Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/aCUjIUK5OOSaycrn7_ksP5SjmPw.roa
File: aCUjIUK5OOSaycrn7_ksP5SjmPw.roa (raw, json)
Hash identifier: O1lgV6htb/Z9+mSwOsrU/V0sb4jZo6xRqeghVOqs13I=
Subject key identifier: 68:25:23:21:42:B9:38:E4:9A:C9:CA:E7:EF:F9:2C:3F:94:A3:98:FC
Certificate issuer: /CN=202f4c1a37e9313cdd2eea7750ae028d18cd5aae
Certificate serial: 01979BC5D6250ECC078D9781EE5AB4C6FA03
Authority key identifier: 20:2F:4C:1A:37:E9:31:3C:DD:2E:EA:77:50:AE:02:8D:18:CD:5A:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IC9MGjfpMTzdLup3UK4CjRjNWq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/aCUjIUK5OOSaycrn7_ksP5SjmPw.roa
Signing time: Mon 23 Jun 2025 07:52:03 +0000
ROA not before: Mon 23 Jun 2025 07:52:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209619
IP address blocks: 156.17.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/IC9MGjfpMTzdLup3UK4CjRjNWq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:9b:c5:d6:25:0e:cc:07:8d:97:81:ee:5a:b4:c6:fa:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=202f4c1a37e9313cdd2eea7750ae028d18cd5aae
Validity
Not Before: Jun 23 07:52:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6825232142b938e49ac9cae7eff92c3f94a398fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2f:92:8f:88:05:4e:3b:ad:ac:53:df:fb:13:
a8:1c:4a:b3:a6:d8:53:fd:6a:27:ba:41:4f:56:91:
0b:b2:3c:42:88:27:43:64:45:bf:ce:1a:67:7a:9c:
9a:7a:1e:a0:3b:2f:02:39:02:ef:c6:9d:ee:d9:26:
8c:50:4c:fc:77:cc:46:28:e6:69:15:89:63:25:4c:
4a:31:7b:65:cb:af:a4:00:28:b3:c1:f3:9d:58:35:
48:a4:61:2b:89:53:f8:40:7e:28:3a:b2:5d:96:32:
bf:69:9f:c1:27:78:8a:f0:db:2f:a9:ba:4c:5f:4e:
8e:4a:24:0f:6e:20:7f:5d:29:22:b3:cf:5b:76:4b:
0e:f6:eb:04:25:86:db:1d:4b:df:35:96:5b:d5:5b:
6a:9a:d3:73:40:a7:6c:4d:ff:5f:f0:12:39:9f:4f:
16:db:45:3b:b0:7f:c9:65:19:55:55:8b:fa:53:58:
dd:eb:76:ee:ab:16:3d:c0:85:92:c6:19:7b:ec:71:
92:d1:e2:52:f5:89:85:d6:1b:8f:8f:78:00:99:fd:
11:2f:dc:4c:7a:bc:69:9f:c4:43:f7:98:79:36:a5:
24:39:1b:2a:58:2a:66:24:d5:62:17:db:18:df:fb:
00:61:41:e2:c2:82:f0:6d:3a:64:5d:86:05:20:e3:
a6:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:25:23:21:42:B9:38:E4:9A:C9:CA:E7:EF:F9:2C:3F:94:A3:98:FC
X509v3 Authority Key Identifier:
keyid:20:2F:4C:1A:37:E9:31:3C:DD:2E:EA:77:50:AE:02:8D:18:CD:5A:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IC9MGjfpMTzdLup3UK4CjRjNWq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/aCUjIUK5OOSaycrn7_ksP5SjmPw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
