Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/8a734a-d2b8-411e-a557-50d6ba6aacb8/1/r7OxHZf2GTJ5wnBfEdkQXvt8DAk.roa
File: r7OxHZf2GTJ5wnBfEdkQXvt8DAk.roa (raw, json)
Hash identifier: jnp/g2uOliyYItsK8FEi5KC0IT/cQea9e46W/zUoCV0=
Subject key identifier: AF:B3:B1:1D:97:F6:19:32:79:C2:70:5F:11:D9:10:5E:FB:7C:0C:09
Certificate issuer: /CN=560d1e89b4e742e69062a95d351deea96b5178fb
Certificate serial: 0197BE77F710538311E4D26F35DC36802D2D
Authority key identifier: 56:0D:1E:89:B4:E7:42:E6:90:62:A9:5D:35:1D:EE:A9:6B:51:78:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vg0eibTnQuaQYqldNR3uqWtRePs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/8a734a-d2b8-411e-a557-50d6ba6aacb8/1/r7OxHZf2GTJ5wnBfEdkQXvt8DAk.roa
Signing time: Mon 30 Jun 2025 01:33:42 +0000
ROA not before: Mon 30 Jun 2025 01:33:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1004
IP address blocks: 91.231.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/8a734a-d2b8-411e-a557-50d6ba6aacb8/1/Vg0eibTnQuaQYqldNR3uqWtRePs.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/8a734a-d2b8-411e-a557-50d6ba6aacb8/1/Vg0eibTnQuaQYqldNR3uqWtRePs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vg0eibTnQuaQYqldNR3uqWtRePs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:be:77:f7:10:53:83:11:e4:d2:6f:35:dc:36:80:2d:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=560d1e89b4e742e69062a95d351deea96b5178fb
Validity
Not Before: Jun 30 01:33:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=afb3b11d97f6193279c2705f11d9105efb7c0c09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:fb:52:14:42:63:0c:62:f3:df:33:dc:bc:50:
ad:6e:bd:b6:e3:97:81:9b:61:ee:5d:96:4c:16:38:
17:94:6f:d3:66:8b:c5:62:5e:71:6b:27:c1:1b:40:
66:07:9a:0a:ef:e9:7c:1f:18:40:f8:9a:e1:68:2f:
b5:fa:be:2b:35:cb:db:62:c9:af:48:79:04:c0:92:
93:16:17:25:04:f3:2e:63:dc:d0:4b:2c:33:aa:d1:
d7:cb:1c:69:23:cc:a4:dd:7f:46:2a:74:39:ed:84:
cf:bf:44:85:49:7e:e5:4d:63:0d:33:c1:e0:ab:d1:
a0:35:63:51:10:7c:f9:6f:78:91:f0:ca:58:e0:83:
73:5e:6c:e1:9d:2b:8d:18:29:cb:94:b1:80:c9:aa:
8c:ea:a5:28:a4:6a:02:6c:11:e2:41:6c:3e:6c:24:
58:9c:df:7a:57:07:4e:9e:79:b7:0b:1b:77:f3:47:
fb:64:f4:25:5c:ad:85:70:c1:1b:e9:a4:12:a2:c6:
da:e5:a8:8c:c5:cb:99:04:71:dd:fd:21:38:31:01:
65:2e:ae:95:ec:7a:ed:e5:d7:83:1b:18:db:e9:59:
c9:fa:32:c0:b3:fb:ab:c9:64:58:ef:1f:08:c0:17:
d2:25:ff:84:d0:5b:d1:f5:38:9d:02:f9:4f:47:0f:
fa:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:B3:B1:1D:97:F6:19:32:79:C2:70:5F:11:D9:10:5E:FB:7C:0C:09
X509v3 Authority Key Identifier:
keyid:56:0D:1E:89:B4:E7:42:E6:90:62:A9:5D:35:1D:EE:A9:6B:51:78:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vg0eibTnQuaQYqldNR3uqWtRePs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8a734a-d2b8-411e-a557-50d6ba6aacb8/1/r7OxHZf2GTJ5wnBfEdkQXvt8DAk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8a734a-d2b8-411e-a557-50d6ba6aacb8/1/Vg0eibTnQuaQYqldNR3uqWtRePs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.231.222.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:23:a8:c6:97:0c:30:5d:bb:54:78:38:1c:9d:0c:de:18:7b:
46:bd:70:4c:75:42:3c:1e:35:89:a9:b7:58:b0:ed:b7:ae:25:
7a:8f:e7:7c:ec:bc:bd:cd:28:f0:19:a8:6e:65:23:f6:56:bc:
a2:e6:35:40:e2:73:ad:ff:bc:bc:89:3e:96:fc:ae:c4:c9:4e:
00:60:23:a2:ff:c7:79:7f:70:f7:8d:44:97:ee:3e:ff:1c:60:
e9:da:3b:b6:14:40:b7:a0:6b:b1:16:f6:72:69:db:35:02:3d:
b2:86:28:8c:50:18:a1:d7:fd:12:9c:a7:54:42:3a:27:cf:7d:
8e:31:90:71:fd:9b:a9:26:6d:b4:38:f5:34:c6:6b:d2:fc:ea:
ad:38:29:5e:d0:d3:d4:a5:74:9e:92:3b:61:60:ef:11:05:52:
63:fb:d4:3c:06:7e:6a:12:86:16:cf:86:14:96:a2:2a:8b:c7:
64:1f:04:d8:3e:d5:2f:07:bc:1b:be:24:4e:08:01:a3:bc:41:
66:2c:48:39:f4:05:ed:d5:a9:61:7c:82:6b:09:8a:d4:60:7d:
c7:78:4d:17:eb:74:94:00:14:1e:e8:91:95:e5:d2:2f:8c:1d:
b8:96:85:4e:20:e5:4c:15:d0:75:a0:5f:fc:6c:38:b1:2e:21:
2e:fb:4b:a8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZe+d/cQU4MR5NJvNdw2gC0tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2MGQxZTg5YjRlNzQyZTY5MDYyYTk1ZDM1MWRlZWE5NmI1
MTc4ZmIwHhcNMjUwNjMwMDEzMzQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZmIzYjExZDk3ZjYxOTMyNzljMjcwNWYxMWQ5MTA1ZWZiN2MwYzA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwftSFEJjDGLz3zPcvFCtbr2245eB
m2HuXZZMFjgXlG/TZovFYl5xayfBG0BmB5oK7+l8HxhA+JrhaC+1+r4rNcvbYsmv
SHkEwJKTFhclBPMuY9zQSywzqtHXyxxpI8yk3X9GKnQ57YTPv0SFSX7lTWMNM8Hg
q9GgNWNREHz5b3iR8MpY4INzXmzhnSuNGCnLlLGAyaqM6qUopGoCbBHiQWw+bCRY
nN96VwdOnnm3Cxt380f7ZPQlXK2FcMEb6aQSosba5aiMxcuZBHHd/SE4MQFlLq6V
7Hrt5deDGxjb6VnJ+jLAs/uryWRY7x8IwBfSJf+E0FvR9TidAvlPRw/6GwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFK+zsR2X9hkyecJwXxHZEF77fAwJMB8GA1UdIwQY
MBaAFFYNHom050LmkGKpXTUd7qlrUXj7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmcwZWliVG5RdWFRWXFsZE5SM3VxV3RSZVBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS84YTczNGEtZDJiOC00MTFlLWE1NTct
NTBkNmJhNmFhY2I4LzEvcjdPeEhaZjJHVEo1d25CZkVka1FYdnQ4REFrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS84YTczNGEtZDJiOC00MTFlLWE1NTctNTBkNmJhNmFhY2I4
LzEvVmcwZWliVG5RdWFRWXFsZE5SM3VxV3RSZVBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+feMA0G
CSqGSIb3DQEBCwUAA4IBAQCkI6jGlwwwXbtUeDgcnQzeGHtGvXBMdUI8HjWJqbdY
sO23riV6j+d87Ly9zSjwGahuZSP2Vryi5jVA4nOt/7y8iT6W/K7EyU4AYCOi/8d5
f3D3jUSX7j7/HGDp2ju2FEC3oGuxFvZyads1Aj2yhiiMUBih1/0SnKdUQjonz32O
MZBx/ZupJm20OPU0xmvS/OqtOCle0NPUpXSekjthYO8RBVJj+9Q8Bn5qEoYWz4YU
lqIqi8dkHwTYPtUvB7wbviROCAGjvEFmLEg59AXt1alhfIJrCYrUYH3HeE0X63SU
ABQe6JGV5dIvjB24loVOIOVMFdB1oF/8bDixLiEu+0uo
-----END CERTIFICATE-----
Generated at Fri Jul 25 15:31:49 2025 by rpki-client