Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/dc06bd-e834-405f-8c33-9e5f90538336/1/vG-sL64PzFjoHvBKrdJSTxY4LJY.roa
File: vG-sL64PzFjoHvBKrdJSTxY4LJY.roa (raw, json)
Hash identifier: eq6XQDgluMAH7RNgHwEJGrW57NnrxZaKBUUVn7gebfo=
Subject key identifier: BC:6F:AC:2F:AE:0F:CC:58:E8:1E:F0:4A:AD:D2:52:4F:16:38:2C:96
Certificate issuer: /CN=2fa5f05f99e0250040a431d2bedcab7f8928e9b2
Certificate serial: 01978A3AAF304663F6BBB29164B8CA27ED89
Authority key identifier: 2F:A5:F0:5F:99:E0:25:00:40:A4:31:D2:BE:DC:AB:7F:89:28:E9:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6XwX5ngJQBApDHSvtyrf4ko6bI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/dc06bd-e834-405f-8c33-9e5f90538336/1/vG-sL64PzFjoHvBKrdJSTxY4LJY.roa
Signing time: Thu 19 Jun 2025 22:06:31 +0000
ROA not before: Thu 19 Jun 2025 22:06:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29695
IP address blocks: 91.201.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/dc06bd-e834-405f-8c33-9e5f90538336/1/L6XwX5ngJQBApDHSvtyrf4ko6bI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/dc06bd-e834-405f-8c33-9e5f90538336/1/L6XwX5ngJQBApDHSvtyrf4ko6bI.mft
rsync://rpki.ripe.net/repository/DEFAULT/L6XwX5ngJQBApDHSvtyrf4ko6bI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8a:3a:af:30:46:63:f6:bb:b2:91:64:b8:ca:27:ed:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa5f05f99e0250040a431d2bedcab7f8928e9b2
Validity
Not Before: Jun 19 22:06:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bc6fac2fae0fcc58e81ef04aadd2524f16382c96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ba:9b:03:88:cb:aa:df:5f:a4:f9:87:2a:70:
2b:17:28:f7:37:a1:54:cb:ba:47:61:f0:47:ee:8a:
cf:19:7b:ad:c3:7a:9b:bf:dc:a8:91:45:e7:b6:34:
dd:28:51:36:fa:d6:75:54:61:ad:3b:2a:df:17:07:
13:a9:dd:77:5f:5b:89:b2:14:d7:ec:c0:57:ea:b4:
c0:ce:41:5f:63:7d:6f:e0:8b:5a:9a:b0:d4:b2:03:
c0:29:35:89:41:f7:d9:fb:cd:29:82:52:09:d2:a1:
39:80:1d:d4:76:56:60:6d:6d:1a:d0:d2:6f:ae:86:
9c:fc:fa:30:fe:6a:30:9a:cf:f4:62:08:dc:a3:6e:
b4:c0:62:ea:81:f0:fb:07:ea:20:43:00:e2:00:e8:
a1:45:b5:c5:cb:20:c3:16:af:21:f3:05:aa:ae:87:
99:69:b6:e6:4e:f0:4c:07:09:03:50:16:e3:0f:ac:
8d:69:15:6f:4f:56:88:8c:1d:17:53:5b:40:07:98:
77:6a:84:b1:4f:03:86:d5:08:0d:24:93:eb:fc:a2:
e7:d2:36:fd:5c:0f:f5:de:84:09:31:aa:ca:18:2e:
6a:ad:98:2c:da:98:1c:62:e9:38:32:69:03:f4:70:
7a:72:01:68:0d:24:4e:a6:95:40:f9:69:27:30:db:
3e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:6F:AC:2F:AE:0F:CC:58:E8:1E:F0:4A:AD:D2:52:4F:16:38:2C:96
X509v3 Authority Key Identifier:
keyid:2F:A5:F0:5F:99:E0:25:00:40:A4:31:D2:BE:DC:AB:7F:89:28:E9:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6XwX5ngJQBApDHSvtyrf4ko6bI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/dc06bd-e834-405f-8c33-9e5f90538336/1/vG-sL64PzFjoHvBKrdJSTxY4LJY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/dc06bd-e834-405f-8c33-9e5f90538336/1/L6XwX5ngJQBApDHSvtyrf4ko6bI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.201.201.0/24
