Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/R6j9VFf9hyGNWvQI3K-rac4qKtM.roa
File: R6j9VFf9hyGNWvQI3K-rac4qKtM.roa (raw, json)
Hash identifier: OsF+wduGV2ZDH6UXcdpVcVuvDncNr0AEm//3Zi2I5P8=
Subject key identifier: 47:A8:FD:54:57:FD:87:21:8D:5A:F4:08:DC:AF:AB:69:CE:2A:2A:D3
Certificate issuer: /CN=0e64f81b9e36b849917787678d014db4bfcef311
Certificate serial: 01975AABCCB29DFF73F951484F10CAA19FD1
Authority key identifier: 0E:64:F8:1B:9E:36:B8:49:91:77:87:67:8D:01:4D:B4:BF:CE:F3:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DmT4G542uEmRd4dnjQFNtL_O8xE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/R6j9VFf9hyGNWvQI3K-rac4qKtM.roa
Signing time: Tue 10 Jun 2025 16:28:17 +0000
ROA not before: Tue 10 Jun 2025 16:28:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215871
IP address blocks: 91.243.68.0/24 maxlen: 24
2a14:1f80::/29 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DmT4G542uEmRd4dnjQFNtL_O8xE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 07:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5a:ab:cc:b2:9d:ff:73:f9:51:48:4f:10:ca:a1:9f:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e64f81b9e36b849917787678d014db4bfcef311
Validity
Not Before: Jun 10 16:28:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=47a8fd5457fd87218d5af408dcafab69ce2a2ad3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:aa:63:be:8f:98:90:34:6a:1d:59:59:67:ef:
22:d5:28:c0:e8:de:aa:8a:c0:d0:cc:6d:9e:c1:45:
1c:6b:e3:14:72:f1:a8:1b:80:5a:97:7b:ed:75:7e:
14:07:30:8f:3c:55:b1:6a:ad:b2:69:5d:f4:2f:6f:
3d:0c:d0:7d:fd:bd:a9:1d:fc:ca:17:1e:47:4e:c2:
ba:30:d8:bb:91:43:33:14:20:85:0e:44:ed:49:8e:
a7:60:dd:07:3e:34:db:23:80:80:41:d7:da:54:35:
ad:f2:00:ec:f2:4c:aa:bb:2e:46:c0:f0:da:85:51:
c5:ca:f8:d1:71:89:2d:ee:55:42:55:93:08:4b:9e:
08:96:84:67:c4:ad:c9:2d:a1:8f:f7:41:ae:c3:50:
93:33:19:81:db:1d:2c:88:f4:e3:ac:c2:94:7f:89:
66:9f:7d:c3:f8:f4:f5:00:75:5d:69:dd:2c:88:d8:
1a:40:d2:4b:98:92:d9:50:26:d2:27:25:33:32:b1:
78:68:b7:a0:e4:4b:98:b6:a0:dc:29:0b:ee:5c:59:
ae:f7:63:7b:41:c6:de:03:01:af:2a:66:b3:1a:aa:
6a:8b:a1:e4:b8:2f:f3:80:bd:2a:5e:b5:1d:3b:1f:
ed:ca:bf:7e:cb:0c:44:43:79:79:26:f4:08:15:04:
8d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:A8:FD:54:57:FD:87:21:8D:5A:F4:08:DC:AF:AB:69:CE:2A:2A:D3
X509v3 Authority Key Identifier:
keyid:0E:64:F8:1B:9E:36:B8:49:91:77:87:67:8D:01:4D:B4:BF:CE:F3:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DmT4G542uEmRd4dnjQFNtL_O8xE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/R6j9VFf9hyGNWvQI3K-rac4qKtM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.243.68.0/24
