Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/5ce03b-cd2c-441a-bcec-e12d16f44153/1/SQJJoXqFqNGjLH2o_g2vHuBkV6k.roa
File: SQJJoXqFqNGjLH2o_g2vHuBkV6k.roa (raw, json)
Hash identifier: nQwkpZGomRtyEWqgatsYZovUvrMoig7TXoDGcNqHozM=
Subject key identifier: 49:02:49:A1:7A:85:A8:D1:A3:2C:7D:A8:FE:0D:AF:1E:E0:64:57:A9
Certificate issuer: /CN=ce7fdff480bb90dd8b26d282309af160455ecb0b
Certificate serial: 01963FA30468590A2399E1D43FCF96B1E16B
Authority key identifier: CE:7F:DF:F4:80:BB:90:DD:8B:26:D2:82:30:9A:F1:60:45:5E:CB:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zn_f9IC7kN2LJtKCMJrxYEVeyws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/5ce03b-cd2c-441a-bcec-e12d16f44153/1/SQJJoXqFqNGjLH2o_g2vHuBkV6k.roa
Signing time: Wed 16 Apr 2025 17:26:10 +0000
ROA not before: Wed 16 Apr 2025 17:26:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198059
IP address blocks: 81.30.96.0/24 maxlen: 24
2a10:8540::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/5ce03b-cd2c-441a-bcec-e12d16f44153/1/zn_f9IC7kN2LJtKCMJrxYEVeyws.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/5ce03b-cd2c-441a-bcec-e12d16f44153/1/zn_f9IC7kN2LJtKCMJrxYEVeyws.mft
rsync://rpki.ripe.net/repository/DEFAULT/zn_f9IC7kN2LJtKCMJrxYEVeyws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:a3:04:68:59:0a:23:99:e1:d4:3f:cf:96:b1:e1:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce7fdff480bb90dd8b26d282309af160455ecb0b
Validity
Not Before: Apr 16 17:26:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=490249a17a85a8d1a32c7da8fe0daf1ee06457a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:01:ff:bb:8c:f8:ed:18:20:c4:bc:f5:01:60:
e8:2c:a4:80:99:e6:64:a6:8f:50:4e:17:0a:e1:4b:
21:bf:de:77:85:4a:ee:9f:ca:ca:de:0f:eb:d3:a9:
4a:af:4d:db:c3:9e:56:f1:b2:ac:1f:c2:af:fc:19:
4d:7a:3a:06:c0:19:f3:f3:a6:12:bb:a8:86:70:a2:
2a:86:e8:4b:2b:a2:e1:a0:a1:70:1d:fb:41:4a:64:
29:34:b0:84:6d:d5:7c:ea:1a:32:0d:ac:58:48:fe:
93:85:f8:c4:d2:21:7a:27:be:02:36:b7:bf:bf:7b:
bf:9b:3e:54:3f:8f:9f:19:e2:f2:4d:6f:de:75:ce:
34:0f:42:f1:ff:65:83:3d:69:ba:d7:a9:d0:d5:ab:
9c:10:e5:35:fa:36:30:00:9a:91:c1:82:18:ed:74:
4c:d9:08:cc:38:85:cd:cc:0e:8b:7f:30:55:ab:b4:
65:d2:ee:e3:80:8e:59:35:bb:56:aa:5c:44:ad:73:
36:83:97:82:98:84:2b:90:ee:f9:3a:b6:84:01:6e:
85:05:06:85:a0:e6:27:3d:1b:57:5b:78:68:1f:ad:
f8:3e:2e:5d:8f:f7:5d:23:cc:c6:a9:88:6e:ff:26:
60:40:cc:cd:b8:86:a1:0b:1a:77:4c:d2:bb:95:9c:
51:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:02:49:A1:7A:85:A8:D1:A3:2C:7D:A8:FE:0D:AF:1E:E0:64:57:A9
X509v3 Authority Key Identifier:
keyid:CE:7F:DF:F4:80:BB:90:DD:8B:26:D2:82:30:9A:F1:60:45:5E:CB:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zn_f9IC7kN2LJtKCMJrxYEVeyws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/5ce03b-cd2c-441a-bcec-e12d16f44153/1/SQJJoXqFqNGjLH2o_g2vHuBkV6k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/5ce03b-cd2c-441a-bcec-e12d16f44153/1/zn_f9IC7kN2LJtKCMJrxYEVeyws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.30.96.0/24