156.17.204.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:11:df:56:2f:bb:e3:2d:93:6b:6a:bf:f7:d5:b6:7e:6a:52:
99:0a:f8:71:92:59:0c:ca:45:c9:61:3a:22:df:a4:3c:d8:41:
4c:1d:5e:96:69:cf:92:62:5d:01:09:fa:7a:db:18:04:68:7e:
dd:4e:44:c7:7c:e4:05:80:b7:8f:e7:ad:79:bd:f1:cf:fe:84:
d1:79:f9:e8:4b:41:78:b4:82:e7:c5:a4:bf:64:1e:89:84:f9:
22:04:e8:01:6b:10:04:c0:cb:dd:0f:32:29:f7:41:b4:02:9b:
c2:81:a1:df:25:98:67:bd:95:3c:26:50:91:38:e8:79:ff:53:
92:7d:39:42:ec:0f:9f:e3:0d:64:8b:16:f1:1d:87:2d:0a:84:
27:df:88:21:4e:8a:9f:44:61:ce:10:6b:12:a0:41:6d:67:bf:
ee:f4:8a:84:90:af:ac:53:61:9d:d3:06:36:02:71:1d:09:97:
7e:0b:2a:c8:1c:c8:3c:f2:16:3c:e5:ce:c8:73:ae:2b:90:18:
b0:fc:f9:7a:ed:4c:53:6e:90:d6:38:3b:db:f2:e2:04:10:a1:
92:fe:8f:65:59:ce:cb:bd:9e:e0:d5:be:27:e6:c8:88:c7:5c:
5a:34:f4:0e:3b:d4:74:3c:11:99:c3:cf:11:16:a8:2b:47:43:
94:4a:2a:71
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZebxdYlDswHjZeB7lq0xvoDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwMmY0YzFhMzdlOTMxM2NkZDJlZWE3NzUwYWUwMjhkMThj
ZDVhYWUwHhcNMjUwNjIzMDc1MjAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ODI1MjMyMTQyYjkzOGU0OWFjOWNhZTdlZmY5MmMzZjk0YTM5OGZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsy+Sj4gFTjutrFPf+xOoHEqzpthT
/WonukFPVpELsjxCiCdDZEW/zhpnepyaeh6gOy8COQLvxp3u2SaMUEz8d8xGKOZp
FYljJUxKMXtly6+kACizwfOdWDVIpGEriVP4QH4oOrJdljK/aZ/BJ3iK8NsvqbpM
X06OSiQPbiB/XSkis89bdksO9usEJYbbHUvfNZZb1VtqmtNzQKdsTf9f8BI5n08W
20U7sH/JZRlVVYv6U1jd63buqxY9wIWSxhl77HGS0eJS9YmF1huPj3gAmf0RL9xM
erxpn8RD95h5NqUkORsqWCpmJNViF9sY3/sAYUHiwoLwbTpkXYYFIOOmNwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGglIyFCuTjkmsnK5+/5LD+Uo5j8MB8GA1UdIwQY
MBaAFCAvTBo36TE83S7qd1CuAo0YzVquMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUM5TUdqZnBNVHpkTHVwM1VLNENqUmpOV3E0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9lZGI4Y2QtMDAzZC00ODNhLTkwNmEt
ZjZiNzhlMmIxN2ExLzEvYUNVaklVSzVPT1NheWNybjdfa3NQNVNqbVB3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9lZGI4Y2QtMDAzZC00ODNhLTkwNmEtZjZiNzhlMmIxN2Ex
LzEvSUM5TUdqZnBNVHpkTHVwM1VLNENqUmpOV3E0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnBHMMA0G
CSqGSIb3DQEBCwUAA4IBAQC4Ed9WL7vjLZNrar/31bZ+alKZCvhxklkMykXJYToi
36Q82EFMHV6Wac+SYl0BCfp62xgEaH7dTkTHfOQFgLeP5615vfHP/oTRefnoS0F4
tILnxaS/ZB6JhPkiBOgBaxAEwMvdDzIp90G0ApvCgaHfJZhnvZU8JlCROOh5/1OS
fTlC7A+f4w1kixbxHYctCoQn34ghToqfRGHOEGsSoEFtZ7/u9IqEkK+sU2Gd0wY2
AnEdCZd+CyrIHMg88hY85c7Ic64rkBiw/Pl67UxTbpDWODvb8uIEEKGS/o9lWc7L
vZ7g1b4n5siIx1xaNPQOO9R0PBGZw88RFqgrR0OUSipx
-----END CERTIFICATE-----
Generated at Sun Jun 29 08:57:26 2025 by rpki-client