Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/078960-3c3a-40e4-9342-b2afea6d06ab/1/ml7ptFelR5O2ljd6S7JCFvTls6E.roa
File: ml7ptFelR5O2ljd6S7JCFvTls6E.roa (raw, json)
Hash identifier: cO+LDJdHBbZdrBcqhhT12vaNmyrU4QVcTJjXWjJFtzo=
Subject key identifier: 9A:5E:E9:B4:57:A5:47:93:B6:96:37:7A:4B:B2:42:16:F4:E5:B3:A1
Certificate issuer: /CN=7a3f897117599fe839a9940e81a1788244caad06
Certificate serial: 0196ED5A2CFC81151B939F857A1240A8A9C0
Authority key identifier: 7A:3F:89:71:17:59:9F:E8:39:A9:94:0E:81:A1:78:82:44:CA:AD:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ej-JcRdZn-g5qZQOgaF4gkTKrQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/078960-3c3a-40e4-9342-b2afea6d06ab/1/ml7ptFelR5O2ljd6S7JCFvTls6E.roa
Signing time: Tue 20 May 2025 11:00:32 +0000
ROA not before: Tue 20 May 2025 11:00:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57905
IP address blocks: 194.1.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/078960-3c3a-40e4-9342-b2afea6d06ab/1/ej-JcRdZn-g5qZQOgaF4gkTKrQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/078960-3c3a-40e4-9342-b2afea6d06ab/1/ej-JcRdZn-g5qZQOgaF4gkTKrQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ej-JcRdZn-g5qZQOgaF4gkTKrQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ed:5a:2c:fc:81:15:1b:93:9f:85:7a:12:40:a8:a9:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a3f897117599fe839a9940e81a1788244caad06
Validity
Not Before: May 20 11:00:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9a5ee9b457a54793b696377a4bb24216f4e5b3a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:bf:de:0f:60:ce:c2:2a:67:40:8c:83:4a:4c:
a4:34:9d:9e:c0:09:50:9e:d9:a8:0e:20:8c:b3:00:
47:3a:8b:9d:26:9e:8b:13:6f:b7:e1:aa:bb:64:3a:
cd:52:b3:ca:34:c0:1b:64:3f:9a:56:9f:40:b1:80:
33:3d:88:c4:d5:e1:ef:b6:d1:c5:00:7e:35:09:dd:
21:ac:a3:cf:b6:33:41:d1:9c:1d:cc:22:74:8c:de:
0d:d5:1e:3c:b1:26:14:09:de:a9:eb:e9:e0:ee:58:
5b:06:2b:32:e2:0b:b9:db:9f:61:b4:e1:3e:21:22:
24:6e:4a:d9:02:ff:23:98:c1:19:2a:41:6f:0d:14:
e9:71:b9:e6:53:65:c3:26:94:44:a8:aa:4c:88:f1:
68:04:b5:6c:a7:fa:1f:c0:98:81:a1:29:41:05:2c:
0e:db:51:ee:e8:6b:c8:33:f6:fc:5d:f7:b5:96:a1:
ae:2d:ff:df:77:f8:eb:96:46:7a:26:70:11:d9:82:
8d:0d:8e:6b:09:06:2d:ba:8b:c6:cf:bf:82:ba:42:
1b:ab:64:17:e1:f7:bf:5b:5a:4f:04:01:b6:24:d3:
0a:6d:c6:9a:6d:be:a3:a2:49:cb:4b:4e:89:8e:e9:
33:e4:d8:5e:50:5a:fa:eb:ce:97:32:74:07:b0:7f:
93:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:5E:E9:B4:57:A5:47:93:B6:96:37:7A:4B:B2:42:16:F4:E5:B3:A1
X509v3 Authority Key Identifier:
keyid:7A:3F:89:71:17:59:9F:E8:39:A9:94:0E:81:A1:78:82:44:CA:AD:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ej-JcRdZn-g5qZQOgaF4gkTKrQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/078960-3c3a-40e4-9342-b2afea6d06ab/1/ml7ptFelR5O2ljd6S7JCFvTls6E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/078960-3c3a-40e4-9342-b2afea6d06ab/1/ej-JcRdZn-g5qZQOgaF4gkTKrQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.1.217.0/24
