Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/7KjQHvnpCi58NFqcHKJkK-SUQ5w.roa
File: 7KjQHvnpCi58NFqcHKJkK-SUQ5w.roa (raw, json)
Hash identifier: OaHYVLSM/T4W8XG9Lqhs1dO9xliBy6TSVc/RrUAOqyw=
Subject key identifier: EC:A8:D0:1E:F9:E9:0A:2E:7C:34:5A:9C:1C:A2:64:2B:E4:94:43:9C
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019809693D8398EA946FDB1BE493D919B5CE
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/7KjQHvnpCi58NFqcHKJkK-SUQ5w.roa
Signing time: Mon 14 Jul 2025 14:49:08 +0000
ROA not before: Mon 14 Jul 2025 14:49:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 399989
IP address blocks: 194.231.144.0/22 maxlen: 22
194.231.152.0/22 maxlen: 22
194.231.192.0/22 maxlen: 22
194.231.204.0/22 maxlen: 22
194.231.212.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 05:10:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:09:69:3d:83:98:ea:94:6f:db:1b:e4:93:d9:19:b5:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jul 14 14:49:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eca8d01ef9e90a2e7c345a9c1ca2642be494439c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5a:62:0f:c0:31:a3:55:ea:5d:0f:c5:ca:fc:
40:f3:bb:41:57:92:d2:dd:3f:cc:82:1e:fa:f9:39:
f7:e3:c3:68:26:2e:f1:00:0a:32:15:b6:bc:7d:cd:
72:62:11:79:6e:b5:b9:ba:76:97:08:50:75:04:b6:
9b:e0:99:f8:3c:69:3f:5d:1c:0b:df:c3:8d:20:a5:
0b:6c:dd:db:66:b2:ef:37:fd:b9:5c:37:1c:3e:7b:
3b:42:6a:c1:b0:cf:a9:20:4e:e2:9a:9c:a7:bc:be:
53:d6:42:85:9b:e9:af:b4:f8:06:7c:5d:08:df:7d:
19:87:fc:2f:41:7b:08:14:bc:1c:7f:33:35:07:71:
af:a1:07:77:dd:1f:60:a2:10:3b:c9:c8:0c:fa:43:
4f:a4:40:4c:34:fe:21:f5:49:e6:56:46:2b:d2:c6:
74:83:b2:f5:a2:38:ac:bb:2e:2b:0b:29:a5:7b:d7:
06:c3:44:f9:87:ed:6d:84:eb:35:b4:03:67:0b:90:
80:a3:50:ad:10:60:f6:76:12:e5:9f:9e:dc:83:3c:
07:f4:fd:ff:b7:9e:b5:09:23:49:10:12:7d:de:53:
e4:b4:53:e5:4e:61:e1:31:c9:27:58:1e:68:1f:95:
a3:22:69:49:5e:f9:9a:e9:82:c0:ae:42:46:a2:bc:
66:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:A8:D0:1E:F9:E9:0A:2E:7C:34:5A:9C:1C:A2:64:2B:E4:94:43:9C
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/7KjQHvnpCi58NFqcHKJkK-SUQ5w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.231.144.0/22
194.231.152.0/22
194.231.192.0/22
194.231.204.0/22
194.231.212.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:06:b2:2a:44:4e:de:fd:94:13:1f:15:26:53:c5:43:23:8c:
c0:83:f5:04:f0:1a:6e:26:cf:0b:c2:49:8e:08:58:ed:32:6e:
e9:1a:23:5e:0a:d6:46:77:88:43:b3:0d:02:2a:31:a6:b4:98:
7e:31:ae:a7:00:4f:71:d6:99:81:c0:32:4d:1c:5e:0b:40:9f:
06:52:3e:6b:71:6a:09:d3:4b:e0:7a:c7:e3:de:b4:1c:84:02:
20:e3:21:ed:4a:36:11:a1:95:22:6a:77:c8:ca:7a:d0:3f:fe:
1e:59:79:bf:f0:ab:66:28:fc:a7:2e:c8:6a:a0:15:dc:ec:0e:
6f:1b:ab:53:64:60:c0:e7:b2:c8:12:2f:93:66:a6:2f:dd:b8:
db:50:e5:9d:1e:60:aa:72:0e:08:bf:ec:ad:34:7d:a8:d4:02:
53:14:73:30:b4:e2:aa:0b:2d:0d:1d:b8:a3:16:5c:ff:6b:f9:
b9:a7:3d:33:be:30:51:1d:30:a7:fb:12:6b:d3:2d:94:02:61:
fb:27:9e:78:d1:f6:a9:de:4d:9c:0c:ea:24:d6:99:f6:36:5d:
2d:1c:12:f1:34:f1:89:06:a0:a1:eb:ad:a5:42:6e:d0:ae:eb:
e7:98:68:5c:fc:d8:2e:12:b8:7a:f0:05:1d:79:7b:ef:90:7e:
06:85:bc:c3
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZgJaT2DmOqUb9sb5JPZGbXOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0
NmQxNzEwHhcNMjUwNzE0MTQ0OTA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlY2E4ZDAxZWY5ZTkwYTJlN2MzNDVhOWMxY2EyNjQyYmU0OTQ0MzljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVpiD8Axo1XqXQ/FyvxA87tBV5LS
3T/Mgh76+Tn348NoJi7xAAoyFba8fc1yYhF5brW5unaXCFB1BLab4Jn4PGk/XRwL
38ONIKULbN3bZrLvN/25XDccPns7QmrBsM+pIE7impynvL5T1kKFm+mvtPgGfF0I
330Zh/wvQXsIFLwcfzM1B3GvoQd33R9gohA7ycgM+kNPpEBMNP4h9UnmVkYr0sZ0
g7L1ojisuy4rCymle9cGw0T5h+1thOs1tANnC5CAo1CtEGD2dhLln57cgzwH9P3/
t561CSNJEBJ93lPktFPlTmHhMcknWB5oH5WjImlJXvma6YLArkJGorxmDwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFOyo0B756QoufDRanByiZCvklEOcMB8GA1UdIwQY
MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt
MGNmMTA5M2Q0NTQ4LzEvN0tqUUh2bnBDaTU4TkZxY0hLSmtLLVNVUTV3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4
LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQCwueQAwQC
wueYAwQCwufAAwQCwufMAwQCwufUMA0GCSqGSIb3DQEBCwUAA4IBAQArBrIqRE7e
/ZQTHxUmU8VDI4zAg/UE8BpuJs8LwkmOCFjtMm7pGiNeCtZGd4hDsw0CKjGmtJh+
Ma6nAE9x1pmBwDJNHF4LQJ8GUj5rcWoJ00vgesfj3rQchAIg4yHtSjYRoZUianfI
ynrQP/4eWXm/8KtmKPynLshqoBXc7A5vG6tTZGDA57LIEi+TZqYv3bjbUOWdHmCq
cg4Iv+ytNH2o1AJTFHMwtOKqCy0NHbijFlz/a/m5pz0zvjBRHTCn+xJr0y2UAmH7
J5540fap3k2cDOok1pn2Nl0tHBLxNPGJBqCh662lQm7QruvnmGhc/NguErh68AUd
eXvvkH4GhbzD
-----END CERTIFICATE-----
Generated at Mon Jul 21 12:45:22 2025 by rpki-client