Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/sUUBdGAF9TJecEG5749G1YWJ5bU.roa
File: sUUBdGAF9TJecEG5749G1YWJ5bU.roa (raw, json)
Hash identifier: GKDRtzmqCQRfHRzfpLrnvEf31pPDp4sPaetIcigYVig=
Subject key identifier: B1:45:01:74:60:05:F5:32:5E:70:41:B9:EF:8F:46:D5:85:89:E5:B5
Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial: 01990C37A26596B6A2D4B673334912C4F28F
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/sUUBdGAF9TJecEG5749G1YWJ5bU.roa
Signing time: Tue 02 Sep 2025 20:56:36 +0000
ROA not before: Tue 02 Sep 2025 20:56:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 53356
IP address blocks: 80.246.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:0c:37:a2:65:96:b6:a2:d4:b6:73:33:49:12:c4:f2:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
Validity
Not Before: Sep 2 20:56:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b14501746005f5325e7041b9ef8f46d58589e5b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:05:79:43:12:55:c0:e8:37:65:d3:a4:4f:76:
a7:90:99:b3:3f:7e:5e:d5:ff:ec:1d:ef:3d:97:70:
51:c6:04:2f:a5:a7:b7:54:87:7f:d6:9b:17:34:e9:
83:62:44:ee:79:6f:c0:b7:b2:3a:d0:81:13:c4:c9:
f3:fa:cd:89:83:33:a3:30:be:e8:9c:39:14:f4:f2:
59:2d:ed:e1:bd:c0:59:02:43:cc:cc:09:c3:62:dc:
5f:0f:f1:0c:f3:41:e4:a2:3f:f4:e0:dc:65:dc:4e:
bf:26:53:cc:88:37:ca:dc:07:12:35:0a:97:57:22:
80:bf:3c:6e:61:0f:f6:7e:f6:bf:ce:15:1c:02:10:
52:99:39:a7:a0:af:13:54:a8:ef:61:cf:0c:b4:dc:
6a:6d:47:bd:17:54:f1:97:84:d1:a0:8f:89:8b:d4:
31:b8:a5:a4:2a:c8:ed:5e:c4:da:88:6e:e1:a0:a4:
6b:fe:1d:69:0a:94:05:27:5c:61:2a:e1:c1:08:2c:
b0:de:f0:42:6b:8e:e1:87:27:f0:8d:33:b2:c5:71:
ed:12:81:a0:07:af:e5:66:ab:da:83:60:a3:8c:e1:
f4:3b:c4:27:4c:14:b2:ec:e6:79:6e:e5:5d:ae:15:
40:82:fd:57:df:a4:58:38:81:7d:f8:f9:8a:da:6b:
01:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:45:01:74:60:05:F5:32:5E:70:41:B9:EF:8F:46:D5:85:89:E5:B5
X509v3 Authority Key Identifier:
keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/sUUBdGAF9TJecEG5749G1YWJ5bU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.246.229.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:11:8c:e6:5d:53:17:ef:96:a7:3b:c1:15:b4:e0:61:57:5d:
97:0b:3a:f6:f9:1e:ab:96:da:ca:d3:11:ac:0f:29:b4:94:03:
ba:a8:0e:ce:12:a0:2c:dc:28:a3:4d:f6:a2:9b:2d:f4:67:03:
19:49:16:b6:11:a6:9a:a1:a8:5e:97:94:df:36:b0:ea:70:b3:
04:1a:fa:f6:15:41:e4:c4:08:15:89:f4:ae:ff:fd:93:2a:02:
7f:d4:ef:86:eb:b4:80:a8:73:20:bc:fd:dc:1d:9d:1a:fd:17:
84:86:83:4e:85:05:03:1b:55:36:8e:51:f0:12:51:a1:0d:57:
17:ff:82:4f:22:40:40:49:7f:a6:46:2e:e7:83:c8:08:45:1b:
d9:a3:53:39:be:5f:48:70:e2:e0:c9:4d:b0:07:73:e2:06:33:
08:a5:90:41:a2:4b:44:08:5a:75:49:2e:20:64:8e:45:19:53:
01:c5:62:09:eb:87:03:b6:0d:12:c3:7f:73:e2:70:a0:67:d4:
45:1b:9c:1e:72:71:d5:3a:ac:db:b0:d4:19:b3:b6:9d:03:c4:
11:09:ee:65:21:4d:7f:cd:a0:80:5c:2f:3b:32:a0:61:9d:92:
1c:67:a5:3b:bb:10:c3:64:16:68:ee:e6:31:65:f3:18:b1:d3:
ba:97:9d:6e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZkMN6Jllrai1LZzM0kSxPKPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1NjM3NjkyZmY1YzQ1NDg2ZDEwNTNiMTQ5ZGMxNDIwMDI2
Y2Q3MzMwHhcNMjUwOTAyMjA1NjM2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMTQ1MDE3NDYwMDVmNTMyNWU3MDQxYjllZjhmNDZkNTg1ODllNWI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0QV5QxJVwOg3ZdOkT3ankJmzP35e
1f/sHe89l3BRxgQvpae3VId/1psXNOmDYkTueW/At7I60IETxMnz+s2JgzOjML7o
nDkU9PJZLe3hvcBZAkPMzAnDYtxfD/EM80Hkoj/04Nxl3E6/JlPMiDfK3AcSNQqX
VyKAvzxuYQ/2fva/zhUcAhBSmTmnoK8TVKjvYc8MtNxqbUe9F1Txl4TRoI+Ji9Qx
uKWkKsjtXsTaiG7hoKRr/h1pCpQFJ1xhKuHBCCyw3vBCa47hhyfwjTOyxXHtEoGg
B6/lZqvag2CjjOH0O8QnTBSy7OZ5buVdrhVAgv1X36RYOIF9+PmK2msB5QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLFFAXRgBfUyXnBBue+PRtWFieW1MB8GA1UdIwQY
MBaAFNVjdpL/XEVIbRBTsUncFCACbNczMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVdOMmt2OWNSVWh0RUZPeFNkd1VJQUpzMXpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi85OGUxMTMtZTAwMi00ZDkzLTlhNDkt
YWRlYWRlMjg2NWMxLzEvc1VVQmRHQUY5VEplY0VHNTc0OUcxWVdKNWJVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi85OGUxMTMtZTAwMi00ZDkzLTlhNDktYWRlYWRlMjg2NWMx
LzEvMVdOMmt2OWNSVWh0RUZPeFNkd1VJQUpzMXpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUPblMA0G
CSqGSIb3DQEBCwUAA4IBAQA9EYzmXVMX75anO8EVtOBhV12XCzr2+R6rltrK0xGs
Dym0lAO6qA7OEqAs3CijTfaimy30ZwMZSRa2Eaaaoahel5TfNrDqcLMEGvr2FUHk
xAgVifSu//2TKgJ/1O+G67SAqHMgvP3cHZ0a/ReEhoNOhQUDG1U2jlHwElGhDVcX
/4JPIkBASX+mRi7ng8gIRRvZo1M5vl9IcOLgyU2wB3PiBjMIpZBBoktECFp1SS4g
ZI5FGVMBxWIJ64cDtg0Sw39z4nCgZ9RFG5wecnHVOqzbsNQZs7adA8QRCe5lIU1/
zaCAXC87MqBhnZIcZ6U7uxDDZBZo7uYxZfMYsdO6l51u
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:41:54 2025 by rpki-client