Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/gHtkVv0cKLf0CoLLrA1HPs8--tc.roa
File: gHtkVv0cKLf0CoLLrA1HPs8--tc.roa (raw, json)
Hash identifier: lzgrRuK97VTpJB6pUFDr+SFOzxSSWsmsSeiC+ga0uf8=
Subject key identifier: 80:7B:64:56:FD:1C:28:B7:F4:0A:82:CB:AC:0D:47:3E:CF:3E:FA:D7
Certificate issuer: /CN=49216f5c165b827a7fd73d8107aebd2f63c63e24
Certificate serial: 01986F95405F2DCDDA0B01736C140C57B8D0
Authority key identifier: 49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/gHtkVv0cKLf0CoLLrA1HPs8--tc.roa
Signing time: Sun 03 Aug 2025 10:58:28 +0000
ROA not before: Sun 03 Aug 2025 10:58:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 329007
IP address blocks: 178.17.48.0/24 maxlen: 24
178.17.49.0/24 maxlen: 24
178.17.50.0/24 maxlen: 24
178.17.51.0/24 maxlen: 24
178.17.52.0/24 maxlen: 24
178.17.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:6f:95:40:5f:2d:cd:da:0b:01:73:6c:14:0c:57:b8:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49216f5c165b827a7fd73d8107aebd2f63c63e24
Validity
Not Before: Aug 3 10:58:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=807b6456fd1c28b7f40a82cbac0d473ecf3efad7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c3:37:dd:38:70:0a:70:df:28:27:e0:2d:18:
fd:45:56:6e:a0:b8:07:d9:8c:dd:9e:64:b5:e4:f3:
c0:74:f3:32:04:87:3b:9d:d8:79:4e:48:93:bf:71:
e0:f6:49:85:50:95:44:68:53:45:9f:27:78:c2:92:
b6:82:a8:7d:46:75:9e:42:b2:63:0c:84:25:58:92:
25:29:88:b6:57:78:04:66:26:06:97:b8:e5:a4:32:
88:c0:57:c6:d0:6c:a1:d2:b3:69:5d:92:26:56:eb:
c4:42:ce:b7:54:f1:e8:30:26:c4:27:0c:fe:ae:5a:
25:5e:4f:34:1b:77:be:01:d2:62:9e:e6:64:14:83:
a5:b5:b9:28:3c:d4:e9:a3:88:e7:73:e4:81:9c:55:
34:8f:f9:c8:a8:4b:25:54:33:4f:79:7e:72:b9:5a:
58:01:3b:bf:c6:5d:8e:db:8c:33:4a:e3:cf:77:8f:
aa:91:ef:e5:40:5f:94:ec:9c:26:c7:cc:c8:7d:4b:
a4:0f:a9:f6:a1:df:0c:bb:8e:18:4d:14:00:6b:0e:
77:52:6e:51:14:63:a7:08:b4:18:3d:36:38:df:a9:
36:b5:92:0b:d4:db:49:0b:bf:3c:e5:9e:50:6f:30:
63:91:17:eb:f6:e2:4b:2f:e3:a4:65:8b:ad:5c:9a:
b6:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:7B:64:56:FD:1C:28:B7:F4:0A:82:CB:AC:0D:47:3E:CF:3E:FA:D7
X509v3 Authority Key Identifier:
keyid:49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/gHtkVv0cKLf0CoLLrA1HPs8--tc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.17.48.0-178.17.53.255
Signature Algorithm: sha256WithRSAEncryption
15:2a:0e:93:7d:d0:e9:b0:4c:d6:2c:e4:b8:da:3e:47:e4:99:
56:79:78:13:78:bb:28:52:16:8e:b1:13:26:ab:4f:2b:7f:8d:
5e:b4:3c:07:4a:87:a4:35:b5:e4:da:be:b9:14:02:93:ca:d6:
ba:bf:ca:a9:f9:89:ae:a1:22:a6:ac:c6:98:26:31:ad:03:9f:
20:0f:6b:9a:2e:82:2b:f5:ae:84:c3:82:26:3d:79:82:b8:d3:
65:07:41:cf:72:8d:7a:6e:1c:2f:a3:75:1f:a1:bc:93:27:64:
ae:7d:e4:58:cf:2a:bf:26:12:55:a6:7f:cd:35:fb:f1:7c:a3:
2b:44:97:85:cd:b0:26:9d:f5:9f:c6:8f:4f:fd:c1:4b:f8:25:
88:5e:95:9a:32:cf:93:21:c8:e7:27:17:55:13:9e:c5:52:85:
f0:86:d6:fc:4f:0f:94:5e:42:22:1e:eb:b9:41:15:2b:f1:49:
51:19:67:e9:23:5e:42:ec:70:70:c2:41:fe:05:dc:73:16:25:
c3:c9:7c:71:ba:eb:32:82:2d:09:5d:f8:e8:8a:c3:69:dd:99:
6e:5d:6b:b8:67:9f:0e:c4:d8:a7:89:0f:81:d5:00:43:e5:8d:
15:2d:c9:47:5d:f8:c9:f2:45:bd:82:82:d2:8b:04:a7:46:ec:
b1:a2:57:58
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZhvlUBfLc3aCwFzbBQMV7jQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5MjE2ZjVjMTY1YjgyN2E3ZmQ3M2Q4MTA3YWViZDJmNjNj
NjNlMjQwHhcNMjUwODAzMTA1ODI4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MDdiNjQ1NmZkMWMyOGI3ZjQwYTgyY2JhYzBkNDczZWNmM2VmYWQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucM33ThwCnDfKCfgLRj9RVZuoLgH
2YzdnmS15PPAdPMyBIc7ndh5TkiTv3Hg9kmFUJVEaFNFnyd4wpK2gqh9RnWeQrJj
DIQlWJIlKYi2V3gEZiYGl7jlpDKIwFfG0Gyh0rNpXZImVuvEQs63VPHoMCbEJwz+
rlolXk80G3e+AdJinuZkFIOltbkoPNTpo4jnc+SBnFU0j/nIqEslVDNPeX5yuVpY
ATu/xl2O24wzSuPPd4+qke/lQF+U7Jwmx8zIfUukD6n2od8Mu44YTRQAaw53Um5R
FGOnCLQYPTY436k2tZIL1NtJC7885Z5QbzBjkRfr9uJLL+OkZYutXJq26QIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFIB7ZFb9HCi39AqCy6wNRz7PPvrXMB8GA1UdIwQY
MBaAFEkhb1wWW4J6f9c9gQeuvS9jxj4kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1NGdlhCWmJnbnBfMXoyQkI2NjlMMlBHUGlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi80ODQyYTktOWZjZC00YmI2LWJiMDQt
MGRiYmMyNDllNjU3LzEvZ0h0a1Z2MGNLTGYwQ29MTHJBMUhQczgtLXRjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi80ODQyYTktOWZjZC00YmI2LWJiMDQtMGRiYmMyNDllNjU3
LzEvU1NGdlhCWmJnbnBfMXoyQkI2NjlMMlBHUGlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBASyETAD
BAGyETQwDQYJKoZIhvcNAQELBQADggEBABUqDpN90OmwTNYs5LjaPkfkmVZ5eBN4
uyhSFo6xEyarTyt/jV60PAdKh6Q1teTavrkUApPK1rq/yqn5ia6hIqasxpgmMa0D
nyAPa5ougiv1roTDgiY9eYK402UHQc9yjXpuHC+jdR+hvJMnZK595FjPKr8mElWm
f801+/F8oytEl4XNsCad9Z/Gj0/9wUv4JYhelZoyz5MhyOcnF1UTnsVShfCG1vxP
D5ReQiIe67lBFSvxSVEZZ+kjXkLscHDCQf4F3HMWJcPJfHG66zKCLQld+OiKw2nd
mW5da7hnnw7E2KeJD4HVAEPljRUtyUdd+MnyRb2CgtKLBKdG7LGiV1g=
-----END CERTIFICATE-----
Generated at Mon Aug 4 15:02:04 2025 by rpki-client