Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/6qEQVs9RJhELhTSt-yx6PdqTH4k.roa
File: 6qEQVs9RJhELhTSt-yx6PdqTH4k.roa (raw, json)
Hash identifier: MJPHmKEomDKDrIf3X9T4A591PCDIN9biU5Xak896EvA=
Subject key identifier: EA:A1:10:56:CF:51:26:11:0B:85:34:AD:FB:2C:7A:3D:DA:93:1F:89
Certificate issuer: /CN=b82e7b8068c4ae9ae4ca4c3a6b2096199a741ff2
Certificate serial: 0197FA42265CFC2C12DCAC70D36A3A3B05E3
Authority key identifier: B8:2E:7B:80:68:C4:AE:9A:E4:CA:4C:3A:6B:20:96:19:9A:74:1F:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uC57gGjErprkykw6ayCWGZp0H_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/6qEQVs9RJhELhTSt-yx6PdqTH4k.roa
Signing time: Fri 11 Jul 2025 16:12:08 +0000
ROA not before: Fri 11 Jul 2025 16:12:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 26548
IP address blocks: 178.159.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/uC57gGjErprkykw6ayCWGZp0H_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 20:26:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:fa:42:26:5c:fc:2c:12:dc:ac:70:d3:6a:3a:3b:05:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b82e7b8068c4ae9ae4ca4c3a6b2096199a741ff2
Validity
Not Before: Jul 11 16:12:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eaa11056cf5126110b8534adfb2c7a3dda931f89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:47:c6:a6:20:17:06:79:a1:bc:b7:81:b4:0a:
52:e4:cf:ef:0b:38:57:d6:bc:27:c7:8c:86:b0:2f:
6a:ac:54:01:19:80:24:ee:2e:bd:d4:c6:1c:4c:2e:
00:39:92:b3:7a:2a:c4:26:74:b6:69:60:a5:a7:c8:
34:ad:20:b1:d3:d8:f3:bd:10:d3:de:85:b3:10:f1:
6a:84:9b:4a:66:dc:10:9a:27:ba:f4:8c:d1:39:b5:
df:f2:0a:c0:29:43:ef:94:ab:eb:a6:0f:0b:4a:02:
ea:6e:5a:d7:e1:22:d2:ba:57:b9:63:6b:7b:75:85:
38:04:2a:d3:1f:78:bc:05:5a:14:d0:0a:19:ac:9a:
48:93:37:88:e2:15:02:32:b3:6e:5e:9d:6d:27:e2:
a9:e3:43:c0:93:cd:92:61:64:77:a4:37:98:1f:87:
b5:4c:58:e3:6b:0a:cb:82:e3:a0:ab:2d:d8:7f:a4:
34:09:b1:fe:04:a3:54:a6:0b:1f:0f:f0:bd:ad:76:
30:8e:01:52:9a:37:91:83:a7:03:23:ca:08:ce:c5:
e9:77:8b:3a:80:95:9f:4c:a7:54:b9:2c:d8:6d:23:
e3:3e:62:93:a3:21:71:8a:53:e8:5b:2d:b9:ab:f3:
f6:31:34:e5:cf:cd:44:2b:0a:f4:2a:83:f5:b4:9b:
34:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:A1:10:56:CF:51:26:11:0B:85:34:AD:FB:2C:7A:3D:DA:93:1F:89
X509v3 Authority Key Identifier:
keyid:B8:2E:7B:80:68:C4:AE:9A:E4:CA:4C:3A:6B:20:96:19:9A:74:1F:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uC57gGjErprkykw6ayCWGZp0H_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/6qEQVs9RJhELhTSt-yx6PdqTH4k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.159.107.0/24
