Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/ec2ccc-8cbd-4bef-941d-c615f9910ffc/1/KJS8V64pslKuMWFI7cvlulnThJM.roa
File: KJS8V64pslKuMWFI7cvlulnThJM.roa (raw, json)
Hash identifier: TuhgricsSHQzRyANiX5wlopuZuXjn8vfdfEA+WHjVoM=
Subject key identifier: 28:94:BC:57:AE:29:B2:52:AE:31:61:48:ED:CB:E5:BA:59:D3:84:93
Certificate issuer: /CN=e01b4e0f2a201cf430048e248164b32eddf43dae
Certificate serial: 01970D2FA2043C0AE429D4CEF4BCAED1B18F
Authority key identifier: E0:1B:4E:0F:2A:20:1C:F4:30:04:8E:24:81:64:B3:2E:DD:F4:3D:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4BtODyogHPQwBI4kgWSzLt30Pa4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/ec2ccc-8cbd-4bef-941d-c615f9910ffc/1/KJS8V64pslKuMWFI7cvlulnThJM.roa
Signing time: Mon 26 May 2025 15:21:54 +0000
ROA not before: Mon 26 May 2025 15:21:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199004
IP address blocks: 91.206.170.0/24 maxlen: 24
185.25.212.0/22 maxlen: 22
2a13:ec80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/ec2ccc-8cbd-4bef-941d-c615f9910ffc/1/4BtODyogHPQwBI4kgWSzLt30Pa4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/ec2ccc-8cbd-4bef-941d-c615f9910ffc/1/4BtODyogHPQwBI4kgWSzLt30Pa4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4BtODyogHPQwBI4kgWSzLt30Pa4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 15:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:0d:2f:a2:04:3c:0a:e4:29:d4:ce:f4:bc:ae:d1:b1:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e01b4e0f2a201cf430048e248164b32eddf43dae
Validity
Not Before: May 26 15:21:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2894bc57ae29b252ae316148edcbe5ba59d38493
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d1:28:f7:aa:65:91:68:c6:aa:21:42:e4:65:
81:6e:5c:75:ec:f0:86:7e:88:20:43:6a:1f:11:76:
3f:d7:92:3d:28:75:45:a1:ac:58:42:0d:61:1b:34:
79:cd:52:ae:f9:9b:bd:93:74:f8:af:23:94:90:a0:
6e:2b:d1:15:e0:20:95:a7:27:68:b6:6b:62:44:c3:
c4:7f:e8:b6:f4:5e:1c:60:af:f2:d5:b3:3f:a4:06:
1d:d4:58:b9:c6:c5:77:e3:eb:6c:60:d5:77:c3:9c:
56:59:1b:57:0e:18:d0:ea:ad:0c:1c:82:f1:80:72:
ff:5c:69:1a:7c:e7:3c:8e:05:e6:cb:e9:cf:ca:75:
f3:9f:26:66:bd:80:17:05:2e:2e:fd:b1:9f:fc:0b:
8b:e7:b0:55:2c:16:df:4f:3a:23:d5:86:ba:29:be:
2f:67:57:1d:e6:5f:87:24:d7:3a:6a:0d:ba:8f:f6:
99:01:ed:d0:0c:8f:f6:3b:27:79:5f:69:13:92:b6:
7d:d4:44:17:8e:7b:40:d5:53:4e:de:19:fd:6c:7f:
4a:9d:38:83:1a:e5:b0:de:69:e4:c8:b8:72:43:aa:
3c:38:68:f3:13:af:2d:c9:5e:6e:bb:91:cb:35:0c:
12:e0:e2:25:d3:dc:0a:8e:a1:ed:03:79:36:10:a4:
71:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:94:BC:57:AE:29:B2:52:AE:31:61:48:ED:CB:E5:BA:59:D3:84:93
X509v3 Authority Key Identifier:
keyid:E0:1B:4E:0F:2A:20:1C:F4:30:04:8E:24:81:64:B3:2E:DD:F4:3D:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4BtODyogHPQwBI4kgWSzLt30Pa4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ec2ccc-8cbd-4bef-941d-c615f9910ffc/1/KJS8V64pslKuMWFI7cvlulnThJM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ec2ccc-8cbd-4bef-941d-c615f9910ffc/1/4BtODyogHPQwBI4kgWSzLt30Pa4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.170.0/24
185.25.212.0/22
IPv6:
2a13:ec80::/29
Signature Algorithm: sha256WithRSAEncryption
43:04:a8:c1:bf:bd:88:a3:80:4f:0d:25:9a:d4:fc:1e:72:ef:
96:d1:b2:d3:40:26:e6:05:7c:f2:13:8d:9d:14:5b:e0:0a:a7:
74:ed:19:19:14:23:70:19:71:25:91:b6:f8:34:bc:5e:8c:41:
94:85:60:71:4a:f6:21:cb:2e:2c:e3:f2:d1:4b:8f:c6:43:58:
90:2a:7a:94:fc:30:b3:f2:ac:fb:e1:6e:e5:33:d9:ac:6b:5e:
db:f2:36:51:22:81:9a:3f:69:9d:ef:ed:8a:b6:b8:d6:5a:78:
97:82:d5:ed:36:d5:c7:dc:50:fc:b2:2b:eb:e4:09:62:29:85:
8d:18:ad:cb:16:a0:36:e8:54:5e:4e:a9:b5:20:c8:3b:a7:e1:
b6:39:5a:cb:3f:e4:a8:80:80:cd:a8:88:47:fb:ab:22:92:1d:
30:18:a0:4e:37:ff:56:53:c3:49:c3:e5:0d:00:ab:d3:e6:cc:
80:3b:61:d8:65:68:77:58:eb:70:fb:42:b8:28:a2:18:db:0b:
2c:6b:66:17:d9:38:ca:9f:b3:81:e7:c1:ec:33:a9:b3:9c:41:
36:f6:e2:98:30:15:3b:3e:04:67:ad:fb:2d:01:a2:71:af:53:
50:d6:fb:fa:68:a1:5a:dd:40:ee:80:27:a9:4c:53:db:dc:95:
48:78:2a:a2
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZcNL6IEPArkKdTO9Lyu0bGPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwMWI0ZTBmMmEyMDFjZjQzMDA0OGUyNDgxNjRiMzJlZGRm
NDNkYWUwHhcNMjUwNTI2MTUyMTU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyODk0YmM1N2FlMjliMjUyYWUzMTYxNDhlZGNiZTViYTU5ZDM4NDkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutEo96plkWjGqiFC5GWBblx17PCG
foggQ2ofEXY/15I9KHVFoaxYQg1hGzR5zVKu+Zu9k3T4ryOUkKBuK9EV4CCVpydo
tmtiRMPEf+i29F4cYK/y1bM/pAYd1Fi5xsV34+tsYNV3w5xWWRtXDhjQ6q0MHILx
gHL/XGkafOc8jgXmy+nPynXznyZmvYAXBS4u/bGf/AuL57BVLBbfTzoj1Ya6Kb4v
Z1cd5l+HJNc6ag26j/aZAe3QDI/2Oyd5X2kTkrZ91EQXjntA1VNO3hn9bH9KnTiD
GuWw3mnkyLhyQ6o8OGjzE68tyV5uu5HLNQwS4OIl09wKjqHtA3k2EKRxoQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFCiUvFeuKbJSrjFhSO3L5bpZ04STMB8GA1UdIwQY
MBaAFOAbTg8qIBz0MASOJIFksy7d9D2uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEJ0T0R5b2dIUFF3Qkk0a2dXU3pMdDMwUGE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9lYzJjY2MtOGNiZC00YmVmLTk0MWQt
YzYxNWY5OTEwZmZjLzEvS0pTOFY2NHBzbEt1TVdGSTdjdmx1bG5UaEpNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC9lYzJjY2MtOGNiZC00YmVmLTk0MWQtYzYxNWY5OTEwZmZj
LzEvNEJ0T0R5b2dIUFF3Qkk0a2dXU3pMdDMwUGE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAW86qAwQC
uRnUMA0EAgACMAcDBQMqE+yAMA0GCSqGSIb3DQEBCwUAA4IBAQBDBKjBv72Io4BP
DSWa1Pwecu+W0bLTQCbmBXzyE42dFFvgCqd07RkZFCNwGXElkbb4NLxejEGUhWBx
SvYhyy4s4/LRS4/GQ1iQKnqU/DCz8qz74W7lM9msa17b8jZRIoGaP2md7+2KtrjW
WniXgtXtNtXH3FD8sivr5AliKYWNGK3LFqA26FReTqm1IMg7p+G2OVrLP+SogIDN
qIhH+6sikh0wGKBON/9WU8NJw+UNAKvT5syAO2HYZWh3WOtw+0K4KKIY2wssa2YX
2TjKn7OB58HsM6mznEE29uKYMBU7PgRnrfstAaJxr1NQ1vv6aKFa3UDugCepTFPb
3JVIeCqi
-----END CERTIFICATE-----
Generated at Sun Jun 8 01:36:34 2025 by rpki-client