Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/efeb1a-29b5-44a6-92ea-5b541f34732e/1/rsJr37lWx4RTfR8Cvpu056B6Wz4.roa
File: rsJr37lWx4RTfR8Cvpu056B6Wz4.roa (raw, json)
Hash identifier: /l5appIPEWouSbZYMspTa7m6sRTfOtnp/hleC+S0sOI=
Subject key identifier: AE:C2:6B:DF:B9:56:C7:84:53:7D:1F:02:BE:9B:B4:E7:A0:7A:5B:3E
Certificate issuer: /CN=255633182ddd558b41ba16c519ee461450ddddd9
Certificate serial: 0197F8B8A09A0084FCA9558AE8447D9BF3E9
Authority key identifier: 25:56:33:18:2D:DD:55:8B:41:BA:16:C5:19:EE:46:14:50:DD:DD:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JVYzGC3dVYtBuhbFGe5GFFDd3dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/efeb1a-29b5-44a6-92ea-5b541f34732e/1/rsJr37lWx4RTfR8Cvpu056B6Wz4.roa
Signing time: Fri 11 Jul 2025 09:02:18 +0000
ROA not before: Fri 11 Jul 2025 09:02:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29551
IP address blocks: 91.241.44.0/24 maxlen: 24
2001:67c:24c4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/efeb1a-29b5-44a6-92ea-5b541f34732e/1/JVYzGC3dVYtBuhbFGe5GFFDd3dk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/efeb1a-29b5-44a6-92ea-5b541f34732e/1/JVYzGC3dVYtBuhbFGe5GFFDd3dk.mft
rsync://rpki.ripe.net/repository/DEFAULT/JVYzGC3dVYtBuhbFGe5GFFDd3dk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:f8:b8:a0:9a:00:84:fc:a9:55:8a:e8:44:7d:9b:f3:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=255633182ddd558b41ba16c519ee461450ddddd9
Validity
Not Before: Jul 11 09:02:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aec26bdfb956c784537d1f02be9bb4e7a07a5b3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:79:ed:f2:ef:7d:37:8c:c8:51:a9:83:d3:bf:
94:9c:d0:c5:47:b8:21:49:94:6e:af:81:5e:0a:83:
da:91:19:a1:2f:f7:68:cf:74:b1:d6:97:1d:ca:e9:
ab:bf:2b:0c:12:a5:11:6c:76:7c:fd:b8:4f:c9:80:
1f:08:53:7e:ea:ed:e2:16:14:81:db:62:8e:4a:dd:
f3:d3:33:ab:7e:97:f4:d8:81:d0:67:2f:98:21:33:
8c:f2:ef:41:d8:e5:95:90:1a:34:8e:2b:34:5a:22:
74:9e:e7:f6:1c:30:0b:83:92:eb:b5:ea:7a:3b:21:
bd:ed:ab:6b:45:18:aa:6e:bd:9a:77:5b:e7:33:68:
92:32:3e:e7:b0:06:da:d3:f3:67:b9:81:3f:41:ad:
f8:f8:2c:c6:76:4d:4b:af:ae:48:28:fa:dc:58:c9:
c3:0c:d5:8a:8a:a7:3e:38:98:78:0b:a4:b1:45:81:
22:38:19:29:ef:43:ac:f0:2a:67:94:12:f0:39:3b:
7f:b1:17:f6:84:33:c3:34:28:98:38:eb:10:50:01:
49:31:56:6a:ff:d8:68:41:f2:1d:70:0a:df:1a:05:
c9:60:55:c7:41:d7:37:25:3a:22:39:1c:9f:42:be:
e1:96:8c:4f:69:0a:2b:ac:f1:08:6b:01:51:af:a9:
ad:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:C2:6B:DF:B9:56:C7:84:53:7D:1F:02:BE:9B:B4:E7:A0:7A:5B:3E
X509v3 Authority Key Identifier:
keyid:25:56:33:18:2D:DD:55:8B:41:BA:16:C5:19:EE:46:14:50:DD:DD:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JVYzGC3dVYtBuhbFGe5GFFDd3dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/efeb1a-29b5-44a6-92ea-5b541f34732e/1/rsJr37lWx4RTfR8Cvpu056B6Wz4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/efeb1a-29b5-44a6-92ea-5b541f34732e/1/JVYzGC3dVYtBuhbFGe5GFFDd3dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.241.44.0/24
