Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/RqntMWBDTAuHkvxXJRUQlBHvO0Y.roa
File: RqntMWBDTAuHkvxXJRUQlBHvO0Y.roa (raw, json)
Hash identifier: rHf6WPLDzEiSy2rPCd2fdO2Jo+GQGQFkoNjCSTwwLww=
Subject key identifier: 46:A9:ED:31:60:43:4C:0B:87:92:FC:57:25:15:10:94:11:EF:3B:46
Certificate issuer: /CN=6a37982207e62ded0691dcb18ef6ea32d413f3f6
Certificate serial: 019758FE6ACCE9D9DE3189BC5B45D7836599
Authority key identifier: 6A:37:98:22:07:E6:2D:ED:06:91:DC:B1:8E:F6:EA:32:D4:13:F3:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/RqntMWBDTAuHkvxXJRUQlBHvO0Y.roa
Signing time: Tue 10 Jun 2025 08:39:17 +0000
ROA not before: Tue 10 Jun 2025 08:39:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42184
IP address blocks: 89.251.128.0/20 maxlen: 24
89.251.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 08:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:fe:6a:cc:e9:d9:de:31:89:bc:5b:45:d7:83:65:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a37982207e62ded0691dcb18ef6ea32d413f3f6
Validity
Not Before: Jun 10 08:39:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=46a9ed3160434c0b8792fc572515109411ef3b46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:71:12:61:75:a8:92:93:d8:97:e6:be:a2:c7:
c0:3a:bc:a7:62:46:a7:09:83:e8:a5:71:fa:27:4d:
66:2b:17:33:e3:da:ed:f2:f8:04:d6:a5:d8:65:fb:
65:21:a9:48:91:65:0e:34:bc:ff:3b:1a:91:c8:c3:
84:7b:19:b6:4f:6d:ca:b7:67:b6:ee:27:ec:fb:5b:
2c:5d:24:de:71:39:45:3c:d3:f4:d0:78:6e:03:44:
0d:d0:c1:1f:0d:da:69:b8:48:54:57:e9:4b:19:9f:
8c:b6:07:85:2e:16:76:c4:9c:7a:f1:f0:f1:6d:ed:
7d:b1:8c:55:e7:ed:6a:31:1e:ea:44:01:c0:c4:18:
1a:a7:4d:e9:6c:71:1b:b9:18:93:97:58:7c:fd:48:
e5:4e:f6:f2:16:7c:a0:8e:ff:d1:9f:28:1f:9f:d7:
8c:25:f7:1a:13:db:b2:69:25:b3:87:d0:05:1f:b8:
7d:25:b9:1d:30:5e:5f:8f:ee:fb:26:4a:e3:37:07:
aa:6c:e4:34:75:04:c7:48:6c:ab:cf:6b:0f:65:fe:
e9:2d:95:ec:cd:23:8e:ad:ff:0d:ed:90:97:67:3a:
d1:bc:0c:68:e5:8f:8e:8a:87:51:79:9c:45:1d:eb:
48:1d:60:64:56:16:5f:9a:40:ef:29:83:05:7b:e2:
74:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:A9:ED:31:60:43:4C:0B:87:92:FC:57:25:15:10:94:11:EF:3B:46
X509v3 Authority Key Identifier:
keyid:6A:37:98:22:07:E6:2D:ED:06:91:DC:B1:8E:F6:EA:32:D4:13:F3:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/RqntMWBDTAuHkvxXJRUQlBHvO0Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.251.128.0/20
Signature Algorithm: sha256WithRSAEncryption
7b:e6:61:55:eb:96:4f:57:c9:dd:8d:cf:7e:72:54:98:7c:e1:
4c:88:e9:96:a4:2e:ab:08:87:93:23:a6:04:5e:27:1e:0a:71:
e1:91:eb:19:a9:d0:e9:b5:bb:fc:2b:15:2e:c9:59:1d:a7:2c:
39:11:53:62:80:09:81:5e:fe:6b:73:d4:5f:05:e4:84:08:c2:
a1:04:fc:21:5c:e7:41:84:8d:24:fd:bf:a0:29:bd:94:44:74:
6c:55:e4:13:73:e4:cf:18:18:6f:19:b9:4d:e1:b5:dc:f9:44:
1b:7b:21:e9:39:e8:92:6e:77:5d:8d:a1:05:18:6b:c9:c6:4a:
54:b5:c8:a7:22:c0:bf:74:0f:d8:6c:eb:8b:8a:d9:70:8a:c9:
2f:34:30:af:b9:00:51:f7:e4:be:00:0f:a9:5d:e0:a1:f3:df:
90:b1:db:c3:d2:7c:f9:83:b9:af:ef:7a:f1:80:cb:07:bd:c7:
04:63:1a:25:8f:97:aa:22:d2:cc:15:49:ec:9f:43:8e:f5:42:
99:fc:c9:3c:99:fc:0e:3a:7e:9f:f4:e8:bf:b6:06:7a:a2:9a:
14:3d:9f:b5:33:49:73:3e:68:44:68:11:68:f0:6b:1c:c0:49:
32:ba:de:c4:a6:ae:b8:33:cb:5b:eb:3d:80:0d:19:e4:f5:96:
1a:a1:01:70
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZdY/mrM6dneMYm8W0XXg2WZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhMzc5ODIyMDdlNjJkZWQwNjkxZGNiMThlZjZlYTMyZDQx
M2YzZjYwHhcNMjUwNjEwMDgzOTE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NmE5ZWQzMTYwNDM0YzBiODc5MmZjNTcyNTE1MTA5NDExZWYzYjQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHESYXWokpPYl+a+osfAOrynYkan
CYPopXH6J01mKxcz49rt8vgE1qXYZftlIalIkWUONLz/OxqRyMOEexm2T23Kt2e2
7ifs+1ssXSTecTlFPNP00HhuA0QN0MEfDdppuEhUV+lLGZ+MtgeFLhZ2xJx68fDx
be19sYxV5+1qMR7qRAHAxBgap03pbHEbuRiTl1h8/UjlTvbyFnygjv/Rnygfn9eM
JfcaE9uyaSWzh9AFH7h9JbkdMF5fj+77JkrjNweqbOQ0dQTHSGyrz2sPZf7pLZXs
zSOOrf8N7ZCXZzrRvAxo5Y+OiodReZxFHetIHWBkVhZfmkDvKYMFe+J0rQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEap7TFgQ0wLh5L8VyUVEJQR7ztGMB8GA1UdIwQY
MBaAFGo3mCIH5i3tBpHcsY726jLUE/P2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWplWUlnZm1MZTBHa2R5eGp2YnFNdFFUOF9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9iODExZDUtYmEzNS00MjNkLTg2MmYt
MjM1MzE2NTRlNTg5LzEvUnFudE1XQkRUQXVIa3Z4WEpSVVFsQkh2TzBZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS9iODExZDUtYmEzNS00MjNkLTg2MmYtMjM1MzE2NTRlNTg5
LzEvYWplWUlnZm1MZTBHa2R5eGp2YnFNdFFUOF9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEWfuAMA0G
CSqGSIb3DQEBCwUAA4IBAQB75mFV65ZPV8ndjc9+clSYfOFMiOmWpC6rCIeTI6YE
XiceCnHhkesZqdDptbv8KxUuyVkdpyw5EVNigAmBXv5rc9RfBeSECMKhBPwhXOdB
hI0k/b+gKb2URHRsVeQTc+TPGBhvGblN4bXc+UQbeyHpOeiSbnddjaEFGGvJxkpU
tcinIsC/dA/YbOuLitlwiskvNDCvuQBR9+S+AA+pXeCh89+QsdvD0nz5g7mv73rx
gMsHvccEYxolj5eqItLMFUnsn0OO9UKZ/Mk8mfwOOn6f9Oi/tgZ6opoUPZ+1M0lz
PmhEaBFo8GscwEkyut7Epq64M8tb6z2ADRnk9ZYaoQFw
-----END CERTIFICATE-----
Generated at Fri Jun 13 18:22:04 2025 by rpki-client