Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/d3aJ-4s3b0XQhPZWIMC7alyfBOU.roa
File: d3aJ-4s3b0XQhPZWIMC7alyfBOU.roa (raw, json)
Hash identifier: lUrFbjaMQOBwh3PKz+J4c1ZHgMiiHoAtuygvxP3srTY=
Subject key identifier: 77:76:89:FB:8B:37:6F:45:D0:84:F6:56:20:C0:BB:6A:5C:9F:04:E5
Certificate issuer: /CN=fc157d396ed992843daeef7b9cca73b043966c08
Certificate serial: 01980B1DF1E5910C699D7A54C417E0CFCB5E
Authority key identifier: FC:15:7D:39:6E:D9:92:84:3D:AE:EF:7B:9C:CA:73:B0:43:96:6C:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/d3aJ-4s3b0XQhPZWIMC7alyfBOU.roa
Signing time: Mon 14 Jul 2025 22:46:08 +0000
ROA not before: Mon 14 Jul 2025 22:46:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49556
IP address blocks: 217.18.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:0b:1d:f1:e5:91:0c:69:9d:7a:54:c4:17:e0:cf:cb:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc157d396ed992843daeef7b9cca73b043966c08
Validity
Not Before: Jul 14 22:46:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=777689fb8b376f45d084f65620c0bb6a5c9f04e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:92:47:f2:52:bb:d6:91:45:f8:1a:ad:db:a0:
80:9b:a8:46:74:55:c1:c4:d9:2b:37:6f:43:bb:ff:
80:1e:91:5f:96:51:a9:3a:a2:be:0d:c8:38:d2:27:
4e:ae:4c:e4:b8:2d:1a:bc:c2:4e:29:0c:2e:e5:bb:
b6:f8:43:7f:0e:4b:22:ac:88:36:43:53:5c:2d:41:
82:83:67:b3:4c:af:a1:83:0c:3c:55:cd:bd:c3:80:
60:23:d0:36:f4:c8:ae:fb:ea:7e:55:c6:27:cb:02:
82:e6:8c:dc:6e:32:b4:60:54:aa:e5:68:fe:b0:30:
b0:a5:b3:b7:41:6e:7c:d8:6a:e6:15:ea:53:d8:ad:
6b:c9:7f:a6:31:9a:5a:09:e1:9d:50:5a:c5:e8:81:
ca:cc:8b:6f:36:45:6c:90:02:c0:ae:43:18:0b:f5:
d6:25:43:1b:c5:fb:51:d0:97:4f:88:6a:ec:ed:23:
f7:17:ee:20:0e:d3:a4:5f:93:98:aa:66:67:bc:25:
59:d9:5f:1a:f0:fe:80:b2:17:73:51:d6:76:13:2c:
0e:d5:45:81:b0:60:84:4b:90:10:ab:b1:e0:25:74:
e3:5b:53:5a:43:0c:a3:00:9e:2b:5d:35:d3:3f:07:
77:ac:b3:6d:e3:8f:75:f9:31:b2:46:95:99:e7:a9:
99:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:76:89:FB:8B:37:6F:45:D0:84:F6:56:20:C0:BB:6A:5C:9F:04:E5
X509v3 Authority Key Identifier:
keyid:FC:15:7D:39:6E:D9:92:84:3D:AE:EF:7B:9C:CA:73:B0:43:96:6C:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/d3aJ-4s3b0XQhPZWIMC7alyfBOU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.18.94.0/24
Signature Algorithm: sha256WithRSAEncryption
18:a0:32:8f:71:91:89:bf:4e:94:f2:01:64:cb:ef:e1:8d:11:
34:4c:e7:ed:74:fb:ba:10:ee:77:bf:3b:5d:ed:01:2e:ab:07:
