Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/j0eQCpRbkkshg2cOl2P0JLeBDDw.roa
File: j0eQCpRbkkshg2cOl2P0JLeBDDw.roa (raw, json)
Hash identifier: sMtFOxKW/3UNJ7k3m/3q4HKIZXU/80JJ7tR1eHGV0HE=
Subject key identifier: 8F:47:90:0A:94:5B:92:4B:21:83:67:0E:97:63:F4:24:B7:81:0C:3C
Certificate issuer: /CN=94d98e8fec680775a157266e0c6b78b141a34f5e
Certificate serial: 01976B1F3A1CE6B937864D2C4864C08D77C9
Authority key identifier: 94:D9:8E:8F:EC:68:07:75:A1:57:26:6E:0C:6B:78:B1:41:A3:4F:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/j0eQCpRbkkshg2cOl2P0JLeBDDw.roa
Signing time: Fri 13 Jun 2025 21:08:17 +0000
ROA not before: Fri 13 Jun 2025 21:08:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8254
IP address blocks: 46.28.64.0/21 maxlen: 21
46.28.71.0/24 maxlen: 24
85.90.197.0/24 maxlen: 24
85.90.198.0/24 maxlen: 24
217.12.204.0/24 maxlen: 24
2a12:6fc3::/32 maxlen: 32
2a12:6fc4::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.mft
rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 03:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:1f:3a:1c:e6:b9:37:86:4d:2c:48:64:c0:8d:77:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94d98e8fec680775a157266e0c6b78b141a34f5e
Validity
Not Before: Jun 13 21:08:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8f47900a945b924b2183670e9763f424b7810c3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a9:d3:d0:9b:f8:f2:42:a5:db:dd:c7:f8:6c:
ef:d1:06:ae:18:a7:a2:0c:73:51:98:d8:b2:45:ff:
03:6f:42:28:a3:2b:5a:f4:5a:4d:9a:c5:a7:fc:e4:
a9:c9:4d:3f:cb:eb:10:0a:7f:b8:9e:bd:ac:fa:a4:
81:08:fb:ce:ac:53:2f:d3:6f:71:78:f8:14:c4:fc:
51:da:7a:72:0a:00:08:00:ec:6b:b4:44:f4:c2:98:
04:78:f5:7d:df:9f:db:84:41:5b:1c:87:26:7b:a7:
47:48:be:1b:55:d5:01:80:49:8c:27:92:f7:1d:4a:
46:a9:fd:3b:a2:aa:c7:c9:03:70:fe:b2:7e:8f:ac:
d1:1d:21:af:22:1b:6a:bc:5c:29:dd:ef:0b:20:f0:
03:90:d7:e9:86:27:ca:36:11:54:89:27:30:d1:d7:
11:89:ee:af:26:95:c2:cc:a0:2c:dc:41:4b:9f:8c:
35:c8:52:18:a4:b7:b1:0c:d3:e3:dc:b7:aa:ae:b0:
49:ca:95:11:a5:f8:78:27:af:82:19:0e:b4:11:2c:
b3:f0:15:e1:8f:08:52:11:08:a4:95:aa:c3:65:f7:
4f:8e:66:c1:e3:30:10:bd:ac:9d:33:d6:da:b5:08:
36:d5:32:d7:9c:de:7d:5d:ef:6b:a3:64:76:95:b2:
ef:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:47:90:0A:94:5B:92:4B:21:83:67:0E:97:63:F4:24:B7:81:0C:3C
X509v3 Authority Key Identifier:
keyid:94:D9:8E:8F:EC:68:07:75:A1:57:26:6E:0C:6B:78:B1:41:A3:4F:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/j0eQCpRbkkshg2cOl2P0JLeBDDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.28.64.0/21
85.90.197.0-85.90.198.255
217.12.204.0/24
IPv6:
2a12:6fc3::-2a12:6fc4:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
