Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/c5018c-fdc6-414b-beef-02de0124228e/1/JCqxTeNYmXWAOXh-Rw0YbvfX36g.roa
File: JCqxTeNYmXWAOXh-Rw0YbvfX36g.roa (raw, json)
Hash identifier: aL/xE87F41Qh1J/sqoGNCKwzyzvrDvIXmyZL2UPLV+M=
Subject key identifier: 24:2A:B1:4D:E3:58:99:75:80:39:78:7E:47:0D:18:6E:F7:D7:DF:A8
Certificate issuer: /CN=544a82aa5e2eb71719b7f9f049a307b12454497e
Certificate serial: 0199A5489A1CCF185B9BD498A9D97E65C80E
Authority key identifier: 54:4A:82:AA:5E:2E:B7:17:19:B7:F9:F0:49:A3:07:B1:24:54:49:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VEqCql4utxcZt_nwSaMHsSRUSX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/c5018c-fdc6-414b-beef-02de0124228e/1/JCqxTeNYmXWAOXh-Rw0YbvfX36g.roa
Signing time: Thu 02 Oct 2025 14:17:02 +0000
ROA not before: Thu 02 Oct 2025 14:17:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210895
IP address blocks: 188.137.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/c5018c-fdc6-414b-beef-02de0124228e/1/VEqCql4utxcZt_nwSaMHsSRUSX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/c5018c-fdc6-414b-beef-02de0124228e/1/VEqCql4utxcZt_nwSaMHsSRUSX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/VEqCql4utxcZt_nwSaMHsSRUSX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:a5:48:9a:1c:cf:18:5b:9b:d4:98:a9:d9:7e:65:c8:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=544a82aa5e2eb71719b7f9f049a307b12454497e
Validity
Not Before: Oct 2 14:17:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=242ab14de35899758039787e470d186ef7d7dfa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:68:45:6a:fb:07:60:7a:68:c4:95:87:70:80:
a0:a1:90:a1:f0:10:62:5c:a3:0b:59:8d:03:a1:50:
b2:de:20:2f:cf:99:18:83:12:9e:ee:ac:29:93:3b:
47:77:d7:b9:9d:2b:97:3a:15:a5:c8:52:c5:2a:ab:
48:fb:a6:43:91:0c:8e:3b:da:14:90:82:d3:30:25:
19:af:02:8c:aa:55:d6:5e:89:10:ad:c2:d1:0e:b1:
5c:58:d1:e0:46:25:f9:0d:b0:3f:84:93:97:2f:a0:
26:de:5b:c4:24:b1:73:e6:f2:7b:8e:31:c8:b8:7a:
1c:1a:f0:c7:d2:c7:76:02:74:f1:ce:f7:9f:92:74:
49:ec:54:bc:26:d5:dc:85:af:21:8b:77:2c:f0:67:
11:eb:83:2a:70:31:ed:b9:f8:15:36:47:d0:18:58:
c8:1e:90:6c:90:8f:46:c1:0d:1f:0b:d1:b5:c6:8e:
3d:f7:0c:94:27:f3:93:54:fe:90:9f:46:00:c5:d7:
e4:f8:03:15:c5:48:52:9f:71:ba:82:88:0c:4e:d7:
32:de:39:a4:84:77:54:c6:f1:21:9d:d3:31:65:6e:
ca:58:db:4a:e3:be:0e:d9:27:62:0e:1e:8d:f9:04:
ee:51:ac:46:65:64:e8:6e:28:79:d4:73:5b:d3:76:
c6:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:2A:B1:4D:E3:58:99:75:80:39:78:7E:47:0D:18:6E:F7:D7:DF:A8
X509v3 Authority Key Identifier:
keyid:54:4A:82:AA:5E:2E:B7:17:19:B7:F9:F0:49:A3:07:B1:24:54:49:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VEqCql4utxcZt_nwSaMHsSRUSX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/c5018c-fdc6-414b-beef-02de0124228e/1/JCqxTeNYmXWAOXh-Rw0YbvfX36g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/c5018c-fdc6-414b-beef-02de0124228e/1/VEqCql4utxcZt_nwSaMHsSRUSX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.137.178.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:e5:f8:44:8d:22:a9:83:75:98:05:bc:2b:6a:4c:7e:6c:a7:
7a:5a:ae:37:7f:ee:39:db:3f:82:da:a2:3f:d1:16:d2:bc:3a:
cc:29:d5:e5:18:cf:58:67:5f:b5:75:c7:c3:82:91:77:60:c7:
10:f7:60:3d:aa:80:40:aa:f3:3a:a7:29:be:b2:ea:44:1f:ae:
60:2a:76:ca:55:d3:97:33:ec:35:f5:16:02:8f:85:83:01:ca:
be:6e:f8:6b:d7:40:d1:9c:5f:e2:d0:b1:4d:30:8c:4e:26:f0:
f5:b8:26:fa:10:56:fb:8e:b2:a4:8b:24:f3:51:25:9e:8b:ad:
fc:cf:e3:41:60:a7:00:8f:54:59:a0:52:7e:2a:c9:12:56:3f:
57:02:50:a9:44:ad:b8:bb:ff:97:3b:8b:d8:a9:9a:f2:1e:d4:
8c:dd:c4:fa:0a:03:19:6f:af:48:d3:7f:a6:41:ef:41:93:7f:
b8:77:bf:17:ca:fa:18:11:ce:12:5f:2b:e0:da:8c:66:37:39:
16:d1:7a:94:d0:36:3b:16:c7:7c:77:94:86:25:a6:5b:48:ed:
b8:dd:93:4d:c0:ce:d2:a8:a1:8c:a9:e4:b6:b4:ce:2e:ea:3e:
b5:f1:5c:39:d9:c4:b4:55:c0:4c:31:1c:b2:ea:7d:06:10:98:
4b:27:8c:94
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZmlSJoczxhbm9SYqdl+ZcgOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0NGE4MmFhNWUyZWI3MTcxOWI3ZjlmMDQ5YTMwN2IxMjQ1
NDQ5N2UwHhcNMjUxMDAyMTQxNzAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNDJhYjE0ZGUzNTg5OTc1ODAzOTc4N2U0NzBkMTg2ZWY3ZDdkZmE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmhFavsHYHpoxJWHcICgoZCh8BBi
XKMLWY0DoVCy3iAvz5kYgxKe7qwpkztHd9e5nSuXOhWlyFLFKqtI+6ZDkQyOO9oU
kILTMCUZrwKMqlXWXokQrcLRDrFcWNHgRiX5DbA/hJOXL6Am3lvEJLFz5vJ7jjHI
uHocGvDH0sd2AnTxzvefknRJ7FS8JtXcha8hi3cs8GcR64MqcDHtufgVNkfQGFjI
HpBskI9GwQ0fC9G1xo499wyUJ/OTVP6Qn0YAxdfk+AMVxUhSn3G6gogMTtcy3jmk
hHdUxvEhndMxZW7KWNtK474O2SdiDh6N+QTuUaxGZWTobih51HNb03bGkQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCQqsU3jWJl1gDl4fkcNGG7319+oMB8GA1UdIwQY
MBaAFFRKgqpeLrcXGbf58EmjB7EkVEl+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkVxQ3FsNHV0eGNadF9ud1NhTUhzU1JVU1g0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC9jNTAxOGMtZmRjNi00MTRiLWJlZWYt
MDJkZTAxMjQyMjhlLzEvSkNxeFRlTlltWFdBT1hoLVJ3MFlidmZYMzZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC9jNTAxOGMtZmRjNi00MTRiLWJlZWYtMDJkZTAxMjQyMjhl
LzEvVkVxQ3FsNHV0eGNadF9ud1NhTUhzU1JVU1g0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvImyMA0G
CSqGSIb3DQEBCwUAA4IBAQAa5fhEjSKpg3WYBbwrakx+bKd6Wq43f+452z+C2qI/
0RbSvDrMKdXlGM9YZ1+1dcfDgpF3YMcQ92A9qoBAqvM6pym+supEH65gKnbKVdOX
M+w19RYCj4WDAcq+bvhr10DRnF/i0LFNMIxOJvD1uCb6EFb7jrKkiyTzUSWei638
z+NBYKcAj1RZoFJ+KskSVj9XAlCpRK24u/+XO4vYqZryHtSM3cT6CgMZb69I03+m
Qe9Bk3+4d78XyvoYEc4SXyvg2oxmNzkW0XqU0DY7Fsd8d5SGJaZbSO243ZNNwM7S
qKGMqeS2tM4u6j618Vw52cS0VcBMMRyy6n0GEJhLJ4yU
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:23:52 2025 by rpki-client