19:84:e9:02:3a:aa:f2:13:01:60:cf:93:da:83:66:94:6c:86:
0d:25:b8:3d:be:a9:95:e8:25:42:cc:0d:a9:02:b2:88:89:32:
03:9f:c9:e6:e7:bd:53:0b:4f:33:9a:50:73:ae:28:43:3c:ff:
f1:6e:f2:8d:57:90:50:c7:75:8d:85:7d:f6:f5:9d:7d:e2:5e:
e3:fd:de:2d:a9:a7:90:2e:d4:10:f5:e6:11:e5:05:ba:8a:fa:
e5:2a:c6:a3:d1:02:34:9d:26:cf:2d:86:29:92:8a:b1:c4:1c:
90:a2:78:fc:ec:61:5c:e9:c3:6a:bd:fd:46:6f:d0:0a:3a:1f:
ec:8d:41:40:80:48:50:95:cc:41:3d:e2:2f:71:cd:f4:b8:aa:
ce:44:e5:8b:0a:b0:54:17:92:a0:e1:11:7e:7d:95:5b:1a:ae:
23:ef:aa:99:e7:25:f7:3e:ee:c8:ca:47:1c:11:fa:6b:bd:10:
17:b4:65:c3:29:01:59:61:95:5a:65:b2:13:5c:ed:87:b4:f9:
47:10:37:19:7b:4c:e5:ab:1c:79:c6:82:8a:8e:23:4e:3e:8f:
3b:27:cb:16
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZgLHfHlkQxpnXpUxBfgz8teMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjMTU3ZDM5NmVkOTkyODQzZGFlZWY3YjljY2E3M2IwNDM5
NjZjMDgwHhcNMjUwNzE0MjI0NjA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3Nzc2ODlmYjhiMzc2ZjQ1ZDA4NGY2NTYyMGMwYmI2YTVjOWYwNGU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA25JH8lK71pFF+Bqt26CAm6hGdFXB
xNkrN29Du/+AHpFfllGpOqK+Dcg40idOrkzkuC0avMJOKQwu5bu2+EN/DksirIg2
Q1NcLUGCg2ezTK+hgww8Vc29w4BgI9A29Miu++p+VcYnywKC5ozcbjK0YFSq5Wj+
sDCwpbO3QW582GrmFepT2K1ryX+mMZpaCeGdUFrF6IHKzItvNkVskALArkMYC/XW
JUMbxftR0JdPiGrs7SP3F+4gDtOkX5OYqmZnvCVZ2V8a8P6AshdzUdZ2EywO1UWB
sGCES5AQq7HgJXTjW1NaQwyjAJ4rXTXTPwd3rLNt4491+TGyRpWZ56mZtQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHd2ifuLN29F0IT2ViDAu2pcnwTlMB8GA1UdIwQY
MBaAFPwVfTlu2ZKEPa7ve5zKc7BDlmwIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0JWOU9XN1prb1E5cnU5N25NcHpzRU9XYkFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9mY2VhNTAtZmU0Ny00NjY0LTkyNjct
YzBkY2NkYjdhOTA1LzEvZDNhSi00czNiMFhRaFBaV0lNQzdhbHlmQk9VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS9mY2VhNTAtZmU0Ny00NjY0LTkyNjctYzBkY2NkYjdhOTA1
LzEvX0JWOU9XN1prb1E5cnU5N25NcHpzRU9XYkFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2RJeMA0G
CSqGSIb3DQEBCwUAA4IBAQAYoDKPcZGJv06U8gFky+/hjRE0TOftdPu6EO53vztd
7QEuqwcZhOkCOqryEwFgz5Pag2aUbIYNJbg9vqmV6CVCzA2pArKIiTIDn8nm571T
C08zmlBzrihDPP/xbvKNV5BQx3WNhX329Z194l7j/d4tqaeQLtQQ9eYR5QW6ivrl
Ksaj0QI0nSbPLYYpkoqxxByQonj87GFc6cNqvf1Gb9AKOh/sjUFAgEhQlcxBPeIv
cc30uKrOROWLCrBUF5Kg4RF+fZVbGq4j76qZ5yX3Pu7IykccEfprvRAXtGXDKQFZ
YZVaZbITXO2HtPlHEDcZe0zlqxx5xoKKjiNOPo87J8sW
-----END CERTIFICATE-----
Generated at Tue Jul 22 12:29:56 2025 by rpki-client