82:38:86:09:90:7a:5d:5f:54:97:c1:87:4b:d5:3f:8e:3d:77:
c8:b1:bf:ca:9f:b1:1a:60:4b:97:12:a2:1c:ca:e8:a6:88:dc:
11:7f:d3:4f:4a:98:9a:c8:83:c3:8b:63:0e:9c:1a:86:e5:28:
cd:ac:e5:56:5a:09:9d:91:6b:30:75:14:b6:f3:86:16:5a:33:
35:75:46:78:ec:d3:74:b9:1d:a0:34:de:75:d8:76:c1:b6:f6:
e6:e6:1e:3f:66:f2:1c:c8:40:a3:23:ae:7e:6e:be:72:85:3f:
5a:0d:2b:05:05:9c:0d:65:52:b6:90:9d:60:ab:5c:89:d3:3a:
b7:20:96:83:e1:01:b2:b5:7c:f8:fe:56:de:7e:cd:d7:a0:24:
b5:90:d0:ff:d4:42:c2:a1:6b:16:b7:34:60:c7:7d:59:a6:4d:
11:ef:ae:9a:fa:c8:03:fc:55:9d:c5:f5:cc:68:71:77:09:08:
84:98:40:d2:42:12:b3:75:25:57:e2:15:b1:da:f0:bf:79:e7:
b7:12:0b:92:34:7f:60:b5:30:08:cd:f0:16:a1:96:99:84:f3:
ab:02:d3:88:2a:17:32:01:53:56:22:70:b5:11:9e:32:69:3a:
00:04:4c:cf:00:04:cd:9f:65:24:03:54:84:f9:07:0c:26:a1:
44:56:77:78
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgISAZdrHzoc5rk3hk0sSGTAjXfJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0ZDk4ZThmZWM2ODA3NzVhMTU3MjY2ZTBjNmI3OGIxNDFh
MzRmNWUwHhcNMjUwNjEzMjEwODE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZjQ3OTAwYTk0NWI5MjRiMjE4MzY3MGU5NzYzZjQyNGI3ODEwYzNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKnT0Jv48kKl293H+Gzv0QauGKei
DHNRmNiyRf8Db0Iooyta9FpNmsWn/OSpyU0/y+sQCn+4nr2s+qSBCPvOrFMv029x
ePgUxPxR2npyCgAIAOxrtET0wpgEePV935/bhEFbHIcme6dHSL4bVdUBgEmMJ5L3
HUpGqf07oqrHyQNw/rJ+j6zRHSGvIhtqvFwp3e8LIPADkNfphifKNhFUiScw0dcR
ie6vJpXCzKAs3EFLn4w1yFIYpLexDNPj3LeqrrBJypURpfh4J6+CGQ60ESyz8BXh
jwhSEQiklarDZfdPjmbB4zAQvaydM9batQg21TLXnN59Xe9ro2R2lbLvHwIDAQAB
o4ICNTCCAjEwHQYDVR0OBBYEFI9HkAqUW5JLIYNnDpdj9CS3gQw8MB8GA1UdIwQY
MBaAFJTZjo/saAd1oVcmbgxreLFBo09eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbE5tT2oteG9CM1doVnladURHdDRzVUdqVDE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi83YWUzYzctNjdlNC00NGRlLWIxMzkt
ODdkMTdkZjc0YzdlLzEvajBlUUNwUmJra3NoZzJjT2wyUDBKTGVCRER3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi83YWUzYzctNjdlNC00NGRlLWIxMzktODdkMTdkZjc0Yzdl
LzEvbE5tT2oteG9CM1doVnladURHdDRzVUdqVDE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEsGCCsGAQUFBwEHAQH/BDwwOjAgBAIAATAaAwQDLhxAMAwD
BABVWsUDBABVWsYDBADZDMwwFgQCAAIwEDAOAwUAKhJvwwMFACoSb8QwDQYJKoZI
hvcNAQELBQADggEBAII4hgmQel1fVJfBh0vVP449d8ixv8qfsRpgS5cSohzK6KaI
3BF/009KmJrIg8OLYw6cGoblKM2s5VZaCZ2RazB1FLbzhhZaMzV1Rnjs03S5HaA0
3nXYdsG29ubmHj9m8hzIQKMjrn5uvnKFP1oNKwUFnA1lUraQnWCrXInTOrcgloPh
AbK1fPj+Vt5+zdegJLWQ0P/UQsKhaxa3NGDHfVmmTRHvrpr6yAP8VZ3F9cxocXcJ
CISYQNJCErN1JVfiFbHa8L9557cSC5I0f2C1MAjN8BahlpmE86sC04gqFzIBU1Yi
cLURnjJpOgAETM8ABM2fZSQDVIT5BwwmoURWd3g=
-----END CERTIFICATE-----
Generated at Mon Jun 16 09:59:26 2025 by rpki-client