Signature Algorithm: sha256WithRSAEncryption
36:e8:8a:ac:f1:55:a0:c7:4f:ae:91:f3:5f:ed:55:81:ac:25:
50:85:1d:7a:f3:fa:4c:3a:b8:95:c6:e5:cb:47:c2:78:e2:c1:
fc:5e:64:dd:e4:fa:e1:2e:fb:0c:d2:47:62:9e:ad:e6:96:f1:
3a:e7:68:7d:6b:3a:2d:14:61:fc:79:72:07:8d:ee:8e:c8:a6:
7d:9b:5d:f7:e3:03:46:32:5b:df:ad:9c:31:c4:e4:8a:2c:ea:
f7:57:01:3b:ea:f6:a1:f9:88:a0:f2:55:da:68:7d:d7:05:4a:
3f:f8:93:96:55:14:78:c5:d0:95:9d:a8:66:d5:d6:9a:5b:4f:
1e:1e:56:49:ba:5e:65:67:91:6a:d2:10:bb:b5:44:a6:72:c3:
ab:64:4c:88:a5:70:8a:24:7f:d1:6b:c4:64:92:50:27:74:41:
9e:5a:12:56:2c:e8:3d:b1:9e:77:ef:67:d9:ce:ad:a4:89:70:
6c:f1:7a:03:07:aa:76:da:25:fe:b3:9f:0e:66:7c:fe:be:5c:
1e:d2:cd:ab:47:df:d4:6e:4b:97:15:33:f3:72:26:6a:df:f1:
8c:df:9d:98:17:04:5b:4a:3d:38:e8:02:dc:e8:d5:70:89:84:
d0:4b:01:3f:af:52:ca:62:e5:d9:c0:d1:10:42:3a:67:eb:d1:
c1:66:7b:47
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZbtWiz8gRUbk5+FehJAqKnAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhM2Y4OTcxMTc1OTlmZTgzOWE5OTQwZTgxYTE3ODgyNDRj
YWFkMDYwHhcNMjUwNTIwMTEwMDMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YTVlZTliNDU3YTU0NzkzYjY5NjM3N2E0YmIyNDIxNmY0ZTViM2ExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlb/eD2DOwipnQIyDSkykNJ2ewAlQ
ntmoDiCMswBHOoudJp6LE2+34aq7ZDrNUrPKNMAbZD+aVp9AsYAzPYjE1eHvttHF
AH41Cd0hrKPPtjNB0ZwdzCJ0jN4N1R48sSYUCd6p6+ng7lhbBisy4gu5259htOE+
ISIkbkrZAv8jmMEZKkFvDRTpcbnmU2XDJpREqKpMiPFoBLVsp/ofwJiBoSlBBSwO
21Hu6GvIM/b8Xfe1lqGuLf/fd/jrlkZ6JnAR2YKNDY5rCQYtuovGz7+CukIbq2QX
4fe/W1pPBAG2JNMKbcaabb6joknLS06Jjukz5NheUFr6686XMnQHsH+TMwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJpe6bRXpUeTtpY3ekuyQhb05bOhMB8GA1UdIwQY
MBaAFHo/iXEXWZ/oOamUDoGheIJEyq0GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWotSmNSZFpuLWc1cVpRT2dhRjRna1RLclFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS8wNzg5NjAtM2MzYS00MGU0LTkzNDIt
YjJhZmVhNmQwNmFiLzEvbWw3cHRGZWxSNU8ybGpkNlM3SkNGdlRsczZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS8wNzg5NjAtM2MzYS00MGU0LTkzNDItYjJhZmVhNmQwNmFi
LzEvZWotSmNSZFpuLWc1cVpRT2dhRjRna1RLclFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwgHZMA0G
CSqGSIb3DQEBCwUAA4IBAQA26Iqs8VWgx0+ukfNf7VWBrCVQhR168/pMOriVxuXL
R8J44sH8XmTd5PrhLvsM0kdinq3mlvE652h9azotFGH8eXIHje6OyKZ9m1334wNG
MlvfrZwxxOSKLOr3VwE76vah+Yig8lXaaH3XBUo/+JOWVRR4xdCVnahm1daaW08e
HlZJul5lZ5Fq0hC7tUSmcsOrZEyIpXCKJH/Ra8RkklAndEGeWhJWLOg9sZ5372fZ
zq2kiXBs8XoDB6p22iX+s58OZnz+vlwe0s2rR9/UbkuXFTPzciZq3/GM352YFwRb
Sj046ALc6NVwiYTQSwE/r1LKYuXZwNEQQjpn69HBZntH
-----END CERTIFICATE-----
Generated at Sun Jun 8 06:35:19 2025 by rpki-client