Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/siXPUE51YZ8AXJXuUEWnJUynrjs.roa
File: siXPUE51YZ8AXJXuUEWnJUynrjs.roa (raw, json)
Hash identifier: 8bIVGfjdn3rsB0/NTsEQwLryPj6AinzFrq86gSC4i8Y=
Subject key identifier: B2:25:CF:50:4E:75:61:9F:00:5C:95:EE:50:45:A7:25:4C:A7:AE:3B
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 0198A36EA861E66482351B7914FB9AE7C313
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/siXPUE51YZ8AXJXuUEWnJUynrjs.roa
Signing time: Wed 13 Aug 2025 12:36:34 +0000
ROA not before: Wed 13 Aug 2025 12:36:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204009
IP address blocks: 85.31.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft
rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a3:6e:a8:61:e6:64:82:35:1b:79:14:fb:9a:e7:c3:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Aug 13 12:36:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b225cf504e75619f005c95ee5045a7254ca7ae3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2c:dc:c0:0c:a7:46:69:aa:63:7c:30:b2:ea:
96:07:e5:5a:d2:15:68:c4:d4:2e:e6:8c:18:d1:6b:
df:64:98:b3:32:92:40:b6:78:47:82:4a:cc:90:09:
b1:df:fa:b4:32:a0:1f:2a:59:c3:be:98:35:ba:19:
49:02:7b:36:14:5f:35:f0:e9:d0:44:31:ca:c1:96:
94:3f:c9:e0:91:75:c2:03:3a:a7:ab:f2:e6:f1:d4:
ba:ae:9e:85:b2:ef:0b:24:56:69:9c:89:22:c4:e9:
10:c6:1d:1f:9f:07:b6:33:9d:a4:55:76:a6:6d:ce:
b6:e0:ed:bd:28:01:c6:96:e8:4d:ff:9b:c4:1e:a8:
15:51:ef:b5:9d:2e:49:28:f0:84:ce:5c:e5:6c:8a:
62:96:bd:b2:58:0b:5a:eb:1f:28:a7:ed:69:c3:cc:
b1:0c:37:37:13:52:d1:35:37:87:ba:a3:c5:06:72:
77:39:48:f7:45:52:64:7f:b0:df:90:bf:43:1f:db:
73:23:39:11:3d:b5:94:4b:2b:b9:d0:c8:04:00:58:
65:8c:a8:c4:61:61:c9:fe:19:d0:d4:ef:ea:d5:08:
7e:6b:e8:a6:c3:64:a7:fc:83:e6:87:12:ca:2e:8b:
fa:a5:57:cf:60:5e:a7:a5:18:b9:ab:0b:bb:9d:7f:
f3:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:25:CF:50:4E:75:61:9F:00:5C:95:EE:50:45:A7:25:4C:A7:AE:3B
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/siXPUE51YZ8AXJXuUEWnJUynrjs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.31.252.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:85:1f:2c:43:60:81:f0:e1:be:f4:4d:1e:b8:49:c1:86:3f:
7d:41:66:9f:58:bf:9b:fb:f9:29:2f:3d:dc:d5:7b:ac:e9:00:
b0:0d:00:82:28:ad:aa:ed:dd:7c:77:f5:5c:86:50:5d:3c:32:
76:96:7c:ad:ed:a1:81:1e:55:d4:0e:a5:ac:1f:cd:f7:43:90:
04:f7:9c:6d:b1:e8:a4:32:39:e0:1c:35:5d:28:a8:dd:cd:90:
81:57:d4:0a:bd:de:f8:57:5e:cc:89:04:f5:46:91:70:cf:fa:
e7:b2:f2:75:b7:17:a1:04:df:9f:a2:00:c0:f9:ee:9f:e9:f2:
db:df:b8:03:d9:fa:be:62:dd:48:30:14:23:e6:62:a1:36:1b:
5f:20:4c:60:d4:b2:8a:a3:04:a5:63:75:43:82:03:7e:8a:77:
1a:ea:ad:87:9e:00:8a:ab:de:fa:46:79:60:84:90:fb:c0:92:
d5:85:2d:65:cd:77:df:8f:24:2b:1e:52:f7:b9:51:f6:62:1e:
aa:27:9b:81:e8:3f:85:c7:7b:a3:35:6c:bd:c7:92:30:b7:1a:
f3:ea:62:9b:8b:c3:36:9a:b8:ca:d7:da:a6:8e:87:ad:a9:56:
a4:2f:ca:5f:b4:bb:07:06:e0:6a:77:2a:4c:91:30:54:5b:74:
76:9c:ad:2c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZijbqhh5mSCNRt5FPua58MTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5OTU0NDk5OTc3Mjc4YTc1NTcwYjM0MDNmNGQzYWEwMGIx
YjM2ZTgwHhcNMjUwODEzMTIzNjM0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMjI1Y2Y1MDRlNzU2MTlmMDA1Yzk1ZWU1MDQ1YTcyNTRjYTdhZTNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyzcwAynRmmqY3wwsuqWB+Va0hVo
xNQu5owY0WvfZJizMpJAtnhHgkrMkAmx3/q0MqAfKlnDvpg1uhlJAns2FF818OnQ
RDHKwZaUP8ngkXXCAzqnq/Lm8dS6rp6Fsu8LJFZpnIkixOkQxh0fnwe2M52kVXam
bc624O29KAHGluhN/5vEHqgVUe+1nS5JKPCEzlzlbIpilr2yWAta6x8op+1pw8yx
DDc3E1LRNTeHuqPFBnJ3OUj3RVJkf7DfkL9DH9tzIzkRPbWUSyu50MgEAFhljKjE
YWHJ/hnQ1O/q1Qh+a+imw2Sn/IPmhxLKLov6pVfPYF6npRi5qwu7nX/zGwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLIlz1BOdWGfAFyV7lBFpyVMp647MB8GA1UdIwQY
MBaAFLmVRJmXcninVXCzQD9NOqALGzboMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAt
MDI0YjE2NTVjMjQ3LzEvc2lYUFVFNTFZWjhBWEpYdVVFV25KVXlucmpzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAtMDI0YjE2NTVjMjQ3
LzEvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVR/8MA0G
CSqGSIb3DQEBCwUAA4IBAQAqhR8sQ2CB8OG+9E0euEnBhj99QWafWL+b+/kpLz3c
1Xus6QCwDQCCKK2q7d18d/VchlBdPDJ2lnyt7aGBHlXUDqWsH833Q5AE95xtseik
MjngHDVdKKjdzZCBV9QKvd74V17MiQT1RpFwz/rnsvJ1txehBN+fogDA+e6f6fLb
37gD2fq+Yt1IMBQj5mKhNhtfIExg1LKKowSlY3VDggN+inca6q2HngCKq976Rnlg
hJD7wJLVhS1lzXffjyQrHlL3uVH2Yh6qJ5uB6D+Fx3ujNWy9x5Iwtxrz6mKbi8M2
mrjK19qmjoetqVakL8pftLsHBuBqdypMkTBUW3R2nK0s
-----END CERTIFICATE-----
Generated at Sat Aug 23 19:50:49 2025 by rpki-client