IPv6:
2001:67c:24c4::/48
Signature Algorithm: sha256WithRSAEncryption
2a:b6:78:77:96:6c:ed:2d:1d:82:13:ba:34:bc:f1:b1:65:af:
f5:a0:3b:1f:40:9e:7b:da:7d:46:e2:28:84:b9:f1:76:d5:8b:
a9:fb:79:ec:96:57:09:01:8a:53:22:38:98:a1:ad:c2:db:5a:
c6:2b:2c:f3:93:1b:54:c5:ff:c0:17:30:4a:a6:93:9d:2b:62:
03:e0:a0:ba:89:8b:87:92:45:ee:b9:94:6e:60:6b:99:a2:92:
9b:a1:35:0d:87:78:ae:cb:aa:a5:36:e6:12:23:13:96:5f:41:
db:cc:5c:64:78:e1:2e:86:f5:ae:92:14:77:37:4a:28:3c:d3:
b3:d7:f2:0e:17:a1:0b:cd:b8:95:74:06:e7:71:05:07:2b:19:
16:68:72:ee:71:f2:0d:87:f7:fd:a4:8b:24:b5:87:a0:0b:97:
0a:2f:76:08:60:63:5a:61:a7:bf:b2:76:89:a9:28:a0:16:9f:
ff:53:bb:13:49:3b:34:f5:e2:dd:3d:5d:cd:87:3c:67:1f:d3:
e6:18:81:8e:c6:3e:fb:20:75:29:6b:01:7c:fc:aa:51:16:04:
bf:c7:4c:78:ad:04:5b:f6:e2:af:59:82:30:b0:5f:d3:74:dc:
e5:92:6b:b6:44:99:15:7f:81:8d:31:c6:50:9d:82:df:3e:1b:
38:27:bd:57
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZf4uKCaAIT8qVWK6ER9m/PpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1NTYzMzE4MmRkZDU1OGI0MWJhMTZjNTE5ZWU0NjE0NTBk
ZGRkZDkwHhcNMjUwNzExMDkwMjE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZWMyNmJkZmI5NTZjNzg0NTM3ZDFmMDJiZTliYjRlN2EwN2E1YjNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonnt8u99N4zIUamD07+UnNDFR7gh
SZRur4FeCoPakRmhL/doz3Sx1pcdyumrvysMEqURbHZ8/bhPyYAfCFN+6u3iFhSB
22KOSt3z0zOrfpf02IHQZy+YITOM8u9B2OWVkBo0jis0WiJ0nuf2HDALg5Lrtep6
OyG97atrRRiqbr2ad1vnM2iSMj7nsAba0/NnuYE/Qa34+CzGdk1Lr65IKPrcWMnD
DNWKiqc+OJh4C6SxRYEiOBkp70Os8CpnlBLwOTt/sRf2hDPDNCiYOOsQUAFJMVZq
/9hoQfIdcArfGgXJYFXHQdc3JToiORyfQr7hloxPaQorrPEIawFRr6mtawIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFK7Ca9+5VseEU30fAr6btOegels+MB8GA1UdIwQY
MBaAFCVWMxgt3VWLQboWxRnuRhRQ3d3ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlZZekdDM2RWWXRCdWhiRkdlNUdGRkRkM2RrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9lZmViMWEtMjliNS00NGE2LTkyZWEt
NWI1NDFmMzQ3MzJlLzEvcnNKcjM3bFd4NFJUZlI4Q3ZwdTA1NkI2V3o0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi9lZmViMWEtMjliNS00NGE2LTkyZWEtNWI1NDFmMzQ3MzJl
LzEvSlZZekdDM2RWWXRCdWhiRkdlNUdGRkRkM2RrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAW/EsMA8E
AgACMAkDBwAgAQZ8JMQwDQYJKoZIhvcNAQELBQADggEBACq2eHeWbO0tHYITujS8
8bFlr/WgOx9AnnvafUbiKIS58XbVi6n7eeyWVwkBilMiOJihrcLbWsYrLPOTG1TF
/8AXMEqmk50rYgPgoLqJi4eSRe65lG5ga5mikpuhNQ2HeK7LqqU25hIjE5ZfQdvM
XGR44S6G9a6SFHc3Sig807PX8g4XoQvNuJV0BudxBQcrGRZocu5x8g2H9/2kiyS1
h6ALlwovdghgY1php7+ydompKKAWn/9TuxNJOzT14t09Xc2HPGcf0+YYgY7GPvsg
dSlrAXz8qlEWBL/HTHitBFv24q9ZgjCwX9N03OWSa7ZEmRV/gY0xxlCdgt8+Gzgn
vVc=
-----END CERTIFICATE-----
Generated at Sun Jul 20 20:11:05 2025 by rpki-client