IPv6:
2a10:8540::/29
Signature Algorithm: sha256WithRSAEncryption
10:5c:d5:1c:42:fd:72:59:bf:af:c9:a8:46:b2:fc:76:4f:03:
ee:4f:24:16:7d:b0:77:5d:c3:63:68:2a:20:57:49:f7:a5:a6:
50:c8:b9:69:9c:ba:61:1b:4a:4b:26:3d:8d:8f:8e:51:6d:9b:
99:e0:17:8b:3e:79:e7:86:59:a4:06:cf:b9:09:26:06:50:ec:
33:40:2f:41:67:87:97:56:5e:9e:d1:dc:61:d7:5a:ee:e4:a0:
d6:96:3a:76:d2:11:56:68:2a:d7:3f:d9:5a:86:1e:5c:bb:8d:
8d:64:b4:3e:fe:00:a5:f9:be:5b:37:2e:75:eb:60:4d:5c:16:
da:cf:9e:f5:bb:83:d8:fb:2f:a2:82:8c:6e:bb:d2:7d:a0:bd:
3f:65:44:21:e2:cf:4a:43:90:ff:19:97:09:18:12:50:d8:65:
b7:20:ec:7f:02:3f:37:0e:c7:aa:63:8c:cd:5b:cf:e0:a7:b6:
a6:f5:a0:25:ce:79:0e:03:42:50:6f:f4:c7:2d:03:38:a2:f6:
5f:c5:e3:df:49:76:bd:b9:9e:e5:8c:7c:39:f5:ae:f5:9d:05:
46:6d:8f:a5:ef:79:2f:03:a2:ff:be:f7:83:1f:9c:af:18:11:
21:74:93:60:6d:18:26:63:a7:7d:44:4c:40:e2:1d:b4:9c:0f:
97:17:37:28
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZY/owRoWQojmeHUP8+WseFrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlN2ZkZmY0ODBiYjkwZGQ4YjI2ZDI4MjMwOWFmMTYwNDU1
ZWNiMGIwHhcNMjUwNDE2MTcyNjEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OTAyNDlhMTdhODVhOGQxYTMyYzdkYThmZTBkYWYxZWUwNjQ1N2E5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQH/u4z47RggxLz1AWDoLKSAmeZk
po9QThcK4Ushv953hUrun8rK3g/r06lKr03bw55W8bKsH8Kv/BlNejoGwBnz86YS
u6iGcKIqhuhLK6LhoKFwHftBSmQpNLCEbdV86hoyDaxYSP6ThfjE0iF6J74CNre/
v3u/mz5UP4+fGeLyTW/edc40D0Lx/2WDPWm616nQ1aucEOU1+jYwAJqRwYIY7XRM
2QjMOIXNzA6LfzBVq7Rl0u7jgI5ZNbtWqlxErXM2g5eCmIQrkO75OraEAW6FBQaF
oOYnPRtXW3hoH634Pi5dj/ddI8zGqYhu/yZgQMzNuIahCxp3TNK7lZxR9wIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFEkCSaF6hajRoyx9qP4Nrx7gZFepMB8GA1UdIwQY
MBaAFM5/3/SAu5DdiybSgjCa8WBFXssLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvem5fZjlJQzdrTjJMSnRLQ01KcnhZRVZleXdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi81Y2UwM2ItY2QyYy00NDFhLWJjZWMt
ZTEyZDE2ZjQ0MTUzLzEvU1FKSm9YcUZxTkdqTEgyb19nMnZIdUJrVjZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi81Y2UwM2ItY2QyYy00NDFhLWJjZWMtZTEyZDE2ZjQ0MTUz
LzEvem5fZjlJQzdrTjJMSnRLQ01KcnhZRVZleXdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAUR5gMA0E
AgACMAcDBQMqEIVAMA0GCSqGSIb3DQEBCwUAA4IBAQAQXNUcQv1yWb+vyahGsvx2
TwPuTyQWfbB3XcNjaCogV0n3paZQyLlpnLphG0pLJj2Nj45RbZuZ4BeLPnnnhlmk
Bs+5CSYGUOwzQC9BZ4eXVl6e0dxh11ru5KDWljp20hFWaCrXP9lahh5cu42NZLQ+
/gCl+b5bNy5162BNXBbaz571u4PY+y+igoxuu9J9oL0/ZUQh4s9KQ5D/GZcJGBJQ
2GW3IOx/Aj83DseqY4zNW8/gp7am9aAlznkOA0JQb/THLQM4ovZfxePfSXa9uZ7l
jHw59a71nQVGbY+l73kvA6L/vveDH5yvGBEhdJNgbRgmY6d9RExA4h20nA+XFzco
-----END CERTIFICATE-----
Generated at Wed Apr 23 08:01:56 2025 by rpki-client