Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/99b6b6-c2a6-4a7b-8045-9229cf492fb4/1/jJuFjmJwtlonv8Hkaep_iW0VfF4.roa
File: jJuFjmJwtlonv8Hkaep_iW0VfF4.roa (raw, json)
Hash identifier: zsE4QEwxpdDbj5qFx5golFUOXWQFsfOvDcnMxdvqF7o=
Subject key identifier: 8C:9B:85:8E:62:70:B6:5A:27:BF:C1:E4:69:EA:7F:89:6D:15:7C:5E
Certificate issuer: /CN=b30fd255c96b42e72b5688c670f6e26119ad3935
Certificate serial: 01975F7DEDC060E0183D3972907B4A4890DC
Authority key identifier: B3:0F:D2:55:C9:6B:42:E7:2B:56:88:C6:70:F6:E2:61:19:AD:39:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sw_SVclrQucrVojGcPbiYRmtOTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/99b6b6-c2a6-4a7b-8045-9229cf492fb4/1/jJuFjmJwtlonv8Hkaep_iW0VfF4.roa
Signing time: Wed 11 Jun 2025 14:56:17 +0000
ROA not before: Wed 11 Jun 2025 14:56:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51814
IP address blocks: 5.181.17.0/24 maxlen: 24
5.181.18.0/24 maxlen: 24
185.99.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/99b6b6-c2a6-4a7b-8045-9229cf492fb4/1/sw_SVclrQucrVojGcPbiYRmtOTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/99b6b6-c2a6-4a7b-8045-9229cf492fb4/1/sw_SVclrQucrVojGcPbiYRmtOTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/sw_SVclrQucrVojGcPbiYRmtOTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 14:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5f:7d:ed:c0:60:e0:18:3d:39:72:90:7b:4a:48:90:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b30fd255c96b42e72b5688c670f6e26119ad3935
Validity
Not Before: Jun 11 14:56:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8c9b858e6270b65a27bfc1e469ea7f896d157c5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:06:23:46:c8:85:49:36:4c:0e:c6:ac:fb:e9:
df:ce:bb:b5:44:91:43:8f:24:6f:af:ca:b0:d8:4b:
68:2d:43:21:6c:00:5e:1a:0c:eb:bd:97:31:04:53:
6e:2c:1b:82:d9:7a:80:d3:33:dd:f1:a7:89:d8:d5:
17:63:02:81:ef:b6:fb:3c:6e:4b:69:25:9c:6b:5d:
ea:37:ca:f7:62:dd:34:3b:04:2f:e9:7c:03:98:0e:
3c:4f:79:cb:f0:17:45:e6:3b:73:bf:ac:7a:f8:ad:
9c:ec:52:c6:b8:5f:7d:55:4b:5d:d0:5d:8d:5a:d3:
3f:65:95:bb:25:7d:1a:07:0c:71:52:18:6b:30:05:
93:31:9b:c6:ae:c7:0d:9e:e2:8d:97:e2:fa:1f:4f:
98:06:77:99:8a:9f:9c:dd:7f:3d:c3:82:6b:8f:01:
32:dd:79:f6:ee:49:42:eb:9c:53:03:58:9c:87:9b:
5e:b2:d5:e6:71:f4:b7:11:7c:44:e5:d0:f3:96:2b:
01:1a:8d:7e:91:49:d3:62:cd:72:74:2c:9c:b0:33:
2b:43:f0:7a:ae:46:6a:c0:6a:41:4b:5e:9b:32:60:
23:5b:41:17:a4:6a:7f:6a:1e:9e:c6:2e:1f:e5:cd:
35:15:f8:26:ca:74:fa:34:e2:04:c5:81:ec:3a:a3:
88:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:9B:85:8E:62:70:B6:5A:27:BF:C1:E4:69:EA:7F:89:6D:15:7C:5E
X509v3 Authority Key Identifier:
