Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/1baae1-623c-453b-867c-93742c48e0fe/1/fV1WZCcdLfEsqw2EdlQm5P-L0is.roa
File: fV1WZCcdLfEsqw2EdlQm5P-L0is.roa (raw, json)
Hash identifier: 0XqccHFLFqDbT7tC/mcDP32ySvfNB41cuIO9KikZ3oY=
Subject key identifier: 7D:5D:56:64:27:1D:2D:F1:2C:AB:0D:84:76:54:26:E4:FF:8B:D2:2B
Certificate issuer: /CN=17cd1318c919c6ef16d24ca78462a0b7de14ba05
Certificate serial: 01992FAEB3367CCB6871B265C60CE783A82F
Authority key identifier: 17:CD:13:18:C9:19:C6:EF:16:D2:4C:A7:84:62:A0:B7:DE:14:BA:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F80TGMkZxu8W0kynhGKgt94UugU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/1baae1-623c-453b-867c-93742c48e0fe/1/fV1WZCcdLfEsqw2EdlQm5P-L0is.roa
Signing time: Tue 09 Sep 2025 18:13:22 +0000
ROA not before: Tue 09 Sep 2025 18:13:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209036
IP address blocks: 91.243.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/1baae1-623c-453b-867c-93742c48e0fe/1/F80TGMkZxu8W0kynhGKgt94UugU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/1baae1-623c-453b-867c-93742c48e0fe/1/F80TGMkZxu8W0kynhGKgt94UugU.mft
rsync://rpki.ripe.net/repository/DEFAULT/F80TGMkZxu8W0kynhGKgt94UugU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2f:ae:b3:36:7c:cb:68:71:b2:65:c6:0c:e7:83:a8:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17cd1318c919c6ef16d24ca78462a0b7de14ba05
Validity
Not Before: Sep 9 18:13:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7d5d5664271d2df12cab0d84765426e4ff8bd22b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f8:ac:af:1f:57:71:08:d4:56:25:fb:63:bd:
a5:17:fe:ef:d3:3c:6a:65:e7:fd:cb:19:a2:a4:0a:
b9:25:f3:5a:e3:84:7c:69:c8:13:59:8a:3a:55:8f:
2a:60:48:6e:67:7b:ca:56:5b:4e:94:78:a4:cb:77:
a2:0f:3b:e7:63:60:ac:4c:82:4d:78:7b:aa:fc:22:
8a:c7:d2:0c:53:cc:98:77:67:19:46:80:5d:5d:a5:
b7:50:a3:47:49:84:5b:72:e7:bf:e2:1e:eb:73:a6:
70:e9:d8:b1:4a:6b:50:aa:13:7b:ea:6d:2f:bd:10:
e5:c7:4a:ba:e0:37:ef:20:54:51:d6:50:8a:ed:16:
ce:21:6a:d5:ea:42:82:a2:2a:c9:07:26:b3:89:3c:
dd:62:f6:a1:9d:0a:0a:09:4e:77:ba:a7:5d:28:b9:
78:44:39:75:0a:9c:ef:3d:b4:28:da:f2:58:13:31:
02:31:0d:8c:0b:83:25:40:ac:ad:f6:ef:70:64:ed:
a3:e4:80:92:d7:49:52:06:55:16:b0:84:7a:e5:ab:
9f:79:87:05:00:02:48:6f:37:04:02:0b:c9:88:e8:
01:3f:ca:48:bd:0e:de:cb:e5:a2:5d:6d:4a:2d:44:
bd:55:ae:28:78:96:10:be:ec:f6:2a:41:f1:a6:9c:
5a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:5D:56:64:27:1D:2D:F1:2C:AB:0D:84:76:54:26:E4:FF:8B:D2:2B
X509v3 Authority Key Identifier:
keyid:17:CD:13:18:C9:19:C6:EF:16:D2:4C:A7:84:62:A0:B7:DE:14:BA:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F80TGMkZxu8W0kynhGKgt94UugU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/1baae1-623c-453b-867c-93742c48e0fe/1/fV1WZCcdLfEsqw2EdlQm5P-L0is.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/1baae1-623c-453b-867c-93742c48e0fe/1/F80TGMkZxu8W0kynhGKgt94UugU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.243.77.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:63:66:b5:9f:25:aa:68:6b:27:ec:70:1d:04:9b:e1:36:69:
7f:4b:01:4a:65:24:5c:15:d1:46:38:1f:b0:bd:9b:e6:58:36:
44:cb:9a:b2:3c:57:b2:1a:d4:c8:99:30:f5:db:56:76:e3:96:
52:39:70:7f:d9:fd:7e:bc:45:c9:cd:bd:15:21:8f:ef:ca:ea:
d2:75:1f:cb:ae:40:62:48:5d:c9:7a:a6:e1:ba:7a:19:d5:73:
55:bc:40:cb:3e:e2:89:7a:98:a7:20:e9:fc:ca:3e:93:86:05:
28:e8:6f:08:12:88:a3:ec:7c:48:72:15:41:2b:96:5f:38:ab:
f3:88:0d:2b:8d:97:0a:bf:1d:6a:00:aa:22:47:da:a1:e1:41:
0a:da:cb:b1:28:f1:96:7f:74:fb:03:e0:f8:8f:ae:11:55:07:
df:b7:50:7a:df:e0:1d:a4:95:6d:54:3e:dd:37:72:64:1a:34:
51:20:38:19:44:50:08:0f:7d:2f:a7:b6:f2:df:c7:35:6e:7b:
e8:9d:fc:cc:09:45:57:57:7d:63:4b:06:91:06:67:89:9b:a3:
80:13:92:0f:e1:41:ad:bf:db:3c:01:09:9b:7f:9f:01:ff:c1:
96:f4:fb:c5:ef:e9:44:90:c0:58:a6:fe:7f:28:42:0e:8a:d9:
87:04:a0:a0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZkvrrM2fMtocbJlxgzng6gvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3Y2QxMzE4YzkxOWM2ZWYxNmQyNGNhNzg0NjJhMGI3ZGUx
NGJhMDUwHhcNMjUwOTA5MTgxMzIyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZDVkNTY2NDI3MWQyZGYxMmNhYjBkODQ3NjU0MjZlNGZmOGJkMjJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovisrx9XcQjUViX7Y72lF/7v0zxq
Zef9yxmipAq5JfNa44R8acgTWYo6VY8qYEhuZ3vKVltOlHiky3eiDzvnY2CsTIJN
eHuq/CKKx9IMU8yYd2cZRoBdXaW3UKNHSYRbcue/4h7rc6Zw6dixSmtQqhN76m0v
vRDlx0q64DfvIFRR1lCK7RbOIWrV6kKCoirJByaziTzdYvahnQoKCU53uqddKLl4
RDl1CpzvPbQo2vJYEzECMQ2MC4MlQKyt9u9wZO2j5ICS10lSBlUWsIR65aufeYcF
AAJIbzcEAgvJiOgBP8pIvQ7ey+WiXW1KLUS9Va4oeJYQvuz2KkHxppxaywIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH1dVmQnHS3xLKsNhHZUJuT/i9IrMB8GA1UdIwQY
MBaAFBfNExjJGcbvFtJMp4RioLfeFLoFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjgwVEdNa1p4dThXMGt5bmhHS2d0OTRVdWdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi8xYmFhZTEtNjIzYy00NTNiLTg2N2Mt
OTM3NDJjNDhlMGZlLzEvZlYxV1pDY2RMZkVzcXcyRWRsUW01UC1MMGlzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi8xYmFhZTEtNjIzYy00NTNiLTg2N2MtOTM3NDJjNDhlMGZl
LzEvRjgwVEdNa1p4dThXMGt5bmhHS2d0OTRVdWdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW/NNMA0G
CSqGSIb3DQEBCwUAA4IBAQAsY2a1nyWqaGsn7HAdBJvhNml/SwFKZSRcFdFGOB+w
vZvmWDZEy5qyPFeyGtTImTD121Z245ZSOXB/2f1+vEXJzb0VIY/vyurSdR/LrkBi
SF3JeqbhunoZ1XNVvEDLPuKJepinIOn8yj6ThgUo6G8IEoij7HxIchVBK5ZfOKvz
iA0rjZcKvx1qAKoiR9qh4UEK2suxKPGWf3T7A+D4j64RVQfft1B63+AdpJVtVD7d
N3JkGjRRIDgZRFAID30vp7by38c1bnvonfzMCUVXV31jSwaRBmeJm6OAE5IP4UGt
v9s8AQmbf58B/8GW9PvF7+lEkMBYpv5/KEIOitmHBKCg
-----END CERTIFICATE-----
Generated at Mon Oct 20 03:18:07 2025 by rpki-client