Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/0cnj558EOjikahEp8WX4VbLOubg.roa
File: 0cnj558EOjikahEp8WX4VbLOubg.roa (raw, json)
Hash identifier: f158xPAAdd0ZG1iUt85VbS08KHTjeF2/q33G/RBnAZM=
Subject key identifier: D1:C9:E3:E7:9F:04:3A:38:A4:6A:11:29:F1:65:F8:55:B2:CE:B9:B8
Certificate issuer: /CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Certificate serial: 0197E16FFDE6095ABB2618AEB825A2106206
Authority key identifier: 8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/0cnj558EOjikahEp8WX4VbLOubg.roa
Signing time: Sun 06 Jul 2025 20:31:42 +0000
ROA not before: Sun 06 Jul 2025 20:31:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214061
IP address blocks: 83.142.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:e1:6f:fd:e6:09:5a:bb:26:18:ae:b8:25:a2:10:62:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Validity
Not Before: Jul 6 20:31:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d1c9e3e79f043a38a46a1129f165f855b2ceb9b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:05:cc:da:df:04:8b:01:a5:40:eb:da:cd:62:
bc:49:e9:93:d6:79:9b:d6:91:8a:5e:ab:c6:72:c0:
b6:9c:48:2f:23:ce:99:7c:b8:63:54:6a:de:24:f7:
53:98:60:43:00:2c:ba:fb:88:23:53:d3:9a:0c:f7:
4e:35:ba:00:41:86:c3:6b:30:3e:ac:53:25:80:41:
28:b7:52:2c:bb:f8:78:06:e9:b0:3a:54:d3:ae:b9:
0e:58:69:0c:34:02:cf:37:ae:b8:5b:f8:b4:1e:fd:
28:77:c7:a8:4d:9f:07:83:78:0a:e3:c5:92:0d:0c:
1b:c3:34:dd:62:97:97:d0:bb:a1:a2:a8:8b:55:bc:
7a:b3:b6:3f:80:4b:5c:72:bc:43:dc:49:96:e6:d0:
9a:ad:fe:94:35:a1:36:c7:cd:70:6f:29:a8:74:7a:
7d:99:11:ab:fe:7a:8f:cd:3c:b4:d5:b6:70:e7:a0:
8d:5c:92:32:c5:3b:d4:7f:ec:48:f1:36:e5:a0:a3:
41:3b:17:38:4f:5f:72:3b:68:07:57:01:3b:cb:71:
89:4e:f5:a3:0c:12:11:89:be:d4:3b:ac:4d:fa:1a:
4f:6d:9f:b4:b9:dc:f6:44:b4:14:87:02:ac:90:e5:
83:d7:9e:3e:7f:c7:13:97:6e:ed:6e:16:b9:7d:2c:
aa:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:C9:E3:E7:9F:04:3A:38:A4:6A:11:29:F1:65:F8:55:B2:CE:B9:B8
X509v3 Authority Key Identifier:
keyid:8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/0cnj558EOjikahEp8WX4VbLOubg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.142.213.0/24
Signature Algorithm: sha256WithRSAEncryption
02:09:a5:03:7e:83:dd:97:d7:81:4e:be:7f:77:b1:88:e1:9e:
c4:f5:e7:53:90:6d:0c:c1:40:43:98:7e:24:1c:9b:bb:30:53:
a5:a4:1e:30:b7:e1:32:a8:2d:f8:93:af:6a:07:a0:fa:a8:de:
41:4e:bd:7a:76:27:ae:07:3b:7d:36:9c:b9:61:ad:d2:29:07:
11:c5:30:0c:31:ce:41:79:43:7c:22:80:21:b9:ed:08:f3:b0:
59:c9:f8:8d:17:2f:37:4c:3d:1d:20:ce:0b:ae:15:f6:49:89:
70:b5:20:4d:1c:66:40:8f:dc:b7:6f:9c:e2:b2:df:62:58:1f:
6d:22:6a:2f:5e:e0:26:2e:9b:2a:17:54:54:81:79:15:0e:75:
8f:07:fb:ce:b9:c3:bf:e2:3e:b9:f9:62:a4:d8:5a:07:b0:0e:
28:16:aa:5b:56:87:67:90:e0:21:84:37:5a:6d:3e:f2:29:9e:
6a:15:27:a1:1c:fb:6e:ca:98:51:fd:84:e9:0c:8c:51:b4:b1:
e2:a9:c6:ea:00:24:69:c3:c5:0d:d8:bc:d8:59:04:b7:9a:f5:
bd:4f:45:bf:af:60:05:bc:81:29:3b:d6:75:23:9e:6d:5a:aa:
80:6a:8e:31:56:80:a1:ed:25:e6:85:d2:bf:64:8a:5f:43:95:
cf:cd:ff:de
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZfhb/3mCVq7JhiuuCWiEGIGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlYjQ0MWRhZGJiZWNiNjk2NWQ0ZWExZjA0NmNjNWM4ZTI4
ODE3ZmMwHhcNMjUwNzA2MjAzMTQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMWM5ZTNlNzlmMDQzYTM4YTQ2YTExMjlmMTY1Zjg1NWIyY2ViOWI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwXM2t8EiwGlQOvazWK8SemT1nmb
1pGKXqvGcsC2nEgvI86ZfLhjVGreJPdTmGBDACy6+4gjU9OaDPdONboAQYbDazA+
rFMlgEEot1Isu/h4BumwOlTTrrkOWGkMNALPN664W/i0Hv0od8eoTZ8Hg3gK48WS
DQwbwzTdYpeX0LuhoqiLVbx6s7Y/gEtccrxD3EmW5tCarf6UNaE2x81wbymodHp9
mRGr/nqPzTy01bZw56CNXJIyxTvUf+xI8TbloKNBOxc4T19yO2gHVwE7y3GJTvWj
DBIRib7UO6xN+hpPbZ+0udz2RLQUhwKskOWD154+f8cTl27tbha5fSyqDwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNHJ4+efBDo4pGoRKfFl+FWyzrm4MB8GA1UdIwQY
MBaAFI60QdrbvstpZdTqHwRsxcjiiBf8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanJSQjJ0dS15MmxsMU9vZkJHekZ5T0tJRl93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS85NzhkMGYtOTI5Ny00YzcxLTljZmIt
NDZiOTQ5MDkyY2JlLzEvMGNuajU1OEVPamlrYWhFcDhXWDRWYkxPdWJnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS85NzhkMGYtOTI5Ny00YzcxLTljZmItNDZiOTQ5MDkyY2Jl
LzEvanJSQjJ0dS15MmxsMU9vZkJHekZ5T0tJRl93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAU47VMA0G
CSqGSIb3DQEBCwUAA4IBAQACCaUDfoPdl9eBTr5/d7GI4Z7E9edTkG0MwUBDmH4k
HJu7MFOlpB4wt+EyqC34k69qB6D6qN5BTr16dieuBzt9Npy5Ya3SKQcRxTAMMc5B
eUN8IoAhue0I87BZyfiNFy83TD0dIM4LrhX2SYlwtSBNHGZAj9y3b5zist9iWB9t
ImovXuAmLpsqF1RUgXkVDnWPB/vOucO/4j65+WKk2FoHsA4oFqpbVodnkOAhhDda
bT7yKZ5qFSehHPtuyphR/YTpDIxRtLHiqcbqACRpw8UN2LzYWQS3mvW9T0W/r2AF
vIEpO9Z1I55tWqqAao4xVoCh7SXmhdK/ZIpfQ5XPzf/e
-----END CERTIFICATE-----
Generated at Sat Jul 26 15:22:21 2025 by rpki-client