Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/dF6uuCIifQfhUD0TyBdOV3LZGPk.roa
File: dF6uuCIifQfhUD0TyBdOV3LZGPk.roa (raw, json)
Hash identifier: NBNM4QLzFqDChjC2tNuyVCLY8O/IcP3tokOM4fsmiRs=
Subject key identifier: 74:5E:AE:B8:22:22:7D:07:E1:50:3D:13:C8:17:4E:57:72:D9:18:F9
Certificate issuer: /CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Certificate serial: 01984BD51EE32664BBD4F8F8C4C336CD18B5
Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/dF6uuCIifQfhUD0TyBdOV3LZGPk.roa
Signing time: Sun 27 Jul 2025 12:21:54 +0000
ROA not before: Sun 27 Jul 2025 12:21:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51202
IP address blocks: 185.236.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:d5:1e:e3:26:64:bb:d4:f8:f8:c4:c3:36:cd:18:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Validity
Not Before: Jul 27 12:21:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=745eaeb822227d07e1503d13c8174e5772d918f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:80:07:db:08:bf:ee:ba:b9:10:d8:8c:cb:b9:
26:5e:df:a9:28:3b:7c:f1:f6:3a:7d:39:b0:50:e6:
c9:aa:e8:27:8f:b6:f0:ef:8d:80:4f:de:a3:d6:96:
ad:0b:aa:47:ad:87:8f:07:54:ae:42:49:ec:e1:73:
6c:71:b7:15:ff:d2:35:b9:13:d6:4e:ff:3c:9b:17:
63:20:34:44:43:26:16:a0:67:99:1a:ec:15:3a:b9:
a1:3f:a5:df:2b:d4:9e:38:a8:8e:6a:5f:d2:10:5c:
eb:ec:62:fe:8d:8b:b0:78:fa:3f:ab:82:bf:62:9e:
36:17:58:98:3d:30:4f:bf:e8:08:3d:6d:16:f1:e7:
52:2b:38:04:9b:24:0d:bc:e3:44:3c:c3:a3:c6:09:
f0:90:32:bb:95:cd:8e:fb:bc:ce:68:d5:58:f0:e8:
06:6d:20:d5:67:f9:5e:da:04:3b:06:0a:4b:54:ad:
18:ab:57:c7:84:21:20:99:f3:0b:64:3a:79:2c:20:
8f:1f:33:6d:1b:e4:d0:a6:a7:f8:2d:87:a0:dd:a3:
0f:5d:b8:93:b2:3e:f9:85:7b:0d:4b:69:e5:2a:98:
93:c9:51:93:65:9e:07:3e:4a:47:f1:21:dc:c6:bf:
63:75:2a:8c:40:5b:53:21:72:b7:c5:95:61:0e:e1:
ed:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:5E:AE:B8:22:22:7D:07:E1:50:3D:13:C8:17:4E:57:72:D9:18:F9
X509v3 Authority Key Identifier:
keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/dF6uuCIifQfhUD0TyBdOV3LZGPk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.236.11.0/24
Signature Algorithm: sha256WithRSAEncryption
19:19:97:aa:52:38:6e:87:37:ad:7a:30:b7:d2:9b:9f:7e:a4:
a5:d8:10:ad:7c:17:13:1f:31:ad:ee:79:71:a5:3d:a8:58:d9:
b4:ad:1b:f4:f5:4b:0d:8f:7b:72:26:33:c8:69:f7:bf:9a:15:
