Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/1-ioIxCoHmTpx2kR4gzSsgZneSkk.roa
File: 1-ioIxCoHmTpx2kR4gzSsgZneSkk.roa (raw, json)
Hash identifier: 2W/B8J/JW0PU9cndPtK/bTDxtK+lS0S70gNLvr1Gv9k=
Subject key identifier: FA:2A:08:C4:2A:07:99:3A:71:DA:44:78:83:34:AC:81:99:DE:4A:49
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019898A546CB39F0A1999733977C0D442CC9
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/1-ioIxCoHmTpx2kR4gzSsgZneSkk.roa
Signing time: Mon 11 Aug 2025 10:20:24 +0000
ROA not before: Mon 11 Aug 2025 10:20:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29802
IP address blocks: 194.231.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Aug 2025 03:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:98:a5:46:cb:39:f0:a1:99:97:33:97:7c:0d:44:2c:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Aug 11 10:20:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fa2a08c42a07993a71da44788334ac8199de4a49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:10:48:77:ca:d2:1d:7f:d3:c2:88:52:4f:c3:
27:bf:aa:f8:70:79:55:79:73:9b:48:c8:4c:38:61:
67:cb:f5:65:30:9b:ee:85:f5:52:90:4b:6c:69:9b:
93:1d:0e:97:1c:a4:93:06:bf:c7:98:6f:3b:81:e6:
75:eb:4b:d4:75:43:3a:63:4a:50:d9:dd:55:b0:18:
dd:9c:8b:9a:d9:1a:9d:bd:70:9b:36:13:1d:55:b3:
d4:88:41:d1:88:35:4d:a4:cd:9d:48:ea:c1:55:56:
69:26:83:b4:f1:d5:61:a9:bf:bf:c8:4c:6b:db:94:
87:fd:b9:71:a3:d6:16:e2:f7:d5:d6:a2:32:6d:ef:
61:f6:c4:2f:4e:d7:66:a2:f2:79:1b:13:d3:b6:3b:
17:ef:f6:22:e2:9f:a3:58:14:37:23:71:aa:cc:8f:
f7:d6:ef:34:09:87:c4:fc:4c:63:32:65:54:a9:e1:
76:d3:f1:53:b8:96:84:dd:e2:97:54:99:20:21:d8:
bb:87:6a:bd:26:79:89:dd:cd:f9:d4:58:52:50:f8:
6c:17:c0:13:c0:7b:c9:c7:5b:f9:e5:23:b4:f2:69:
c0:07:08:db:e5:b0:39:05:4f:fc:45:38:14:4a:6f:
d2:6a:74:1c:1d:1b:d7:02:dc:44:82:03:66:3e:04:
2f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:2A:08:C4:2A:07:99:3A:71:DA:44:78:83:34:AC:81:99:DE:4A:49
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/1-ioIxCoHmTpx2kR4gzSsgZneSkk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.231.223.0/24
Signature Algorithm: sha256WithRSAEncryption
32:6d:ab:6f:cb:9b:0c:40:02:d2:23:ee:63:50:98:28:51:8f:
5b:8c:18:80:29:39:08:43:21:d4:b8:5d:b1:85:3a:6b:bf:93:
9b:1b:10:8d:75:f1:49:7d:03:5b:a7:20:1a:bb:31:4a:73:84:
f1:1e:bc:0c:5f:09:f1:a2:7c:26:c5:ed:19:3b:66:e7:9d:21:
05:9c:ff:04:85:3b:02:21:6c:54:d6:62:90:40:48:80:04:a0:
a6:e4:84:da:7a:0f:a6:f7:b2:e8:dc:9d:a5:28:ba:d8:6e:16:
03:05:f3:51:6f:fe:06:b0:10:47:84:43:02:f6:cc:84:63:89:
15:44:ee:61:75:6f:9a:d7:f2:a9:2c:64:8f:e1:d1:f3:5a:ed:
a6:7e:64:28:29:93:69:8b:60:a0:75:96:db:da:46:c0:89:d4:
8d:e1:e5:df:d3:8c:9b:2a:c2:32:4d:0f:fe:6c:e5:79:a7:ea:
1f:5a:7e:67:24:da:ac:a0:34:03:cc:74:07:3c:31:84:76:82:
85:ae:cc:96:4c:8f:f1:5d:b2:cf:07:e3:a1:62:2b:e2:8d:60:
04:f4:73:1b:97:ff:36:fb:43:5c:fb:b6:db:5d:67:99:41:72:
e2:7f:39:0a:1f:c2:c7:96:c1:37:ae:60:8d:37:53:cb:a8:ce:
c6:ef:71:6a
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZiYpUbLOfChmZczl3wNRCzJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0
NmQxNzEwHhcNMjUwODExMTAyMDI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYTJhMDhjNDJhMDc5OTNhNzFkYTQ0Nzg4MzM0YWM4MTk5ZGU0YTQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzRBId8rSHX/TwohST8Mnv6r4cHlV
eXObSMhMOGFny/VlMJvuhfVSkEtsaZuTHQ6XHKSTBr/HmG87geZ160vUdUM6Y0pQ
2d1VsBjdnIua2RqdvXCbNhMdVbPUiEHRiDVNpM2dSOrBVVZpJoO08dVhqb+/yExr
25SH/blxo9YW4vfV1qIybe9h9sQvTtdmovJ5GxPTtjsX7/Yi4p+jWBQ3I3GqzI/3
1u80CYfE/ExjMmVUqeF20/FTuJaE3eKXVJkgIdi7h2q9JnmJ3c351FhSUPhsF8AT
wHvJx1v55SO08mnABwjb5bA5BU/8RTgUSm/SanQcHRvXAtxEggNmPgQvxwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPoqCMQqB5k6cdpEeIM0rIGZ3kpJMB8GA1UdIwQY
MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt
MGNmMTA5M2Q0NTQ4LzEvMS1pb0l4Q29IbVRweDJrUjRnelNzZ1puZVNray5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMzUvOWQ1NGE1LTAxMzUtNGIxOC05NjFhLTBjZjEwOTNkNDU0
OC8xL0o1Ml8zMHdndmE2TllSaFdiczUyUkU1RzBYRS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMLn3zAN
BgkqhkiG9w0BAQsFAAOCAQEAMm2rb8ubDEAC0iPuY1CYKFGPW4wYgCk5CEMh1Lhd
sYU6a7+TmxsQjXXxSX0DW6cgGrsxSnOE8R68DF8J8aJ8JsXtGTtm550hBZz/BIU7
AiFsVNZikEBIgASgpuSE2noPpvey6NydpSi62G4WAwXzUW/+BrAQR4RDAvbMhGOJ
FUTuYXVvmtfyqSxkj+HR81rtpn5kKCmTaYtgoHWW29pGwInUjeHl39OMmyrCMk0P
/mzleafqH1p+ZyTarKA0A8x0BzwxhHaCha7MlkyP8V2yzwfjoWIr4o1gBPRzG5f/
NvtDXPu2211nmUFy4n85Ch/Cx5bBN65gjTdTy6jOxu9xag==
-----END CERTIFICATE-----
Generated at Thu Aug 21 11:06:37 2025 by rpki-client