Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/kTJsplmwURGCaPzG4ayo6wcNo7A.roa
File: kTJsplmwURGCaPzG4ayo6wcNo7A.roa (raw, json)
Hash identifier: l/8qlEM8+mm6CRnvB68H+M19y+bDF0JqtLE1zP1nToE=
Subject key identifier: 91:32:6C:A6:59:B0:51:11:82:68:FC:C6:E1:AC:A8:EB:07:0D:A3:B0
Certificate issuer: /CN=49216f5c165b827a7fd73d8107aebd2f63c63e24
Certificate serial: 0198B39EC7C8D5F6E19FDCDF2806EB99667A
Authority key identifier: 49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/kTJsplmwURGCaPzG4ayo6wcNo7A.roa
Signing time: Sat 16 Aug 2025 16:03:04 +0000
ROA not before: Sat 16 Aug 2025 16:03:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44636
IP address blocks: 178.17.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 06:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:b3:9e:c7:c8:d5:f6:e1:9f:dc:df:28:06:eb:99:66:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49216f5c165b827a7fd73d8107aebd2f63c63e24
Validity
Not Before: Aug 16 16:03:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=91326ca659b051118268fcc6e1aca8eb070da3b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:6e:cf:09:43:ba:b2:2c:bd:d8:ba:72:7f:be:
e3:6c:96:ba:c4:fd:43:89:6f:69:e6:7b:f4:66:bf:
d7:d0:f6:49:b2:90:c0:15:1a:ec:6c:35:05:c3:f4:
05:85:ff:94:07:3c:93:c5:23:08:16:4d:83:3d:24:
4b:98:1c:9d:4f:fb:54:d3:35:3c:e7:a7:88:5d:d2:
f8:76:22:3f:6e:3f:30:49:6f:42:08:30:45:9c:ce:
42:0b:74:94:02:c8:dc:9a:bc:07:d4:1b:05:f2:71:
46:36:e3:fa:da:c6:e7:f1:e3:86:ff:ef:b9:35:49:
9e:ee:b2:b5:a7:a7:84:ee:96:fe:0f:fa:a0:26:ff:
0c:e6:28:54:8e:b4:35:b8:fd:bf:ca:35:c0:27:c6:
73:74:3d:01:66:d3:3f:e2:5a:9e:3e:c2:8e:cf:2c:
46:ed:39:b6:a9:e3:7a:40:4e:7c:c5:92:b4:ed:19:
28:5b:2d:8f:9b:40:8b:03:1b:4d:e1:91:84:8a:dc:
c9:f1:d6:3d:17:4c:a1:05:d1:3f:c9:fd:ec:04:97:
f0:b3:c7:9b:57:fd:ab:87:28:11:6f:42:dd:cc:c4:
bb:6a:ea:06:de:b0:0b:97:3e:dd:5c:fe:e8:60:c3:
5c:9a:7e:24:10:23:a8:69:90:8e:fc:01:38:34:ee:
b1:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:32:6C:A6:59:B0:51:11:82:68:FC:C6:E1:AC:A8:EB:07:0D:A3:B0
X509v3 Authority Key Identifier:
keyid:49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/kTJsplmwURGCaPzG4ayo6wcNo7A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.17.54.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:9d:f5:6b:81:ad:92:cd:d7:0d:a5:50:f1:cf:e6:19:f1:02:
81:37:80:57:af:e9:1e:5d:cf:68:bb:e4:8f:70:be:86:96:b0:
4d:06:2f:81:11:d2:a0:0e:f7:18:cf:71:03:16:03:0e:c3:95:
79:df:1a:6a:44:12:4d:27:b0:ab:d0:a1:89:0f:0a:3b:c0:74:
20:92:b1:d7:a3:f7:7e:fd:1a:17:ed:73:66:a4:80:ee:a2:74:
58:a6:c5:0c:87:16:15:0e:ed:bf:79:bd:8e:8e:7f:0c:da:76:
02:0b:9d:25:02:29:69:8e:66:72:c1:bc:15:3b:f3:c7:97:c1:
0a:7e:04:6f:a6:0e:d4:9e:27:06:b9:1e:0d:d4:7e:b2:3e:bc:
6d:2f:22:d9:ae:3b:af:d2:df:88:fe:c1:cd:91:a1:8e:e3:4c:
25:b5:b7:2f:f0:75:50:43:26:66:64:5d:6d:89:50:31:42:cd:
7f:f8:a7:48:91:a0:91:f6:da:ce:eb:cd:66:26:91:26:91:af:
f8:7a:3f:c4:0e:74:9b:05:b7:df:aa:5e:10:72:cf:4c:67:bf:
9d:a0:8e:db:5d:b5:a2:ea:bf:79:4a:22:e6:f8:ae:eb:86:92:
96:6c:6c:e6:bf:68:72:9f:d1:93:c1:4f:8a:c1:43:b3:23:64:
a4:dc:3c:fd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZiznsfI1fbhn9zfKAbrmWZ6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5MjE2ZjVjMTY1YjgyN2E3ZmQ3M2Q4MTA3YWViZDJmNjNj
NjNlMjQwHhcNMjUwODE2MTYwMzA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MTMyNmNhNjU5YjA1MTExODI2OGZjYzZlMWFjYThlYjA3MGRhM2IwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0m7PCUO6siy92Lpyf77jbJa6xP1D
iW9p5nv0Zr/X0PZJspDAFRrsbDUFw/QFhf+UBzyTxSMIFk2DPSRLmBydT/tU0zU8
56eIXdL4diI/bj8wSW9CCDBFnM5CC3SUAsjcmrwH1BsF8nFGNuP62sbn8eOG/++5
NUme7rK1p6eE7pb+D/qgJv8M5ihUjrQ1uP2/yjXAJ8ZzdD0BZtM/4lqePsKOzyxG
7Tm2qeN6QE58xZK07RkoWy2Pm0CLAxtN4ZGEitzJ8dY9F0yhBdE/yf3sBJfws8eb
V/2rhygRb0LdzMS7auoG3rALlz7dXP7oYMNcmn4kECOoaZCO/AE4NO6xJQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJEybKZZsFERgmj8xuGsqOsHDaOwMB8GA1UdIwQY
MBaAFEkhb1wWW4J6f9c9gQeuvS9jxj4kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1NGdlhCWmJnbnBfMXoyQkI2NjlMMlBHUGlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi80ODQyYTktOWZjZC00YmI2LWJiMDQt
MGRiYmMyNDllNjU3LzEva1RKc3BsbXdVUkdDYVB6RzRheW82d2NObzdBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi80ODQyYTktOWZjZC00YmI2LWJiMDQtMGRiYmMyNDllNjU3
LzEvU1NGdlhCWmJnbnBfMXoyQkI2NjlMMlBHUGlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAshE2MA0G
CSqGSIb3DQEBCwUAA4IBAQA7nfVrga2SzdcNpVDxz+YZ8QKBN4BXr+keXc9ou+SP
cL6GlrBNBi+BEdKgDvcYz3EDFgMOw5V53xpqRBJNJ7Cr0KGJDwo7wHQgkrHXo/d+
/RoX7XNmpIDuonRYpsUMhxYVDu2/eb2Ojn8M2nYCC50lAilpjmZywbwVO/PHl8EK
fgRvpg7UnicGuR4N1H6yPrxtLyLZrjuv0t+I/sHNkaGO40wltbcv8HVQQyZmZF1t
iVAxQs1/+KdIkaCR9trO681mJpEmka/4ej/EDnSbBbffql4Qcs9MZ7+doI7bXbWi
6r95SiLm+K7rhpKWbGzmv2hyn9GTwU+KwUOzI2Sk3Dz9
-----END CERTIFICATE-----
Generated at Sat Aug 23 16:51:25 2025 by rpki-client