62:15:6a:ca:56:9e:bd:8a:b7:ba:5d:ee:d4:bf:3e:81:f4:25:
7c:b8:eb:66:b5:9f:ea:27:5a:c3:3b:45:6d:f2:a1:5e:61:cf:
a1:a6:ad:b0:a1:b5:60:cf:b2:eb:56:44:29:37:c0:89:19:f4:
be:a8:e3:99:eb:49:4e:45:0c:1d:88:73:99:17:3f:2c:5a:f2:
46:f3:13:ec:c4:aa:76:24:3d:ec:19:20:60:91:2a:b2:9e:4f:
05:ce:04:fd:aa:5d:31:d6:64:9f:f0:2a:21:b2:9c:8e:8a:b2:
7a:67:97:18:83:bc:7f:4c:36:4a:c5:85:8b:15:b9:00:3d:f9:
44:66:17:9e:d2:5e:68:bd:7f:bb:de:fa:0f:19:67:62:a8:ba:
04:a5:46:ae:c9:4f:74:53:bc:11:f9:b1:4f:13:25:dd:2f:fa:
e7:f3:6c:8b:cc:40:b7:95:8e:6e:2c:5a:c0:5c:57:3b:90:79:
50:12:0c:49:89:44:2b:c0:1f:8c:46:7c:92:a4:72:ad:b3:b9:
c9:8e:d9:7e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZhL1R7jJmS71Pj4xMM2zRi1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmOGFlYTJmMDI1ZjQ5NWJlYWNlZTdjZTVhODgyMDUxOWRk
YTEzNzAwHhcNMjUwNzI3MTIyMTU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NDVlYWViODIyMjI3ZDA3ZTE1MDNkMTNjODE3NGU1NzcyZDkxOGY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4AH2wi/7rq5ENiMy7kmXt+pKDt8
8fY6fTmwUObJqugnj7bw742AT96j1patC6pHrYePB1SuQkns4XNscbcV/9I1uRPW
Tv88mxdjIDREQyYWoGeZGuwVOrmhP6XfK9SeOKiOal/SEFzr7GL+jYuwePo/q4K/
Yp42F1iYPTBPv+gIPW0W8edSKzgEmyQNvONEPMOjxgnwkDK7lc2O+7zOaNVY8OgG
bSDVZ/le2gQ7BgpLVK0Yq1fHhCEgmfMLZDp5LCCPHzNtG+TQpqf4LYeg3aMPXbiT
sj75hXsNS2nlKpiTyVGTZZ4HPkpH8SHcxr9jdSqMQFtTIXK3xZVhDuHtawIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHRerrgiIn0H4VA9E8gXTldy2Rj5MB8GA1UdIwQY
MBaAFE+K6i8CX0lb6s7nzlqIIFGd2hNwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDRycUx3SmZTVnZxenVmT1dvZ2dVWjNhRTNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9lYjcwYTMtMTdlMS00ZDg2LThiOWUt
NjA4MDk1MmYwZTA0LzEvZEY2dXVDSWlmUWZoVUQwVHlCZE9WM0xaR1BrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS9lYjcwYTMtMTdlMS00ZDg2LThiOWUtNjA4MDk1MmYwZTA0
LzEvVDRycUx3SmZTVnZxenVmT1dvZ2dVWjNhRTNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuewLMA0G
CSqGSIb3DQEBCwUAA4IBAQAZGZeqUjhuhzetejC30puffqSl2BCtfBcTHzGt7nlx
pT2oWNm0rRv09UsNj3tyJjPIafe/mhViFWrKVp69ire6Xe7Uvz6B9CV8uOtmtZ/q
J1rDO0Vt8qFeYc+hpq2wobVgz7LrVkQpN8CJGfS+qOOZ60lORQwdiHOZFz8sWvJG
8xPsxKp2JD3sGSBgkSqynk8FzgT9ql0x1mSf8CohspyOirJ6Z5cYg7x/TDZKxYWL
FbkAPflEZhee0l5ovX+73voPGWdiqLoEpUauyU90U7wR+bFPEyXdL/rn82yLzEC3
lY5uLFrAXFc7kHlQEgxJiUQrwB+MRnySpHKts7nJjtl+
-----END CERTIFICATE-----
Generated at Wed Aug 6 00:36:21 2025 by rpki-client