Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/j5JUp4dpZXOc3dAFDFR264JePYQ.roa
File: j5JUp4dpZXOc3dAFDFR264JePYQ.roa (raw, json)
Hash identifier: 7z6a7BTyRtoByeNzH/m220ETEsm3++fGEVvk5z41eYw=
Subject key identifier: 8F:92:54:A7:87:69:65:73:9C:DD:D0:05:0C:54:76:EB:82:5E:3D:84
Certificate issuer: /CN=ea46963cc479dadbe3c52234ab9fabaa8122d25b
Certificate serial: 01978194BCE90B71B39352B4A07D8AD3F57C
Authority key identifier: EA:46:96:3C:C4:79:DA:DB:E3:C5:22:34:AB:9F:AB:AA:81:22:D2:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/j5JUp4dpZXOc3dAFDFR264JePYQ.roa
Signing time: Wed 18 Jun 2025 05:48:17 +0000
ROA not before: Wed 18 Jun 2025 05:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201807
IP address blocks: 194.56.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.mft
rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:81:94:bc:e9:0b:71:b3:93:52:b4:a0:7d:8a:d3:f5:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea46963cc479dadbe3c52234ab9fabaa8122d25b
Validity
Not Before: Jun 18 05:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8f9254a7876965739cddd0050c5476eb825e3d84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:93:a8:51:2e:19:66:48:67:ce:97:a6:93:ea:
4f:39:27:d3:ed:ae:67:b9:2a:2d:f9:7d:4f:92:26:
4b:60:b2:85:7b:d0:c7:9d:55:9f:74:bd:04:f3:fd:
cd:2c:82:cf:f9:0b:74:ac:f1:b6:1a:71:df:d2:15:
b3:9f:fc:3c:56:70:38:ce:8b:53:da:1c:ce:06:1d:
aa:ef:11:49:e0:1b:b0:92:59:d2:d3:52:e7:6a:34:
6c:11:fb:85:62:db:8e:76:d1:ac:a0:2f:83:d1:f8:
3f:20:c9:46:e5:5f:0c:58:91:d5:3f:f5:50:e1:f9:
41:05:f0:0c:a6:a3:2a:b3:d8:a3:59:5a:e9:a6:c2:
40:55:85:e3:9a:76:4c:3e:55:2d:00:51:b2:46:06:
77:1a:01:1b:ef:23:51:65:4a:2a:53:66:29:90:65:
42:6e:7c:b7:19:85:5c:d6:0f:bb:85:1c:c7:bf:9d:
87:8f:a6:5b:ae:b0:0c:27:04:4e:33:d8:5d:f7:70:
35:46:6a:19:98:be:cc:91:12:84:52:36:ee:1c:10:
e3:0d:ca:b3:b8:41:3f:9d:d8:ff:6a:d6:aa:4c:d1:
1d:80:dd:17:99:c5:c5:2b:73:85:0c:b6:ca:51:4d:
db:31:9a:e1:0c:fb:dd:e5:53:80:b6:ca:17:c7:64:
e6:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:92:54:A7:87:69:65:73:9C:DD:D0:05:0C:54:76:EB:82:5E:3D:84
X509v3 Authority Key Identifier:
keyid:EA:46:96:3C:C4:79:DA:DB:E3:C5:22:34:AB:9F:AB:AA:81:22:D2:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/j5JUp4dpZXOc3dAFDFR264JePYQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.56.233.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:64:aa:d7:12:4e:a1:46:b4:7a:e6:9a:84:e1:bc:32:bd:62:
04:73:76:0c:8e:c2:57:15:1b:31:91:b7:eb:29:8b:95:0d:d5:
ca:6c:fb:63:5c:cb:08:51:87:2a:bb:64:f4:79:2c:d9:bc:78:
b9:b8:7a:25:b7:44:37:25:6a:d5:d3:3d:e0:3a:a8:1b:0c:cb:
49:53:b5:6f:57:42:3c:5a:d5:c8:c1:28:a7:1c:11:7f:15:f0:
02:0d:d7:8b:24:ee:ce:fb:5f:43:72:f9:92:e2:34:9a:24:48:
b7:58:bb:eb:fa:10:a6:d9:fb:38:96:11:aa:0d:f4:ae:fc:12:
ea:ce:fa:d9:9c:b3:41:ed:d4:5a:ea:7a:3a:56:f5:17:4c:e8:
aa:51:31:94:8b:d0:40:ad:8e:c9:c2:df:d1:0b:f9:b9:35:7c:
a4:f9:ee:6a:cf:dd:bc:67:b6:23:e2:ce:65:44:e3:4e:4e:77:
ad:e9:c3:06:d6:7c:04:c5:6d:f6:07:dc:be:e7:64:4e:f7:d9:
f7:d0:bd:f0:d5:99:e5:a8:10:13:2d:21:71:b0:90:75:0a:77:
71:0e:2e:c8:14:87:2d:09:de:8f:11:96:5e:1f:fc:c4:01:73:
e8:90:5f:82:11:18:44:54:6b:22:e2:0c:23:28:32:bb:3f:fc:
89:48:39:96
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZeBlLzpC3Gzk1K0oH2K0/V8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhNDY5NjNjYzQ3OWRhZGJlM2M1MjIzNGFiOWZhYmFhODEy
MmQyNWIwHhcNMjUwNjE4MDU0ODE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZjkyNTRhNzg3Njk2NTczOWNkZGQwMDUwYzU0NzZlYjgyNWUzZDg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpOoUS4ZZkhnzpemk+pPOSfT7a5n
uSot+X1PkiZLYLKFe9DHnVWfdL0E8/3NLILP+Qt0rPG2GnHf0hWzn/w8VnA4zotT
2hzOBh2q7xFJ4BuwklnS01LnajRsEfuFYtuOdtGsoC+D0fg/IMlG5V8MWJHVP/VQ
4flBBfAMpqMqs9ijWVrppsJAVYXjmnZMPlUtAFGyRgZ3GgEb7yNRZUoqU2YpkGVC
bny3GYVc1g+7hRzHv52Hj6ZbrrAMJwROM9hd93A1RmoZmL7MkRKEUjbuHBDjDcqz
uEE/ndj/ataqTNEdgN0XmcXFK3OFDLbKUU3bMZrhDPvd5VOAtsoXx2TmRwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFI+SVKeHaWVznN3QBQxUduuCXj2EMB8GA1UdIwQY
MBaAFOpGljzEedrb48UiNKufq6qBItJbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmthV1BNUjUydHZqeFNJMHE1LXJxb0VpMGxzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9lODYyZGUtYzQ2Yy00ZjIxLWIzOGUt
ZWI1YmM3ZDk3YWEwLzEvajVKVXA0ZHBaWE9jM2RBRkRGUjI2NEplUFlRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi9lODYyZGUtYzQ2Yy00ZjIxLWIzOGUtZWI1YmM3ZDk3YWEw
LzEvNmthV1BNUjUydHZqeFNJMHE1LXJxb0VpMGxzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwjjpMA0G
CSqGSIb3DQEBCwUAA4IBAQCMZKrXEk6hRrR65pqE4bwyvWIEc3YMjsJXFRsxkbfr
KYuVDdXKbPtjXMsIUYcqu2T0eSzZvHi5uHolt0Q3JWrV0z3gOqgbDMtJU7VvV0I8
WtXIwSinHBF/FfACDdeLJO7O+19DcvmS4jSaJEi3WLvr+hCm2fs4lhGqDfSu/BLq
zvrZnLNB7dRa6no6VvUXTOiqUTGUi9BArY7Jwt/RC/m5NXyk+e5qz928Z7Yj4s5l
RONOTnet6cMG1nwExW32B9y+52RO99n30L3w1ZnlqBATLSFxsJB1CndxDi7IFIct
Cd6PEZZeH/zEAXPokF+CERhEVGsi4gwjKDK7P/yJSDmW
-----END CERTIFICATE-----
Generated at Wed Jul 2 10:20:09 2025 by rpki-client