Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/eWMDU8HwO4x-gg3ujXJ2STSGGfQ.roa
File: eWMDU8HwO4x-gg3ujXJ2STSGGfQ.roa (raw, json)
Hash identifier: RDB743TY+2ejVaYtMpnXMPNwKxBcHmk10C4c+qWabCo=
Subject key identifier: 79:63:03:53:C1:F0:3B:8C:7E:82:0D:EE:8D:72:76:49:34:86:19:F4
Certificate issuer: /CN=49216f5c165b827a7fd73d8107aebd2f63c63e24
Certificate serial: 0198B7802086A2AB665BC063FD20080AE81A
Authority key identifier: 49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/eWMDU8HwO4x-gg3ujXJ2STSGGfQ.roa
Signing time: Sun 17 Aug 2025 10:08:04 +0000
ROA not before: Sun 17 Aug 2025 10:08:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197450
IP address blocks: 178.17.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:b7:80:20:86:a2:ab:66:5b:c0:63:fd:20:08:0a:e8:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49216f5c165b827a7fd73d8107aebd2f63c63e24
Validity
Not Before: Aug 17 10:08:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=79630353c1f03b8c7e820dee8d727649348619f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:72:23:3a:22:5c:d1:8a:a7:48:78:e7:10:b6:
b6:09:17:bf:28:09:59:66:17:13:38:cc:58:4f:81:
a1:1e:05:7e:5e:20:3d:96:bf:44:b9:39:6b:48:8c:
7d:16:76:0c:81:ac:96:a8:5e:9e:2e:87:b0:79:1a:
de:37:15:0c:b6:1e:85:79:ce:90:f8:90:52:fc:4c:
d3:60:d7:69:9f:a2:e6:fe:b5:63:60:d2:ce:79:78:
8c:cc:38:d3:dd:8d:a9:17:93:2a:67:60:2a:cd:a1:
24:e5:bf:58:39:69:59:d7:8b:fb:2c:21:28:57:f8:
21:05:a1:07:1a:a2:59:e6:89:84:58:4a:32:f8:9d:
40:ed:2b:2c:43:07:cd:84:d5:e8:ed:2e:9a:70:87:
38:56:68:b3:4f:73:35:60:ee:ff:fc:f8:a9:03:e3:
44:55:e6:9a:6f:45:ed:db:e1:4e:73:cc:a4:fe:24:
e6:1d:d6:6e:db:06:1e:d3:60:68:96:2b:92:b9:17:
4d:35:f5:a7:d0:cf:d9:0b:9c:67:3c:f9:55:c1:36:
79:9e:26:fc:49:a8:74:36:be:4c:3c:be:1d:c0:9f:
31:52:bd:b3:b4:1f:96:53:76:bb:b8:04:83:6f:c2:
87:46:4f:66:59:ce:ab:c2:7c:b3:5d:d6:17:ec:a8:
9b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:63:03:53:C1:F0:3B:8C:7E:82:0D:EE:8D:72:76:49:34:86:19:F4
X509v3 Authority Key Identifier:
keyid:49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/eWMDU8HwO4x-gg3ujXJ2STSGGfQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.17.57.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:31:e5:7e:80:d6:a4:4a:c8:19:78:6a:8a:2d:9c:79:05:b8:
81:f8:35:f0:2b:c3:55:7f:1d:44:c0:67:bd:12:f8:83:bb:2a:
5a:9f:b4:b1:ec:2b:e3:9d:07:98:19:23:b5:bd:5c:b6:2d:01:
74:76:c2:83:5d:87:e1:89:f8:11:24:f5:62:13:63:e6:9d:65:
9a:99:56:35:2d:07:20:2d:da:ed:07:56:0b:0f:e2:e7:ef:fe:
03:a4:d3:c0:36:95:6d:1f:73:46:de:c4:92:b3:eb:57:ca:35:
2e:34:a8:e7:6f:ce:f8:a8:41:89:48:34:62:4a:99:29:7a:34:
06:a9:eb:05:07:b8:9a:fa:92:ab:c6:5d:5b:d6:a8:0a:35:95:
61:3c:cf:f5:4a:14:26:46:da:85:d3:19:e8:2c:69:d4:a3:1e:
11:6a:c7:47:d9:d9:7c:d1:f7:76:c6:a2:39:72:1e:4e:8e:b7:
bc:ed:61:4c:99:32:8b:c8:0b:41:50:71:f2:13:e2:07:ae:67:
d5:86:70:46:fd:ab:21:b3:97:30:84:cd:8a:49:07:d6:84:d5:
fc:75:d9:1b:d4:46:0a:a9:f2:70:55:00:e1:75:26:57:88:c8:
b2:95:aa:2e:dd:28:ef:72:80:e0:8a:43:e7:4b:ce:5f:ba:3d:
fd:80:9f:0d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZi3gCCGoqtmW8Bj/SAICugaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5MjE2ZjVjMTY1YjgyN2E3ZmQ3M2Q4MTA3YWViZDJmNjNj
NjNlMjQwHhcNMjUwODE3MTAwODA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OTYzMDM1M2MxZjAzYjhjN2U4MjBkZWU4ZDcyNzY0OTM0ODYxOWY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXIjOiJc0YqnSHjnELa2CRe/KAlZ
ZhcTOMxYT4GhHgV+XiA9lr9EuTlrSIx9FnYMgayWqF6eLoeweRreNxUMth6Fec6Q
+JBS/EzTYNdpn6Lm/rVjYNLOeXiMzDjT3Y2pF5MqZ2AqzaEk5b9YOWlZ14v7LCEo
V/ghBaEHGqJZ5omEWEoy+J1A7SssQwfNhNXo7S6acIc4VmizT3M1YO7//PipA+NE
Veaab0Xt2+FOc8yk/iTmHdZu2wYe02BoliuSuRdNNfWn0M/ZC5xnPPlVwTZ5nib8
Sah0Nr5MPL4dwJ8xUr2ztB+WU3a7uASDb8KHRk9mWc6rwnyzXdYX7Kib0wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHljA1PB8DuMfoIN7o1ydkk0hhn0MB8GA1UdIwQY
MBaAFEkhb1wWW4J6f9c9gQeuvS9jxj4kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1NGdlhCWmJnbnBfMXoyQkI2NjlMMlBHUGlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi80ODQyYTktOWZjZC00YmI2LWJiMDQt
MGRiYmMyNDllNjU3LzEvZVdNRFU4SHdPNHgtZ2czdWpYSjJTVFNHR2ZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi80ODQyYTktOWZjZC00YmI2LWJiMDQtMGRiYmMyNDllNjU3
LzEvU1NGdlhCWmJnbnBfMXoyQkI2NjlMMlBHUGlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAshE5MA0G
CSqGSIb3DQEBCwUAA4IBAQCdMeV+gNakSsgZeGqKLZx5BbiB+DXwK8NVfx1EwGe9
EviDuypan7Sx7CvjnQeYGSO1vVy2LQF0dsKDXYfhifgRJPViE2PmnWWamVY1LQcg
LdrtB1YLD+Ln7/4DpNPANpVtH3NG3sSSs+tXyjUuNKjnb874qEGJSDRiSpkpejQG
qesFB7ia+pKrxl1b1qgKNZVhPM/1ShQmRtqF0xnoLGnUox4RasdH2dl80fd2xqI5
ch5Ojre87WFMmTKLyAtBUHHyE+IHrmfVhnBG/ashs5cwhM2KSQfWhNX8ddkb1EYK
qfJwVQDhdSZXiMiylaou3SjvcoDgikPnS85fuj39gJ8N
-----END CERTIFICATE-----
Generated at Sat Aug 23 20:50:58 2025 by rpki-client