Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/XJb3trIMR2o2CfWTOuYiqHcFzws.roa
File: XJb3trIMR2o2CfWTOuYiqHcFzws.roa (raw, json)
Hash identifier: BRkLNlJqve/L2aNsuMJ+5pqTXL5/kYQCmhET9weR1yA=
Subject key identifier: 5C:96:F7:B6:B2:0C:47:6A:36:09:F5:93:3A:E6:22:A8:77:05:CF:0B
Certificate issuer: /CN=6ce97cf4d8d0bc17b3af1d62c4d71488661bd212
Certificate serial: 019712751F33C614141A2AA2A6790507BF6A
Authority key identifier: 6C:E9:7C:F4:D8:D0:BC:17:B3:AF:1D:62:C4:D7:14:88:66:1B:D2:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/XJb3trIMR2o2CfWTOuYiqHcFzws.roa
Signing time: Tue 27 May 2025 15:55:54 +0000
ROA not before: Tue 27 May 2025 15:55:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44006
IP address blocks: 91.232.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.mft
rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:12:75:1f:33:c6:14:14:1a:2a:a2:a6:79:05:07:bf:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ce97cf4d8d0bc17b3af1d62c4d71488661bd212
Validity
Not Before: May 27 15:55:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5c96f7b6b20c476a3609f5933ae622a87705cf0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:11:f0:6e:29:b8:0b:57:4d:bc:99:7b:ed:02:
8b:c6:66:4d:87:04:af:d7:79:9e:db:6a:b4:13:0b:
9b:85:06:82:a1:1c:4c:f3:00:a7:cf:4b:50:be:3a:
3b:17:2e:55:ee:f4:48:8e:db:43:3f:25:a3:bd:22:
41:b4:52:08:eb:0c:10:d0:43:6b:1d:14:b2:7c:55:
3e:90:00:06:47:b3:61:e0:c5:fc:68:79:04:f8:b4:
a4:3b:e4:df:51:3a:23:5f:d0:1c:9e:f5:ca:a2:1e:
f7:67:81:bb:60:3a:51:ec:74:00:85:f7:03:da:6d:
05:ef:d0:9a:28:23:81:7c:a0:6f:a4:e4:9c:19:62:
9e:43:d4:93:cb:ce:1f:1f:8d:38:62:3e:8c:6b:d8:
79:7d:bc:0c:98:3f:a0:cd:28:9a:82:fc:1a:f7:bf:
69:c9:51:a6:d7:27:88:7f:cd:5b:14:87:27:aa:8d:
91:64:99:5d:12:fe:f0:f3:35:17:20:90:36:c3:3b:
5a:90:b9:a7:5c:7f:44:7d:ef:35:e4:c3:27:e5:4a:
ad:cf:62:63:ce:dc:26:01:49:ba:99:83:99:52:f3:
65:cb:4f:36:e6:0c:f3:b6:33:bd:75:9b:fe:19:d8:
a8:05:a9:84:a5:bd:c2:10:88:4d:14:5a:39:85:36:
3f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:96:F7:B6:B2:0C:47:6A:36:09:F5:93:3A:E6:22:A8:77:05:CF:0B
X509v3 Authority Key Identifier:
keyid:6C:E9:7C:F4:D8:D0:BC:17:B3:AF:1D:62:C4:D7:14:88:66:1B:D2:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/XJb3trIMR2o2CfWTOuYiqHcFzws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.232.157.0/24
Signature Algorithm: sha256WithRSAEncryption
08:1b:25:02:5c:a5:eb:8b:7e:63:76:d5:72:3b:8a:b8:5d:4a:
80:31:5a:52:45:63:f8:bc:59:ff:87:5c:8f:e3:c4:49:78:bb:
35:36:2b:42:51:a8:37:59:2d:00:5e:a9:5b:7d:3e:f4:ea:1b:
b1:79:09:b5:05:e8:fd:4a:c1:85:33:b8:5a:c2:5f:4c:ed:6a:
ea:9d:d8:59:d7:b5:77:a5:e3:12:90:de:6f:f6:56:7b:59:6e:
62:64:7e:4b:3a:27:91:9b:48:bc:d6:08:d2:18:2f:a2:7f:32:
0e:25:a4:ff:d8:b9:e2:ce:a6:2c:08:4d:7a:73:ec:95:4a:e6:
bb:ae:8d:0c:66:52:25:8e:de:29:6a:18:af:e1:cf:51:ff:37:
6c:a1:d8:fc:c2:3e:e8:8e:4e:03:30:94:19:b4:a9:70:9a:30:
b4:f5:68:8e:e1:a5:b4:61:cb:cf:d5:46:04:be:65:9a:f6:64:
0f:0a:35:83:1f:76:14:59:bd:20:38:9b:c7:c4:69:c1:ef:6e:
84:3b:a4:b7:96:7b:5f:28:9e:0f:e0:0e:5f:23:c5:a7:d5:78:
7f:cc:97:ff:9c:8f:0f:1d:27:d9:dd:83:6c:56:68:ba:c9:a6:
20:87:50:d1:e5:4a:0d:72:a5:08:a8:65:36:e2:89:55:4a:ff:
1c:9d:65:3f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZcSdR8zxhQUGiqipnkFB79qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjZTk3Y2Y0ZDhkMGJjMTdiM2FmMWQ2MmM0ZDcxNDg4NjYx
YmQyMTIwHhcNMjUwNTI3MTU1NTU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1Yzk2ZjdiNmIyMGM0NzZhMzYwOWY1OTMzYWU2MjJhODc3MDVjZjBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRHwbim4C1dNvJl77QKLxmZNhwSv
13me22q0EwubhQaCoRxM8wCnz0tQvjo7Fy5V7vRIjttDPyWjvSJBtFII6wwQ0ENr
HRSyfFU+kAAGR7Nh4MX8aHkE+LSkO+TfUTojX9AcnvXKoh73Z4G7YDpR7HQAhfcD
2m0F79CaKCOBfKBvpOScGWKeQ9STy84fH404Yj6Ma9h5fbwMmD+gzSiagvwa979p
yVGm1yeIf81bFIcnqo2RZJldEv7w8zUXIJA2wztakLmnXH9Efe815MMn5Uqtz2Jj
ztwmAUm6mYOZUvNly0825gzztjO9dZv+GdioBamEpb3CEIhNFFo5hTY/qwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFyW97ayDEdqNgn1kzrmIqh3Bc8LMB8GA1UdIwQY
MBaAFGzpfPTY0LwXs68dYsTXFIhmG9ISMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYk9sODlOalF2QmV6cngxaXhOY1VpR1liMGhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9lNGNjYjEtY2EyNS00MDk5LTgyNzMt
Mzk5M2FhMzI0ZTFmLzEvWEpiM3RySU1SMm8yQ2ZXVE91WWlxSGNGendzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS9lNGNjYjEtY2EyNS00MDk5LTgyNzMtMzk5M2FhMzI0ZTFm
LzEvYk9sODlOalF2QmV6cngxaXhOY1VpR1liMGhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+idMA0G
CSqGSIb3DQEBCwUAA4IBAQAIGyUCXKXri35jdtVyO4q4XUqAMVpSRWP4vFn/h1yP
48RJeLs1NitCUag3WS0AXqlbfT706huxeQm1Bej9SsGFM7hawl9M7WrqndhZ17V3
peMSkN5v9lZ7WW5iZH5LOieRm0i81gjSGC+ifzIOJaT/2LnizqYsCE16c+yVSua7
ro0MZlIljt4pahiv4c9R/zdsodj8wj7ojk4DMJQZtKlwmjC09WiO4aW0YcvP1UYE
vmWa9mQPCjWDH3YUWb0gOJvHxGnB726EO6S3lntfKJ4P4A5fI8Wn1Xh/zJf/nI8P
HSfZ3YNsVmi6yaYgh1DR5UoNcqUIqGU24olVSv8cnWU/
-----END CERTIFICATE-----
Generated at Sun Jun 8 19:23:04 2025 by rpki-client