Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/J3yqUr2LpvB6WFh7TvGZOeYfpso.roa
File: J3yqUr2LpvB6WFh7TvGZOeYfpso.roa (raw, json)
Hash identifier: v0gPZA7CDzEw5MPA2cL+IcJnMRQREOoJVNSSNxMF/mI=
Subject key identifier: 27:7C:AA:52:BD:8B:A6:F0:7A:58:58:7B:4E:F1:99:39:E6:1F:A6:CA
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 0198B9B24316EF383F5587BBF7708320508D
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/J3yqUr2LpvB6WFh7TvGZOeYfpso.roa
Signing time: Sun 17 Aug 2025 20:22:04 +0000
ROA not before: Sun 17 Aug 2025 20:22:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51847
IP address blocks: 45.155.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:b9:b2:43:16:ef:38:3f:55:87:bb:f7:70:83:20:50:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Aug 17 20:22:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=277caa52bd8ba6f07a58587b4ef19939e61fa6ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7a:c4:52:be:4b:91:a3:70:89:91:44:c2:b7:
59:d7:ce:4a:2c:d1:49:94:a2:39:e2:61:43:5e:a7:
37:ac:94:f1:cf:ae:97:39:8e:52:b2:0c:73:c1:f3:
f1:61:3d:c4:7f:22:e7:96:f7:b7:0c:91:e6:dd:75:
f8:20:0f:f7:f4:c0:c2:9d:d4:2a:f1:b9:71:46:ac:
eb:43:29:80:8d:7b:cb:96:10:30:09:37:de:4c:c8:
bf:24:ad:d3:30:8b:c1:77:d3:d4:c1:52:c0:58:c2:
e0:8b:63:e8:b0:d9:ed:10:26:00:ac:57:4a:fa:4e:
21:d7:49:32:04:13:ae:eb:b3:86:d1:da:d4:11:ee:
68:c0:ca:75:b5:93:56:3f:01:8b:7a:a4:8f:22:90:
63:b5:bb:0d:9f:2b:68:bf:9e:b9:45:5a:ae:5a:77:
57:be:1d:3b:53:cf:79:a3:80:0e:44:b6:66:f5:39:
d2:79:2c:fc:69:6f:37:61:87:91:fb:c6:2c:70:8d:
a0:5b:a9:77:08:db:ba:67:b6:06:03:10:eb:2f:c1:
aa:e1:09:1a:04:15:ef:11:4f:70:41:06:64:89:86:
b5:29:b9:6d:ae:44:a1:28:4f:d7:67:33:ca:62:7e:
43:23:db:b4:ce:b4:21:d9:11:ad:08:15:76:27:2e:
83:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:7C:AA:52:BD:8B:A6:F0:7A:58:58:7B:4E:F1:99:39:E6:1F:A6:CA
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/J3yqUr2LpvB6WFh7TvGZOeYfpso.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.241.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:a6:9f:81:fc:20:e2:54:25:8d:6a:01:19:8f:42:87:3e:3a:
f6:84:4a:26:b9:8c:c1:40:2a:1f:17:7f:9c:5d:78:05:db:15:
e3:f3:b4:d0:8c:4c:d2:c6:ad:f8:39:7d:6f:e7:a0:c5:db:be:
a9:d7:07:81:25:ad:db:5e:6d:a0:8a:d5:55:d4:6b:8c:35:42:
2f:21:2a:81:6d:2c:51:38:04:c4:d7:52:44:5b:a5:c0:54:e0:
f1:f2:60:df:5a:00:aa:d7:cf:99:99:f6:0d:6a:4c:4f:a1:d5:
7e:4e:ab:6a:00:66:8b:eb:c5:72:3e:1f:c4:1b:4f:b4:3c:a0:
76:b8:8b:4e:f1:ad:4c:c8:fb:e8:e7:02:6d:3c:2f:72:0f:f9:
2f:a8:58:04:e9:cf:41:21:41:30:88:d5:d1:2b:d1:8b:06:67:
cc:55:d3:22:80:5e:7d:bb:c5:66:c7:fd:74:44:7b:a2:81:2c:
dd:e5:21:b4:67:a7:3a:c0:2c:e8:0c:f5:de:72:19:b1:2f:34:
10:82:cd:d2:62:42:01:73:aa:ef:46:4b:81:c3:a2:81:0e:7c:
7d:87:b2:aa:fd:52:34:11:9b:a7:99:9d:f7:2b:08:76:ce:8d:
e7:61:87:09:04:60:29:b1:b6:2c:78:16:a7:e7:6e:cd:85:b9:
c4:da:c6:74
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZi5skMW7zg/VYe793CDIFCNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2NzFkY2M3YTlhYzczNTFjNzFlMGJjMjI3OGNmNDVmZDAy
MGFlMmUwHhcNMjUwODE3MjAyMjA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNzdjYWE1MmJkOGJhNmYwN2E1ODU4N2I0ZWYxOTkzOWU2MWZhNmNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXrEUr5LkaNwiZFEwrdZ185KLNFJ
lKI54mFDXqc3rJTxz66XOY5SsgxzwfPxYT3EfyLnlve3DJHm3XX4IA/39MDCndQq
8blxRqzrQymAjXvLlhAwCTfeTMi/JK3TMIvBd9PUwVLAWMLgi2PosNntECYArFdK
+k4h10kyBBOu67OG0drUEe5owMp1tZNWPwGLeqSPIpBjtbsNnytov565RVquWndX
vh07U895o4AORLZm9TnSeSz8aW83YYeR+8YscI2gW6l3CNu6Z7YGAxDrL8Gq4Qka
BBXvEU9wQQZkiYa1KbltrkShKE/XZzPKYn5DI9u0zrQh2RGtCBV2Jy6DhQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCd8qlK9i6bwelhYe07xmTnmH6bKMB8GA1UdIwQY
MBaAFAZx3MeprHNRxx4LwieM9F/QIK4uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGIt
MWRkZWM0Y2NlMjRjLzEvSjN5cVVyMkxwdkI2V0ZoN1R2R1pPZVlmcHNvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGItMWRkZWM0Y2NlMjRj
LzEvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZvxMA0G
CSqGSIb3DQEBCwUAA4IBAQCOpp+B/CDiVCWNagEZj0KHPjr2hEomuYzBQCofF3+c
XXgF2xXj87TQjEzSxq34OX1v56DF276p1weBJa3bXm2gitVV1GuMNUIvISqBbSxR
OATE11JEW6XAVODx8mDfWgCq18+ZmfYNakxPodV+TqtqAGaL68VyPh/EG0+0PKB2
uItO8a1MyPvo5wJtPC9yD/kvqFgE6c9BIUEwiNXRK9GLBmfMVdMigF59u8Vmx/10
RHuigSzd5SG0Z6c6wCzoDPXechmxLzQQgs3SYkIBc6rvRkuBw6KBDnx9h7Kq/VI0
EZunmZ33Kwh2zo3nYYcJBGApsbYseBan527NhbnE2sZ0
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:19:00 2025 by rpki-client