Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/iuyN3NwXdsZlXThiwcR0LWVmoX4.roa
File: iuyN3NwXdsZlXThiwcR0LWVmoX4.roa (raw, json)
Hash identifier: 6R/JhKvtjb4C81R377gB5uUKDJijkYxAPU8kK0mmRJQ=
Subject key identifier: 8A:EC:8D:DC:DC:17:76:C6:65:5D:38:62:C1:C4:74:2D:65:66:A1:7E
Certificate issuer: /CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Certificate serial: 01990BA52591C4B4808566281090E04E0947
Authority key identifier: EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/iuyN3NwXdsZlXThiwcR0LWVmoX4.roa
Signing time: Tue 02 Sep 2025 18:16:36 +0000
ROA not before: Tue 02 Sep 2025 18:16:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7224
IP address blocks: 109.122.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:0b:a5:25:91:c4:b4:80:85:66:28:10:90:e0:4e:09:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Validity
Not Before: Sep 2 18:16:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8aec8ddcdc1776c6655d3862c1c4742d6566a17e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:89:31:bc:9a:45:46:ba:f5:46:1f:2c:75:74:
0e:cf:a8:ff:cd:27:f0:3a:b9:c7:2a:a3:8f:ae:7c:
8d:e0:f6:88:16:9e:6b:16:db:d8:53:34:f0:12:5b:
e4:07:5d:92:8b:af:94:b0:0e:47:44:ea:a2:6e:6b:
ea:15:39:d8:ef:f0:f1:1a:9a:d0:e6:9d:48:18:66:
1a:27:08:96:03:a1:a7:88:4f:9b:79:54:49:68:e0:
74:5f:c5:98:dc:7e:47:82:28:e4:36:7e:17:e8:70:
0a:4f:f0:62:e7:aa:c3:a4:37:7c:9a:f3:fa:ab:c4:
9e:8b:00:0b:17:c2:f2:e6:e9:a7:c2:f1:d6:1f:fb:
a7:86:d6:75:07:65:64:21:b7:1c:bd:f4:23:09:4d:
81:f6:45:f5:31:8a:82:62:22:e3:08:70:de:81:12:
8f:29:a7:3b:e2:f5:59:31:df:30:35:ea:4f:48:b1:
76:2f:b5:43:47:bf:30:b5:57:16:c5:d2:fc:8c:47:
4f:c6:3f:6e:3f:ae:14:03:c4:2e:f6:23:df:52:1c:
be:d6:af:3d:12:12:5b:40:3a:45:2b:38:af:63:03:
27:98:27:2a:9b:dd:b6:e5:c9:d7:4a:d4:14:22:ce:
a8:ac:01:fc:8b:46:76:60:e4:0b:4e:b7:7a:70:88:
99:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:EC:8D:DC:DC:17:76:C6:65:5D:38:62:C1:C4:74:2D:65:66:A1:7E
X509v3 Authority Key Identifier:
keyid:EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/iuyN3NwXdsZlXThiwcR0LWVmoX4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.57.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:aa:d2:e2:49:47:1a:01:0b:b6:65:70:86:37:41:9d:8e:a6:
c8:a2:30:72:0d:13:62:75:dc:e7:24:3b:4a:45:19:3b:26:0e:
7d:40:02:50:c5:67:c5:c0:26:15:62:a5:f7:f5:2b:d0:41:7c:
61:01:36:d5:91:fc:2e:dd:6d:03:f5:e3:b8:e4:36:4b:f5:5a:
06:08:8f:65:1e:28:2c:c2:88:7d:db:6f:e5:3a:7a:c3:4d:e3:
d7:9e:03:04:bf:ee:b4:9f:5f:7e:f6:40:48:3c:5c:93:6d:78:
6b:0b:7b:c9:e5:90:c9:d7:9c:18:c8:33:c2:df:37:49:c9:ac:
97:e2:42:44:1c:bf:1c:84:dc:8f:4c:92:32:70:b6:00:78:3e:
e9:db:66:d7:0e:e8:d8:1c:d3:fe:87:0e:a1:d8:49:c7:7c:c1:
b5:b3:5f:a7:cf:36:3d:80:20:ad:23:01:3f:56:b0:45:00:1d:
c6:62:a1:f5:20:b9:51:35:9e:3c:8c:68:bc:f7:05:ab:94:6d:
83:fa:98:5f:8a:9d:85:bc:7e:63:c8:b8:9e:a8:d0:c7:8e:4d:
6c:72:00:f2:8d:8f:23:6c:d1:6d:06:1d:5b:2e:d1:1e:c9:4d:
18:76:e4:74:f3:82:32:c9:31:2a:25:9c:32:3b:58:fc:65:c5:
c8:0b:77:1a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZkLpSWRxLSAhWYoEJDgTglHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViMzQ5YWYyYWYxMTEzNjFiMjlmY2ZlZjJlMDQzZDViZTc1
ZTNmOTgwHhcNMjUwOTAyMTgxNjM2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YWVjOGRkY2RjMTc3NmM2NjU1ZDM4NjJjMWM0NzQyZDY1NjZhMTdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYkxvJpFRrr1Rh8sdXQOz6j/zSfw
OrnHKqOPrnyN4PaIFp5rFtvYUzTwElvkB12Si6+UsA5HROqibmvqFTnY7/DxGprQ
5p1IGGYaJwiWA6GniE+beVRJaOB0X8WY3H5HgijkNn4X6HAKT/Bi56rDpDd8mvP6
q8SeiwALF8Ly5umnwvHWH/unhtZ1B2VkIbccvfQjCU2B9kX1MYqCYiLjCHDegRKP
Kac74vVZMd8wNepPSLF2L7VDR78wtVcWxdL8jEdPxj9uP64UA8Qu9iPfUhy+1q89
EhJbQDpFKzivYwMnmCcqm9225cnXStQUIs6orAH8i0Z2YOQLTrd6cIiZqwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIrsjdzcF3bGZV04YsHEdC1lZqF+MB8GA1UdIwQY
MBaAFOs0mvKvERNhsp/P7y4EPVvnXj+YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnpTYThxOFJFMkd5bjhfdkxnUTlXLWRlUDVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8zY2IxNDctYTdjMy00NGU5LWFkYzgt
OWNkNjYyYmM4MzIwLzEvaXV5TjNOd1hkc1psWFRoaXdjUjBMV1Ztb1g0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC8zY2IxNDctYTdjMy00NGU5LWFkYzgtOWNkNjYyYmM4MzIw
LzEvNnpTYThxOFJFMkd5bjhfdkxnUTlXLWRlUDVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbXo5MA0G
CSqGSIb3DQEBCwUAA4IBAQDNqtLiSUcaAQu2ZXCGN0GdjqbIojByDRNiddznJDtK
RRk7Jg59QAJQxWfFwCYVYqX39SvQQXxhATbVkfwu3W0D9eO45DZL9VoGCI9lHigs
woh922/lOnrDTePXngMEv+60n19+9kBIPFyTbXhrC3vJ5ZDJ15wYyDPC3zdJyayX
4kJEHL8chNyPTJIycLYAeD7p22bXDujYHNP+hw6h2EnHfMG1s1+nzzY9gCCtIwE/
VrBFAB3GYqH1ILlRNZ48jGi89wWrlG2D+phfip2FvH5jyLieqNDHjk1scgDyjY8j
bNFtBh1bLtEeyU0YduR084IyyTEqJZwyO1j8ZcXIC3ca
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:17:37 2025 by rpki-client