Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/1oQvv0jSoSu53ss0BELp3o4jFmM.roa
File: 1oQvv0jSoSu53ss0BELp3o4jFmM.roa (raw, json)
Hash identifier: I2MUurYubFmbZ7GZ8bLKTpYRYZB3nGjsRDVL/GxzZxA=
Subject key identifier: D6:84:2F:BF:48:D2:A1:2B:B9:DE:CB:34:04:42:E9:DE:8E:23:16:63
Certificate issuer: /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Certificate serial: 0197A0E888BBC14FEF7A457BEFA538FC82F9
Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/1oQvv0jSoSu53ss0BELp3o4jFmM.roa
Signing time: Tue 24 Jun 2025 07:48:03 +0000
ROA not before: Tue 24 Jun 2025 07:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20001
IP address blocks: 89.23.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:a0:e8:88:bb:c1:4f:ef:7a:45:7b:ef:a5:38:fc:82:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Validity
Not Before: Jun 24 07:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d6842fbf48d2a12bb9decb340442e9de8e231663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:1a:c9:b6:a9:33:56:8a:20:a4:4e:52:06:4a:
7d:7f:97:30:87:b3:e2:ee:16:ed:40:b1:af:ba:b1:
87:6e:9e:f1:61:27:33:ea:27:f4:71:24:ab:9e:bc:
71:34:83:fa:f6:27:86:28:32:bd:7e:87:fa:59:c3:
f2:63:db:52:ae:98:34:25:d6:b9:a0:fc:33:fd:57:
8f:e8:85:0b:b1:4c:4d:8e:05:9a:17:3f:4f:fc:35:
3c:b6:11:57:d4:26:30:a2:e9:0e:2f:f1:92:a5:21:
54:c8:99:b8:58:59:37:52:f4:61:2a:cc:be:9f:77:
d2:3c:19:6e:92:1b:fb:1e:ab:7c:32:4d:25:13:7f:
07:01:0f:40:3e:d6:d4:8c:c6:c8:6d:b2:b4:bd:29:
9f:4b:e1:0d:34:99:c2:32:dc:0b:5c:ab:ab:cc:48:
7d:8d:3b:e2:3a:a0:cb:15:81:b6:5b:6a:32:b7:5c:
96:24:c2:06:d7:3f:68:62:a6:43:1a:16:17:50:56:
be:33:04:b5:be:92:48:d3:43:26:1f:28:de:0e:12:
1a:79:6e:ae:8b:1d:31:17:0c:41:b0:82:51:cb:a7:
d3:7d:9e:8e:e3:17:20:e1:9f:01:17:33:ad:b9:37:
4d:6c:74:dd:c9:f9:fc:b1:d5:70:cb:6f:36:f7:47:
b5:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:84:2F:BF:48:D2:A1:2B:B9:DE:CB:34:04:42:E9:DE:8E:23:16:63
X509v3 Authority Key Identifier:
keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/1oQvv0jSoSu53ss0BELp3o4jFmM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.81.0/24
Signature Algorithm: sha256WithRSAEncryption
89:c6:c3:d4:f1:85:4c:3b:f5:53:86:07:58:fd:9d:82:95:90:
44:8c:ef:e1:63:5a:44:80:c5:bd:5d:c1:03:d2:75:40:c4:74:
78:c3:eb:8b:58:7e:dd:ee:2f:89:0d:d5:5c:18:f6:a4:6c:af:
5f:08:12:02:e1:69:81:7a:ae:00:4d:8f:ad:ef:60:65:7b:a5:
70:c9:a8:4d:03:bd:a5:69:f3:bd:22:92:9f:cc:97:95:19:d5:
f3:8b:45:20:20:8e:e5:ca:8a:af:42:d0:d2:cd:4e:3f:a5:4c:
e0:5a:21:b8:3f:db:24:30:57:cc:6c:75:01:07:27:f0:bf:a3:
41:61:72:33:ae:b7:b1:e8:7c:23:2e:2d:05:ed:d0:95:7a:4f:
25:05:04:76:55:e3:fd:00:f2:a8:a6:1e:99:ba:d8:d2:d4:6e:
a3:54:5c:f7:7d:7f:f0:4a:40:46:33:fb:9e:8d:12:51:57:53:
fc:d5:89:f3:b3:83:00:ce:b2:b0:f8:4d:60:ab:0d:eb:45:6e:
c9:d3:63:d0:60:a3:7a:72:69:3c:ba:e3:95:03:22:a5:32:e3:
5f:26:ec:a1:68:00:c8:5f:f9:d9:0c:0e:e2:73:9a:da:48:5d:
c6:14:a5:46:c4:76:dd:f0:d2:68:04:94:b6:5b:90:55:89:cb:
c6:cb:1b:95
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZeg6Ii7wU/vekV776U4/IL5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5NzEzZWYyNTI3N2UxM2RkNzNmNDQxOTZmZGE1Y2VjMGZk
OWNlMTYwHhcNMjUwNjI0MDc0ODAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNjg0MmZiZjQ4ZDJhMTJiYjlkZWNiMzQwNDQyZTlkZThlMjMxNjYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1xrJtqkzVoogpE5SBkp9f5cwh7Pi
7hbtQLGvurGHbp7xYScz6if0cSSrnrxxNIP69ieGKDK9fof6WcPyY9tSrpg0Jda5
oPwz/VeP6IULsUxNjgWaFz9P/DU8thFX1CYwoukOL/GSpSFUyJm4WFk3UvRhKsy+
n3fSPBlukhv7Hqt8Mk0lE38HAQ9APtbUjMbIbbK0vSmfS+ENNJnCMtwLXKurzEh9
jTviOqDLFYG2W2oyt1yWJMIG1z9oYqZDGhYXUFa+MwS1vpJI00MmHyjeDhIaeW6u
ix0xFwxBsIJRy6fTfZ6O4xcg4Z8BFzOtuTdNbHTdyfn8sdVwy28290e1MQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNaEL79I0qErud7LNARC6d6OIxZjMB8GA1UdIwQY
MBaAFOlxPvJSd+E91z9EGW/aXOwP2c4WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlhFLThsSjM0VDNYUDBRWmI5cGM3QV9aemhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9lMTc2ZWItNTZmMi00ODA3LWIxMDEt
MGY2NmMxODg3OTE2LzEvMW9RdnYwalNvU3U1M3NzMEJFTHAzbzRqRm1NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS9lMTc2ZWItNTZmMi00ODA3LWIxMDEtMGY2NmMxODg3OTE2
LzEvNlhFLThsSjM0VDNYUDBRWmI5cGM3QV9aemhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWRdRMA0G
CSqGSIb3DQEBCwUAA4IBAQCJxsPU8YVMO/VThgdY/Z2ClZBEjO/hY1pEgMW9XcED
0nVAxHR4w+uLWH7d7i+JDdVcGPakbK9fCBIC4WmBeq4ATY+t72Ble6VwyahNA72l
afO9IpKfzJeVGdXzi0UgII7lyoqvQtDSzU4/pUzgWiG4P9skMFfMbHUBByfwv6NB
YXIzrrex6HwjLi0F7dCVek8lBQR2VeP9APKoph6ZutjS1G6jVFz3fX/wSkBGM/ue
jRJRV1P81Ynzs4MAzrKw+E1gqw3rRW7J02PQYKN6cmk8uuOVAyKlMuNfJuyhaADI
X/nZDA7ic5raSF3GFKVGxHbd8NJoBJS2W5BVicvGyxuV
-----END CERTIFICATE-----
Generated at Thu Jul 3 00:21:14 2025 by rpki-client