:f0:69:68:65:38:cb:68:0e:27:
aa:23:49:1d:07:94:7a:37:9c:61:60:79:61:8c:78:
b2:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:83:B7:B0:CE:EA:C1:2E:66:03:6D:08:B0:A6:C3:87:17:13:07:55
X509v3 Authority Key Identifier:
keyid:D3:60:0C:BA:FD:26:FE:E5:06:4F:C8:9F:30:1D:FC:8E:3C:1D:3C:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02AMuv0m_uUGT8ifMB38jjwdPKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/KoO3sM7qwS5mA20IsKbDhxcTB1U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/02AMuv0m_uUGT8ifMB38jjwdPKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.132.0/23
Signature Algorithm: sha256WithRSAEncryption
79:f6:c9:cb:00:66:84:08:23:21:34:08:00:0b:80:fb:35:fa:
c4:17:88:4e:48:2e:1c:1f:e6:d3:ed:90:ea:bb:a7:fa:f1:e0:
c0:b2:8e:eb:a6:61:de:11:e6:da:39:72:64:b1:96:99:d7:db:
7e:fe:d2:98:3e:f5:c6:32:8d:38:29:6a:f5:49:4a:4e:5f:b4:
3c:e0:a0:ec:3b:5b:77:da:0f:ca:ee:39:08:cc:f4:17:c7:5f:
2f:c0:1b:65:a8:6e:b4:3d:8a:8f:4f:69:c4:bb:42:89:ef:a7:
72:14:57:5d:ef:5c:e8:93:e2:22:b8:69:6b:3d:92:22:78:4c:
9f:b6:4d:81:af:b9:ea:2b:3a:6a:9a:8a:8a:09:f2:56:8e:5c:
65:6c:57:8c:0f:17:47:bf:c7:f2:1b:51:3c:ff:a7:b3:16:c7:
03:c6:ca:71:a3:fa:50:30:fd:11:6f:e6:c9:59:4c:68:02:d1:
92:75:94:1f:9b:f5:ef:05:48:db:34:80:b7:94:f9:46:e4:26:
e6:c8:64:3a:94:f1:3a:7e:33:1a:17:d7:0c:17:02:29:89:e6:
f4:05:29:0c:bd:09:a4:e7:14:89:1e:6e:da:5d:ce:72:81:65:
0d:b3:68:11:74:ac:b4:30:e3:ef:cb:75:a1:6c:79:9d:27:0b:
ae:cb:43:8b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZh5MFugiwH/zfU8J39evzKFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzNjAwY2JhZmQyNmZlZTUwNjRmYzg5ZjMwMWRmYzhlM2Mx
ZDNjYTUwHhcNMjUwODA1MDc0NDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYTgzYjdiMGNlZWFjMTJlNjYwMzZkMDhiMGE2YzM4NzE3MTMwNzU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjllMSt+NNe5dSKXK/jl0lJIT8SSk
qYxMhUYqIP5THa23Op2mc5Rzpu/uf1Qtp/euBKHdRLB3hDwi/O+Uo+/elkM7jBr4
xtfm8IJHpytnCa3EezSXPGWWvwCzc12DfEVh3psGT1cbUq65ECQDVCjMAl/00Rtp
Vj+7j2jE4DzM+CY4YuLs23e+ruJiRTJpNge29L+Z+2mghc7FiJQfIUUF7GYXOKgT
TKrjNo3YzaoxPKjLgCDB1Fpv33g7Lwigkk5pqlt22XYoruqIjpPJtyxBN9qPWbTS
eG7j+Hl0/t1TGoIGgL2OywLwaWhlOMtoDieqI0kdB5R6N5xhYHlhjHiyNQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCqDt7DO6sEuZgNtCLCmw4cXEwdVMB8GA1UdIwQY
MBaAFNNgDLr9Jv7lBk/InzAd/I48HTylMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDJBTXV2MG1fdVVHVDhpZk1CMzhqandkUEtVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9iNzA2NTgtZTFkYy00OTQ0LWEwNmIt
MWM2ODBhZGY3YTI2LzEvS29PM3NNN3F3UzVtQTIwSXNLYkRoeGNUQjFVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC9iNzA2NTgtZTFkYy00OTQ0LWEwNmItMWM2ODBhZGY3YTI2
LzEvMDJBTXV2MG1fdVVHVDhpZk1CMzhqandkUEtVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBXpqEMA0G
CSqGSIb3DQEBCwUAA4IBAQB59snLAGaECCMhNAgAC4D7NfrEF4hOSC4cH+bT7ZDq
u6f68eDAso7rpmHeEebaOXJksZaZ19t+/tKYPvXGMo04KWr1SUpOX7Q84KDsO1t3
2g/K7jkIzPQXx18vwBtlqG60PYqPT2nEu0KJ76dyFFdd71zok+IiuGlrPZIieEyf
tk2Br7nqKzpqmoqKCfJWjlxlbFeMDxdHv8fyG1E8/6ezFscDxspxo/pQMP0Rb+bJ
WUxoAtGSdZQfm/XvBUjbNIC3lPlG5CbmyGQ6lPE6fjMaF9cMFwIpieb0BSkMvQmk
5xSJHm7aXc5ygWUNs2gRdKy0MOPvy3WhbHmdJwuuy0OL
-----END CERTIFICATE-----
Generated at Sat Aug 9 22:36:40 2025 by rpki-client