Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/72d48b-865a-4e6e-96f3-5768d37f7bb5/1/negj_8qldSprHD3F1eQcTwkIJOc.roa
File: negj_8qldSprHD3F1eQcTwkIJOc.roa (raw, json)
Hash identifier: 5inaQlsg7taDD/vUiufDsWArj6aKqWfm3/zGXBynHN4=
Subject key identifier: 9D:E8:23:FF:CA:A5:75:2A:6B:1C:3D:C5:D5:E4:1C:4F:09:08:24:E7
Certificate issuer: /CN=f356cdd5a49ce6c42a9a35fa77b9727819688896
Certificate serial: 0197C0247006ACA6A23CEE9A8F8D9F4A1699
Authority key identifier: F3:56:CD:D5:A4:9C:E6:C4:2A:9A:35:FA:77:B9:72:78:19:68:88:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/81bN1aSc5sQqmjX6d7lyeBloiJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/72d48b-865a-4e6e-96f3-5768d37f7bb5/1/negj_8qldSprHD3F1eQcTwkIJOc.roa
Signing time: Mon 30 Jun 2025 09:21:42 +0000
ROA not before: Mon 30 Jun 2025 09:21:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 680
IP address blocks: 2.57.1.0/24 maxlen: 24
134.99.0.0/16 maxlen: 16
134.99.235.0/24 maxlen: 24
2a12:eac0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/72d48b-865a-4e6e-96f3-5768d37f7bb5/1/81bN1aSc5sQqmjX6d7lyeBloiJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/72d48b-865a-4e6e-96f3-5768d37f7bb5/1/81bN1aSc5sQqmjX6d7lyeBloiJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/81bN1aSc5sQqmjX6d7lyeBloiJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 14:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c0:24:70:06:ac:a6:a2:3c:ee:9a:8f:8d:9f:4a:16:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f356cdd5a49ce6c42a9a35fa77b9727819688896
Validity
Not Before: Jun 30 09:21:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9de823ffcaa5752a6b1c3dc5d5e41c4f090824e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ef:84:35:87:27:96:48:11:b8:11:fa:66:69:
03:a0:f6:dc:9f:ed:04:91:d9:60:80:5f:0b:ba:8c:
07:39:dc:bb:2a:7c:80:17:bf:c4:da:ae:d4:a4:03:
91:ed:9e:cd:25:64:7b:0d:b3:c6:e5:5b:16:98:7c:
eb:31:f7:5c:61:9c:cc:73:46:b3:dc:9b:bd:62:c6:
e2:bb:4d:d8:6c:2f:08:e9:d6:5c:03:32:d4:23:8a:
26:b4:d1:08:db:f5:60:72:02:ec:75:f4:f5:39:c4:
1a:c9:3e:7b:10:f2:28:10:53:22:b4:e0:30:da:f0:
39:7b:45:34:d8:b7:e7:a6:52:73:8b:57:90:a5:27:
c5:7b:53:40:ff:e6:bc:b6:1f:df:40:53:a0:6c:6d:
12:3c:2c:51:ed:27:4f:63:0c:33:9e:8a:23:05:ce:
08:0b:17:4d:dc:42:b6:55:5e:57:db:b8:cc:05:56:
53:8e:9f:cc:d7:7d:a7:a2:bd:2c:26:27:cf:26:e4:
71:1e:9f:06:11:b5:a3:ed:44:9f:e4:d2:80:a5:54:
49:74:d5:20:ec:67:95:0e:49:55:2c:d7:ea:f9:ae:
3b:d5:b3:ed:03:68:5a:d9:bf:cb:ee:20:68:77:d9:
27:f7:6c:d1:75:2e:22:e1:0c:58:94:b6:72:a5:12:
cc:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:E8:23:FF:CA:A5:75:2A:6B:1C:3D:C5:D5:E4:1C:4F:09:08:24:E7
X509v3 Authority Key Identifier:
