Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/S_7zCzKI7ogFykDCB9smaQVWqXk.roa
File: S_7zCzKI7ogFykDCB9smaQVWqXk.roa (raw, json)
Hash identifier: mF9Q6AT4rOdp1L23mn4M/sQI8pPZFfLdxAWMPoSdESs=
Subject key identifier: 4B:FE:F3:0B:32:88:EE:88:05:CA:40:C2:07:DB:26:69:05:56:A9:79
Certificate issuer: /CN=0f7dd32779c1a9b297e28cb035fd679abb1916d1
Certificate serial: 01978C33A14CE168877242A3484AF86A4920
Authority key identifier: 0F:7D:D3:27:79:C1:A9:B2:97:E2:8C:B0:35:FD:67:9A:BB:19:16:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D33TJ3nBqbKX4oywNf1nmrsZFtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/S_7zCzKI7ogFykDCB9smaQVWqXk.roa
Signing time: Fri 20 Jun 2025 07:18:03 +0000
ROA not before: Fri 20 Jun 2025 07:18:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49581
IP address blocks: 91.234.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/D33TJ3nBqbKX4oywNf1nmrsZFtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 10:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8c:33:a1:4c:e1:68:87:72:42:a3:48:4a:f8:6a:49:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f7dd32779c1a9b297e28cb035fd679abb1916d1
Validity
Not Before: Jun 20 07:18:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4bfef30b3288ee8805ca40c207db26690556a979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:1d:55:85:fb:b8:0d:66:7f:7f:33:26:14:24:
2e:a9:fa:f2:d0:f4:4e:ce:e4:a4:08:c5:ce:cf:d4:
80:49:ee:1a:f4:28:07:03:66:d9:5e:07:0b:16:86:
c2:33:e0:09:54:b5:47:7f:60:64:2c:b5:84:f9:28:
a7:c7:04:cd:ff:56:a6:12:ca:ae:81:df:a2:91:15:
54:8f:c2:89:92:b9:59:b5:28:fb:05:40:f9:3f:31:
7e:00:f7:be:20:47:3a:a0:8d:0f:59:c7:06:ec:a3:
20:0d:20:8e:fb:f7:90:bd:cb:df:24:a9:27:3b:ca:
64:b6:cb:18:aa:12:e9:09:da:da:81:88:ed:e9:20:
3b:5d:06:67:15:aa:2a:d2:b5:92:14:ea:4c:f1:7d:
84:0b:0e:f6:2b:68:2c:9c:96:cb:da:68:f4:3a:a8:
97:95:1a:42:98:06:e5:b1:d2:83:61:26:8f:93:a7:
79:e0:dc:ea:01:6b:25:5e:b3:83:24:4f:9c:70:45:
fb:2f:f7:5c:7c:12:ad:e0:d2:ff:e8:d6:f8:35:32:
d4:a5:63:40:58:1a:8d:0d:1f:8e:7c:67:ff:31:a3:
01:b3:4c:cc:30:9a:12:c8:ca:dc:30:49:ec:86:10:
29:07:06:eb:e3:39:fd:bd:c1:bf:7d:d3:37:64:62:
d9:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:FE:F3:0B:32:88:EE:88:05:CA:40:C2:07:DB:26:69:05:56:A9:79
X509v3 Authority Key Identifier:
keyid:0F:7D:D3:27:79:C1:A9:B2:97:E2:8C:B0:35:FD:67:9A:BB:19:16:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D33TJ3nBqbKX4oywNf1nmrsZFtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/S_7zCzKI7ogFykDCB9smaQVWqXk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.234.39.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:fa:73:01:41:9e:6a:b2:96:ed:81:f7:0e:0f:36:6d:e1:81:
ba:c5:d4:c2:1b:b6:3b:df:33:1b:d2:f0:94:98:b7:d3:82:4d:
22:13:16:d4:cd:c3:f0:e2:95:c7:32:ca:2d:15:99:2d:3f:4c:
9e:e3:03:68:03:98:e0:83:50:35:42:33:b7:4d:de:b5:98:ec:
ed:25:d2:b9:18:71:51:1c:78:ae:7f:63:df:be:44:5c:e5:9e:
22:f9:93:49:d1:c0:e0:02:55:a8:39:a1:65:7e:71:97:ef:ed:
82:b4:14:a1:ca:68:25:9a:18:91:15:01:c6:1d:84:ee:d7:a8:
54:1a:e8:2f:65:f4:4b:a4:dd:c8:94:80:fd:4a:e8:1c:b9:15:
77:6b:e1:27:51:d9:9f:b8:c7:01:82:df:4e:c0:48:15:1d:d8:
4f:fb:2d:e8:6a:d5:4a:9e:e0:5d:21:a2:ab:ab:92:bc:e5:4f:
71:83:e9:70:3d:a7:2b:14:bb:81:9d:91:6b:2c:e6:b5:97:40:
40:6a:8c:82:0f:b8:6c:59:e3:63:aa:26:77:4d:35:17:89:76:
c7:9d:4e:58:7a:cb:92:2c:8d:db:bd:86:b4:40:2f:6d:0a:87:
ac:79:61:ec:ba:d3:b9:9d:dc:47:04:e9:db:10:aa:bb:65:07:
d9:0b:30:ac
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZeMM6FM4WiHckKjSEr4akkgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmN2RkMzI3NzljMWE5YjI5N2UyOGNiMDM1ZmQ2NzlhYmIx
OTE2ZDEwHhcNMjUwNjIwMDcxODAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YmZlZjMwYjMyODhlZTg4MDVjYTQwYzIwN2RiMjY2OTA1NTZhOTc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8x1Vhfu4DWZ/fzMmFCQuqfry0PRO
zuSkCMXOz9SASe4a9CgHA2bZXgcLFobCM+AJVLVHf2BkLLWE+SinxwTN/1amEsqu
gd+ikRVUj8KJkrlZtSj7BUD5PzF+APe+IEc6oI0PWccG7KMgDSCO+/eQvcvfJKkn
O8pktssYqhLpCdragYjt6SA7XQZnFaoq0rWSFOpM8X2ECw72K2gsnJbL2mj0OqiX
lRpCmAblsdKDYSaPk6d54NzqAWslXrODJE+ccEX7L/dcfBKt4NL/6Nb4NTLUpWNA
WBqNDR+OfGf/MaMBs0zMMJoSyMrcMEnshhApBwbr4zn9vcG/fdM3ZGLZHwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEv+8wsyiO6IBcpAwgfbJmkFVql5MB8GA1UdIwQY
MBaAFA990yd5wamyl+KMsDX9Z5q7GRbRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDMzVEozbkJxYktYNG95d05mMW5tcnNaRnRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi83MjkyMTAtZDcyMC00ZjM4LWI2YmUt
YWNmNjZmNzhiMmI3LzEvU183ekN6S0k3b2dGeWtEQ0I5c21hUVZXcVhrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi83MjkyMTAtZDcyMC00ZjM4LWI2YmUtYWNmNjZmNzhiMmI3
LzEvRDMzVEozbkJxYktYNG95d05mMW5tcnNaRnRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+onMA0G
CSqGSIb3DQEBCwUAA4IBAQBq+nMBQZ5qspbtgfcODzZt4YG6xdTCG7Y73zMb0vCU
mLfTgk0iExbUzcPw4pXHMsotFZktP0ye4wNoA5jgg1A1QjO3Td61mOztJdK5GHFR
HHiuf2PfvkRc5Z4i+ZNJ0cDgAlWoOaFlfnGX7+2CtBShymglmhiRFQHGHYTu16hU
GugvZfRLpN3IlID9SugcuRV3a+EnUdmfuMcBgt9OwEgVHdhP+y3oatVKnuBdIaKr
q5K85U9xg+lwPacrFLuBnZFrLOa1l0BAaoyCD7hsWeNjqiZ3TTUXiXbHnU5YesuS
LI3bvYa0QC9tCoeseWHsutO5ndxHBOnbEKq7ZQfZCzCs
-----END CERTIFICATE-----
Generated at Mon Jun 30 17:23:00 2025 by rpki-client