Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/083e2f-0f05-4258-bf99-1ddad6f36af0/1/T6FOCyz_je-bCYNA14loRkLn-go.roa
File: T6FOCyz_je-bCYNA14loRkLn-go.roa (raw, json)
Hash identifier: RTnOVvTVNPz5Tb8FJf3ztpbxOQkBZj4f/NkLYwSkf+8=
Subject key identifier: 4F:A1:4E:0B:2C:FF:8D:EF:9B:09:83:40:D7:89:68:46:42:E7:FA:0A
Certificate issuer: /CN=391b36bf39d2bc7f078e0279991876709c85acd9
Certificate serial: 0197555893C9889FE4DE350281A2B52B76EA
Authority key identifier: 39:1B:36:BF:39:D2:BC:7F:07:8E:02:79:99:18:76:70:9C:85:AC:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORs2vznSvH8HjgJ5mRh2cJyFrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/083e2f-0f05-4258-bf99-1ddad6f36af0/1/T6FOCyz_je-bCYNA14loRkLn-go.roa
Signing time: Mon 09 Jun 2025 15:39:17 +0000
ROA not before: Mon 09 Jun 2025 15:39:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207775
IP address blocks: 185.137.97.0/24 maxlen: 24
2a12:7040::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/083e2f-0f05-4258-bf99-1ddad6f36af0/1/ORs2vznSvH8HjgJ5mRh2cJyFrNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/083e2f-0f05-4258-bf99-1ddad6f36af0/1/ORs2vznSvH8HjgJ5mRh2cJyFrNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ORs2vznSvH8HjgJ5mRh2cJyFrNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:55:58:93:c9:88:9f:e4:de:35:02:81:a2:b5:2b:76:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=391b36bf39d2bc7f078e0279991876709c85acd9
Validity
Not Before: Jun 9 15:39:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4fa14e0b2cff8def9b098340d789684642e7fa0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a9:d1:06:3c:4f:c5:f4:04:b6:39:9a:f5:42:
70:e9:9e:54:29:9a:6c:4f:fa:4a:89:d5:d1:4d:55:
12:70:af:1a:05:a7:f1:66:8c:46:a8:86:bf:56:9d:
7e:d8:78:3a:fd:b3:93:4b:7e:6e:28:aa:d0:00:0b:
3b:9f:f6:16:0c:a0:ef:fd:80:2a:5d:5a:87:f4:c4:
f7:0f:e5:7a:21:8c:85:c6:9e:76:50:bb:ef:ab:c6:
a7:14:10:bc:c8:32:fb:5b:93:62:d6:d0:8c:f5:4a:
34:c6:03:7a:61:4e:5c:66:d8:9c:01:f4:3b:bd:21:
20:17:2c:18:b7:65:b9:bc:7c:09:93:05:3e:bb:b0:
4d:a7:7d:62:be:eb:72:4e:c6:91:6f:6d:19:ce:b6:
8b:82:35:68:94:10:f0:2f:73:28:a2:41:c9:ba:81:
58:76:f4:0e:c3:4e:8a:50:1c:7f:b2:71:06:e5:9e:
2a:85:71:99:22:51:88:4a:e6:74:83:08:10:37:9c:
7b:67:87:25:a1:1f:84:ce:86:e6:f7:5b:51:a7:5b:
ee:f3:b2:3b:8d:19:63:1e:74:bc:6d:0a:fa:86:ae:
e8:7a:4e:0a:5b:02:9f:51:2d:88:a8:6b:04:72:82:
8e:81:01:8a:57:b4:f1:be:eb:4b:88:a2:f7:3b:0b:
e8:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:A1:4E:0B:2C:FF:8D:EF:9B:09:83:40:D7:89:68:46:42:E7:FA:0A
X509v3 Authority Key Identifier:
keyid:39:1B:36:BF:39:D2:BC:7F:07:8E:02:79:99:18:76:70:9C:85:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORs2vznSvH8HjgJ5mRh2cJyFrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/083e2f-0f05-4258-bf99-1ddad6f36af0/1/T6FOCyz_je-bCYNA14loRkLn-go.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/083e2f-0f05-4258-bf99-1ddad6f36af0/1/ORs2vznSvH8HjgJ5mRh2cJyFrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.137.97.0/24