Signature Algorithm: sha256WithRSAEncryption
39:7b:f3:6e:2d:e1:0a:3d:aa:a6:f0:9e:17:06:1d:0d:8c:da:
89:05:41:45:93:13:e6:06:db:d1:4c:a6:f2:d8:07:a3:34:8c:
d8:61:59:03:3c:61:02:27:ec:fa:fc:58:f4:09:b0:e6:3c:f7:
e4:c2:74:e9:c6:d6:35:d7:7d:d7:30:c2:1f:a1:59:81:ff:d7:
49:e2:8a:27:e5:f6:3c:24:af:89:58:ed:07:f7:98:a5:f4:37:
55:a0:21:e6:6b:60:9a:1a:81:72:e2:1e:ef:29:b8:77:a3:ad:
6a:bc:62:40:f0:3b:fc:56:2e:56:2a:ea:27:64:40:0a:57:5f:
a8:13:8f:89:a5:1e:e3:54:81:c3:b8:ff:bc:3e:73:16:eb:7e:
1c:97:8a:15:b7:c1:eb:38:c4:33:79:5b:7f:a2:75:ed:b3:40:
04:80:2e:fa:bc:c7:8b:b7:b9:31:f3:0a:e2:9c:4a:88:8d:19:
a8:c7:14:d4:99:46:97:be:d4:ac:2f:ee:a4:c3:9e:5e:c6:92:
8c:e0:4a:82:18:2d:df:77:9c:d7:94:ce:f8:c5:15:bc:9d:a6:
22:97:58:82:aa:4c:5b:c3:11:cb:2c:4b:60:83:ea:40:89:4f:
9a:89:0f:22:0f:f1:0f:d2:87:77:49:3e:2e:56:94:9d:ba:80:
a2:be:52:c5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZeKOq8wRmP2u7KRZLjKJ+2JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmYTVmMDVmOTllMDI1MDA0MGE0MzFkMmJlZGNhYjdmODky
OGU5YjIwHhcNMjUwNjE5MjIwNjMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYzZmYWMyZmFlMGZjYzU4ZTgxZWYwNGFhZGQyNTI0ZjE2MzgyYzk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzLqbA4jLqt9fpPmHKnArFyj3N6FU
y7pHYfBH7orPGXutw3qbv9yokUXntjTdKFE2+tZ1VGGtOyrfFwcTqd13X1uJshTX
7MBX6rTAzkFfY31v4ItamrDUsgPAKTWJQffZ+80pglIJ0qE5gB3UdlZgbW0a0NJv
roac/Pow/mowms/0Ygjco260wGLqgfD7B+ogQwDiAOihRbXFyyDDFq8h8wWqroeZ
abbmTvBMBwkDUBbjD6yNaRVvT1aIjB0XU1tAB5h3aoSxTwOG1QgNJJPr/KLn0jb9
XA/13oQJMarKGC5qrZgs2pgcYuk4MmkD9HB6cgFoDSROppVA+WknMNs+kQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLxvrC+uD8xY6B7wSq3SUk8WOCyWMB8GA1UdIwQY
MBaAFC+l8F+Z4CUAQKQx0r7cq3+JKOmyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDZYd1g1bmdKUUJBcERIU3Z0eXJmNGtvNmJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9kYzA2YmQtZTgzNC00MDVmLThjMzMt
OWU1ZjkwNTM4MzM2LzEvdkctc0w2NFB6RmpvSHZCS3JkSlNUeFk0TEpZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9kYzA2YmQtZTgzNC00MDVmLThjMzMtOWU1ZjkwNTM4MzM2
LzEvTDZYd1g1bmdKUUJBcERIU3Z0eXJmNGtvNmJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8nJMA0G
CSqGSIb3DQEBCwUAA4IBAQA5e/NuLeEKPaqm8J4XBh0NjNqJBUFFkxPmBtvRTKby
2AejNIzYYVkDPGECJ+z6/Fj0CbDmPPfkwnTpxtY1133XMMIfoVmB/9dJ4oon5fY8
JK+JWO0H95il9DdVoCHma2CaGoFy4h7vKbh3o61qvGJA8Dv8Vi5WKuonZEAKV1+o
E4+JpR7jVIHDuP+8PnMW634cl4oVt8HrOMQzeVt/onXts0AEgC76vMeLt7kx8wri
nEqIjRmoxxTUmUaXvtSsL+6kw55expKM4EqCGC3fd5zXlM74xRW8naYil1iCqkxb
wxHLLEtgg+pAiU+aiQ8iD/EP0od3ST4uVpSduoCivlLF
-----END CERTIFICATE-----
Generated at Sun Jul 27 05:49:24 2025 by rpki-client