Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/2e0lc1JzQ87yGAowww8kgZqV7YY.roa
File: 2e0lc1JzQ87yGAowww8kgZqV7YY.roa (raw, json)
Hash identifier: gNVpmyo9CJXnk0pgBpahH9O86M9z121dgiIEC4Sk0fY=
Subject key identifier: D9:ED:25:73:52:73:43:CE:F2:18:0A:30:C3:0F:24:81:9A:95:ED:86
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 0198C1CBEEAB12CEE6C9CD269267C9AB7A69
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/2e0lc1JzQ87yGAowww8kgZqV7YY.roa
Signing time: Tue 19 Aug 2025 10:07:04 +0000
ROA not before: Tue 19 Aug 2025 10:07:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215728
IP address blocks: 94.74.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 19:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c1:cb:ee:ab:12:ce:e6:c9:cd:26:92:67:c9:ab:7a:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Aug 19 10:07:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d9ed2573527343cef2180a30c30f24819a95ed86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0f:25:7d:da:bd:d0:41:60:32:63:2a:56:82:
45:a3:f3:d8:52:1f:22:ce:cc:20:3f:fb:b4:16:92:
de:79:46:d7:8f:b5:01:df:93:17:eb:d4:d0:f5:76:
72:d7:0f:86:92:a0:01:b3:49:9a:85:2c:b6:d0:20:
a5:ba:ec:e4:af:79:fa:1a:80:65:1b:50:80:1f:d2:
51:d3:19:c7:e5:0b:db:73:60:05:a1:f0:39:9c:42:
19:3d:5d:1d:ac:02:9c:9e:7e:f6:8f:8b:b1:6d:88:
b4:fd:5e:8a:4f:ce:47:97:8c:c0:df:4e:89:9e:36:
e7:e4:25:50:be:ac:9e:90:e7:a3:fc:13:db:c0:71:
d2:ed:44:93:41:86:38:3f:af:9f:6b:23:57:1a:5f:
a6:50:2d:e5:b2:9c:54:76:8a:08:0f:0d:7e:62:61:
43:08:35:56:45:6d:91:18:f9:fe:7d:57:e2:fd:26:
64:c7:48:20:82:16:f7:e3:05:c3:ab:f4:62:04:30:
f1:3a:28:12:a8:87:fd:62:7d:a4:44:f1:91:d8:65:
3f:09:a3:60:b7:c4:0f:f3:0c:31:6c:bb:85:37:d0:
03:c0:0c:79:f4:e5:cc:3a:7c:53:04:b8:92:f5:64:
b9:9a:f9:ce:57:42:60:3b:00:39:a7:a4:89:09:ef:
33:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:ED:25:73:52:73:43:CE:F2:18:0A:30:C3:0F:24:81:9A:95:ED:86
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/2e0lc1JzQ87yGAowww8kgZqV7YY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.74.157.0/24
Signature Algorithm: sha256WithRSAEncryption
79:36:cb:22:a5:c8:c4:fa:13:74:8d:e7:51:df:4c:e0:e0:75:
3f:b6:d4:18:fb:25:66:56:c1:34:42:39:ab:59:fb:0e:86:ea:
55:3e:05:5e:6e:c5:3e:77:e2:dc:01:6b:45:86:cd:d4:62:c3:
ef:dc:bc:c4:54:5a:80:f0:c4:11:a6:d5:0e:4f:13:09:be:2a:
91:c6:42:b6:1f:91:4f:f7:ba:13:42:92:ee:d1:c9:b2:ad:5e:
b6:7f:8c:80:79:04:ea:b2:61:f0:12:c5:ad:d1:21:45:01:c6:
84:3f:74:97:84:88:84:33:d5:d8:40:1d:f0:44:76:8c:f1:b5:
07:f4:c5:ee:d0:2b:69:3f:e4:da:b3:0f:20:0c:d9:9a:1f:76:
44:cc:7c:fb:9d:51:d2:f4:d3:97:f3:d9:82:43:b9:ff:55:9d:
3c:fd:08:40:a3:5c:74:51:cb:f1:25:09:e7:2c:7d:c8:7e:20:
07:fe:56:96:6a:d7:8d:39:54:67:96:f8:d7:89:65:d3:0c:a5:
a0:17:85:40:a1:bf:11:84:d0:83:73:80:c8:f4:b0:be:3c:5d:
f9:a1:15:77:71:59:43:2d:f3:15:70:84:02:c1:ba:6e:46:f2:
7f:4d:24:ad:61:3e:31:22:da:d7:20:fa:cc:8c:34:e0:75:b6:
ef:74:ac:d6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZjBy+6rEs7myc0mkmfJq3ppMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2MDQ3NWViZTdmMDdkNzQxNTNjYjFjY2EzMzhjMTZkODAx
ZjQ1ZjcwHhcNMjUwODE5MTAwNzA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOWVkMjU3MzUyNzM0M2NlZjIxODBhMzBjMzBmMjQ4MTlhOTVlZDg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApg8lfdq90EFgMmMqVoJFo/PYUh8i
zswgP/u0FpLeeUbXj7UB35MX69TQ9XZy1w+GkqABs0mahSy20CCluuzkr3n6GoBl
G1CAH9JR0xnH5Qvbc2AFofA5nEIZPV0drAKcnn72j4uxbYi0/V6KT85Hl4zA306J
njbn5CVQvqyekOej/BPbwHHS7USTQYY4P6+fayNXGl+mUC3lspxUdooIDw1+YmFD
CDVWRW2RGPn+fVfi/SZkx0ggghb34wXDq/RiBDDxOigSqIf9Yn2kRPGR2GU/CaNg
t8QP8wwxbLuFN9ADwAx59OXMOnxTBLiS9WS5mvnOV0JgOwA5p6SJCe8zewIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNntJXNSc0PO8hgKMMMPJIGale2GMB8GA1UdIwQY
MBaAFNYEdevn8H10FTyxzKM4wW2AH0X3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2Mt
NDk2ZjhlYmIyZDYxLzEvMmUwbGMxSnpRODd5R0Fvd3d3OGtnWnFWN1lZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2MtNDk2ZjhlYmIyZDYx
LzEvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXkqdMA0G
CSqGSIb3DQEBCwUAA4IBAQB5NssipcjE+hN0jedR30zg4HU/ttQY+yVmVsE0Qjmr
WfsOhupVPgVebsU+d+LcAWtFhs3UYsPv3LzEVFqA8MQRptUOTxMJviqRxkK2H5FP
97oTQpLu0cmyrV62f4yAeQTqsmHwEsWt0SFFAcaEP3SXhIiEM9XYQB3wRHaM8bUH
9MXu0CtpP+Tasw8gDNmaH3ZEzHz7nVHS9NOX89mCQ7n/VZ08/QhAo1x0UcvxJQnn
LH3IfiAH/laWateNOVRnlvjXiWXTDKWgF4VAob8RhNCDc4DI9LC+PF35oRV3cVlD
LfMVcIQCwbpuRvJ/TSStYT4xItrXIPrMjDTgdbbvdKzW
-----END CERTIFICATE-----
Generated at Sat Aug 23 03:49:12 2025 by rpki-client