Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aa30c8-157e-4844-8650-76803d82ce8e/1/9Km7nTSXRAiniMh9JNXNOopqnW8.roa
File: 9Km7nTSXRAiniMh9JNXNOopqnW8.roa (raw, json)
Hash identifier: lIAOi4Gb5/nB1QvKoVu+d2qQeRbpRBNsS+yZokvVW0A=
Subject key identifier: F4:A9:BB:9D:34:97:44:08:A7:88:C8:7D:24:D5:CD:3A:8A:6A:9D:6F
Certificate issuer: /CN=05352119b4ba4708f119e4d1fb4752bc881af493
Certificate serial: 019764843E99ECE6DD3837B2E94C8A8CF5A2
Authority key identifier: 05:35:21:19:B4:BA:47:08:F1:19:E4:D1:FB:47:52:BC:88:1A:F4:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTUhGbS6RwjxGeTR-0dSvIga9JM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aa30c8-157e-4844-8650-76803d82ce8e/1/9Km7nTSXRAiniMh9JNXNOopqnW8.roa
Signing time: Thu 12 Jun 2025 14:21:17 +0000
ROA not before: Thu 12 Jun 2025 14:21:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49007
IP address blocks: 91.227.196.0/23 maxlen: 23
194.35.236.0/23 maxlen: 23
194.35.238.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/aa30c8-157e-4844-8650-76803d82ce8e/1/BTUhGbS6RwjxGeTR-0dSvIga9JM.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/aa30c8-157e-4844-8650-76803d82ce8e/1/BTUhGbS6RwjxGeTR-0dSvIga9JM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTUhGbS6RwjxGeTR-0dSvIga9JM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:64:84:3e:99:ec:e6:dd:38:37:b2:e9:4c:8a:8c:f5:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05352119b4ba4708f119e4d1fb4752bc881af493
Validity
Not Before: Jun 12 14:21:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f4a9bb9d34974408a788c87d24d5cd3a8a6a9d6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:31:3d:d2:5e:cb:26:77:25:4d:38:6e:c9:20:
fa:8a:54:c9:19:00:ab:9b:03:32:ee:c8:f3:4c:1f:
b9:b3:62:02:77:31:af:b8:f2:48:42:3d:9c:03:30:
a2:e5:61:f8:0a:8a:7d:27:2f:42:d6:a4:40:0b:1c:
0d:20:2a:c1:92:38:eb:4c:13:36:82:3f:dc:be:08:
c8:59:1d:c5:ed:aa:df:26:ea:f3:bf:a2:63:81:13:
4f:d0:39:10:3f:af:a2:67:7f:9c:db:f3:1a:da:82:
80:36:df:53:ab:61:af:ef:15:ac:ad:0c:e4:4a:4d:
a3:bd:ad:08:3f:9a:7a:e2:9a:eb:bd:b4:cb:e8:7d:
c7:b0:68:f8:8e:cf:f3:ad:4a:28:b1:ba:c5:4d:0f:
48:af:fb:5f:10:c6:e9:93:a2:47:2a:4f:ea:82:93:
82:ab:fd:5b:e5:67:e0:5d:06:c2:11:c4:db:ef:d6:
44:01:7c:5b:d3:ef:e6:97:bf:9a:77:79:fa:f0:15:
f2:fe:8e:c1:34:e3:88:73:25:fc:dd:0a:3d:6f:21:
5b:64:84:f5:c5:a2:d8:76:c8:9d:96:ec:0d:4e:c0:
d9:c8:6a:1e:c1:f4:05:db:0e:b8:eb:a6:bc:f7:24:
74:ea:bf:19:3f:22:45:02:97:54:09:8b:7d:4f:77:
fd:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:A9:BB:9D:34:97:44:08:A7:88:C8:7D:24:D5:CD:3A:8A:6A:9D:6F
X509v3 Authority Key Identifier:
