Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/IyT2k6njmWiDTlHIFDmWMiSRpFo.roa
File: IyT2k6njmWiDTlHIFDmWMiSRpFo.roa (raw, json)
Hash identifier: GzuynjmD7wUvn12wEXeLKGm5QQ/kKYzrZ6HmQT9MLbw=
Subject key identifier: 23:24:F6:93:A9:E3:99:68:83:4E:51:C8:14:39:96:32:24:91:A4:5A
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01996742EFC886CDFCE695AEC97B7BA5BF1D
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/IyT2k6njmWiDTlHIFDmWMiSRpFo.roa
Signing time: Sat 20 Sep 2025 13:14:23 +0000
ROA not before: Sat 20 Sep 2025 13:14:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198510
IP address blocks: 194.231.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:67:42:ef:c8:86:cd:fc:e6:95:ae:c9:7b:7b:a5:bf:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Sep 20 13:14:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2324f693a9e39968834e51c8143996322491a45a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:94:16:58:27:c6:9d:b7:78:cc:c7:bf:39:95:
df:2d:87:82:18:bd:2e:ca:03:e2:ed:4a:ee:a8:6a:
4d:65:e9:27:e6:52:37:4e:0b:cb:1f:2e:1a:db:d3:
d9:20:50:52:a0:31:bb:48:9a:64:80:54:d5:54:c0:
7c:19:7d:bd:92:fe:fc:b6:64:6c:36:1d:0e:de:86:
11:ed:12:f1:52:7f:e1:5e:37:be:71:79:fa:2e:95:
e1:be:0a:ab:f5:90:8b:b0:60:d0:4f:06:f9:3f:77:
b5:24:c6:e9:cc:61:60:cb:62:91:b0:80:3e:9c:12:
f9:9e:3e:71:c2:41:bf:48:27:90:85:f5:6d:53:e5:
5a:91:8f:5d:e1:91:6d:6a:a4:01:c5:41:e1:1e:76:
c3:74:cd:4f:fa:bc:fc:8a:db:05:a3:69:e9:91:6d:
3d:15:b5:e6:5d:00:9c:77:65:dc:b2:f7:c4:b6:41:
45:16:93:33:4f:31:d4:e7:37:a0:d1:ea:f4:8e:ee:
55:f6:f4:97:8d:ae:39:0a:10:10:2a:d7:19:0a:76:
30:11:0a:7c:e8:ab:23:76:69:83:71:ed:ec:e1:2c:
d8:cf:07:b1:ff:95:69:a7:e1:be:27:1f:af:32:19:
aa:26:d6:54:2a:06:a1:b5:53:5f:f5:81:21:9b:9a:
f3:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:24:F6:93:A9:E3:99:68:83:4E:51:C8:14:39:96:32:24:91:A4:5A
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/IyT2k6njmWiDTlHIFDmWMiSRpFo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.231.157.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:ff:2d:ab:f3:81:28:e0:2a:90:aa:dc:36:69:d5:10:d6:ed:
d5:fa:95:74:7f:71:4b:24:07:7c:ef:8b:ce:0a:a9:9a:df:84:
fc:3d:d2:81:75:5c:c2:e5:83:a1:36:fc:b6:5f:77:39:14:8a:
ef:cb:ab:aa:06:07:8e:70:2e:38:a4:02:23:ee:3e:03:ad:3a:
c4:7f:1a:44:24:4b:29:f9:f8:dc:d0:7c:83:27:b0:10:9f:b0:
88:a1:68:b7:91:e2:7c:9a:28:b3:ca:dd:3d:a6:4b:d1:19:d0:
84:30:02:00:44:cf:9d:81:16:db:b4:fa:06:08:ac:8a:cb:fd:
bd:e8:65:e8:ea:ac:b2:f3:58:d5:5e:75:07:2c:09:29:1a:4e:
1d:a0:2c:75:1d:2a:ca:ac:17:ac:35:87:87:39:6d:4d:fe:3d:
3d:46:78:4c:7a:da:e9:98:39:29:7a:bb:df:f7:e7:20:f9:94:
12:4d:46:6f:a6:07:00:e6:ef:21:54:c0:18:93:60:88:56:ed:
6d:82:16:1a:30:29:97:31:e4:e5:fb:33:15:7a:7b:ba:d3:c4:
40:02:78:2f:e6:c3:9b:09:18:d7:17:57:3f:d6:46:5f:d2:cd:
83:24:68:76:26:07:01:be:d7:e4:fb:4d:4a:cc:44:f7:1e:b2:
ff:ad:db:44
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZlnQu/Ihs385pWuyXt7pb8dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0
NmQxNzEwHhcNMjUwOTIwMTMxNDIzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMzI0ZjY5M2E5ZTM5OTY4ODM0ZTUxYzgxNDM5OTYzMjI0OTFhNDVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5QWWCfGnbd4zMe/OZXfLYeCGL0u
ygPi7UruqGpNZekn5lI3TgvLHy4a29PZIFBSoDG7SJpkgFTVVMB8GX29kv78tmRs
Nh0O3oYR7RLxUn/hXje+cXn6LpXhvgqr9ZCLsGDQTwb5P3e1JMbpzGFgy2KRsIA+
nBL5nj5xwkG/SCeQhfVtU+VakY9d4ZFtaqQBxUHhHnbDdM1P+rz8itsFo2npkW09
FbXmXQCcd2XcsvfEtkFFFpMzTzHU5zeg0er0ju5V9vSXja45ChAQKtcZCnYwEQp8
6KsjdmmDce3s4SzYzwex/5Vpp+G+Jx+vMhmqJtZUKgahtVNf9YEhm5rzswIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCMk9pOp45log05RyBQ5ljIkkaRaMB8GA1UdIwQY
MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt
MGNmMTA5M2Q0NTQ4LzEvSXlUMms2bmptV2lEVGxISUZEbVdNaVNScEZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4
LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwuedMA0G
CSqGSIb3DQEBCwUAA4IBAQBP/y2r84Eo4CqQqtw2adUQ1u3V+pV0f3FLJAd874vO
Cqma34T8PdKBdVzC5YOhNvy2X3c5FIrvy6uqBgeOcC44pAIj7j4DrTrEfxpEJEsp
+fjc0HyDJ7AQn7CIoWi3keJ8miizyt09pkvRGdCEMAIARM+dgRbbtPoGCKyKy/29
6GXo6qyy81jVXnUHLAkpGk4doCx1HSrKrBesNYeHOW1N/j09RnhMetrpmDkpervf
9+cg+ZQSTUZvpgcA5u8hVMAYk2CIVu1tghYaMCmXMeTl+zMVenu608RAAngv5sOb
CRjXF1c/1kZf0s2DJGh2JgcBvtfk+01KzET3HrL/rdtE
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:57:48 2025 by rpki-client