Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/JwHvefszPoEqXfXjN6aWL4Ax5QE.roa
File: JwHvefszPoEqXfXjN6aWL4Ax5QE.roa (raw, json)
Hash identifier: tOwo5EJOcFmy7q/ovWJ3+7adXLxoW/KeV3/pI4z5mKY=
Subject key identifier: 27:01:EF:79:FB:33:3E:81:2A:5D:F5:E3:37:A6:96:2F:80:31:E5:01
Certificate issuer: /CN=1c7ad7754795ddd605f28838bb7cc359df7a266a
Certificate serial: 0198C4265947FEA5CF2307ED54ECAB808C3B
Authority key identifier: 1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/JwHvefszPoEqXfXjN6aWL4Ax5QE.roa
Signing time: Tue 19 Aug 2025 21:05:04 +0000
ROA not before: Tue 19 Aug 2025 21:05:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 54252
IP address blocks: 91.234.22.0/24 maxlen: 24
194.59.6.0/24 maxlen: 24
194.116.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c4:26:59:47:fe:a5:cf:23:07:ed:54:ec:ab:80:8c:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c7ad7754795ddd605f28838bb7cc359df7a266a
Validity
Not Before: Aug 19 21:05:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2701ef79fb333e812a5df5e337a6962f8031e501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:57:c1:8a:06:70:2a:cc:6c:ee:7e:dd:57:b3:
1b:33:2b:43:87:03:92:79:4f:12:0c:d7:7d:d6:26:
5c:87:87:ca:5d:fb:7a:fd:3f:75:aa:ef:84:97:c5:
05:ef:86:d0:49:a3:b2:a6:e0:98:1e:fc:6b:40:fa:
77:24:e6:3e:3e:0b:ae:ef:db:6f:57:c2:04:04:62:
bb:7e:5e:8d:fd:66:bd:79:7d:9c:5b:36:c5:03:62:
1f:e0:b7:9f:ac:38:c6:47:4b:c7:69:8a:7a:2e:0d:
d5:15:4d:9b:a8:ac:25:ee:0a:86:df:2e:06:27:38:
51:3f:8f:b1:63:86:8d:d0:48:e8:e8:23:84:ce:91:
77:d1:0a:a4:3f:fc:2f:80:ae:be:62:65:34:22:7f:
8c:a4:6e:9c:10:22:18:7c:a8:e6:9d:a2:eb:35:2e:
1f:e9:b6:99:b3:a6:61:a2:77:95:d4:d3:20:91:a3:
37:83:3f:e2:1a:c7:50:78:0e:7a:83:16:4d:2b:b8:
09:7d:94:a7:60:a1:e5:23:4c:a8:29:60:97:42:c7:
2b:d6:0c:aa:c7:d1:d7:79:f8:6f:27:f0:ef:46:3f:
a0:59:0f:14:cf:36:a0:31:d2:5f:bf:eb:dd:e5:c5:
67:81:e5:17:cf:6d:d2:83:cd:70:81:c9:02:fa:84:
64:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:01:EF:79:FB:33:3E:81:2A:5D:F5:E3:37:A6:96:2F:80:31:E5:01
X509v3 Authority Key Identifier:
keyid:1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/JwHvefszPoEqXfXjN6aWL4Ax5QE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.234.22.0/24
194.59.6.0/24
194.116.235.0/24
Signature Algorithm: sha256WithRSAEncryption
71:b8:52:1a:a7:ed:2c:7b:b3:dd:e3:f0:50:e6:5d:bf:61:8e:
8a:3f:c3:b9:f1:d4:21:1b:5b:ea:92:fb:30:de:54:3c:87:26:
