Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/dNnxl9eshyIT4nX_fYkG9f0tJfU.roa
File: dNnxl9eshyIT4nX_fYkG9f0tJfU.roa (raw, json)
Hash identifier: M4nzGQsVxbsKWipOFOtukrmX3AJDrEypgI6i1id8uus=
Subject key identifier: 74:D9:F1:97:D7:AC:87:22:13:E2:75:FF:7D:89:06:F5:FD:2D:25:F5
Certificate issuer: /CN=50592e68895c7068b4655508917ad5bbddbd0a5f
Certificate serial: 01978F1DC9809DF356739425BC3E06C6047B
Authority key identifier: 50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/dNnxl9eshyIT4nX_fYkG9f0tJfU.roa
Signing time: Fri 20 Jun 2025 20:53:03 +0000
ROA not before: Fri 20 Jun 2025 20:53:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60707
IP address blocks: 91.151.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 17:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8f:1d:c9:80:9d:f3:56:73:94:25:bc:3e:06:c6:04:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50592e68895c7068b4655508917ad5bbddbd0a5f
Validity
Not Before: Jun 20 20:53:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=74d9f197d7ac872213e275ff7d8906f5fd2d25f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ab:85:21:bb:67:3e:b9:78:9c:fe:a3:08:31:
c7:7a:1c:15:90:7b:c5:4b:65:6b:6f:67:81:4b:bf:
ba:d3:59:29:37:71:d7:9e:3e:c3:31:9c:bf:6a:7d:
f4:ca:13:67:15:c5:45:20:69:94:78:ad:ca:2a:f9:
45:f3:7f:d0:8f:e6:4f:02:63:bd:65:d6:7e:f6:2f:
e7:f4:f4:50:51:2b:9b:9f:c1:78:d5:70:bf:6a:15:
2f:b4:40:ff:f8:66:47:2d:2a:1c:ba:3e:71:7a:1a:
c4:81:1d:b4:61:de:de:fe:77:21:aa:6c:4d:69:bd:
d2:b5:27:04:98:8e:e1:ff:09:e4:aa:06:5b:48:3f:
8a:02:8f:ff:4b:a7:8d:c3:7c:c2:f3:05:66:38:4f:
65:2a:4e:3d:2f:68:dd:64:80:59:a6:66:ea:b3:0b:
b6:bf:7b:88:c5:22:28:e7:ec:93:ec:b9:cf:2e:7d:
28:97:90:4c:a7:f4:5a:22:e3:27:07:f4:01:1e:78:
3c:0f:a2:49:f9:25:c3:37:a0:24:db:0c:1e:85:44:
7a:4c:16:f0:6d:00:7b:c7:b4:8b:2c:75:b2:c4:2b:
a8:d0:85:a0:52:32:85:78:44:0d:39:fb:2a:57:0c:
13:6b:97:f0:12:65:4c:64:2d:7d:64:f6:58:ac:0c:
a2:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:D9:F1:97:D7:AC:87:22:13:E2:75:FF:7D:89:06:F5:FD:2D:25:F5
X509v3 Authority Key Identifier:
keyid:50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/dNnxl9eshyIT4nX_fYkG9f0tJfU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.151.81.0/24
Signature Algorithm: sha256WithRSAEncryption
55:ae:b1:8b:d8:32:4f:49:c2:a8:d8:e1:40:41:bd:4d:bd:63:
42:f9:e1:9f:a2:21:59:e6:63:60:5a:54:ec:02:bc:0b:37:2c:
b4:80:a9:24:8b:ee:6f:f4:46:48:ff:d5:87:b1:05:f5:ff:30:
85:5f:cd:14:bf:e5:f3:81:a2:4c:47:c6:74:90:06:fb:db:22:
3e:27:0b:7c:24:08:ff:3a:ee:22:33:05:e1:90:30:16:f5:cc:
39:e8:9f:d5:c1:53:86:0a:4f:d0:03:77:dc:61:7d:e8:23:b6:
5b:1a:6c:81:df:13:a9:1d:20:c5:d6:5f:5c:ec:28:48:05:ce:
07:20:b9:45:b9:3a:50:be:a8:b8:de:fb:40:46:04:f1:93:14:
7d:ff:0a:e7:46:57:dc:a0:7a:6d:ac:f7:c6:f7:f6:62:e0:1f:
38:4e:1b:4c:78:88:c3:85:49:29:64:d8:f7:bc:c6:aa:c0:10:
50:28:56:7e:1a:43:f3:dd:71:64:ce:64:0a:57:c1:de:0b:5d:
e3:31:4d:3e:7a:75:aa:7d:63:61:a8:5e:9c:7f:36:b1:e9:c6:
fa:80:9f:3f:af:f1:ce:c5:7f:3e:6c:b7:97:df:3c:71:68:6b:
24:7b:1a:1e:32:bd:da:00:8e:06:06:21:bb:64:cc:fd:67:98:
ea:d0:28:2f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZePHcmAnfNWc5QlvD4GxgR7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwNTkyZTY4ODk1YzcwNjhiNDY1NTUwODkxN2FkNWJiZGRi
ZDBhNWYwHhcNMjUwNjIwMjA1MzAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NGQ5ZjE5N2Q3YWM4NzIyMTNlMjc1ZmY3ZDg5MDZmNWZkMmQyNWY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqquFIbtnPrl4nP6jCDHHehwVkHvF
S2Vrb2eBS7+601kpN3HXnj7DMZy/an30yhNnFcVFIGmUeK3KKvlF83/Qj+ZPAmO9
ZdZ+9i/n9PRQUSubn8F41XC/ahUvtED/+GZHLSocuj5xehrEgR20Yd7e/nchqmxN
ab3StScEmI7h/wnkqgZbSD+KAo//S6eNw3zC8wVmOE9lKk49L2jdZIBZpmbqswu2
v3uIxSIo5+yT7LnPLn0ol5BMp/RaIuMnB/QBHng8D6JJ+SXDN6Ak2wwehUR6TBbw
bQB7x7SLLHWyxCuo0IWgUjKFeEQNOfsqVwwTa5fwEmVMZC19ZPZYrAyijQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHTZ8ZfXrIciE+J1/32JBvX9LSX1MB8GA1UdIwQY
MBaAFFBZLmiJXHBotGVVCJF61bvdvQpfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUZrdWFJbGNjR2kwWlZVSWtYclZ1OTI5Q2w4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8yYTgxMDAtMTcyYi00OGUzLWEzMmEt
N2JiZDI4Y2U0YTc1LzEvZE5ueGw5ZXNoeUlUNG5YX2ZZa0c5ZjB0SmZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi8yYTgxMDAtMTcyYi00OGUzLWEzMmEtN2JiZDI4Y2U0YTc1
LzEvVUZrdWFJbGNjR2kwWlZVSWtYclZ1OTI5Q2w4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW5dRMA0G
CSqGSIb3DQEBCwUAA4IBAQBVrrGL2DJPScKo2OFAQb1NvWNC+eGfoiFZ5mNgWlTs
ArwLNyy0gKkki+5v9EZI/9WHsQX1/zCFX80Uv+XzgaJMR8Z0kAb72yI+Jwt8JAj/
Ou4iMwXhkDAW9cw56J/VwVOGCk/QA3fcYX3oI7ZbGmyB3xOpHSDF1l9c7ChIBc4H
ILlFuTpQvqi43vtARgTxkxR9/wrnRlfcoHptrPfG9/Zi4B84ThtMeIjDhUkpZNj3
vMaqwBBQKFZ+GkPz3XFkzmQKV8HeC13jMU0+enWqfWNhqF6cfzax6cb6gJ8/r/HO
xX8+bLeX3zxxaGskexoeMr3aAI4GBiG7ZMz9Z5jq0Cgv
-----END CERTIFICATE-----
Generated at Sun Jun 29 01:54:14 2025 by rpki-client