Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/E1EO9upkpndaiy50em5ro_t9uCQ.roa
File: E1EO9upkpndaiy50em5ro_t9uCQ.roa (raw, json)
Hash identifier: W53zyPHzL2qgdBx33fZuYZhZ3vGH4VL/6IR6RK22H0I=
Subject key identifier: 13:51:0E:F6:EA:64:A6:77:5A:8B:2E:74:7A:6E:6B:A3:FB:7D:B8:24
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 01971AC877DD31F54C9E26769FA16BF7B853
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/E1EO9upkpndaiy50em5ro_t9uCQ.roa
Signing time: Thu 29 May 2025 06:43:54 +0000
ROA not before: Thu 29 May 2025 06:43:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3269
IP address blocks: 80.71.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Jun 2025 21:31:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:1a:c8:77:dd:31:f5:4c:9e:26:76:9f:a1:6b:f7:b8:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: May 29 06:43:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=13510ef6ea64a6775a8b2e747a6e6ba3fb7db824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:86:e8:da:55:d7:43:5e:74:ce:4d:04:02:ce:
1b:15:f1:3c:33:cb:9a:26:55:23:7f:8d:08:c4:78:
38:b5:da:c0:f4:11:70:f4:e2:97:04:89:77:36:74:
10:e7:47:d6:92:6e:f9:30:2a:0d:40:e4:3d:7b:3b:
78:a3:00:8d:8b:17:bd:2d:da:f3:83:e2:af:d0:e8:
c7:e4:62:a9:d2:07:83:7d:37:a6:d5:73:a0:99:03:
c8:d4:4b:cb:a6:2c:29:ab:34:7d:e3:83:a1:e6:4e:
d4:d9:6c:b1:d7:cc:23:d7:4f:37:6a:b6:55:59:d1:
fc:73:4d:18:6a:bd:c8:06:26:5c:4b:33:36:0f:40:
93:5a:d1:80:ea:18:28:fb:7d:a4:dd:d3:a8:68:69:
bf:1b:01:70:92:ac:df:9e:bb:b8:78:34:92:47:e9:
de:15:56:c6:df:a3:eb:ab:4d:c0:78:b1:da:a2:8e:
b8:f9:ce:42:b0:f2:e0:d1:0e:7e:e1:96:6e:8f:70:
d5:d2:93:9c:09:61:5e:a9:af:9e:01:5c:5c:46:fa:
9c:2d:2a:6e:54:13:15:ad:f4:98:5a:bf:5f:d6:08:
f1:e0:5b:c1:fb:cc:87:f1:74:92:d0:71:e2:bb:db:
6c:97:a3:54:40:96:0a:2b:dc:06:0d:1b:6b:9d:78:
92:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:51:0E:F6:EA:64:A6:77:5A:8B:2E:74:7A:6E:6B:A3:FB:7D:B8:24
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/E1EO9upkpndaiy50em5ro_t9uCQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.234.0/24
Signature Algorithm: sha256WithRSAEncryption
92:ca:e2:85:53:1e:9f:c9:86:b8:ed:33:12:0e:71:6c:6c:ad:
93:e3:06:04:72:07:86:e7:6e:98:9c:98:26:2b:69:90:6e:98:
e6:5e:c9:ad:43:b7:e2:fb:d1:db:a9:22:e2:69:af:15:5a:7d:
2e:df:58:e5:90:e7:aa:49:c1:b4:bf:6f:d3:d4:c3:3a:4f:d4:
27:e3:aa:62:8a:7f:ff:be:9e:3b:83:18:26:02:bb:79:02:a9:
89:f6:b4:86:a5:cd:b3:c6:df:7e:be:37:d4:b0:a6:fe:9a:40:
f3:53:e8:65:7b:4b:81:00:56:39:82:ec:c4:46:7f:30:59:e3:
40:9b:82:32:f9:97:cf:df:57:77:e7:72:ab:da:de:a2:f9:d3:
65:56:e5:b7:84:51:47:0e:9f:ae:15:5e:54:23:43:0f:7a:51:
28:ca:88:a4:94:fd:b0:68:16:64:77:28:17:d1:38:2b:97:0e:
8e:d6:a4:c0:59:76:36:1f:4e:20:35:4b:3e:de:e0:1e:27:4b:
7b:76:4d:ef:06:d0:95:6c:68:4a:cb:9c:83:77:97:9b:d7:f2:
02:2b:04:8b:36:f5:ac:ce:63:35:22:42:06:f4:41:d4:d1:e0:
67:96:b9:cb:b4:0d:45:d1:f5:e5:5e:b7:a8:b7:5a:d2:44:e1:
9e:d0:60:fc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZcayHfdMfVMniZ2n6Fr97hTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ZTUxNjk0YzRkNDZiNGZjYzAyZmFlNzFlNWRiOTQyYTcx
MDhlNDcwHhcNMjUwNTI5MDY0MzU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMzUxMGVmNmVhNjRhNjc3NWE4YjJlNzQ3YTZlNmJhM2ZiN2RiODI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4bo2lXXQ150zk0EAs4bFfE8M8ua
JlUjf40IxHg4tdrA9BFw9OKXBIl3NnQQ50fWkm75MCoNQOQ9ezt4owCNixe9Ldrz
g+Kv0OjH5GKp0geDfTem1XOgmQPI1EvLpiwpqzR944Oh5k7U2Wyx18wj1083arZV
WdH8c00Yar3IBiZcSzM2D0CTWtGA6hgo+32k3dOoaGm/GwFwkqzfnru4eDSSR+ne
FVbG36Prq03AeLHaoo64+c5CsPLg0Q5+4ZZuj3DV0pOcCWFeqa+eAVxcRvqcLSpu
VBMVrfSYWr9f1gjx4FvB+8yH8XSS0HHiu9tsl6NUQJYKK9wGDRtrnXiS0QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBNRDvbqZKZ3WosudHpua6P7fbgkMB8GA1UdIwQY
MBaAFEnlFpTE1GtPzAL65x5duUKnEI5HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQt
MTkxODliM2M5YzdkLzEvRTFFTzl1cGtwbmRhaXk1MGVtNXJvX3Q5dUNRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQtMTkxODliM2M5Yzdk
LzEvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUEfqMA0G
CSqGSIb3DQEBCwUAA4IBAQCSyuKFUx6fyYa47TMSDnFsbK2T4wYEcgeG526YnJgm
K2mQbpjmXsmtQ7fi+9HbqSLiaa8VWn0u31jlkOeqScG0v2/T1MM6T9Qn46piin//
vp47gxgmArt5AqmJ9rSGpc2zxt9+vjfUsKb+mkDzU+hle0uBAFY5guzERn8wWeNA
m4Iy+ZfP31d353Kr2t6i+dNlVuW3hFFHDp+uFV5UI0MPelEoyoiklP2waBZkdygX
0Tgrlw6O1qTAWXY2H04gNUs+3uAeJ0t7dk3vBtCVbGhKy5yDd5eb1/ICKwSLNvWs
zmM1IkIG9EHU0eBnlrnLtA1F0fXlXreot1rSROGe0GD8
-----END CERTIFICATE-----
Generated at Thu Jun 5 05:53:39 2025 by rpki-client