Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/05a1ca-33c5-4aef-9c9a-f50fd99373ec/1/0JqunmMBjEmd1A-HgkE4JsYwvvg.roa
File: 0JqunmMBjEmd1A-HgkE4JsYwvvg.roa (raw, json)
Hash identifier: S7pQ47ggIC3jlvfHhUSFNbRX+v6ZCpTaVmICGgx3JLA=
Subject key identifier: D0:9A:AE:9E:63:01:8C:49:9D:D4:0F:87:82:41:38:26:C6:30:BE:F8
Certificate issuer: /CN=7e5555f1a2cee89b7134656086f054d796353c1e
Certificate serial: 019856C9E77128CE5BE545F433D48310572E
Authority key identifier: 7E:55:55:F1:A2:CE:E8:9B:71:34:65:60:86:F0:54:D7:96:35:3C:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/flVV8aLO6JtxNGVghvBU15Y1PB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/05a1ca-33c5-4aef-9c9a-f50fd99373ec/1/0JqunmMBjEmd1A-HgkE4JsYwvvg.roa
Signing time: Tue 29 Jul 2025 15:25:28 +0000
ROA not before: Tue 29 Jul 2025 15:25:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49425
IP address blocks: 83.142.64.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/05a1ca-33c5-4aef-9c9a-f50fd99373ec/1/flVV8aLO6JtxNGVghvBU15Y1PB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/05a1ca-33c5-4aef-9c9a-f50fd99373ec/1/flVV8aLO6JtxNGVghvBU15Y1PB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/flVV8aLO6JtxNGVghvBU15Y1PB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:56:c9:e7:71:28:ce:5b:e5:45:f4:33:d4:83:10:57:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e5555f1a2cee89b7134656086f054d796353c1e
Validity
Not Before: Jul 29 15:25:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d09aae9e63018c499dd40f8782413826c630bef8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ab:05:bb:6e:13:10:4e:7e:f8:fc:50:1a:f7:
11:86:c1:80:89:e1:e7:53:6a:50:1f:70:06:30:48:
81:b9:bf:e0:10:a1:4c:bd:61:05:cb:6a:3c:d7:d8:
06:33:4c:24:83:1a:02:a6:d5:2e:02:fc:10:90:59:
b5:72:f5:ec:59:1d:de:8f:f0:b3:50:a5:ef:fe:6c:
64:34:47:c2:35:d4:6c:8c:59:d4:72:c7:c3:bf:5d:
af:a3:76:10:13:55:ac:28:ea:83:fc:d6:5a:99:83:
e0:7c:f4:61:7a:cb:40:a8:d2:dd:13:be:e8:6c:fa:
27:f3:c7:3d:35:ef:a0:e1:47:8c:32:4f:cb:fc:3d:
36:a8:c4:30:2b:5b:0c:c5:43:03:c5:0e:27:c8:0d:
78:c8:c2:1c:8f:14:c2:d3:b2:a7:79:1b:86:02:01:
16:ee:c2:8b:c7:30:7a:e6:c0:04:ae:66:d1:c1:c4:
14:8b:bb:31:ab:4a:17:04:fc:9d:11:2e:be:89:db:
32:3f:7d:91:4d:c2:12:56:4c:0e:12:09:e3:d0:af:
df:e1:1a:62:8e:87:15:d2:e4:f7:4e:e3:c7:e1:4b:
27:a4:06:01:c4:c0:15:49:e0:95:c0:16:05:72:98:
6a:3b:c8:93:3d:c5:73:0c:73:70:f4:7b:29:b0:e1:
ab:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:9A:AE:9E:63:01:8C:49:9D:D4:0F:87:82:41:38:26:C6:30:BE:F8
X509v3 Authority Key Identifier:
keyid:7E:55:55:F1:A2:CE:E8:9B:71:34:65:60:86:F0:54:D7:96:35:3C:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flVV8aLO6JtxNGVghvBU15Y1PB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/05a1ca-33c5-4aef-9c9a-f50fd99373ec/1/0JqunmMBjEmd1A-HgkE4JsYwvvg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/05a1ca-33c5-4aef-9c9a-f50fd99373ec/1/flVV8aLO6JtxNGVghvBU15Y1PB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.142.64.0/21