33:6d:ca:d4:3e:6b:48:20:12:dd:5b:f3:88:d5:03:00:b1:a3:
6e:95:a5:1b:e3:f2:21:81:c7:87:54:9e:b1:1e:ed:62:7d:63:
70:b8:f4:00:22:1b:73:a6:a7:49:1e:11:03:fa:68:1b:9a:12:
e2:fa:8c:be:b6:a8:64:1b:42:00:3c:b4:b7:11:0f:b4:ff:7e:
53:fc:4c:8a:87:07:ee:b7:f3:7b:85:1f:fb:bc:80:e0:70:7c:
cc:8a:4a:a4:5d:81:13:56:00:1a:a1:db:38:e9:15:a2:32:f2:
37:08:a0:b7:9a:07:f7:18:fd:27:b3:70:27:5f:20:03:5e:4e:
9c:cb:42:4d:0e:b8:c1:01:d3:cc:1f:31:a3:0e:ad:46:26:83:
0c:9c:b3:c2:52:15:92:a3:02:eb:63:96:91:33:6c:eb:bf:48:
32:a3:6b:a2:65:0b:50:7e:53:c2:ba:42:38:cb:b1:cd:cf:26:
f5:2e:21:61:0c:3f:24:8e:f9:a1:02:bb:64:1c:1e:32:a1:5e:
f8:21:67:59:0c:6c:3e:db:49:2f:2f:0b:cb:af:be:33:f9:4e:
a8:4d:1c:00
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZjEJllH/qXPIwftVOyrgIw7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjN2FkNzc1NDc5NWRkZDYwNWYyODgzOGJiN2NjMzU5ZGY3
YTI2NmEwHhcNMjUwODE5MjEwNTA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNzAxZWY3OWZiMzMzZTgxMmE1ZGY1ZTMzN2E2OTYyZjgwMzFlNTAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1FfBigZwKsxs7n7dV7MbMytDhwOS
eU8SDNd91iZch4fKXft6/T91qu+El8UF74bQSaOypuCYHvxrQPp3JOY+Pguu79tv
V8IEBGK7fl6N/Wa9eX2cWzbFA2If4LefrDjGR0vHaYp6Lg3VFU2bqKwl7gqG3y4G
JzhRP4+xY4aN0Ejo6COEzpF30QqkP/wvgK6+YmU0In+MpG6cECIYfKjmnaLrNS4f
6baZs6ZhoneV1NMgkaM3gz/iGsdQeA56gxZNK7gJfZSnYKHlI0yoKWCXQscr1gyq
x9HXefhvJ/DvRj+gWQ8UzzagMdJfv+vd5cVngeUXz23Sg81wgckC+oRkAwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFCcB73n7Mz6BKl314zemli+AMeUBMB8GA1UdIwQY
MBaAFBx613VHld3WBfKIOLt8w1nfeiZqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEhyWGRVZVYzZFlGOG9nNHUzekRXZDk2Sm1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9jNWE5ZTMtNjcyMi00YjZhLWJlNTgt
YWRhNWMyMGUzZjdiLzEvSndIdmVmc3pQb0VxWGZYak42YVdMNEF4NVFFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS9jNWE5ZTMtNjcyMi00YjZhLWJlNTgtYWRhNWMyMGUzZjdi
LzEvSEhyWGRVZVYzZFlGOG9nNHUzekRXZDk2Sm1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAW+oWAwQA
wjsGAwQAwnTrMA0GCSqGSIb3DQEBCwUAA4IBAQBxuFIap+0se7Pd4/BQ5l2/YY6K
P8O58dQhG1vqkvsw3lQ8hyYzbcrUPmtIIBLdW/OI1QMAsaNulaUb4/IhgceHVJ6x
Hu1ifWNwuPQAIhtzpqdJHhED+mgbmhLi+oy+tqhkG0IAPLS3EQ+0/35T/EyKhwfu
t/N7hR/7vIDgcHzMikqkXYETVgAaods46RWiMvI3CKC3mgf3GP0ns3AnXyADXk6c
y0JNDrjBAdPMHzGjDq1GJoMMnLPCUhWSowLrY5aRM2zrv0gyo2uiZQtQflPCukI4
y7HNzyb1LiFhDD8kjvmhArtkHB4yoV74IWdZDGw+20kvLwvLr74z+U6oTRwA
-----END CERTIFICATE-----
Generated at Sat Aug 23 18:45:19 2025 by rpki-client