IPv6:
2a14:1f80::/29
Signature Algorithm: sha256WithRSAEncryption
05:8d:c1:38:de:55:c2:d0:44:81:66:b3:b1:fd:be:8c:b8:5a:
db:df:f8:7b:02:8b:a7:1e:80:29:09:fe:9a:38:ad:55:58:18:
c7:87:56:50:51:50:d5:5c:aa:d3:e5:a0:b2:fe:f5:c1:aa:54:
f3:07:4e:b8:4a:de:3a:7c:2c:08:54:0d:45:cf:c4:f0:72:cf:
15:47:cf:f5:5d:30:34:cc:de:04:46:3c:d2:7d:54:17:f4:16:
5c:76:34:4d:2c:3d:ca:67:26:fc:d4:c3:75:87:42:1b:ae:82:
21:95:13:87:1c:c6:91:66:7d:50:17:e4:2e:23:fb:a9:09:95:
af:b0:24:c4:0b:81:46:9d:e7:7c:97:4e:b0:b1:64:ab:3b:25:
d9:4d:c8:d6:a7:d4:36:61:fe:33:40:0e:18:71:b3:a0:19:bd:
50:fc:e7:7d:d0:7b:fc:e5:1f:15:a1:c9:19:ec:2f:06:c5:3a:
80:4c:8d:b9:af:51:39:9f:b2:6f:77:10:fc:c1:2f:84:5e:2d:
22:7f:e8:7f:b5:e0:08:d8:d8:3d:f0:2c:e5:53:18:43:18:1e:
6c:ee:65:f7:e6:fd:66:a3:2e:95:22:aa:ad:19:80:32:0a:81:
47:2b:29:32:74:90:ef:96:20:ec:75:45:c1:be:b0:ac:62:08:
c2:68:5b:c7
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZdaq8yynf9z+VFITxDKoZ/RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlNjRmODFiOWUzNmI4NDk5MTc3ODc2NzhkMDE0ZGI0YmZj
ZWYzMTEwHhcNMjUwNjEwMTYyODE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0N2E4ZmQ1NDU3ZmQ4NzIxOGQ1YWY0MDhkY2FmYWI2OWNlMmEyYWQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6pjvo+YkDRqHVlZZ+8i1SjA6N6q
isDQzG2ewUUca+MUcvGoG4Bal3vtdX4UBzCPPFWxaq2yaV30L289DNB9/b2pHfzK
Fx5HTsK6MNi7kUMzFCCFDkTtSY6nYN0HPjTbI4CAQdfaVDWt8gDs8kyquy5GwPDa
hVHFyvjRcYkt7lVCVZMIS54IloRnxK3JLaGP90Guw1CTMxmB2x0siPTjrMKUf4lm
n33D+PT1AHVdad0siNgaQNJLmJLZUCbSJyUzMrF4aLeg5EuYtqDcKQvuXFmu92N7
QcbeAwGvKmazGqpqi6HkuC/zgL0qXrUdOx/tyr9+ywxEQ3l5JvQIFQSNNwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFEeo/VRX/YchjVr0CNyvq2nOKirTMB8GA1UdIwQY
MBaAFA5k+BueNrhJkXeHZ40BTbS/zvMRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRG1UNEc1NDJ1RW1SZDRkbmpRRk50TF9POHhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy81OTRkMjUtZjFjNi00MDQ0LWE4YTct
YzhmMTgyZTk1ZWE1LzEvUjZqOVZGZjloeUdOV3ZRSTNLLXJhYzRxS3RNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy81OTRkMjUtZjFjNi00MDQ0LWE4YTctYzhmMTgyZTk1ZWE1
LzEvRG1UNEc1NDJ1RW1SZDRkbmpRRk50TF9POHhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAW/NEMA0E
AgACMAcDBQMqFB+AMA0GCSqGSIb3DQEBCwUAA4IBAQAFjcE43lXC0ESBZrOx/b6M
uFrb3/h7AounHoApCf6aOK1VWBjHh1ZQUVDVXKrT5aCy/vXBqlTzB064St46fCwI
VA1Fz8Twcs8VR8/1XTA0zN4ERjzSfVQX9BZcdjRNLD3KZyb81MN1h0IbroIhlROH
HMaRZn1QF+QuI/upCZWvsCTEC4FGned8l06wsWSrOyXZTcjWp9Q2Yf4zQA4YcbOg
Gb1Q/Od90Hv85R8VockZ7C8GxTqATI25r1E5n7JvdxD8wS+EXi0if+h/teAI2Ng9
8CzlUxhDGB5s7mX35v1moy6VIqqtGYAyCoFHKykydJDvliDsdUXBvrCsYgjCaFvH
-----END CERTIFICATE-----
Generated at Tue Jul 1 10:01:09 2025 by rpki-client