Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/jC0_OBlWrEljET3kitu_u4UMuGI.roa
File: jC0_OBlWrEljET3kitu_u4UMuGI.roa (raw, json)
Hash identifier: 1xtlBlnH8pKeA/LPN7gJ0+ahhITWUKhm73SYRTl4heQ=
Subject key identifier: 8C:2D:3F:38:19:56:AC:49:63:11:3D:E4:8A:DB:BF:BB:85:0C:B8:62
Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Certificate serial: 019740915E53E3AA01D4F8901A2BD1E9AECA
Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/jC0_OBlWrEljET3kitu_u4UMuGI.roa
Signing time: Thu 05 Jun 2025 14:49:18 +0000
ROA not before: Thu 05 Jun 2025 14:49:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3320
IP address blocks: 84.55.17.0/24 maxlen: 24
84.55.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:40:91:5e:53:e3:aa:01:d4:f8:90:1a:2b:d1:e9:ae:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Validity
Not Before: Jun 5 14:49:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8c2d3f381956ac4963113de48adbbfbb850cb862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:0e:ff:14:a0:82:75:2a:3c:74:4e:10:46:99:
da:a1:e4:9d:e9:e4:8c:ef:96:4c:9e:1c:d8:f8:9b:
1f:11:4c:72:79:a1:e1:eb:17:68:72:a3:73:e3:d5:
00:28:53:13:76:c8:a0:70:46:df:d5:05:49:9c:6e:
22:0d:3b:b8:f8:c6:e7:80:aa:76:33:2d:22:9a:a9:
dc:17:13:77:bd:e7:5c:b3:52:68:58:8a:74:be:83:
55:b1:45:86:dd:f0:18:50:7b:14:33:b6:ad:14:ed:
ab:fd:e8:af:a9:7d:00:2b:7c:9c:e5:da:6a:51:37:
0a:3f:7a:aa:e7:eb:35:77:6f:ba:18:45:b8:69:19:
ab:d0:ce:a2:e3:b0:0a:9a:cc:2d:6f:16:6a:62:a2:
7e:5b:05:c9:5e:69:f8:5d:ff:e9:e7:c2:15:7d:e3:
b6:0f:8e:2f:5f:3f:f0:65:ab:33:cb:d5:2a:fa:49:
fa:c6:30:56:70:2b:03:e7:67:e7:6a:4c:f9:c8:de:
65:8a:0c:70:1b:80:c3:82:9e:24:ed:8c:2c:d8:b3:
f3:6f:ed:2e:ad:db:55:54:58:e9:c6:2a:fd:b8:52:
d9:78:14:21:51:75:88:e8:c6:6e:c0:bf:83:63:08:
48:f6:36:6d:a3:74:00:b0:bd:ac:49:26:8b:18:b3:
15:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:2D:3F:38:19:56:AC:49:63:11:3D:E4:8A:DB:BF:BB:85:0C:B8:62
X509v3 Authority Key Identifier:
keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/jC0_OBlWrEljET3kitu_u4UMuGI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.55.17.0/24
84.55.22.0/24
Signature Algorithm: sha256WithRSAEncryption
22:4d:f8:31:87:34:2b:2f:6f:37:f3:77:29:fc:a6:e2:59:d6:
7d:8d:0e:b6:a1:5d:7d:93:67:13:23:6f:f4:23:9c:f9:91:3d:
42:d4:24:e1:ea:91:5d:73:eb:67:e1:1b:f2:4d:3a:be:8f:00:
a2:49:a2:c3:a4:84:57:34:cc:f2:22:64:dc:0a:77:57:0e:a7:
17:27:df:4b:1b:4e:1b:e2:05:b4:b2:42:de:b3:bd:00:55:88:
39:af:a8:2a:8e:81:5c:e8:1d:af:03:ed:9a:c2:c6:41:85:1a:
f1:c0:c6:6a:fe:7a:87:a2:cb:ec:8c:66:14:aa:69:32:df:e2:
6e:0f:20:af:41:2a:f3:87:1f:4a:b3:4e:8f:37:a9:60:c3:68:
61:fd:f2:d1:79:0a:b7:df:f2:da:2b:79:7d:69:e5:c3:d8:c5:
cc:5f:3c:6f:aa:b7:17:87:13:7e:6a:3b:1f:b4:d0:76:3e:61:
62:94:1c:64:f9:3e:b3:65:33:32:b6:1b:43:60:59:73:8e:98:
97:a5:dc:f7:53:fa:92:98:70:d8:31:35:77:54:71:5c:99:d6:
42:70:10:74:a9:7c:ba:47:84:6e:33:83:38:92:ec:e6:47:fd:
02:d7:c7:45:b5:ec:89:16:74:dd:a8:dc:f4:57:9e:18:13:c2:
6d:d6:bf:b4
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZdAkV5T46oB1PiQGivR6a7KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjYxNzU4Y2UzMzA2MjI0NzBhMzlhZThkNmVmNGEyMDQ0
ZjgzYzQwHhcNMjUwNjA1MTQ0OTE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YzJkM2YzODE5NTZhYzQ5NjMxMTNkZTQ4YWRiYmZiYjg1MGNiODYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkA7/FKCCdSo8dE4QRpnaoeSd6eSM
75ZMnhzY+JsfEUxyeaHh6xdocqNz49UAKFMTdsigcEbf1QVJnG4iDTu4+MbngKp2
My0imqncFxN3vedcs1JoWIp0voNVsUWG3fAYUHsUM7atFO2r/eivqX0AK3yc5dpq
UTcKP3qq5+s1d2+6GEW4aRmr0M6i47AKmswtbxZqYqJ+WwXJXmn4Xf/p58IVfeO2
D44vXz/wZaszy9Uq+kn6xjBWcCsD52fnakz5yN5ligxwG4DDgp4k7Yws2LPzb+0u
rdtVVFjpxir9uFLZeBQhUXWI6MZuwL+DYwhI9jZto3QAsL2sSSaLGLMVVwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFIwtPzgZVqxJYxE95Irbv7uFDLhiMB8GA1UdIwQY
MBaAFGBmF1jOMwYiRwo5ro1u9KIET4PEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9lZGQxMjgtNmQ2ZS00OWUzLWI3N2Ut
MWY4NzQ2OTQ1NDgzLzEvakMwX09CbFdyRWxqRVQza2l0dV91NFVNdUdJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9lZGQxMjgtNmQ2ZS00OWUzLWI3N2UtMWY4NzQ2OTQ1NDgz
LzEvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVDcRAwQA
VDcWMA0GCSqGSIb3DQEBCwUAA4IBAQAiTfgxhzQrL28383cp/KbiWdZ9jQ62oV19
k2cTI2/0I5z5kT1C1CTh6pFdc+tn4RvyTTq+jwCiSaLDpIRXNMzyImTcCndXDqcX
J99LG04b4gW0skLes70AVYg5r6gqjoFc6B2vA+2awsZBhRrxwMZq/nqHosvsjGYU
qmky3+JuDyCvQSrzhx9Ks06PN6lgw2hh/fLReQq33/LaK3l9aeXD2MXMXzxvqrcX
hxN+ajsftNB2PmFilBxk+T6zZTMythtDYFlzjpiXpdz3U/qSmHDYMTV3VHFcmdZC
cBB0qXy6R4RuM4M4kuzmR/0C18dFteyJFnTdqNz0V54YE8Jt1r+0
-----END CERTIFICATE-----
Generated at Sat Jun 7 15:27:33 2025 by rpki-client