Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/4tp9tfzajL3wSaoTUAgkJxXEA3w.roa
File: 4tp9tfzajL3wSaoTUAgkJxXEA3w.roa (raw, json)
Hash identifier: OSBHhC2pu6UzU9j8q1U5vUQ/dZVJ0VYgveQ3T0xJp1E=
Subject key identifier: E2:DA:7D:B5:FC:DA:8C:BD:F0:49:AA:13:50:08:24:27:15:C4:03:7C
Certificate issuer: /CN=d716209d7def98a2bb34977f65009b3520da256e
Certificate serial: 0197CBC9638283CBE21EDE910B6DCB89E31C
Authority key identifier: D7:16:20:9D:7D:EF:98:A2:BB:34:97:7F:65:00:9B:35:20:DA:25:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/4tp9tfzajL3wSaoTUAgkJxXEA3w.roa
Signing time: Wed 02 Jul 2025 15:37:42 +0000
ROA not before: Wed 02 Jul 2025 15:37:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204104
IP address blocks: 91.239.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:c9:63:82:83:cb:e2:1e:de:91:0b:6d:cb:89:e3:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d716209d7def98a2bb34977f65009b3520da256e
Validity
Not Before: Jul 2 15:37:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e2da7db5fcda8cbdf049aa135008242715c4037c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5d:b6:a8:9d:9b:a2:42:c5:61:95:6d:64:a3:
69:fa:5a:2c:de:a3:7d:ff:e8:d6:fd:0b:be:0c:8a:
31:3b:f0:ca:49:73:0f:5c:ae:1f:33:c8:4b:fa:e6:
36:ee:22:84:9a:40:42:73:0d:00:52:fa:69:d1:22:
2a:97:ae:99:13:ff:fa:e9:f4:ab:8f:93:2a:8c:3d:
f1:eb:95:99:1b:55:81:5c:cb:e1:a2:5e:54:db:09:
e8:89:33:cb:95:ca:8b:00:6f:59:1e:1f:43:d4:bc:
2d:fb:23:de:fd:42:03:68:4d:61:f1:12:99:60:a6:
12:cf:ab:18:9f:ae:03:8d:80:5a:21:83:24:c7:72:
69:1c:c0:52:90:61:55:b0:87:83:22:e2:0c:98:88:
8d:bc:7f:09:73:ab:00:32:e6:26:03:e5:72:dc:c2:
42:27:a4:39:fc:7f:0b:dd:8b:0a:2f:fe:d7:ed:4a:
37:33:fe:8e:40:0f:d6:78:76:d3:de:54:d6:64:35:
de:67:57:00:e3:a0:ed:4b:f6:09:3b:2d:51:24:e6:
af:cb:c2:36:e2:63:ce:46:fa:39:d2:cb:8c:cd:0e:
20:cd:81:b6:2c:a5:42:de:b2:b0:eb:b6:02:86:76:
8d:92:52:e8:b0:38:ab:e8:fd:1a:db:f4:1d:b8:cc:
33:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:DA:7D:B5:FC:DA:8C:BD:F0:49:AA:13:50:08:24:27:15:C4:03:7C
X509v3 Authority Key Identifier:
keyid:D7:16:20:9D:7D:EF:98:A2:BB:34:97:7F:65:00:9B:35:20:DA:25:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/4tp9tfzajL3wSaoTUAgkJxXEA3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.192.0/24
Signature Algorithm: sha256WithRSAEncryption
28:02:53:db:6b:23:3e:25:f9:5e:20:94:cd:91:b8:8d:05:26:
a2:2a:be:cd:67:90:30:0b:88:45:2a:25:ea:eb:ed:34:3c:74:
96:6e:49:33:7a:bb:78:df:38:d8:dd:20:cf:a1:70:87:61:38:
2e:da:1b:bb:70:2b:2d:5a:25:41:5c:8c:53:3e:a8:c0:2c:e6:
77:ee:a5:5a:e7:99:d3:bf:c0:65:a4:66:d5:ba:ad:df:f7:98:
26:e9:ef:93:a7:15:30:b2:94:3f:e9:8c:9b:11:9b:67:8e:a9:
c4:78:3c:3f:d5:ed:57:d9:56:12:51:d8:e2:e9:da:92:55:27:
f5:16:dc:5e:71:28:c1:ad:5f:89:e8:a9:98:17:d4:85:51:57:
eb:a7:ea:1c:99:3f:36:c3:12:c6:cb:7f:40:d8:73:8b:d5:c5:
09:d3:da:88:09:c0:2a:41:91:95:70:e4:95:3d:c3:65:d9:2c:
42:fc:8b:60:ec:99:44:8a:cd:53:8f:fe:d2:e5:13:65:5d:ba:
e6:36:50:37:45:b2:e3:a0:2c:dc:d6:84:24:4e:90:ae:44:f2:
9d:67:09:b1:84:99:fc:58:58:73:13:42:ba:35:5a:7d:79:5f:
ea:4f:c7:88:2e:a6:96:f4:84:c2:bb:ef:3a:15:9c:f5:10:f9:
0a:5c:db:e5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZfLyWOCg8viHt6RC23LieMcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3MTYyMDlkN2RlZjk4YTJiYjM0OTc3ZjY1MDA5YjM1MjBk
YTI1NmUwHhcNMjUwNzAyMTUzNzQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMmRhN2RiNWZjZGE4Y2JkZjA0OWFhMTM1MDA4MjQyNzE1YzQwMzdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo122qJ2bokLFYZVtZKNp+los3qN9
/+jW/Qu+DIoxO/DKSXMPXK4fM8hL+uY27iKEmkBCcw0AUvpp0SIql66ZE//66fSr
j5MqjD3x65WZG1WBXMvhol5U2wnoiTPLlcqLAG9ZHh9D1Lwt+yPe/UIDaE1h8RKZ
YKYSz6sYn64DjYBaIYMkx3JpHMBSkGFVsIeDIuIMmIiNvH8Jc6sAMuYmA+Vy3MJC
J6Q5/H8L3YsKL/7X7Uo3M/6OQA/WeHbT3lTWZDXeZ1cA46DtS/YJOy1RJOavy8I2
4mPORvo50suMzQ4gzYG2LKVC3rKw67YChnaNklLosDir6P0a2/QduMwzlQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOLafbX82oy98EmqE1AIJCcVxAN8MB8GA1UdIwQY
MBaAFNcWIJ1975iiuzSXf2UAmzUg2iVuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXhZZ25YM3ZtS0s3TkpkX1pRQ2JOU0RhSlc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9iNTJlMDItM2FmOC00ZWJiLTk5ZDMt
ODUxZDljMDQ0ZTcwLzEvNHRwOXRmemFqTDN3U2FvVFVBZ2tKeFhFQTN3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi9iNTJlMDItM2FmOC00ZWJiLTk5ZDMtODUxZDljMDQ0ZTcw
LzEvMXhZZ25YM3ZtS0s3TkpkX1pRQ2JOU0RhSlc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+/AMA0G
CSqGSIb3DQEBCwUAA4IBAQAoAlPbayM+JfleIJTNkbiNBSaiKr7NZ5AwC4hFKiXq
6+00PHSWbkkzert43zjY3SDPoXCHYTgu2hu7cCstWiVBXIxTPqjALOZ37qVa55nT
v8BlpGbVuq3f95gm6e+TpxUwspQ/6YybEZtnjqnEeDw/1e1X2VYSUdji6dqSVSf1
FtxecSjBrV+J6KmYF9SFUVfrp+ocmT82wxLGy39A2HOL1cUJ09qICcAqQZGVcOSV
PcNl2SxC/Itg7JlEis1Tj/7S5RNlXbrmNlA3RbLjoCzc1oQkTpCuRPKdZwmxhJn8
WFhzE0K6NVp9eV/qT8eILqaW9ITCu+86FZz1EPkKXNvl
-----END CERTIFICATE-----
Generated at Sat Jul 26 21:09:15 2025 by rpki-client