Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/5luQlCbaKzxzW_zhgiiEUNs-BIY.roa
File: 5luQlCbaKzxzW_zhgiiEUNs-BIY.roa (raw, json)
Hash identifier: J0sDmLq4fkPMn2O7Y93m3iT7rWhnztVNl3Tf4nemcXc=
Subject key identifier: E6:5B:90:94:26:DA:2B:3C:73:5B:FC:E1:82:28:84:50:DB:3E:04:86
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 0196EE49B76EBACE1D9762F29BEE43532866
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/5luQlCbaKzxzW_zhgiiEUNs-BIY.roa
Signing time: Tue 20 May 2025 15:22:10 +0000
ROA not before: Tue 20 May 2025 15:22:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43094
IP address blocks: 91.242.78.0/23 maxlen: 24
91.242.84.0/23 maxlen: 23
91.242.84.0/24 maxlen: 24
194.114.144.0/24 maxlen: 25
194.114.144.128/27 maxlen: 27
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft
rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ee:49:b7:6e:ba:ce:1d:97:62:f2:9b:ee:43:53:28:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: May 20 15:22:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e65b909426da2b3c735bfce182288450db3e0486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1b:d7:1d:ed:49:d7:be:a8:99:af:8a:b7:8b:
0b:b3:47:88:77:ae:33:b9:e8:3a:a5:6e:2d:9f:7f:
4b:75:04:8e:8c:7f:95:ed:98:ae:42:30:69:fc:f6:
1d:25:6e:d6:8e:82:b7:af:ea:a2:12:d7:34:a2:c5:
07:94:c4:fb:82:6d:25:77:6d:0c:9a:89:74:0e:82:
9b:f4:78:85:e1:5b:60:fa:7f:0d:a9:b1:59:f7:f2:
45:6d:df:26:d1:d7:9e:76:8e:df:8c:91:df:fd:cb:
04:93:2a:87:b9:89:04:4f:0d:d6:d1:37:01:f6:77:
23:d6:3c:51:07:6d:17:f5:d7:75:29:94:f8:11:4d:
0f:97:e9:af:f6:91:6c:a4:71:41:01:37:d7:e3:81:
44:83:31:5e:a2:d6:d3:d7:55:7a:53:a3:59:cb:2d:
3c:b3:58:45:df:3b:1a:8b:8f:86:66:2f:c5:9a:49:
ed:c5:77:24:1a:0f:3e:93:da:14:97:d4:22:34:a5:
50:f4:7f:6e:e7:7c:1e:f2:8a:63:d4:c4:82:70:61:
c4:58:55:66:c8:61:40:d5:d0:89:77:c3:e8:74:de:
c6:09:95:c8:9c:c2:57:0a:d3:fe:63:ae:71:a2:a5:
a7:54:0f:6f:4b:09:08:b2:37:cb:c5:ec:93:c5:ce:
4b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:5B:90:94:26:DA:2B:3C:73:5B:FC:E1:82:28:84:50:DB:3E:04:86
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/5luQlCbaKzxzW_zhgiiEUNs-BIY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.78.0/23
91.242.84.0/23
194.114.144.0/24
Signature Algorithm: sha256WithRSAEncryption
10:e7:78:ac:d4:65:b7:6a:08:7d:f0:6f:0e:ef:cc:81:91:ed:
f4:05:b3:4b:a3:a4:f3:a3:e0:0e:35:1d:2e:55:ef:50:8e:e6:
bc:57:e0:8d:a4:a7:ff:cd:f9:78:d4:61:59:ca:c0:70:54:d6:
a9:8c:58:05:40:05:8e:99:c9:9a:fe:e3:f5:c0:fe:d1:10:00:
fd:7a:a1:11:42:21:0c:20:2d:79:6e:e1:d4:0d:0d:67:49:1f:
4d:4c:e1:08:f0:f1:87:91:4a:77:12:31:f7:ae:21:3f:e4:b7:
bd:5e:34:2f:56:9e:80:07:68:93:c1:c6:9a:c9:71:df:d8:9b:
43:5a:ef:d6:f6:4c:5d:42:96:cc:c3:90:bc:3a:ee:4f:7f:59:
22:5e:e4:40:63:b7:3c:0d:94:9c:ed:c4:cf:66:3b:af:4e:19:
10:12:eb:7b:89:d8:42:01:cd:93:c8:94:2e:3c:52:df:98:f7:
a7:e4:65:d6:8f:e0:39:56:1f:a9:20:fb:a7:43:bc:71:20:9f:
9b:05:20:ff:27:56:99:58:b0:ce:bd:17:e6:b7:46:2d:b5:6a:
56:e0:0e:35:fd:c4:a5:ed:b8:d1:c1:14:b5:0d:9c:f6:42:e0:
af:05:64:0e:e3:a6:7f:5b:89:d8:f0:c5:3a:99:76:ab:98:cf:
22:7f:82:77
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZbuSbduus4dl2Lym+5DUyhmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiYWIzMDY4Mzg1OWVjN2UwMjA2ZmU5MjY1MzYzZThlMzk3
MWE5YTgwHhcNMjUwNTIwMTUyMjEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNjViOTA5NDI2ZGEyYjNjNzM1YmZjZTE4MjI4ODQ1MGRiM2UwNDg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBvXHe1J176oma+Kt4sLs0eId64z
ueg6pW4tn39LdQSOjH+V7ZiuQjBp/PYdJW7WjoK3r+qiEtc0osUHlMT7gm0ld20M
mol0DoKb9HiF4Vtg+n8NqbFZ9/JFbd8m0deedo7fjJHf/csEkyqHuYkETw3W0TcB
9ncj1jxRB20X9dd1KZT4EU0Pl+mv9pFspHFBATfX44FEgzFeotbT11V6U6NZyy08
s1hF3zsai4+GZi/FmkntxXckGg8+k9oUl9QiNKVQ9H9u53we8opj1MSCcGHEWFVm
yGFA1dCJd8PodN7GCZXInMJXCtP+Y65xoqWnVA9vSwkIsjfLxeyTxc5L3QIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFOZbkJQm2is8c1v84YIohFDbPgSGMB8GA1UdIwQY
MBaAFIurMGg4Wex+Agb+kmU2Po45camoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQt
M2FjOWU1NmMzMDg5LzEvNWx1UWxDYmFLenh6V196aGdpaUVVTnMtQklZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQtM2FjOWU1NmMzMDg5
LzEvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBW/JOAwQB
W/JUAwQAwnKQMA0GCSqGSIb3DQEBCwUAA4IBAQAQ53is1GW3agh98G8O78yBke30
BbNLo6Tzo+AONR0uVe9Qjua8V+CNpKf/zfl41GFZysBwVNapjFgFQAWOmcma/uP1
wP7READ9eqERQiEMIC15buHUDQ1nSR9NTOEI8PGHkUp3EjH3riE/5Le9XjQvVp6A
B2iTwcaayXHf2JtDWu/W9kxdQpbMw5C8Ou5Pf1kiXuRAY7c8DZSc7cTPZjuvThkQ
Eut7idhCAc2TyJQuPFLfmPen5GXWj+A5Vh+pIPunQ7xxIJ+bBSD/J1aZWLDOvRfm
t0YttWpW4A41/cSl7bjRwRS1DZz2QuCvBWQO46Z/W4nY8MU6mXarmM8if4J3
-----END CERTIFICATE-----
Generated at Wed Jun 18 01:44:54 2025 by rpki-client