Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/J__onomBdCHxpY1D1yiBgz42UvI.roa
File: J__onomBdCHxpY1D1yiBgz42UvI.roa (raw, json)
Hash identifier: z/upjrWWQgQtncEIK6uxaXpEpACsDWAPVJbyWKJZSXQ=
Subject key identifier: 27:FF:E8:9E:89:81:74:21:F1:A5:8D:43:D7:28:81:83:3E:36:52:F2
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019853811641AEC8BF69CAE7A89575E2D791
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/J__onomBdCHxpY1D1yiBgz42UvI.roa
Signing time: Tue 29 Jul 2025 00:07:05 +0000
ROA not before: Tue 29 Jul 2025 00:07:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 401199
IP address blocks: 89.106.27.0/24 maxlen: 24
103.47.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 18:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:81:16:41:ae:c8:bf:69:ca:e7:a8:95:75:e2:d7:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jul 29 00:07:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=27ffe89e89817421f1a58d43d72881833e3652f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ba:92:08:75:3f:c9:01:fb:9f:3e:f9:f1:18:
cd:18:ac:f1:0b:13:6d:a9:86:cf:c9:17:b6:10:0d:
b4:e6:61:23:35:b4:7a:99:6e:db:52:00:5e:fb:8a:
e3:b2:b7:d8:06:a5:cc:e5:61:26:29:3e:02:f4:c8:
83:90:c3:cb:64:23:a1:d3:4d:02:56:da:9f:98:27:
96:10:25:38:85:c6:03:8d:42:4a:02:cd:5e:a9:fe:
d4:1c:a6:7b:08:77:0b:92:81:c3:1c:b2:4c:13:60:
e8:cb:87:b0:b8:c1:4e:cd:90:f6:31:50:79:22:27:
95:bb:a6:b4:7a:1c:09:07:05:dd:7c:8b:55:fe:c9:
8b:c2:a5:49:80:1a:1c:84:17:ac:4f:05:e5:e6:21:
73:6b:74:57:2c:56:79:65:02:04:03:f8:09:1e:6a:
46:bc:0d:fb:8e:18:ba:ac:67:75:97:ad:f2:56:89:
3c:68:0d:8a:c4:f1:3d:06:7c:30:64:5b:92:21:b1:
55:df:47:11:26:79:16:7d:9e:19:f9:d5:97:3d:48:
56:6a:02:10:1f:46:bf:81:a2:a9:f4:f2:4f:db:d4:
e0:42:cd:9d:a3:59:29:f1:4a:fd:67:ea:6a:56:6d:
2c:f8:9a:dd:43:6e:71:dc:2d:03:e1:f4:d1:88:e4:
d0:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:FF:E8:9E:89:81:74:21:F1:A5:8D:43:D7:28:81:83:3E:36:52:F2
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/J__onomBdCHxpY1D1yiBgz42UvI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.106.27.0/24
103.47.56.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:7c:2a:06:68:49:0b:55:5a:32:61:6e:9b:ff:af:14:51:2b:
03:e9:1f:a0:48:ac:bd:7b:c5:e0:9d:d7:67:d6:3d:03:bf:5a:
20:ed:a8:47:18:51:51:67:c7:66:88:fe:5a:0b:01:b8:69:32:
7b:17:97:16:02:a1:fd:60:ae:ab:c5:6b:94:33:b5:bf:e3:05:
c1:c3:96:a4:7e:bb:9e:08:24:fa:f2:2d:c4:bb:90:5a:bc:36:
ab:32:ba:4d:38:23:26:60:bb:c9:29:fd:dd:31:61:20:88:db:
20:0e:12:92:95:0b:17:2f:f4:72:90:5a:0e:65:bd:18:f0:df:
d2:c6:a4:a7:d5:3e:27:ee:a4:c6:d3:e9:c6:5c:c6:1d:e2:76:
91:c2:c5:59:c0:76:e5:49:c7:b9:69:17:08:60:4d:22:56:c2:
46:fc:93:b1:2c:20:b0:12:e0:18:0b:6e:f3:94:8b:52:93:20:
a6:fd:d5:2b:42:d9:4b:51:c8:78:f2:64:40:e9:66:35:f7:88:
23:d0:a1:ad:73:37:fd:91:e8:9c:58:f3:d0:2c:7e:51:df:97:
45:8a:15:71:8d:a9:ce:08:79:07:ed:c3:01:35:59:fe:38:11:
cb:e6:d6:0f:d3:73:5e:c1:64:4f:ef:b7:c8:34:84:9a:52:54:
b0:1a:b0:bf
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZhTgRZBrsi/acrnqJV14teRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz
MGNiNjMwHhcNMjUwNzI5MDAwNzA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyN2ZmZTg5ZTg5ODE3NDIxZjFhNThkNDNkNzI4ODE4MzNlMzY1MmYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7qSCHU/yQH7nz758RjNGKzxCxNt
qYbPyRe2EA205mEjNbR6mW7bUgBe+4rjsrfYBqXM5WEmKT4C9MiDkMPLZCOh000C
VtqfmCeWECU4hcYDjUJKAs1eqf7UHKZ7CHcLkoHDHLJME2Doy4ewuMFOzZD2MVB5
IieVu6a0ehwJBwXdfItV/smLwqVJgBochBesTwXl5iFza3RXLFZ5ZQIEA/gJHmpG
vA37jhi6rGd1l63yVok8aA2KxPE9BnwwZFuSIbFV30cRJnkWfZ4Z+dWXPUhWagIQ
H0a/gaKp9PJP29TgQs2do1kp8Ur9Z+pqVm0s+JrdQ25x3C0D4fTRiOTQgwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFCf/6J6JgXQh8aWNQ9cogYM+NlLyMB8GA1UdIwQY
MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt
YjRiOGRiMjBiMWZiLzEvSl9fb25vbUJkQ0h4cFkxRDF5aUJnejQyVXZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi
LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWWobAwQA
Zy84MA0GCSqGSIb3DQEBCwUAA4IBAQDEfCoGaEkLVVoyYW6b/68UUSsD6R+gSKy9
e8Xgnddn1j0Dv1og7ahHGFFRZ8dmiP5aCwG4aTJ7F5cWAqH9YK6rxWuUM7W/4wXB
w5akfrueCCT68i3Eu5BavDarMrpNOCMmYLvJKf3dMWEgiNsgDhKSlQsXL/RykFoO
Zb0Y8N/SxqSn1T4n7qTG0+nGXMYd4naRwsVZwHblSce5aRcIYE0iVsJG/JOxLCCw
EuAYC27zlItSkyCm/dUrQtlLUch48mRA6WY194gj0KGtczf9keicWPPQLH5R35dF
ihVxjanOCHkH7cMBNVn+OBHL5tYP03NewWRP77fINISaUlSwGrC/
-----END CERTIFICATE-----
Generated at Wed Jul 30 02:47:40 2025 by rpki-client