Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/rQGBYURhHxIS2gUjxgxhWlf8G-M.roa
File: rQGBYURhHxIS2gUjxgxhWlf8G-M.roa (raw, json)
Hash identifier: d90EC3mny7b2jkfAqHp6/1/Pw4XbnGm5shftI7zAdH4=
Subject key identifier: AD:01:81:61:44:61:1F:12:12:DA:05:23:C6:0C:61:5A:57:FC:1B:E3
Certificate issuer: /CN=c1c20fbc48fa59a7d8dea57908f350a1b97459df
Certificate serial: 01975E2207EFA2EE78C791E4CDB9CAB2378B
Authority key identifier: C1:C2:0F:BC:48:FA:59:A7:D8:DE:A5:79:08:F3:50:A1:B9:74:59:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wcIPvEj6WafY3qV5CPNQobl0Wd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/rQGBYURhHxIS2gUjxgxhWlf8G-M.roa
Signing time: Wed 11 Jun 2025 08:36:17 +0000
ROA not before: Wed 11 Jun 2025 08:36:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 33930
IP address blocks: 45.15.212.0/22 maxlen: 22
80.75.152.0/21 maxlen: 21
91.223.207.0/24 maxlen: 24
93.187.40.0/21 maxlen: 21
185.56.204.0/22 maxlen: 22
194.6.240.0/24 maxlen: 24
2a02:668::/36 maxlen: 36
2a02:668:9000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/wcIPvEj6WafY3qV5CPNQobl0Wd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/wcIPvEj6WafY3qV5CPNQobl0Wd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wcIPvEj6WafY3qV5CPNQobl0Wd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 02:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5e:22:07:ef:a2:ee:78:c7:91:e4:cd:b9:ca:b2:37:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c20fbc48fa59a7d8dea57908f350a1b97459df
Validity
Not Before: Jun 11 08:36:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ad01816144611f1212da0523c60c615a57fc1be3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d5:c5:6e:db:b8:61:b1:7c:4f:a7:e2:15:14:
5a:3c:b5:22:20:86:f4:41:49:04:a7:2b:15:1d:1b:
71:53:f2:20:62:94:e2:11:a3:f6:ae:2f:79:3c:ae:
70:35:e5:a6:e1:fb:fe:f6:ad:5a:e6:b3:7c:8b:bc:
70:c8:50:4a:a6:e2:c0:67:5a:f6:65:7e:c4:a4:a5:
9e:64:79:2d:ae:6a:54:18:db:59:30:d5:bf:bf:de:
87:09:e0:50:6e:6c:b4:24:72:c9:66:89:3c:b8:84:
73:e7:5d:63:bc:59:04:06:f6:90:98:5d:24:33:60:
14:5b:5c:16:99:32:7b:b1:e3:cf:5b:81:57:3b:7e:
38:8e:09:87:8e:ce:31:bd:92:8a:f5:57:60:c0:b3:
83:98:14:8d:bc:bc:9e:d4:8d:e2:50:ed:be:c4:05:
7b:07:57:bf:34:18:70:40:fe:02:ab:2f:a9:4b:de:
7a:ad:c9:63:8f:cc:cd:af:92:9e:72:d5:ca:40:f6:
7e:36:bf:2a:40:27:b0:7f:53:94:41:a4:7a:75:18:
06:62:e0:0c:ba:21:3b:d8:7e:38:c9:db:dc:51:29:
29:b9:17:fd:6c:99:2a:ec:b5:1e:90:63:f6:9d:3a:
2e:81:29:fb:8a:59:d3:99:10:52:52:b3:b7:f5:3a:
ac:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:01:81:61:44:61:1F:12:12:DA:05:23:C6:0C:61:5A:57:FC:1B:E3
X509v3 Authority Key Identifier:
keyid:C1:C2:0F:BC:48:FA:59:A7:D8:DE:A5:79:08:F3:50:A1:B9:74:59:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wcIPvEj6WafY3qV5CPNQobl0Wd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/rQGBYURhHxIS2gUjxgxhWlf8G-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/wcIPvEj6WafY3qV5CPNQobl0Wd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.212.0/22
