Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/JNIQHrSFdHvPsEVPjRrQ3yuttVQ.roa
File: JNIQHrSFdHvPsEVPjRrQ3yuttVQ.roa (raw, json)
Hash identifier: EZsgJlRLNQhgDn4m1ISVJEROgPzp3HctzEPO1CTApLM=
Subject key identifier: 24:D2:10:1E:B4:85:74:7B:CF:B0:45:4F:8D:1A:D0:DF:2B:AD:B5:54
Certificate issuer: /CN=a87090c275c34c05c306f3b36063893a0d72782a
Certificate serial: 019809B282A7DB2DB1BC3B4CD65F872D4F29
Authority key identifier: A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/JNIQHrSFdHvPsEVPjRrQ3yuttVQ.roa
Signing time: Mon 14 Jul 2025 16:09:10 +0000
ROA not before: Mon 14 Jul 2025 16:09:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50340
IP address blocks: 45.8.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 21:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:09:b2:82:a7:db:2d:b1:bc:3b:4c:d6:5f:87:2d:4f:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a87090c275c34c05c306f3b36063893a0d72782a
Validity
Not Before: Jul 14 16:09:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=24d2101eb485747bcfb0454f8d1ad0df2badb554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:9f:1e:c7:7c:ee:9b:5b:f2:a2:8d:c3:59:79:
08:cd:fd:67:62:09:3d:92:0b:7a:1c:2d:88:03:4e:
20:d7:04:75:65:de:0a:64:b6:d8:ad:29:70:25:c2:
28:06:44:c1:55:cb:58:4a:72:4a:4e:ec:7a:9e:b3:
b7:e5:a0:19:b9:01:20:c5:1a:a5:51:e3:1c:f2:ad:
9b:76:17:5f:41:21:fb:87:14:f2:76:c9:11:0c:8a:
10:63:7a:26:c8:de:34:72:66:12:b2:8f:88:08:14:
4a:74:95:cb:51:48:14:d8:5d:d6:98:f4:ba:33:1d:
b4:33:2c:4a:b5:28:84:fb:73:55:67:af:c6:5b:d1:
84:c6:11:49:99:b4:e0:f0:0f:e9:f6:ea:4e:d0:81:
9e:a5:6a:fd:66:9f:df:80:3a:93:0a:be:f7:ae:65:
ba:07:10:a9:9f:ce:38:df:67:c8:11:6f:d8:3c:73:
58:f5:11:d9:45:9c:e1:8e:e7:19:22:6f:0e:9c:24:
4d:66:55:54:0e:dc:a9:27:67:df:a0:8b:3f:39:70:
22:c6:4f:c9:40:52:39:97:c8:bf:ac:72:df:d7:6b:
01:16:a9:d8:92:44:71:7b:88:ab:db:12:60:e2:9a:
85:a8:31:98:f9:69:cd:08:50:fc:81:7f:75:e3:f2:
c7:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:D2:10:1E:B4:85:74:7B:CF:B0:45:4F:8D:1A:D0:DF:2B:AD:B5:54
X509v3 Authority Key Identifier:
keyid:A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/JNIQHrSFdHvPsEVPjRrQ3yuttVQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.208.0/24
Signature Algorithm: sha256WithRSAEncryption
35:cb:ce:ff:f4:4e:00:b4:78:91:44:de:7f:8c:65:fa:8b:a3:
f8:4b:99:83:83:94:c6:74:98:48:c8:2a:69:25:de:7f:e2:45:
e2:5a:e6:b7:45:3e:55:7a:c8:28:e6:66:62:2c:7e:86:b5:a9:
a3:85:29:61:45:11:c1:b7:52:6a:0f:c7:08:52:25:72:b4:e9:
91:e2:2b:45:80:6c:32:ba:19:35:97:f4:f5:01:f1:ff:4e:dd:
b8:17:71:87:9f:f9:4c:90:34:c6:f0:40:6b:a1:bc:f1:ba:2e:
48:e1:47:61:79:a7:8e:9f:0c:25:b0:2f:a8:24:dd:75:7f:3c:
24:c3:30:e4:d9:f4:80:ff:a9:a2:f4:1c:5c:ff:66:99:83:a6:
28:e7:1d:0f:67:f5:0b:e0:77:8e:1d:8a:7b:0e:13:2d:e2:fc:
7b:95:04:d7:f7:d4:d0:4f:4e:50:d4:15:f8:6f:f7:87:a9:45:
bb:02:8e:35:56:39:30:8c:66:12:a4:6b:51:16:a8:00:df:d9:
5e:86:78:22:1c:3d:19:cc:a0:53:94:70:34:98:6e:7d:e5:91:
52:7a:e6:81:d9:b5:5c:f2:04:bf:dc:0a:b0:2b:a0:09:8c:b1:
83:f1:bc:45:5f:4d:b7:78:64:ba:3b:99:98:ac:b4:e4:9f:b3:
80:eb:28:a0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZgJsoKn2y2xvDtM1l+HLU8pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4NzA5MGMyNzVjMzRjMDVjMzA2ZjNiMzYwNjM4OTNhMGQ3
Mjc4MmEwHhcNMjUwNzE0MTYwOTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNGQyMTAxZWI0ODU3NDdiY2ZiMDQ1NGY4ZDFhZDBkZjJiYWRiNTU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi58ex3zum1vyoo3DWXkIzf1nYgk9
kgt6HC2IA04g1wR1Zd4KZLbYrSlwJcIoBkTBVctYSnJKTux6nrO35aAZuQEgxRql
UeMc8q2bdhdfQSH7hxTydskRDIoQY3omyN40cmYSso+ICBRKdJXLUUgU2F3WmPS6
Mx20MyxKtSiE+3NVZ6/GW9GExhFJmbTg8A/p9upO0IGepWr9Zp/fgDqTCr73rmW6
BxCpn84432fIEW/YPHNY9RHZRZzhjucZIm8OnCRNZlVUDtypJ2ffoIs/OXAixk/J
QFI5l8i/rHLf12sBFqnYkkRxe4ir2xJg4pqFqDGY+WnNCFD8gX914/LHvwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCTSEB60hXR7z7BFT40a0N8rrbVUMB8GA1UdIwQY
MBaAFKhwkMJ1w0wFwwbzs2BjiToNcngqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEt
YjU3YTM2ZjJhZmNkLzEvSk5JUUhyU0ZkSHZQc0VWUGpSclEzeXV0dFZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEtYjU3YTM2ZjJhZmNk
LzEvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQjQMA0G
CSqGSIb3DQEBCwUAA4IBAQA1y87/9E4AtHiRRN5/jGX6i6P4S5mDg5TGdJhIyCpp
Jd5/4kXiWua3RT5Vesgo5mZiLH6GtamjhSlhRRHBt1JqD8cIUiVytOmR4itFgGwy
uhk1l/T1AfH/Tt24F3GHn/lMkDTG8EBrobzxui5I4UdheaeOnwwlsC+oJN11fzwk
wzDk2fSA/6mi9Bxc/2aZg6Yo5x0PZ/UL4HeOHYp7DhMt4vx7lQTX99TQT05Q1BX4
b/eHqUW7Ao41VjkwjGYSpGtRFqgA39lehngiHD0ZzKBTlHA0mG595ZFSeuaB2bVc
8gS/3AqwK6AJjLGD8bxFX023eGS6O5mYrLTkn7OA6yig
-----END CERTIFICATE-----
Generated at Mon Jul 21 02:46:38 2025 by rpki-client