keyid:B3:0F:D2:55:C9:6B:42:E7:2B:56:88:C6:70:F6:E2:61:19:AD:39:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sw_SVclrQucrVojGcPbiYRmtOTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/99b6b6-c2a6-4a7b-8045-9229cf492fb4/1/jJuFjmJwtlonv8Hkaep_iW0VfF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/99b6b6-c2a6-4a7b-8045-9229cf492fb4/1/sw_SVclrQucrVojGcPbiYRmtOTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.17.0-5.181.18.255
185.99.22.0/24
Signature Algorithm: sha256WithRSAEncryption
12:70:2b:33:71:5a:aa:04:f7:4f:16:66:b9:5f:a8:1a:da:53:
0a:29:85:47:3f:20:b9:61:71:d7:7b:fe:bb:c9:7a:b9:c6:8c:
21:8e:d2:2a:0c:60:bf:c7:27:c7:fc:00:ba:5e:92:e2:2c:fc:
ea:92:fd:22:82:f1:37:65:78:e9:65:a4:f6:29:64:89:30:37:
a7:5c:82:9b:23:1c:71:24:e5:bb:95:0c:24:eb:36:59:ab:ee:
8b:72:56:c7:9b:33:9a:cc:54:4c:09:da:87:23:b6:3f:08:28:
fa:35:4c:44:f1:29:09:b3:28:15:93:ef:87:f2:f2:74:27:2a:
f8:87:dc:75:51:7b:62:f5:aa:f7:ac:e2:f3:7d:a2:19:17:04:
61:7a:15:83:0b:98:37:a0:ac:5d:da:b6:0c:0d:59:e3:3e:f7:
c1:56:47:87:e2:f3:89:c8:73:37:a0:7a:b6:31:6b:93:fc:cb:
0d:39:9a:f6:ee:10:31:91:6f:6d:00:08:02:61:97:df:b3:02:
c6:12:87:8c:ec:24:54:c7:28:59:fe:d8:9d:84:e2:73:7d:b7:
59:39:15:7c:db:24:e0:1e:72:36:c9:52:7b:bd:2f:a7:92:f4:
8f:a4:44:ea:bc:1f:49:57:c9:86:41:4d:a5:c9:4e:bb:fc:55:
09:bb:40:31
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAZdffe3AYOAYPTlykHtKSJDcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzMGZkMjU1Yzk2YjQyZTcyYjU2ODhjNjcwZjZlMjYxMTlh
ZDM5MzUwHhcNMjUwNjExMTQ1NjE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YzliODU4ZTYyNzBiNjVhMjdiZmMxZTQ2OWVhN2Y4OTZkMTU3YzVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5AYjRsiFSTZMDsas++nfzru1RJFD
jyRvr8qw2EtoLUMhbABeGgzrvZcxBFNuLBuC2XqA0zPd8aeJ2NUXYwKB77b7PG5L
aSWca13qN8r3Yt00OwQv6XwDmA48T3nL8BdF5jtzv6x6+K2c7FLGuF99VUtd0F2N
WtM/ZZW7JX0aBwxxUhhrMAWTMZvGrscNnuKNl+L6H0+YBneZip+c3X89w4JrjwEy
3Xn27klC65xTA1ich5testXmcfS3EXxE5dDzlisBGo1+kUnTYs1ydCycsDMrQ/B6
rkZqwGpBS16bMmAjW0EXpGp/ah6exi4f5c01FfgmynT6NOIExYHsOqOIFwIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFIybhY5icLZaJ7/B5Gnqf4ltFXxeMB8GA1UdIwQY
MBaAFLMP0lXJa0LnK1aIxnD24mEZrTk1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3dfU1ZjbHJRdWNyVm9qR2NQYmlZUm10T1RVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC85OWI2YjYtYzJhNi00YTdiLTgwNDUt
OTIyOWNmNDkyZmI0LzEvakp1RmptSnd0bG9udjhIa2FlcF9pVzBWZkY0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC85OWI2YjYtYzJhNi00YTdiLTgwNDUtOTIyOWNmNDkyZmI0
LzEvc3dfU1ZjbHJRdWNyVm9qR2NQYmlZUm10T1RVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAAFtRED
BAAFtRIDBAC5YxYwDQYJKoZIhvcNAQELBQADggEBABJwKzNxWqoE908WZrlfqBra
UwophUc/ILlhcdd7/rvJernGjCGO0ioMYL/HJ8f8ALpekuIs/OqS/SKC8TdleOll
pPYpZIkwN6dcgpsjHHEk5buVDCTrNlmr7otyVsebM5rMVEwJ2ocjtj8IKPo1TETx
KQmzKBWT74fy8nQnKviH3HVRe2L1qves4vN9ohkXBGF6FYMLmDegrF3atgwNWeM+
98FWR4fi84nIczegerYxa5P8yw05mvbuEDGRb20ACAJhl9+zAsYSh4zsJFTHKFn+
2J2E4nN9t1k5FXzbJOAecjbJUnu9L6eS9I+kROq8H0lXyYZBTaXJTrv8VQm7QDE=
-----END CERTIFICATE-----
Generated at Sat Jun 14 23:45:35 2025 by rpki-client