Signature Algorithm: sha256WithRSAEncryption
00:9d:4c:50:25:7b:de:43:0d:79:c9:3a:b5:fd:7b:1b:d3:55:
cd:fa:af:c9:f8:02:d6:c8:5a:f7:49:9e:19:f3:09:33:b9:11:
96:8f:be:81:a2:e7:0a:53:38:2d:5a:77:ea:fb:af:91:eb:b1:
72:d3:f6:15:1c:23:c9:9b:b4:e5:be:48:33:91:f4:0e:5e:5d:
02:36:8d:42:94:29:e4:64:23:e2:65:90:14:45:32:1b:f2:b6:
83:6c:2f:cd:d8:5b:9c:9d:9a:41:2e:e0:d5:c7:49:94:00:d6:
be:37:ce:e8:05:0e:65:44:22:ff:58:0f:4e:13:88:cc:11:ba:
99:df:07:8d:92:0e:78:33:6d:85:39:a3:c4:a2:08:47:6d:0b:
55:0d:a7:97:7d:a0:c6:b5:a4:41:90:56:78:be:8d:62:96:cf:
46:b8:9b:72:a1:12:9b:52:01:70:42:da:a3:38:73:e4:87:a0:
bc:c1:f8:f3:48:b0:d9:fa:37:1b:d0:4f:86:53:27:d6:75:5a:
57:93:9f:a6:92:13:9f:cb:53:09:6d:09:5a:e6:e5:f8:2b:47:
b9:db:71:a7:83:ab:5d:69:96:d0:47:50:1e:f6:79:de:e4:7e:
cf:ce:a2:15:1d:6b:da:d7:cc:65:c7:71:08:c2:e1:04:e9:af:
25:83:cb:17
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZf6QiZc/CwS3Kxw02o6OwXjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4MmU3YjgwNjhjNGFlOWFlNGNhNGMzYTZiMjA5NjE5OWE3
NDFmZjIwHhcNMjUwNzExMTYxMjA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYWExMTA1NmNmNTEyNjExMGI4NTM0YWRmYjJjN2EzZGRhOTMxZjg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUfGpiAXBnmhvLeBtApS5M/vCzhX
1rwnx4yGsC9qrFQBGYAk7i691MYcTC4AOZKzeirEJnS2aWClp8g0rSCx09jzvRDT
3oWzEPFqhJtKZtwQmie69IzRObXf8grAKUPvlKvrpg8LSgLqblrX4SLSule5Y2t7
dYU4BCrTH3i8BVoU0AoZrJpIkzeI4hUCMrNuXp1tJ+Kp40PAk82SYWR3pDeYH4e1
TFjjawrLguOgqy3Yf6Q0CbH+BKNUpgsfD/C9rXYwjgFSmjeRg6cDI8oIzsXpd4s6
gJWfTKdUuSzYbSPjPmKToyFxilPoWy25q/P2MTTlz81EKwr0KoP1tJs0RQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOqhEFbPUSYRC4U0rfssej3akx+JMB8GA1UdIwQY
MBaAFLgue4BoxK6a5MpMOmsglhmadB/yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUM1N2dHakVycHJreWt3NmF5Q1dHWnAwSF9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny8yOWM5MTUtMmNiYy00NzY4LTg0MGMt
YWFkZmE5YzA2NzQyLzEvNnFFUVZzOVJKaEVMaFRTdC15eDZQZHFUSDRrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny8yOWM5MTUtMmNiYy00NzY4LTg0MGMtYWFkZmE5YzA2NzQy
LzEvdUM1N2dHakVycHJreWt3NmF5Q1dHWnAwSF9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsp9rMA0G
CSqGSIb3DQEBCwUAA4IBAQAAnUxQJXveQw15yTq1/Xsb01XN+q/J+ALWyFr3SZ4Z
8wkzuRGWj76BoucKUzgtWnfq+6+R67Fy0/YVHCPJm7TlvkgzkfQOXl0CNo1ClCnk
ZCPiZZAURTIb8raDbC/N2FucnZpBLuDVx0mUANa+N87oBQ5lRCL/WA9OE4jMEbqZ
3weNkg54M22FOaPEoghHbQtVDaeXfaDGtaRBkFZ4vo1ils9GuJtyoRKbUgFwQtqj
OHPkh6C8wfjzSLDZ+jcb0E+GUyfWdVpXk5+mkhOfy1MJbQla5uX4K0e523Gng6td
aZbQR1Ae9nne5H7PzqIVHWva18xlx3EIwuEE6a8lg8sX
-----END CERTIFICATE-----
Generated at Tue Jul 22 05:06:44 2025 by rpki-client