keyid:F3:56:CD:D5:A4:9C:E6:C4:2A:9A:35:FA:77:B9:72:78:19:68:88:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/81bN1aSc5sQqmjX6d7lyeBloiJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/72d48b-865a-4e6e-96f3-5768d37f7bb5/1/negj_8qldSprHD3F1eQcTwkIJOc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/72d48b-865a-4e6e-96f3-5768d37f7bb5/1/81bN1aSc5sQqmjX6d7lyeBloiJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.1.0/24
134.99.0.0/16
IPv6:
2a12:eac0::/29
Signature Algorithm: sha256WithRSAEncryption
48:b3:38:12:ef:08:f1:35:e3:1b:9e:83:0c:e3:ba:2e:14:c3:
2d:17:eb:5f:2d:26:47:b9:13:55:3b:d5:1b:da:b9:e8:53:a7:
f1:d2:64:59:99:f8:16:ca:1e:fc:1b:1d:f7:61:8d:d8:2c:fb:
59:93:9c:77:49:e9:89:58:60:49:1b:59:3a:66:9f:6f:f0:33:
67:1a:cb:cc:2a:9f:b6:e0:6c:62:80:52:70:a3:49:a6:2c:7b:
5b:d6:81:64:0e:d0:72:a7:f3:9c:05:36:14:a7:f0:7e:68:a7:
f7:06:bc:c8:b8:bb:ed:35:b3:55:91:90:00:99:7f:b2:8c:95:
bc:72:3d:62:01:9b:9c:3a:86:d8:0f:41:7a:53:b5:c7:72:9c:
6c:bb:5e:be:c3:89:52:37:75:37:b7:3c:58:4b:ca:d7:68:45:
c9:19:9e:3a:d9:e8:b4:cb:23:e7:d8:60:3b:e1:c5:44:2c:cc:
86:75:0b:c9:25:44:52:c8:88:94:3c:3f:6b:aa:a9:2a:e0:ee:
73:3d:27:ca:13:bf:34:93:6e:68:f9:8f:20:83:a6:02:3b:0c:
70:fe:67:ce:09:40:c4:b7:65:d4:0e:ac:f5:d7:8a:ca:07:74:
eb:48:5e:9c:8b:fe:8b:4a:9c:5b:6e:70:43:b8:e7:02:d1:0a:
e1:9c:af:04
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAZfAJHAGrKaiPO6aj42fShaZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzNTZjZGQ1YTQ5Y2U2YzQyYTlhMzVmYTc3Yjk3Mjc4MTk2
ODg4OTYwHhcNMjUwNjMwMDkyMTQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZGU4MjNmZmNhYTU3NTJhNmIxYzNkYzVkNWU0MWM0ZjA5MDgyNGU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1O+ENYcnlkgRuBH6ZmkDoPbcn+0E
kdlggF8LuowHOdy7KnyAF7/E2q7UpAOR7Z7NJWR7DbPG5VsWmHzrMfdcYZzMc0az
3Ju9Ysbiu03YbC8I6dZcAzLUI4omtNEI2/VgcgLsdfT1OcQayT57EPIoEFMitOAw
2vA5e0U02LfnplJzi1eQpSfFe1NA/+a8th/fQFOgbG0SPCxR7SdPYwwznoojBc4I
CxdN3EK2VV5X27jMBVZTjp/M132nor0sJifPJuRxHp8GEbWj7USf5NKApVRJdNUg
7GeVDklVLNfq+a471bPtA2ha2b/L7iBod9kn92zRdS4i4QxYlLZypRLMWwIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFJ3oI//KpXUqaxw9xdXkHE8JCCTnMB8GA1UdIwQY
MBaAFPNWzdWknObEKpo1+ne5cngZaIiWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODFiTjFhU2M1c1FxbWpYNmQ3bHllQmxvaUpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni83MmQ0OGItODY1YS00ZTZlLTk2ZjMt
NTc2OGQzN2Y3YmI1LzEvbmVnal84cWxkU3BySEQzRjFlUWNUd2tJSk9jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni83MmQ0OGItODY1YS00ZTZlLTk2ZjMtNTc2OGQzN2Y3YmI1
LzEvODFiTjFhU2M1c1FxbWpYNmQ3bHllQmxvaUpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjARBAIAATALAwQAAjkBAwMA
hmMwDQQCAAIwBwMFAyoS6sAwDQYJKoZIhvcNAQELBQADggEBAEizOBLvCPE14xue
gwzjui4Uwy0X618tJke5E1U71RvauehTp/HSZFmZ+BbKHvwbHfdhjdgs+1mTnHdJ
6YlYYEkbWTpmn2/wM2cay8wqn7bgbGKAUnCjSaYse1vWgWQO0HKn85wFNhSn8H5o
p/cGvMi4u+01s1WRkACZf7KMlbxyPWIBm5w6htgPQXpTtcdynGy7Xr7DiVI3dTe3
PFhLytdoRckZnjrZ6LTLI+fYYDvhxUQszIZ1C8klRFLIiJQ8P2uqqSrg7nM9J8oT
vzSTbmj5jyCDpgI7DHD+Z84JQMS3ZdQOrPXXisoHdOtIXpyL/otKnFtucEO45wLR
CuGcrwQ=
-----END CERTIFICATE-----
Generated at Wed Jul 23 23:22:21 2025 by rpki-client