Signature Algorithm: sha256WithRSAEncryption
30:41:ae:e4:6b:cc:c6:99:6d:28:26:e5:91:ab:8d:b5:f8:8c:
33:2c:a8:01:7e:b1:99:8b:ad:23:b2:bf:73:02:b5:64:92:09:
a7:e1:92:ff:cf:59:b5:db:2e:4f:08:74:ec:c8:d8:af:9a:f5:
e2:a4:99:c5:4d:96:d8:00:7a:a9:1e:5a:68:52:48:98:90:8f:
1f:5b:53:5c:bd:23:37:e3:b7:24:e4:cd:f0:ed:f3:f0:3a:ae:
1a:98:95:f6:39:6f:15:ee:07:a2:9c:55:c0:0f:00:e7:84:2f:
fd:75:c8:7d:5b:90:80:a4:84:01:9c:26:05:aa:f7:ce:57:ab:
f8:5f:2a:26:28:a8:10:06:6f:3f:d5:67:62:f1:63:f3:db:04:
db:d1:09:2b:71:a5:0d:e4:79:70:bd:82:63:d2:f1:d4:76:da:
73:15:c4:68:5f:d6:5f:5c:f1:6f:c5:ef:c0:c3:f3:e6:c6:a2:
de:16:66:22:c8:b3:85:3b:c3:e1:79:d4:3d:68:df:e1:ca:75:
c7:c8:fc:64:78:eb:f6:b1:f3:a9:af:c1:5e:48:f1:79:00:d3:
f9:da:12:51:72:3b:22:b0:92:0c:f0:06:61:71:0a:d5:3d:1f:
11:89:3d:9f:d0:56:0f:42:16:61:80:57:f1:c1:1a:66:98:7a:
27:d9:8a:c0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZhWyedxKM5b5UX0M9SDEFcuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlNTU1NWYxYTJjZWU4OWI3MTM0NjU2MDg2ZjA1NGQ3OTYz
NTNjMWUwHhcNMjUwNzI5MTUyNTI4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMDlhYWU5ZTYzMDE4YzQ5OWRkNDBmODc4MjQxMzgyNmM2MzBiZWY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmasFu24TEE5++PxQGvcRhsGAieHn
U2pQH3AGMEiBub/gEKFMvWEFy2o819gGM0wkgxoCptUuAvwQkFm1cvXsWR3ej/Cz
UKXv/mxkNEfCNdRsjFnUcsfDv12vo3YQE1WsKOqD/NZamYPgfPRhestAqNLdE77o
bPon88c9Ne+g4UeMMk/L/D02qMQwK1sMxUMDxQ4nyA14yMIcjxTC07KneRuGAgEW
7sKLxzB65sAErmbRwcQUi7sxq0oXBPydES6+idsyP32RTcISVkwOEgnj0K/f4Rpi
jocV0uT3TuPH4UsnpAYBxMAVSeCVwBYFcphqO8iTPcVzDHNw9HspsOGrGQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNCarp5jAYxJndQPh4JBOCbGML74MB8GA1UdIwQY
MBaAFH5VVfGizuibcTRlYIbwVNeWNTweMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmxWVjhhTE82SnR4TkdWZ2h2QlUxNVkxUEI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8wNWExY2EtMzNjNS00YWVmLTljOWEt
ZjUwZmQ5OTM3M2VjLzEvMEpxdW5tTUJqRW1kMUEtSGdrRTRKc1l3dnZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny8wNWExY2EtMzNjNS00YWVmLTljOWEtZjUwZmQ5OTM3M2Vj
LzEvZmxWVjhhTE82SnR4TkdWZ2h2QlUxNVkxUEI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDU45AMA0G
CSqGSIb3DQEBCwUAA4IBAQAwQa7ka8zGmW0oJuWRq421+IwzLKgBfrGZi60jsr9z
ArVkkgmn4ZL/z1m12y5PCHTsyNivmvXipJnFTZbYAHqpHlpoUkiYkI8fW1NcvSM3
47ck5M3w7fPwOq4amJX2OW8V7geinFXADwDnhC/9dch9W5CApIQBnCYFqvfOV6v4
XyomKKgQBm8/1Wdi8WPz2wTb0QkrcaUN5HlwvYJj0vHUdtpzFcRoX9ZfXPFvxe/A
w/PmxqLeFmYiyLOFO8PhedQ9aN/hynXHyPxkeOv2sfOpr8FeSPF5ANP52hJRcjsi
sJIM8AZhcQrVPR8RiT2f0FYPQhZhgFfxwRpmmHon2YrA
-----END CERTIFICATE-----
Generated at Sat Aug 9 23:09:04 2025 by rpki-client