80.75.152.0/21
91.223.207.0/24
93.187.40.0/21
185.56.204.0/22
194.6.240.0/24
IPv6:
2a02:668::/36
2a02:668:9000::/36
Signature Algorithm: sha256WithRSAEncryption
9a:bf:7b:36:4a:ee:36:a2:fc:e1:cd:b4:00:63:5a:74:39:8f:
5e:6e:73:77:65:7d:4c:20:f0:1e:69:01:50:ac:78:f7:65:5d:
00:56:b1:69:75:03:84:63:aa:98:a9:9c:7c:f6:88:81:b4:fe:
b2:a6:36:03:c8:b2:3e:4f:a3:ff:14:bc:e7:f9:c0:a0:ef:34:
c5:5f:a4:56:81:7a:ff:56:6a:5b:92:50:f8:9c:b3:6a:46:91:
85:d8:16:06:91:31:f3:c0:46:29:f7:31:bd:30:2b:0a:87:1a:
1f:ed:2c:47:ba:78:aa:30:c1:b7:47:fb:88:ac:27:eb:24:30:
47:5e:c6:8b:c5:68:4d:90:b9:d6:d0:63:c6:eb:7f:8b:70:6a:
61:20:6b:93:b7:b2:c6:8a:4f:01:da:c9:02:20:79:e2:a0:4f:
cd:83:6c:2e:e8:20:3e:f6:e6:29:d5:0a:29:ca:04:3b:bb:13:
74:d5:e4:da:fc:3a:9e:4c:66:24:da:3d:66:54:fc:3e:67:92:
6b:c8:2f:53:a0:a0:a3:a6:86:08:b1:d2:b4:d2:27:ca:d9:56:
c8:b6:90:c8:bf:f9:b2:3d:a7:44:c9:87:0c:08:e1:24:49:f0:
ee:0a:f6:8d:e7:e2:94:34:26:1e:2d:b4:e6:50:cf:db:05:f4:
f5:24:c0:23
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgISAZdeIgfvou54x5HkzbnKsjeLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxYzIwZmJjNDhmYTU5YTdkOGRlYTU3OTA4ZjM1MGExYjk3
NDU5ZGYwHhcNMjUwNjExMDgzNjE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZDAxODE2MTQ0NjExZjEyMTJkYTA1MjNjNjBjNjE1YTU3ZmMxYmUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNXFbtu4YbF8T6fiFRRaPLUiIIb0
QUkEpysVHRtxU/IgYpTiEaP2ri95PK5wNeWm4fv+9q1a5rN8i7xwyFBKpuLAZ1r2
ZX7EpKWeZHktrmpUGNtZMNW/v96HCeBQbmy0JHLJZok8uIRz511jvFkEBvaQmF0k
M2AUW1wWmTJ7sePPW4FXO344jgmHjs4xvZKK9VdgwLODmBSNvLye1I3iUO2+xAV7
B1e/NBhwQP4Cqy+pS956rcljj8zNr5KectXKQPZ+Nr8qQCewf1OUQaR6dRgGYuAM
uiE72H44ydvcUSkpuRf9bJkq7LUekGP2nTougSn7ilnTmRBSUrO39Tqs+wIDAQAB
o4ICPzCCAjswHQYDVR0OBBYEFK0BgWFEYR8SEtoFI8YMYVpX/BvjMB8GA1UdIwQY
MBaAFMHCD7xI+lmn2N6leQjzUKG5dFnfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2NJUHZFajZXYWZZM3FWNUNQTlFvYmwwV2Q4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi82Yzc4ZGEtYmRlZC00MWE5LWI1MDgt
MzAyY2UxYmM5OWMwLzEvclFHQllVUmhIeElTMmdVanhneGhXbGY4Ry1NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi82Yzc4ZGEtYmRlZC00MWE5LWI1MDgtMzAyY2UxYmM5OWMw
LzEvd2NJUHZFajZXYWZZM3FWNUNQTlFvYmwwV2Q4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDAqBAIAATAkAwQCLQ/UAwQD
UEuYAwQAW9/PAwQDXbsoAwQCuTjMAwQAwgbwMBYEAgACMBADBgQqAgZoAAMGBCoC
BmiQMA0GCSqGSIb3DQEBCwUAA4IBAQCav3s2Su42ovzhzbQAY1p0OY9ebnN3ZX1M
IPAeaQFQrHj3ZV0AVrFpdQOEY6qYqZx89oiBtP6ypjYDyLI+T6P/FLzn+cCg7zTF
X6RWgXr/VmpbklD4nLNqRpGF2BYGkTHzwEYp9zG9MCsKhxof7SxHuniqMMG3R/uI
rCfrJDBHXsaLxWhNkLnW0GPG63+LcGphIGuTt7LGik8B2skCIHnioE/Ng2wu6CA+
9uYp1QopygQ7uxN01eTa/DqeTGYk2j1mVPw+Z5JryC9ToKCjpoYIsdK00ifK2VbI
tpDIv/myPadEyYcMCOEkSfDuCvaN5+KUNCYeLbTmUM/bBfT1JMAj
-----END CERTIFICATE-----
Generated at Sun Jun 15 09:48:47 2025 by rpki-client