Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/66e6ba-0177-42f3-aa90-09a2c9ca7155/1/Ium09zmGvJCt2AU9c-Fdjqpa5l8.roa
File: Ium09zmGvJCt2AU9c-Fdjqpa5l8.roa (raw, json)
Hash identifier: wf3B9W4I0o93C3K/6FUMd+RJ7+UQTH/bjXgr4nrzINY=
Subject key identifier: 22:E9:B4:F7:39:86:BC:90:AD:D8:05:3D:73:E1:5D:8E:AA:5A:E6:5F
Certificate issuer: /CN=4ec56e25b00256e24cda324deb21aa9d13015f65
Certificate serial: 0198D1A00DEA028F0F29180DC38896F6D995
Authority key identifier: 4E:C5:6E:25:B0:02:56:E2:4C:DA:32:4D:EB:21:AA:9D:13:01:5F:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TsVuJbACVuJM2jJN6yGqnRMBX2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/66e6ba-0177-42f3-aa90-09a2c9ca7155/1/Ium09zmGvJCt2AU9c-Fdjqpa5l8.roa
Signing time: Fri 22 Aug 2025 11:53:04 +0000
ROA not before: Fri 22 Aug 2025 11:53:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205268
IP address blocks: 2001:678:10e4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/66e6ba-0177-42f3-aa90-09a2c9ca7155/1/TsVuJbACVuJM2jJN6yGqnRMBX2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/66e6ba-0177-42f3-aa90-09a2c9ca7155/1/TsVuJbACVuJM2jJN6yGqnRMBX2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/TsVuJbACVuJM2jJN6yGqnRMBX2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d1:a0:0d:ea:02:8f:0f:29:18:0d:c3:88:96:f6:d9:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ec56e25b00256e24cda324deb21aa9d13015f65
Validity
Not Before: Aug 22 11:53:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=22e9b4f73986bc90add8053d73e15d8eaa5ae65f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:82:fa:e8:d2:ad:63:24:43:3f:79:90:b2:2a:
34:e0:33:2a:31:8f:31:c7:7f:c8:03:cc:df:e7:81:
bd:99:57:de:8c:09:57:2f:ef:9c:1c:00:58:93:6d:
9f:7e:41:2e:a0:80:37:7e:cf:37:fd:e1:6d:6b:91:
30:d9:96:bc:16:c8:f6:32:be:f5:b5:a3:f6:41:f6:
81:14:b6:94:f0:35:e4:ad:f6:94:64:e8:3f:32:16:
3e:8f:98:95:8c:5c:a5:43:b6:04:65:ed:93:cb:56:
4b:41:00:d4:cb:10:e5:5a:46:f5:b2:49:f3:e8:e9:
cb:ad:de:b3:d1:06:61:6c:ce:d6:40:1a:f8:3e:3d:
35:28:4d:23:48:32:4f:13:6e:20:7e:73:35:0a:e3:
7a:b7:36:0d:09:55:c3:54:0e:40:0e:eb:0f:6a:fc:
81:c2:22:1c:00:55:06:a8:aa:9d:09:0c:a4:51:c4:
8c:e9:16:c2:ef:be:0b:0a:25:4a:83:80:ae:07:f0:
bd:ed:0e:56:50:b7:52:7d:62:63:ee:14:90:ae:4c:
6e:e8:40:1b:2b:45:46:df:77:a0:e0:38:6e:c7:71:
93:2b:37:fa:eb:b7:3b:5c:f9:55:bb:f2:ee:a2:6b:
17:88:31:c6:dc:f4:b3:56:d0:a0:f8:4a:91:0b:56:
3a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:E9:B4:F7:39:86:BC:90:AD:D8:05:3D:73:E1:5D:8E:AA:5A:E6:5F
X509v3 Authority Key Identifier:
keyid:4E:C5:6E:25:B0:02:56:E2:4C:DA:32:4D:EB:21:AA:9D:13:01:5F:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsVuJbACVuJM2jJN6yGqnRMBX2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/66e6ba-0177-42f3-aa90-09a2c9ca7155/1/Ium09zmGvJCt2AU9c-Fdjqpa5l8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/66e6ba-0177-42f3-aa90-09a2c9ca7155/1/TsVuJbACVuJM2jJN6yGqnRMBX2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:10e4::/48
