Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/5igPCN9X0bgxG5uECn6Ix_J7HO4.roa
File: 5igPCN9X0bgxG5uECn6Ix_J7HO4.roa (raw, json)
Hash identifier: pevu2Sy44NywHg7YV7OVl6vYE/WCVHhk1qeVOAIs4Q0=
Subject key identifier: E6:28:0F:08:DF:57:D1:B8:31:1B:9B:84:0A:7E:88:C7:F2:7B:1C:EE
Certificate issuer: /CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Certificate serial: 0196A57156737919B4CEE6A9A680082AEB92
Authority key identifier: 89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/5igPCN9X0bgxG5uECn6Ix_J7HO4.roa
Signing time: Tue 06 May 2025 11:53:10 +0000
ROA not before: Tue 06 May 2025 11:53:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34123
IP address blocks: 94.137.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.mft
rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 06:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a5:71:56:73:79:19:b4:ce:e6:a9:a6:80:08:2a:eb:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Validity
Not Before: May 6 11:53:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e6280f08df57d1b8311b9b840a7e88c7f27b1cee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:57:d4:22:83:c1:d5:13:16:88:bd:b8:28:66:
10:4e:33:50:20:cd:ae:ff:9d:33:1d:9f:77:28:77:
27:e7:17:01:e9:47:19:f8:da:fb:d1:05:40:c4:f9:
75:43:3d:98:6a:df:c0:d9:22:18:3a:fa:f8:03:97:
dc:01:61:6f:9a:07:f1:b7:0a:90:29:ca:01:b9:16:
12:cf:1f:c6:c9:52:18:52:d0:e8:d6:2e:6b:b5:76:
22:be:d7:21:70:65:d3:cc:cd:73:27:35:bd:67:d5:
67:6a:67:90:26:1e:dd:23:46:7a:83:f4:4d:f5:d3:
ce:32:6d:ea:84:e8:48:fa:16:bd:f1:28:c4:cb:49:
4c:b0:81:b5:3e:b4:b6:ff:5f:be:63:1d:7d:47:2f:
48:b8:c4:54:d6:60:5a:a7:6c:e7:02:08:37:d7:ba:
79:e2:10:9c:07:8e:95:f0:60:8e:e0:84:df:1e:47:
25:5c:bd:14:0b:55:92:f7:d3:2b:b0:bd:08:4b:93:
7a:b2:6e:ef:d4:b6:46:53:23:70:9e:b5:21:53:41:
84:23:b0:07:68:7c:32:b1:cc:08:d7:1d:98:bd:dc:
28:86:96:c5:8b:43:1a:3b:b0:92:d0:63:66:e2:96:
7c:16:9f:75:6c:80:34:1d:26:90:9b:7c:c1:f3:29:
45:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:28:0F:08:DF:57:D1:B8:31:1B:9B:84:0A:7E:88:C7:F2:7B:1C:EE
X509v3 Authority Key Identifier:
keyid:89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/5igPCN9X0bgxG5uECn6Ix_J7HO4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.137.93.0/24
Signature Algorithm: sha256WithRSAEncryption
15:ba:af:9d:9a:de:54:a0:a5:7e:32:30:35:13:9a:96:b2:60:
82:e4:3b:7b:5a:3b:eb:53:3b:d7:47:bb:da:c5:1c:60:05:e3:
c6:74:d3:3c:5b:b9:94:89:6e:47:38:0c:25:23:68:f8:07:4d:
00:e6:14:22:aa:36:e4:ad:34:64:8f:c2:20:58:b8:10:bf:c7:
35:58:e9:bf:ab:b4:05:da:29:e4:85:ba:e1:14:00:1b:f4:27:
0d:49:ed:63:de:c0:d8:e9:54:8b:65:c4:0b:c9:86:d9:8f:3a:
6f:99:90:03:83:20:6c:6d:47:59:0b:5d:6c:49:a6:f8:5d:f2:
98:ab:e5:03:69:13:5b:f7:11:ab:1d:82:58:f1:54:b6:5b:ea:
56:c8:d1:f7:10:51:3f:96:78:af:56:cd:8a:d1:a6:d8:3a:9f:
6e:95:ce:f6:d0:9d:44:35:f5:26:8b:64:9e:51:0d:fe:f7:4b:
9a:37:26:2b:70:3e:82:76:15:30:c1:fe:ad:f5:0a:c9:06:e5:
32:76:14:a1:c2:53:2e:cc:69:a0:93:36:a0:04:1b:59:00:e9:
67:2a:6d:5e:0e:b7:98:41:e3:db:a8:13:86:c5:cc:c7:a8:50:
e7:73:ac:b5:40:6b:ec:95:99:f4:5f:c7:89:88:82:9a:c3:d7:
fb:1f:87:2d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZalcVZzeRm0zuappoAIKuuSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5YWMwYWNiZmRiN2EyNzRlZjM2YzE2ZjU4NjBhZGEyYTI0
NzA2OTcwHhcNMjUwNTA2MTE1MzEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNjI4MGYwOGRmNTdkMWI4MzExYjliODQwYTdlODhjN2YyN2IxY2VlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1lfUIoPB1RMWiL24KGYQTjNQIM2u
/50zHZ93KHcn5xcB6UcZ+Nr70QVAxPl1Qz2Yat/A2SIYOvr4A5fcAWFvmgfxtwqQ
KcoBuRYSzx/GyVIYUtDo1i5rtXYivtchcGXTzM1zJzW9Z9VnameQJh7dI0Z6g/RN
9dPOMm3qhOhI+ha98SjEy0lMsIG1PrS2/1++Yx19Ry9IuMRU1mBap2znAgg317p5
4hCcB46V8GCO4ITfHkclXL0UC1WS99MrsL0IS5N6sm7v1LZGUyNwnrUhU0GEI7AH
aHwyscwI1x2YvdwohpbFi0MaO7CS0GNm4pZ8Fp91bIA0HSaQm3zB8ylFEQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOYoDwjfV9G4MRubhAp+iMfyexzuMB8GA1UdIwQY
MBaAFImsCsv9t6J07zbBb1hgraKiRwaXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWF3S3lfMjNvblR2TnNGdldHQ3RvcUpIQnBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS85M2E3NjgtMjY3Ny00OGQ2LTkxNGMt
ZDRkYmY3MDY2ZmQzLzEvNWlnUENOOVgwYmd4RzV1RUNuNkl4X0o3SE80LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS85M2E3NjgtMjY3Ny00OGQ2LTkxNGMtZDRkYmY3MDY2ZmQz
LzEvaWF3S3lfMjNvblR2TnNGdldHQ3RvcUpIQnBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXoldMA0G
CSqGSIb3DQEBCwUAA4IBAQAVuq+dmt5UoKV+MjA1E5qWsmCC5Dt7WjvrUzvXR7va
xRxgBePGdNM8W7mUiW5HOAwlI2j4B00A5hQiqjbkrTRkj8IgWLgQv8c1WOm/q7QF
2inkhbrhFAAb9CcNSe1j3sDY6VSLZcQLyYbZjzpvmZADgyBsbUdZC11sSab4XfKY
q+UDaRNb9xGrHYJY8VS2W+pWyNH3EFE/lnivVs2K0abYOp9ulc720J1ENfUmi2Se
UQ3+90uaNyYrcD6CdhUwwf6t9QrJBuUydhShwlMuzGmgkzagBBtZAOlnKm1eDreY
QePbqBOGxczHqFDnc6y1QGvslZn0X8eJiIKaw9f7H4ct
-----END CERTIFICATE-----
Generated at Sun Jun 8 14:50:13 2025 by rpki-client