Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/44fe28-54a7-466a-81d3-b8a28cbef4ad/1/vijUo-1OjT7vzMvb4RvZKsG7aPY.roa
File: vijUo-1OjT7vzMvb4RvZKsG7aPY.roa (raw, json)
Hash identifier: cH5H5sB4I0MW9+cJs76Nq2CGqjMRYzxzdgNA4qe2C1M=
Subject key identifier: BE:28:D4:A3:ED:4E:8D:3E:EF:CC:CB:DB:E1:1B:D9:2A:C1:BB:68:F6
Certificate issuer: /CN=7892669f819ebd8dd2ebba93f2dd2d3e1a27c231
Certificate serial: 0199385AC1655FB1FBB0986905E3A5AFD05D
Authority key identifier: 78:92:66:9F:81:9E:BD:8D:D2:EB:BA:93:F2:DD:2D:3E:1A:27:C2:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eJJmn4GevY3S67qT8t0tPhonwjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/44fe28-54a7-466a-81d3-b8a28cbef4ad/1/vijUo-1OjT7vzMvb4RvZKsG7aPY.roa
Signing time: Thu 11 Sep 2025 10:38:15 +0000
ROA not before: Thu 11 Sep 2025 10:38:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209847
IP address blocks: 91.207.183.0/24 maxlen: 24
194.31.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/44fe28-54a7-466a-81d3-b8a28cbef4ad/1/eJJmn4GevY3S67qT8t0tPhonwjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/44fe28-54a7-466a-81d3-b8a28cbef4ad/1/eJJmn4GevY3S67qT8t0tPhonwjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/eJJmn4GevY3S67qT8t0tPhonwjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:38:5a:c1:65:5f:b1:fb:b0:98:69:05:e3:a5:af:d0:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7892669f819ebd8dd2ebba93f2dd2d3e1a27c231
Validity
Not Before: Sep 11 10:38:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=be28d4a3ed4e8d3eefcccbdbe11bd92ac1bb68f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:bf:95:ba:81:f7:85:1d:30:d9:7b:aa:23:32:
91:a6:1b:c0:c5:36:0c:1a:71:08:39:03:35:1e:e0:
b9:ab:d3:37:0b:00:2e:94:6a:e0:9d:f1:08:7a:0d:
ff:50:71:9f:f6:a3:08:43:c0:e5:0d:9b:32:06:e7:
11:af:ff:95:e0:cf:ca:2b:2a:fd:53:32:d0:af:5b:
ce:23:a8:51:26:2b:e4:db:ea:47:05:15:a8:35:b3:
26:e2:f0:e9:ef:50:09:d1:5b:ee:af:c5:d0:8b:4d:
d0:1d:85:9e:dd:af:ee:cd:ed:60:c2:0f:6a:aa:6f:
4d:7b:16:14:b3:fb:f8:b2:fe:9c:16:b4:73:38:81:
84:26:34:04:f3:6f:8c:b9:5f:f8:43:38:d2:ce:ce:
52:7c:7b:00:7e:20:24:30:77:e2:02:60:14:54:b5:
6c:98:7e:40:c4:a6:bd:6c:38:e1:06:b5:c4:f7:48:
b7:b4:55:2d:46:b9:7c:03:67:14:fd:46:e6:1b:0b:
6f:b7:10:3d:e5:b6:4b:e2:3e:6d:2e:7b:90:32:cb:
41:a9:dc:fd:f4:76:a9:88:16:89:bb:28:f0:cf:12:
7d:ca:ba:cc:77:92:35:46:22:83:00:29:f5:87:31:
c1:6d:94:96:47:9b:fc:85:95:9c:1e:10:75:93:05:
9d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:28:D4:A3:ED:4E:8D:3E:EF:CC:CB:DB:E1:1B:D9:2A:C1:BB:68:F6
X509v3 Authority Key Identifier:
keyid:78:92:66:9F:81:9E:BD:8D:D2:EB:BA:93:F2:DD:2D:3E:1A:27:C2:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eJJmn4GevY3S67qT8t0tPhonwjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/44fe28-54a7-466a-81d3-b8a28cbef4ad/1/vijUo-1OjT7vzMvb4RvZKsG7aPY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/44fe28-54a7-466a-81d3-b8a28cbef4ad/1/eJJmn4GevY3S67qT8t0tPhonwjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.207.183.0/24
