Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/K4j3TVsL4gnmFiz9srl9RAcBvvY.roa
File: K4j3TVsL4gnmFiz9srl9RAcBvvY.roa (raw, json)
Hash identifier: wFXlK8wv1SsW+ShrU0Dc1r1iGz+dGvdi49gKuqhv10g=
Subject key identifier: 2B:88:F7:4D:5B:0B:E2:09:E6:16:2C:FD:B2:B9:7D:44:07:01:BE:F6
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 019730BD3D137E01259699646B1505571D94
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/K4j3TVsL4gnmFiz9srl9RAcBvvY.roa
Signing time: Mon 02 Jun 2025 13:03:17 +0000
ROA not before: Mon 02 Jun 2025 13:03:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24631
IP address blocks: 89.44.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 20:42:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:30:bd:3d:13:7e:01:25:96:99:64:6b:15:05:57:1d:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: Jun 2 13:03:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2b88f74d5b0be209e6162cfdb2b97d440701bef6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a3:99:98:74:f6:5f:d7:5d:13:28:57:d2:f3:
2f:de:71:4e:75:0b:5a:63:22:07:77:36:8e:15:af:
63:30:6a:5d:e2:33:1f:c8:10:aa:5f:05:40:2c:eb:
eb:a9:73:e5:de:33:6b:73:6a:a2:f3:6e:6b:8f:3b:
9c:bc:e7:b7:9d:ea:f6:b9:11:5b:ba:25:41:77:a3:
79:7e:5e:77:f7:ad:63:e3:85:87:d3:28:eb:4e:b6:
8a:bd:c6:36:3b:1b:b3:a6:a4:37:70:c4:76:14:5d:
5a:0b:7d:52:05:f4:47:5c:ff:94:53:9d:f1:7b:1f:
00:c4:cb:fc:ed:2b:a5:e1:4e:f9:ea:09:1c:b8:62:
ef:26:45:d2:f3:35:37:1a:c4:9e:d6:be:bc:6f:74:
1e:fc:f4:15:4a:fa:1a:b8:65:11:4a:8f:29:ae:4f:
fa:b8:22:87:6a:c0:17:b2:24:9e:51:b9:cb:e7:87:
1e:a7:0f:61:29:ef:27:31:55:d5:76:f9:df:c9:4c:
31:96:fc:62:ea:ab:af:00:59:d2:09:63:45:5c:66:
93:7e:54:de:99:df:00:28:b1:7e:9e:a5:a4:3c:70:
f4:43:ce:71:e6:70:c0:b0:db:70:f0:f6:4c:3f:f1:
06:75:d8:08:03:46:bc:e9:df:51:88:9d:72:4b:60:
97:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:88:F7:4D:5B:0B:E2:09:E6:16:2C:FD:B2:B9:7D:44:07:01:BE:F6
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/K4j3TVsL4gnmFiz9srl9RAcBvvY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.44.240.0/24
Signature Algorithm: sha256WithRSAEncryption
61:b9:30:34:09:a7:14:de:32:fa:f6:c8:7f:5e:48:9b:3c:ef:
95:3b:98:b4:05:a9:01:72:e6:01:ed:5b:7c:b8:98:44:c3:05:
20:54:ad:4c:4f:1b:2f:c3:c8:62:54:43:bc:16:5d:9f:39:ac:
09:6d:95:47:ad:23:13:0e:64:4c:b2:31:0f:3c:4e:10:ef:33:
f0:f4:0d:2a:5d:38:ee:59:1a:06:39:11:bb:eb:9a:49:ad:85:
ed:62:06:5a:53:1f:33:3a:92:3a:f2:12:54:e6:7c:3e:e0:92:
32:d1:f7:19:ff:d9:94:d1:ea:b4:64:83:55:88:42:53:4d:d0:
db:91:e7:78:c3:d4:46:85:10:20:96:9a:7a:34:8b:6d:c0:4d:
7a:54:0b:c1:da:e9:13:f1:d7:63:a3:c3:fc:3d:a2:8b:84:81:
5a:84:7c:c4:03:89:d7:55:f7:1c:01:e6:cf:26:fb:06:d6:fd:
1c:10:6d:f2:f7:e0:94:6c:c8:75:89:70:d9:5b:ed:4d:40:b0:
e0:77:46:bb:37:bf:65:bd:c4:db:ac:7a:80:fe:69:d9:80:df:
c7:f9:b8:b7:db:60:5e:5a:1e:ba:62:28:4e:52:80:27:35:cb:
5e:c0:33:63:c7:a5:1c:40:a0:ad:f2:a0:26:ce:a6:25:d8:5b:
d9:24:12:48
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZcwvT0TfgEllplkaxUFVx2UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkZGIzOGIzNDNkYTJkMTE5MzA5ZWRhYTE5YzdhNzg4NzAz
MjdlYmUwHhcNMjUwNjAyMTMwMzE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYjg4Zjc0ZDViMGJlMjA5ZTYxNjJjZmRiMmI5N2Q0NDA3MDFiZWY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6OZmHT2X9ddEyhX0vMv3nFOdQta
YyIHdzaOFa9jMGpd4jMfyBCqXwVALOvrqXPl3jNrc2qi825rjzucvOe3ner2uRFb
uiVBd6N5fl53961j44WH0yjrTraKvcY2OxuzpqQ3cMR2FF1aC31SBfRHXP+UU53x
ex8AxMv87Sul4U756gkcuGLvJkXS8zU3GsSe1r68b3Qe/PQVSvoauGURSo8prk/6
uCKHasAXsiSeUbnL54cepw9hKe8nMVXVdvnfyUwxlvxi6quvAFnSCWNFXGaTflTe
md8AKLF+nqWkPHD0Q85x5nDAsNtw8PZMP/EGddgIA0a86d9RiJ1yS2CXiQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCuI901bC+IJ5hYs/bK5fUQHAb72MB8GA1UdIwQY
MBaAFG3bOLND2i0RkwntqhnHp4hwMn6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmRzNHMwUGFMUkdUQ2UycUdjZW5pSEF5ZnI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9jOTYxYTAtNGY1My00MjJhLWI3ZGQt
M2RmYTUxMGQ2YjE2LzEvSzRqM1RWc0w0Z25tRml6OXNybDlSQWNCdnZZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi9jOTYxYTAtNGY1My00MjJhLWI3ZGQtM2RmYTUxMGQ2YjE2
LzEvYmRzNHMwUGFMUkdUQ2UycUdjZW5pSEF5ZnI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWSzwMA0G
CSqGSIb3DQEBCwUAA4IBAQBhuTA0CacU3jL69sh/XkibPO+VO5i0BakBcuYB7Vt8
uJhEwwUgVK1MTxsvw8hiVEO8Fl2fOawJbZVHrSMTDmRMsjEPPE4Q7zPw9A0qXTju
WRoGORG765pJrYXtYgZaUx8zOpI68hJU5nw+4JIy0fcZ/9mU0eq0ZINViEJTTdDb
ked4w9RGhRAglpp6NIttwE16VAvB2ukT8ddjo8P8PaKLhIFahHzEA4nXVfccAebP
JvsG1v0cEG3y9+CUbMh1iXDZW+1NQLDgd0a7N79lvcTbrHqA/mnZgN/H+bi322Be
Wh66YihOUoAnNctewDNjx6UcQKCt8qAmzqYl2FvZJBJI
-----END CERTIFICATE-----
Generated at Fri Jun 6 06:41:57 2025 by rpki-client