Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/U5q4QiR4WiBSQSOv2vD1W1J3XSk.roa
File: U5q4QiR4WiBSQSOv2vD1W1J3XSk.roa (raw, json)
Hash identifier: ZdJ45ZazcA/TtNU+GF97U74ZRNYKvCtVCEwip83Krrs=
Subject key identifier: 53:9A:B8:42:24:78:5A:20:52:41:23:AF:DA:F0:F5:5B:52:77:5D:29
Certificate issuer: /CN=a60cee7582e9759be016c931ab34d9285d2fc8b4
Certificate serial: 0197FEAEAB36C2CBB35AB234A34E6B741ABA
Authority key identifier: A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/U5q4QiR4WiBSQSOv2vD1W1J3XSk.roa
Signing time: Sat 12 Jul 2025 12:49:09 +0000
ROA not before: Sat 12 Jul 2025 12:49:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48029
IP address blocks: 87.248.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:fe:ae:ab:36:c2:cb:b3:5a:b2:34:a3:4e:6b:74:1a:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a60cee7582e9759be016c931ab34d9285d2fc8b4
Validity
Not Before: Jul 12 12:49:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=539ab84224785a20524123afdaf0f55b52775d29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:64:33:2f:c0:32:bf:9b:28:49:25:44:53:fa:
f3:a6:18:34:10:f7:d0:1f:70:90:cf:49:09:ea:b7:
d3:de:d3:62:a8:80:99:0f:b9:a3:cb:84:74:4a:e6:
b6:2e:02:68:ab:9c:4c:3c:1a:27:d4:f6:bd:ea:98:
ac:47:c8:f9:72:29:78:dd:c6:2d:6f:56:e3:d5:a8:
8d:61:9d:42:89:a1:1b:70:e5:8b:42:29:10:95:ee:
8c:51:6d:6e:e1:13:41:40:ed:c7:e7:36:0a:f7:25:
cf:2e:3e:e2:64:e4:24:ef:d8:eb:0d:62:c9:0a:24:
8f:21:86:e9:23:7f:a8:a6:67:ce:1c:6a:cd:7b:b1:
5c:55:11:bb:8d:cf:a1:86:12:a5:74:53:70:57:79:
88:b2:dd:81:1a:d7:8a:52:1d:d2:61:6c:77:df:62:
f4:5c:19:63:0e:68:52:f3:4e:46:25:d4:fb:b9:5e:
a2:13:b4:b7:83:8e:aa:76:92:81:bb:06:b3:5d:19:
43:a6:e5:f4:71:2e:c3:f9:de:40:bd:59:36:9f:7d:
4d:ce:f4:4e:3b:be:60:38:91:05:ac:b6:c3:c6:71:
0d:a7:d6:8f:c8:cd:6e:fd:9f:22:e8:51:e0:d3:ad:
c8:35:86:0f:7e:d1:b5:6a:55:16:90:54:1e:d2:c3:
82:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:9A:B8:42:24:78:5A:20:52:41:23:AF:DA:F0:F5:5B:52:77:5D:29
X509v3 Authority Key Identifier:
keyid:A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/U5q4QiR4WiBSQSOv2vD1W1J3XSk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.159.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:93:37:93:07:4a:30:e6:79:c7:56:f0:af:6a:be:77:bc:34:
1b:78:0a:cc:21:ac:60:bc:44:ab:b9:b7:12:5c:31:6b:5a:24:
7e:11:e5:e1:1f:d3:f8:42:83:e0:32:b8:a6:f8:13:06:09:1e:
bf:df:ae:64:39:83:da:45:6b:84:18:ed:2e:bf:b6:ae:4d:28:
9d:54:c9:c5:e8:b8:f6:50:08:11:c4:1c:ef:d1:11:69:ad:64:
5e:b5:dd:b4:43:87:02:ee:7e:ee:1a:5c:f8:41:3e:03:80:6c:
b2:df:b4:d9:f6:4d:3f:48:9f:2c:7b:56:11:e2:e7:1a:55:5f:
e1:df:16:6e:44:9d:79:17:36:09:f3:91:d4:c8:25:61:5f:0e:
f0:8c:06:93:03:26:6f:08:b2:11:37:e4:27:ca:bb:10:ba:00:
5a:9c:d5:27:07:e4:2f:39:3d:19:51:ac:79:a1:40:52:65:94:
28:11:8b:f9:bd:94:99:9f:29:de:f4:f9:39:a4:01:b0:92:a0:
ee:1b:a1:0b:b8:26:13:05:5c:69:61:ba:18:0e:c2:a8:6d:20:
67:84:4e:d6:e7:55:bd:b1:6d:6e:83:04:c6:7e:80:af:6a:b2:
8f:43:32:1b:c2:90:01:88:6c:d2:74:d6:66:75:43:88:d7:e8:
87:a3:1d:cc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZf+rqs2wsuzWrI0o05rdBq6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2MGNlZTc1ODJlOTc1OWJlMDE2YzkzMWFiMzRkOTI4NWQy
ZmM4YjQwHhcNMjUwNzEyMTI0OTA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MzlhYjg0MjI0Nzg1YTIwNTI0MTIzYWZkYWYwZjU1YjUyNzc1ZDI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2QzL8Ayv5soSSVEU/rzphg0EPfQ
H3CQz0kJ6rfT3tNiqICZD7mjy4R0Sua2LgJoq5xMPBon1Pa96pisR8j5cil43cYt
b1bj1aiNYZ1CiaEbcOWLQikQle6MUW1u4RNBQO3H5zYK9yXPLj7iZOQk79jrDWLJ
CiSPIYbpI3+opmfOHGrNe7FcVRG7jc+hhhKldFNwV3mIst2BGteKUh3SYWx332L0
XBljDmhS805GJdT7uV6iE7S3g46qdpKBuwazXRlDpuX0cS7D+d5AvVk2n31NzvRO
O75gOJEFrLbDxnENp9aPyM1u/Z8i6FHg063INYYPftG1alUWkFQe0sOCwQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFOauEIkeFogUkEjr9rw9VtSd10pMB8GA1UdIwQY
MBaAFKYM7nWC6XWb4BbJMas02ShdL8i0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGd6dWRZTHBkWnZnRnNreHF6VFpLRjB2eUxRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9kZWNhZDAtMjZkYS00YjlhLWIxYTct
ZDNiMzhjZTlkYzM0LzEvVTVxNFFpUjRXaUJTUVNPdjJ2RDFXMUozWFNrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9kZWNhZDAtMjZkYS00YjlhLWIxYTctZDNiMzhjZTlkYzM0
LzEvcGd6dWRZTHBkWnZnRnNreHF6VFpLRjB2eUxRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV/ifMA0G
CSqGSIb3DQEBCwUAA4IBAQBakzeTB0ow5nnHVvCvar53vDQbeArMIaxgvESrubcS
XDFrWiR+EeXhH9P4QoPgMrim+BMGCR6/365kOYPaRWuEGO0uv7auTSidVMnF6Lj2
UAgRxBzv0RFprWRetd20Q4cC7n7uGlz4QT4DgGyy37TZ9k0/SJ8se1YR4ucaVV/h
3xZuRJ15FzYJ85HUyCVhXw7wjAaTAyZvCLIRN+QnyrsQugBanNUnB+QvOT0ZUax5
oUBSZZQoEYv5vZSZnyne9Pk5pAGwkqDuG6ELuCYTBVxpYboYDsKobSBnhE7W51W9
sW1ugwTGfoCvarKPQzIbwpABiGzSdNZmdUOI1+iHox3M
-----END CERTIFICATE-----
Generated at Sun Jul 20 20:13:55 2025 by rpki-client