Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sW0cpYTI7ZeeT0az2xvP7SM0Rrw.roa
File: sW0cpYTI7ZeeT0az2xvP7SM0Rrw.roa (raw, json)
Hash identifier: fWc2cz4ViJ+JXgB16Ug2hKKtd3roe3eKRduCdlTfpi8=
Subject key identifier: B1:6D:1C:A5:84:C8:ED:97:9E:4F:46:B3:DB:1B:CF:ED:23:34:46:BC
Certificate issuer: /CN=b05d28d16626bc5dcabf2e915435782b96e14071
Certificate serial: 01987E6732C14A829056B701E4B578FFFB1E
Authority key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sW0cpYTI7ZeeT0az2xvP7SM0Rrw.roa
Signing time: Wed 06 Aug 2025 08:02:29 +0000
ROA not before: Wed 06 Aug 2025 08:02:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202553
IP address blocks: 147.181.4.0/22 maxlen: 24
147.181.8.0/22 maxlen: 24
147.181.12.0/22 maxlen: 24
147.181.16.0/23 maxlen: 24
147.181.32.0/22 maxlen: 24
147.181.36.0/22 maxlen: 24
147.181.44.0/22 maxlen: 24
147.181.48.0/22 maxlen: 22
147.181.52.0/22 maxlen: 22
2a04:9a00:1001::/48 maxlen: 48
2a04:9a00:1002::/48 maxlen: 48
2a04:9a00:1003::/48 maxlen: 48
2a04:9a00:1005::/48 maxlen: 48
2a04:9a00:1006::/48 maxlen: 48
2a04:9a00:1007::/48 maxlen: 48
2a04:9a00:100e::/48 maxlen: 48
2a04:9a05:1000::/36 maxlen: 36
2a04:9a05:1000::/47 maxlen: 47
2a04:9a05:1010::/44 maxlen: 47
2a04:9a05:1020::/44 maxlen: 47
2a04:9a05:1030::/44 maxlen: 47
2a04:9a05:1040::/44 maxlen: 47
2a04:9a05:1050::/44 maxlen: 47
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:67:32:c1:4a:82:90:56:b7:01:e4:b5:78:ff:fb:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b05d28d16626bc5dcabf2e915435782b96e14071
Validity
Not Before: Aug 6 08:02:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b16d1ca584c8ed979e4f46b3db1bcfed233446bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b0:9d:f7:ad:67:c9:78:5f:a0:da:e8:24:61:
b9:79:54:c0:c8:43:11:38:3a:b6:d4:8f:e7:34:6a:
26:27:77:16:f4:c2:09:f7:29:b4:47:b4:7b:c9:59:
34:16:58:bf:56:2b:71:d2:fc:4f:61:75:84:05:0d:
4f:85:33:1c:89:b9:40:29:40:ad:bb:5c:c8:2e:36:
cf:bf:f3:ae:a9:e3:3f:8f:70:ca:85:b0:18:c3:4a:
5c:2c:09:94:90:32:ca:18:4a:1f:b2:b8:35:36:b8:
d6:8c:a2:b4:5c:d4:17:35:8d:33:92:05:31:46:a0:
3a:5a:2a:84:cd:b9:d1:19:d1:ee:27:1e:76:78:17:
a0:68:b4:32:85:7f:c4:b2:b4:cd:fa:ac:28:f7:0f:
61:ad:4a:f2:ff:90:9b:5f:b2:66:d3:5d:0c:0c:08:
70:b2:69:92:c4:b0:bd:d0:2a:c3:10:fd:57:cd:96:
76:b7:b1:72:ce:81:cf:12:37:f0:c7:7b:22:98:37:
35:56:5b:aa:68:5e:e8:1e:37:6e:05:f1:05:eb:5f:
58:91:8f:d4:be:b0:98:e8:20:ff:6b:19:7d:68:9b:
6e:18:72:d1:c6:9f:2d:80:75:73:3e:61:00:12:1c:
ab:3b:a0:85:1b:f7:b7:b9:5a:2c:e5:ad:c4:72:b5:
fb:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:6D:1C:A5:84:C8:ED:97:9E:4F:46:B3:DB:1B:CF:ED:23:34:46:BC
X509v3 Authority Key Identifier:
keyid:B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sW0cpYTI7ZeeT0az2xvP7SM0Rrw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.181.4.0-147.181.17.255
147.181.32.0/21
147.181.44.0-147.181.55.255
IPv6:
2a04:9a00:1001::-2a04:9a00:1003:ffff:ffff:ffff:ffff:ffff
2a04:9a00:1005::-2a04:9a00:1007:ffff:ffff:ffff:ffff:ffff
2a04:9a00:100e::/48
2a04:9a05:1000::/36
Signature Algorithm: sha256WithRSAEncryption
4d:da:a7:ab:7d:14:36:0d:fe:a7:ac:51:e9:a1:88:ec:c2:ee:
23:ee:13:bc:93:89:eb:b3:8f:d3:a8:9a:19:9a:d8:64:2c:e7:
d0:44:0c:8a:d7:f9:30:a4:57:84:6a:cd:3e:87:eb:16:8f:e0:
33:84:b9:4f:78:94:93:dd:44:3b:eb:12:c4:af:94:dd:a4:4d:
4e:d6:ad:07:2d:ed:74:42:a9:77:b0:12:9f:d6:0d:c4:30:d9:
8e:11:64:57:f8:ab:21:50:b0:9e:97:50:2e:a4:45:73:f9:20:
fc:11:14:22:6e:9a:96:b7:95:9a:05:11:ef:03:bf:2c:5e:68:
26:a2:d9:22:07:28:56:f2:53:55:34:7b:ed:ce:85:9f:8f:5d:
ae:38:7a:95:7c:1e:d1:dd:0a:6d:4f:e0:f3:8b:8b:13:83:62:
a3:db:f8:98:ec:ec:2c:01:eb:b9:29:75:5a:c2:b4:5c:bd:87:
21:98:26:87:73:a0:0c:5d:39:68:e7:df:da:5a:e5:66:2e:0c:
48:8c:44:e5:23:8c:00:b0:4e:ba:b4:fd:5a:46:88:38:7b:a0:
2d:60:ea:c3:4e:47:45:9f:f6:9a:af:e2:a3:1a:53:70:86:16:
c4:02:aa:f5:bc:a6:e9:2f:6c:da:bb:c6:9c:de:97:43:74:4b:
0d:a5:6e:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 15:09:07 2025 by rpki-client