keyid:05:35:21:19:B4:BA:47:08:F1:19:E4:D1:FB:47:52:BC:88:1A:F4:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTUhGbS6RwjxGeTR-0dSvIga9JM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aa30c8-157e-4844-8650-76803d82ce8e/1/9Km7nTSXRAiniMh9JNXNOopqnW8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aa30c8-157e-4844-8650-76803d82ce8e/1/BTUhGbS6RwjxGeTR-0dSvIga9JM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.227.196.0/23
194.35.236.0/22
Signature Algorithm: sha256WithRSAEncryption
16:45:ef:2b:f0:24:cc:4d:f8:a2:fa:4d:08:71:cb:f6:6b:cb:
1c:c2:58:a5:a4:fc:9f:76:18:39:e8:b7:35:99:b2:ba:4b:87:
29:14:d1:88:82:3d:9c:8a:33:7e:3d:db:b2:cc:cd:25:2d:f9:
09:be:d7:18:d0:70:c0:28:a7:01:4b:08:fc:b8:e7:79:3e:b6:
c7:19:1f:17:8d:10:49:b1:81:db:22:e0:3d:50:cb:f3:2d:64:
a1:8a:14:e2:52:d1:61:e0:48:15:0b:42:c2:28:0b:9a:62:27:
1d:36:8e:47:15:3e:f7:3f:3b:22:65:8b:2c:96:23:a6:85:f1:
66:9a:ea:f1:f8:f7:0f:0a:a8:cc:b3:64:bb:6e:0d:09:c8:1f:
54:eb:e4:34:a7:03:da:6e:c4:9a:5f:b7:a3:55:4b:21:41:11:
9d:7f:ec:c6:51:3a:3e:5d:6a:10:1d:97:d1:e9:0f:c0:4e:56:
61:e7:8a:ef:3a:65:f8:25:69:66:e4:89:a5:4b:e2:e4:89:f7:
f4:c9:eb:c8:c9:5c:91:44:cc:97:45:d0:be:3a:9f:7e:db:ea:
2d:16:64:0d:a0:17:ba:0f:fa:37:11:ce:5c:52:f7:e7:f9:25:
1c:31:0d:38:f8:a5:38:e9:15:6e:33:43:5f:32:fc:b0:f7:c0:
31:90:98:95
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZdkhD6Z7ObdODey6UyKjPWiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MzUyMTE5YjRiYTQ3MDhmMTE5ZTRkMWZiNDc1MmJjODgx
YWY0OTMwHhcNMjUwNjEyMTQyMTE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNGE5YmI5ZDM0OTc0NDA4YTc4OGM4N2QyNGQ1Y2QzYThhNmE5ZDZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzE90l7LJnclTThuySD6ilTJGQCr
mwMy7sjzTB+5s2ICdzGvuPJIQj2cAzCi5WH4Cop9Jy9C1qRACxwNICrBkjjrTBM2
gj/cvgjIWR3F7arfJurzv6JjgRNP0DkQP6+iZ3+c2/Ma2oKANt9Tq2Gv7xWsrQzk
Sk2jva0IP5p64prrvbTL6H3HsGj4js/zrUoosbrFTQ9Ir/tfEMbpk6JHKk/qgpOC
q/1b5WfgXQbCEcTb79ZEAXxb0+/ml7+ad3n68BXy/o7BNOOIcyX83Qo9byFbZIT1
xaLYdsidluwNTsDZyGoewfQF2w6466a89yR06r8ZPyJFApdUCYt9T3f94QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFPSpu500l0QIp4jIfSTVzTqKap1vMB8GA1UdIwQY
MBaAFAU1IRm0ukcI8Rnk0ftHUryIGvSTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlRVaEdiUzZSd2p4R2VUUi0wZFN2SWdhOUpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9hYTMwYzgtMTU3ZS00ODQ0LTg2NTAt
NzY4MDNkODJjZThlLzEvOUttN25UU1hSQWluaU1oOUpOWE5Pb3Bxblc4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi9hYTMwYzgtMTU3ZS00ODQ0LTg2NTAtNzY4MDNkODJjZThl
LzEvQlRVaEdiUzZSd2p4R2VUUi0wZFN2SWdhOUpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBW+PEAwQC
wiPsMA0GCSqGSIb3DQEBCwUAA4IBAQAWRe8r8CTMTfii+k0Iccv2a8scwlilpPyf
dhg56Lc1mbK6S4cpFNGIgj2cijN+PduyzM0lLfkJvtcY0HDAKKcBSwj8uOd5PrbH
GR8XjRBJsYHbIuA9UMvzLWShihTiUtFh4EgVC0LCKAuaYicdNo5HFT73PzsiZYss
liOmhfFmmurx+PcPCqjMs2S7bg0JyB9U6+Q0pwPabsSaX7ejVUshQRGdf+zGUTo+
XWoQHZfR6Q/ATlZh54rvOmX4JWlm5ImlS+Lkiff0yevIyVyRRMyXRdC+Op9+2+ot
FmQNoBe6D/o3Ec5cUvfn+SUcMQ04+KU46RVuM0NfMvyw98AxkJiV
-----END CERTIFICATE-----
Generated at Thu Jul 3 14:12:34 2025 by rpki-client