Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/qyeS5XOeD7KTa5gTfjaFtslzJpg.roa
File: qyeS5XOeD7KTa5gTfjaFtslzJpg.roa (raw, json)
Hash identifier: 8Bgb0MgzG8J4NKQsOGh60QGzdke+7qlv/3ICJzuKKzY=
Subject key identifier: AB:27:92:E5:73:9E:0F:B2:93:6B:98:13:7E:36:85:B6:C9:73:26:98
Certificate issuer: /CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Certificate serial: 0198C3B65C81146E7E558FDD09D590F01AFE
Authority key identifier: 55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/qyeS5XOeD7KTa5gTfjaFtslzJpg.roa
Signing time: Tue 19 Aug 2025 19:02:44 +0000
ROA not before: Tue 19 Aug 2025 19:02:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213784
IP address blocks: 83.147.232.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c3:b6:5c:81:14:6e:7e:55:8f:dd:09:d5:90:f0:1a:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Validity
Not Before: Aug 19 19:02:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ab2792e5739e0fb2936b98137e3685b6c9732698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:16:ec:67:74:ca:9e:9e:87:00:2f:82:a9:34:
c0:80:ad:b5:6c:d7:98:f7:cc:37:1f:0f:ea:ae:24:
c3:e6:f1:5b:2c:18:ff:7d:81:d6:85:74:f1:30:a8:
a4:20:c3:92:8c:15:78:60:f0:3f:dd:d8:99:d9:a0:
e4:d8:8f:cc:4e:a3:7d:07:92:24:80:b1:9d:d0:f5:
71:85:fa:51:f2:03:67:e1:99:b2:dc:b5:73:f2:ee:
ae:64:0f:7d:70:aa:79:31:e5:06:6a:a6:7b:c4:1f:
74:61:81:8f:b5:e9:da:65:25:06:3b:1b:9c:a1:d0:
cf:98:ac:41:ed:8d:35:a4:15:f1:bb:96:e0:8e:e8:
56:6f:26:9e:bd:3c:18:b6:c5:a1:b9:0b:bc:d9:90:
00:cb:ff:b5:87:a9:36:e4:c6:21:51:7a:a9:fb:7c:
a0:27:2a:0f:c6:85:6a:ed:9b:e8:f9:0b:45:44:31:
b7:46:50:36:2f:ad:96:38:0e:54:51:01:29:c9:56:
88:f2:9e:5e:c9:17:3d:05:f4:69:9b:77:a5:c4:f8:
63:a9:2f:c7:1f:6d:c0:7b:18:74:63:54:16:fa:3e:
08:d3:e1:9b:ec:30:6a:39:43:bb:e8:b3:6e:9f:fb:
9e:5c:4a:69:e1:c6:9b:32:38:cd:cd:9a:4a:1d:c3:
e3:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:27:92:E5:73:9E:0F:B2:93:6B:98:13:7E:36:85:B6:C9:73:26:98
X509v3 Authority Key Identifier:
keyid:55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/qyeS5XOeD7KTa5gTfjaFtslzJpg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.232.0/22
Signature Algorithm: sha256WithRSAEncryption
6f:f5:f5:a8:89:01:ff:d3:81:e6:2a:96:6c:e3:b0:58:9f:0d:
e8:05:c9:85:e0:c9:fb:5c:77:28:39:07:c4:57:1d:d9:ee:5d:
59:a3:aa:37:e5:b3:60:57:8c:0d:24:26:a1:ef:fb:d3:df:a9:
1d:93:03:e5:e4:c6:5a:98:61:a2:27:33:7c:0b:da:54:21:2f:
ef:a2:a1:e2:58:19:45:ec:cc:66:86:0d:9c:97:d1:7e:20:30:
d4:63:47:6a:ba:88:e7:e3:41:0f:91:2b:5a:2c:13:a0:d9:23:
55:f9:b2:dc:a0:2b:da:dd:64:19:4e:28:ed:45:1b:4c:a6:6f:
cd:6a:82:2e:c8:ca:a4:86:98:82:6b:13:aa:ae:28:6d:3a:b4:
4f:c3:bb:87:58:e5:c5:66:a9:35:fa:35:d6:29:21:63:43:0d:
32:0e:3d:e4:ab:f7:39:43:0e:3b:87:1d:f3:e2:8e:31:5f:75:
c1:0b:bd:d1:9f:23:6a:16:67:b2:d1:20:ea:fa:c1:a4:47:b0:
4e:5d:ae:a3:4e:96:ed:1e:4e:31:8a:77:43:14:b8:b6:7c:88:
4e:ac:93:ad:c7:ac:38:1b:63:d5:49:ad:c9:ab:82:41:1e:17:
52:b5:c2:5d:9c:7b:d5:9a:25:31:79:1b:da:33:ec:2c:65:a0:
7d:e2:23:96
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZjDtlyBFG5+VY/dCdWQ8Br+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1YmFmMjY5Njc1MTBiM2M1MmU0NmQxZGM1OTM5NjdjZGYy
OWY5YzkwHhcNMjUwODE5MTkwMjQ0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYjI3OTJlNTczOWUwZmIyOTM2Yjk4MTM3ZTM2ODViNmM5NzMyNjk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5BbsZ3TKnp6HAC+CqTTAgK21bNeY
98w3Hw/qriTD5vFbLBj/fYHWhXTxMKikIMOSjBV4YPA/3diZ2aDk2I/MTqN9B5Ik
gLGd0PVxhfpR8gNn4Zmy3LVz8u6uZA99cKp5MeUGaqZ7xB90YYGPtenaZSUGOxuc
odDPmKxB7Y01pBXxu5bgjuhWbyaevTwYtsWhuQu82ZAAy/+1h6k25MYhUXqp+3yg
JyoPxoVq7Zvo+QtFRDG3RlA2L62WOA5UUQEpyVaI8p5eyRc9BfRpm3elxPhjqS/H
H23Aexh0Y1QW+j4I0+Gb7DBqOUO76LNun/ueXEpp4cabMjjNzZpKHcPjjwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKsnkuVzng+yk2uYE342hbbJcyaYMB8GA1UdIwQY
MBaAFFW68mlnUQs8UuRtHcWTlnzfKfnJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmJyeWFXZFJDenhTNUcwZHhaT1dmTjhwLWNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS81YWE0ZGMtZDE4NC00ZGI0LTllMTAt
NDlmOTgxZWU1OTgxLzEvcXllUzVYT2VEN0tUYTVnVGZqYUZ0c2x6SnBnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS81YWE0ZGMtZDE4NC00ZGI0LTllMTAtNDlmOTgxZWU1OTgx
LzEvVmJyeWFXZFJDenhTNUcwZHhaT1dmTjhwLWNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCU5PoMA0G
CSqGSIb3DQEBCwUAA4IBAQBv9fWoiQH/04HmKpZs47BYnw3oBcmF4Mn7XHcoOQfE
Vx3Z7l1Zo6o35bNgV4wNJCah7/vT36kdkwPl5MZamGGiJzN8C9pUIS/voqHiWBlF
7Mxmhg2cl9F+IDDUY0dquojn40EPkStaLBOg2SNV+bLcoCva3WQZTijtRRtMpm/N
aoIuyMqkhpiCaxOqrihtOrRPw7uHWOXFZqk1+jXWKSFjQw0yDj3kq/c5Qw47hx3z
4o4xX3XBC73RnyNqFmey0SDq+sGkR7BOXa6jTpbtHk4xindDFLi2fIhOrJOtx6w4
G2PVSa3Jq4JBHhdStcJdnHvVmiUxeRvaM+wsZaB94iOW
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:01:33 2025 by rpki-client