194.31.109.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:a7:7e:db:58:9d:be:ae:e7:72:af:c6:87:c5:d6:08:ad:5b:
43:95:fd:ba:58:26:a2:a6:57:bb:b1:28:6c:fd:39:36:d0:f2:
4b:46:00:ca:59:d7:b6:94:de:67:58:db:c6:41:2f:11:a1:e1:
d0:15:aa:bc:0b:75:cc:d5:d3:29:93:7a:e8:f2:c7:1c:44:8a:
6c:84:03:af:03:ce:09:ba:bd:84:a3:19:72:7a:78:e6:b0:85:
00:5c:0c:e4:a7:0b:3e:6a:d0:9c:9a:c6:1a:b0:09:b2:a3:37:
9b:3b:c9:53:bf:e0:fc:71:bc:2f:33:c8:55:41:eb:06:2a:5a:
ec:2e:27:8a:0e:e0:c2:4d:1b:98:e1:12:6b:e8:7d:2b:05:74:
8f:aa:ee:f8:9c:40:0c:c5:72:78:96:1e:d0:0a:66:5a:e4:47:
81:d9:cc:f7:f5:7c:1f:28:f5:0b:fe:c0:5d:a8:65:b6:c9:e7:
ff:cb:a2:4e:b1:8c:3c:40:54:ca:ee:de:65:b4:49:c8:50:80:
a6:73:0c:8c:b4:e5:7b:1e:da:7f:da:c9:80:b7:df:7a:a7:82:
5b:b1:c0:4a:98:4b:9d:6e:11:49:fb:1f:e4:eb:a4:b1:53:f8:
66:74:30:81:11:5f:10:fa:43:6e:b8:5e:0c:d8:53:63:e0:ba:
42:e7:df:da
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZk4WsFlX7H7sJhpBeOlr9BdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4OTI2NjlmODE5ZWJkOGRkMmViYmE5M2YyZGQyZDNlMWEy
N2MyMzEwHhcNMjUwOTExMTAzODE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZTI4ZDRhM2VkNGU4ZDNlZWZjY2NiZGJlMTFiZDkyYWMxYmI2OGY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArL+VuoH3hR0w2XuqIzKRphvAxTYM
GnEIOQM1HuC5q9M3CwAulGrgnfEIeg3/UHGf9qMIQ8DlDZsyBucRr/+V4M/KKyr9
UzLQr1vOI6hRJivk2+pHBRWoNbMm4vDp71AJ0Vvur8XQi03QHYWe3a/uze1gwg9q
qm9NexYUs/v4sv6cFrRzOIGEJjQE82+MuV/4QzjSzs5SfHsAfiAkMHfiAmAUVLVs
mH5AxKa9bDjhBrXE90i3tFUtRrl8A2cU/UbmGwtvtxA95bZL4j5tLnuQMstBqdz9
9HapiBaJuyjwzxJ9yrrMd5I1RiKDACn1hzHBbZSWR5v8hZWcHhB1kwWdJwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFL4o1KPtTo0+78zL2+Eb2SrBu2j2MB8GA1UdIwQY
MBaAFHiSZp+Bnr2N0uu6k/LdLT4aJ8IxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUpKbW40R2V2WTNTNjdxVDh0MHRQaG9ud2pFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC80NGZlMjgtNTRhNy00NjZhLTgxZDMt
YjhhMjhjYmVmNGFkLzEvdmlqVW8tMU9qVDd2ek12YjRSdlpLc0c3YVBZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC80NGZlMjgtNTRhNy00NjZhLTgxZDMtYjhhMjhjYmVmNGFk
LzEvZUpKbW40R2V2WTNTNjdxVDh0MHRQaG9ud2pFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW8+3AwQA
wh9tMA0GCSqGSIb3DQEBCwUAA4IBAQAbp37bWJ2+rudyr8aHxdYIrVtDlf26WCai
ple7sShs/Tk20PJLRgDKWde2lN5nWNvGQS8RoeHQFaq8C3XM1dMpk3ro8sccRIps
hAOvA84Jur2EoxlyenjmsIUAXAzkpws+atCcmsYasAmyozebO8lTv+D8cbwvM8hV
QesGKlrsLieKDuDCTRuY4RJr6H0rBXSPqu74nEAMxXJ4lh7QCmZa5EeB2cz39Xwf
KPUL/sBdqGW2yef/y6JOsYw8QFTK7t5ltEnIUICmcwyMtOV7Htp/2smAt996p4Jb
scBKmEudbhFJ+x/k66SxU/hmdDCBEV8Q+kNuuF4M2FNj4LpC59/a
-----END CERTIFICATE-----
Generated at Mon Oct 20 10:00:44 2025 by rpki-client