Signature Algorithm: sha256WithRSAEncryption
50:45:b8:47:a8:e2:81:45:58:c7:1e:25:d7:71:0d:78:4c:70:
c0:f8:7b:da:54:e9:49:5c:cf:cf:ab:d2:71:aa:59:8c:45:c8:
b6:a6:aa:ba:64:41:5e:a5:2a:a7:3d:c7:b2:a6:87:99:cb:c1:
f1:ed:88:e5:5f:93:8d:ee:ae:17:67:2d:64:f5:73:3f:59:b8:
6c:f2:e3:e9:5b:c6:ea:65:1a:7d:50:23:2b:85:1f:fb:4b:ab:
58:99:52:4f:9b:bd:90:e4:b6:fd:57:91:0a:05:0e:2c:81:10:
c7:f7:92:6e:dd:5a:8d:95:f1:8e:11:56:5d:34:c2:1e:ec:17:
18:1c:7b:ca:2f:3e:a7:d1:4c:6f:0c:f9:83:dc:dc:f1:a9:c5:
49:92:ee:52:99:94:99:62:b3:cf:3f:2b:9e:e1:25:89:9a:f4:
92:a7:a7:a0:3e:5e:96:1c:32:a9:e6:55:cc:1b:71:0b:59:10:
c4:08:38:1c:15:9a:f5:0b:52:cf:dc:dc:0f:4a:85:35:eb:a1:
d2:9f:b1:f9:9b:22:4c:5f:c4:1c:4f:d8:8f:e6:ca:ee:1d:70:
d2:52:2f:2d:6e:46:15:47:ac:65:23:2a:a0:cd:4f:bd:a6:79:
f2:87:38:7e:82:1b:2f:01:95:13:4b:12:18:c7:d4:a9:8e:1e:
76:4b:65:d3
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZjRoA3qAo8PKRgNw4iW9tmVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlYzU2ZTI1YjAwMjU2ZTI0Y2RhMzI0ZGViMjFhYTlkMTMw
MTVmNjUwHhcNMjUwODIyMTE1MzA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMmU5YjRmNzM5ODZiYzkwYWRkODA1M2Q3M2UxNWQ4ZWFhNWFlNjVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYL66NKtYyRDP3mQsio04DMqMY8x
x3/IA8zf54G9mVfejAlXL++cHABYk22ffkEuoIA3fs83/eFta5Ew2Za8Fsj2Mr71
taP2QfaBFLaU8DXkrfaUZOg/MhY+j5iVjFylQ7YEZe2Ty1ZLQQDUyxDlWkb1sknz
6OnLrd6z0QZhbM7WQBr4Pj01KE0jSDJPE24gfnM1CuN6tzYNCVXDVA5ADusPavyB
wiIcAFUGqKqdCQykUcSM6RbC774LCiVKg4CuB/C97Q5WULdSfWJj7hSQrkxu6EAb
K0VG33eg4Dhux3GTKzf667c7XPlVu/LuomsXiDHG3PSzVtCg+EqRC1Y64QIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFCLptPc5hryQrdgFPXPhXY6qWuZfMB8GA1UdIwQY
MBaAFE7FbiWwAlbiTNoyTeshqp0TAV9lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHNWdUpiQUNWdUpNMmpKTjZ5R3FuUk1CWDJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS82NmU2YmEtMDE3Ny00MmYzLWFhOTAt
MDlhMmM5Y2E3MTU1LzEvSXVtMDl6bUd2SkN0MkFVOWMtRmRqcXBhNWw4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS82NmU2YmEtMDE3Ny00MmYzLWFhOTAtMDlhMmM5Y2E3MTU1
LzEvVHNWdUpiQUNWdUpNMmpKTjZ5R3FuUk1CWDJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeBDk
MA0GCSqGSIb3DQEBCwUAA4IBAQBQRbhHqOKBRVjHHiXXcQ14THDA+HvaVOlJXM/P
q9JxqlmMRci2pqq6ZEFepSqnPceypoeZy8Hx7YjlX5ON7q4XZy1k9XM/Wbhs8uPp
W8bqZRp9UCMrhR/7S6tYmVJPm72Q5Lb9V5EKBQ4sgRDH95Ju3VqNlfGOEVZdNMIe
7BcYHHvKLz6n0UxvDPmD3NzxqcVJku5SmZSZYrPPPyue4SWJmvSSp6egPl6WHDKp
5lXMG3ELWRDECDgcFZr1C1LP3NwPSoU166HSn7H5myJMX8QcT9iP5sruHXDSUi8t
bkYVR6xlIyqgzU+9pnnyhzh+ghsvAZUTSxIYx9Spjh52S2XT
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:09:56 2025 by rpki-client