IPv6:
2a12:7040::/32
Signature Algorithm: sha256WithRSAEncryption
21:12:bb:8c:7a:2c:5f:db:c0:5d:4b:e0:a7:bc:99:9e:77:d0:
ff:e9:b2:b0:83:17:4f:40:38:9f:8e:41:ed:ad:78:4d:61:c9:
72:8c:01:18:4a:6a:27:c3:c0:76:6f:17:8d:81:fc:38:70:e5:
fc:5e:0c:a7:e8:4e:cc:39:d4:62:b4:15:59:6c:42:ea:47:75:
f2:ff:99:d6:d1:1f:e8:42:be:85:8b:07:00:4e:55:06:05:d1:
6e:39:9e:ee:f8:2a:21:e7:68:ff:77:bf:9b:07:28:d7:17:9a:
d6:6f:eb:7f:86:00:b9:80:b0:57:09:f8:67:81:53:9e:0c:fc:
49:20:92:3d:d4:7b:ba:5a:87:af:c6:49:42:c9:be:f8:f3:ff:
12:6d:0b:b6:5d:c6:05:0e:0c:1f:38:15:72:f2:dd:23:c9:8c:
9f:0d:ea:5f:e5:39:e9:2d:f0:b7:d6:49:ad:28:13:48:82:12:
a9:ca:15:ae:d9:71:c8:ba:50:1c:13:24:df:a1:22:73:4c:00:
27:43:97:5f:64:41:a9:db:fc:2b:13:42:48:0c:c0:5d:07:9b:
13:6a:c5:d5:0e:4c:50:a4:81:35:74:59:aa:4b:8d:17:32:37:
dc:e7:23:fe:ed:01:9c:9e:ce:af:6a:4b:e9:8f:67:25:34:df:
e4:f2:06:d0
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZdVWJPJiJ/k3jUCgaK1K3bqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5MWIzNmJmMzlkMmJjN2YwNzhlMDI3OTk5MTg3NjcwOWM4
NWFjZDkwHhcNMjUwNjA5MTUzOTE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZmExNGUwYjJjZmY4ZGVmOWIwOTgzNDBkNzg5Njg0NjQyZTdmYTBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqnRBjxPxfQEtjma9UJw6Z5UKZps
T/pKidXRTVUScK8aBafxZoxGqIa/Vp1+2Hg6/bOTS35uKKrQAAs7n/YWDKDv/YAq
XVqH9MT3D+V6IYyFxp52ULvvq8anFBC8yDL7W5Ni1tCM9Uo0xgN6YU5cZticAfQ7
vSEgFywYt2W5vHwJkwU+u7BNp31ivutyTsaRb20ZzraLgjVolBDwL3MookHJuoFY
dvQOw06KUBx/snEG5Z4qhXGZIlGISuZ0gwgQN5x7Z4cloR+Ezobm91tRp1vu87I7
jRljHnS8bQr6hq7oek4KWwKfUS2IqGsEcoKOgQGKV7TxvutLiKL3OwvoRwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFE+hTgss/43vmwmDQNeJaEZC5/oKMB8GA1UdIwQY
MBaAFDkbNr850rx/B44CeZkYdnCchazZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1JzMnZ6blN2SDhIamdKNW1SaDJjSnlGck5rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8wODNlMmYtMGYwNS00MjU4LWJmOTkt
MWRkYWQ2ZjM2YWYwLzEvVDZGT0N5el9qZS1iQ1lOQTE0bG9Sa0xuLWdvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8wODNlMmYtMGYwNS00MjU4LWJmOTktMWRkYWQ2ZjM2YWYw
LzEvT1JzMnZ6blN2SDhIamdKNW1SaDJjSnlGck5rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuYlhMA0E
AgACMAcDBQAqEnBAMA0GCSqGSIb3DQEBCwUAA4IBAQAhEruMeixf28BdS+CnvJme
d9D/6bKwgxdPQDifjkHtrXhNYclyjAEYSmonw8B2bxeNgfw4cOX8Xgyn6E7MOdRi
tBVZbELqR3Xy/5nW0R/oQr6FiwcATlUGBdFuOZ7u+Coh52j/d7+bByjXF5rWb+t/
hgC5gLBXCfhngVOeDPxJIJI91Hu6WoevxklCyb748/8SbQu2XcYFDgwfOBVy8t0j
yYyfDepf5TnpLfC31kmtKBNIghKpyhWu2XHIulAcEyTfoSJzTAAnQ5dfZEGp2/wr
E0JIDMBdB5sTasXVDkxQpIE1dFmqS40XMjfc5yP+7QGcns6vakvpj2clNN/k8gbQ
-----END CERTIFICATE-----
Generated at Sat Jun 14 22:52:15 2025 by rpki-client