Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/qD_HB0o7DOWSBWXI-Nl6im58bqg.roa
File: qD_HB0o7DOWSBWXI-Nl6im58bqg.roa (raw, json)
Hash identifier: udEbzIJxZzFM7igXdgsMuUn0o4EJ+tU5RB+FQKdp76Y=
Subject key identifier: A8:3F:C7:07:4A:3B:0C:E5:92:05:65:C8:F8:D9:7A:8A:6E:7C:6E:A8
Certificate issuer: /CN=835bc9bb547e27788d221bc8bbd5fb02e024480f
Certificate serial: 01995EBE259405077A0BD87E1488F3C3A802
Authority key identifier: 83:5B:C9:BB:54:7E:27:78:8D:22:1B:C8:BB:D5:FB:02:E0:24:48:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/qD_HB0o7DOWSBWXI-Nl6im58bqg.roa
Signing time: Thu 18 Sep 2025 21:32:23 +0000
ROA not before: Thu 18 Sep 2025 21:32:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 401297
IP address blocks: 2a0b:6b82::/32 maxlen: 32
2a0b:6b86:1300::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Oct 2025 06:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:5e:be:25:94:05:07:7a:0b:d8:7e:14:88:f3:c3:a8:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=835bc9bb547e27788d221bc8bbd5fb02e024480f
Validity
Not Before: Sep 18 21:32:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a83fc7074a3b0ce5920565c8f8d97a8a6e7c6ea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:07:93:3e:8e:da:02:d1:a7:bb:87:53:56:9f:
dd:dd:6f:7f:f2:0e:59:cb:97:a1:80:4b:39:3e:96:
44:3e:2a:8a:06:8f:a6:e1:9c:e3:a3:20:9f:7f:c2:
37:2b:be:ac:6a:8f:a2:e6:cc:7a:5e:de:ad:d6:9e:
0e:55:86:b9:41:e5:bc:c7:1f:f6:0a:52:16:e6:1a:
cf:fb:91:89:32:da:19:68:c6:a7:a0:ef:08:07:8f:
4c:55:40:27:dd:70:98:05:d8:54:85:49:3a:ee:75:
74:79:39:e8:79:a4:b3:90:01:59:4e:5d:dc:89:16:
c5:9f:c2:ad:57:ea:63:70:92:bc:9a:40:f3:c0:ce:
30:b8:24:b7:0a:d3:39:59:b7:48:f4:db:ca:e6:1f:
32:c6:d5:0e:f3:8e:d9:5d:49:16:77:4e:16:90:a9:
c8:48:40:58:e2:a4:a6:c4:29:26:7f:34:68:70:17:
23:e5:ad:72:10:a2:b6:3e:e0:0d:0a:ac:03:df:e5:
88:ad:93:24:77:3e:47:fa:8a:b2:73:10:38:f2:f5:
73:b6:4f:d2:28:4c:9a:a6:dd:df:29:97:1f:fb:4d:
17:70:9a:da:c8:ba:10:c3:71:0a:17:e9:38:3f:2b:
c2:d0:a8:5c:a4:33:67:31:c3:ae:13:a7:31:40:b9:
b7:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:3F:C7:07:4A:3B:0C:E5:92:05:65:C8:F8:D9:7A:8A:6E:7C:6E:A8
X509v3 Authority Key Identifier:
keyid:83:5B:C9:BB:54:7E:27:78:8D:22:1B:C8:BB:D5:FB:02:E0:24:48:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/qD_HB0o7DOWSBWXI-Nl6im58bqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:6b82::/32
2a0b:6b86:1300::/40
Signature Algorithm: sha256WithRSAEncryption
35:d5:e5:46:e1:03:4a:d4:b9:3d:52:a0:4b:a1:48:52:51:c6:
97:2f:08:21:66:3d:ab:b8:e0:f1:88:2a:8d:98:08:39:f2:72:
51:ee:e8:b0:f7:97:bd:c3:b3:bd:42:d8:5a:fc:c8:30:20:3f:
05:02:6f:bb:5a:df:83:97:01:1f:5e:41:97:a1:f3:e0:d8:2b:
52:01:6a:05:8d:1e:b6:de:f8:cf:ff:12:47:71:93:35:b6:b3:
91:2a:a6:83:11:ad:55:8e:c8:9e:4a:14:35:fc:9c:b3:38:c1:
27:30:12:bd:f0:40:ef:e4:2c:2a:86:90:46:4f:3c:90:61:d0:
95:e4:97:d6:1e:68:70:55:2d:e7:e0:3a:d2:40:59:ce:c4:eb:
f8:62:ae:51:4f:ac:73:c3:dc:e7:b7:a0:72:f5:84:f1:91:2e:
53:db:0a:77:57:57:54:2a:f9:68:c5:03:da:7c:59:29:30:72:
13:5b:e2:ce:25:f2:92:aa:66:8a:5e:44:de:6f:81:9d:af:65:
4b:a9:34:c7:3c:2c:e4:2b:37:2b:a7:83:eb:e2:c1:39:9e:fa:
47:00:67:40:2f:d8:97:55:20:76:e5:75:2d:40:36:a2:f5:b4:
44:24:72:55:86:1a:6e:98:ac:d3:25:64:51:c1:75:20:1b:75:
17:53:86:d9
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgISAZleviWUBQd6C9h+FIjzw6gCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzNWJjOWJiNTQ3ZTI3Nzg4ZDIyMWJjOGJiZDVmYjAyZTAy
NDQ4MGYwHhcNMjUwOTE4MjEzMjIzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhODNmYzcwNzRhM2IwY2U1OTIwNTY1YzhmOGQ5N2E4YTZlN2M2ZWE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQeTPo7aAtGnu4dTVp/d3W9/8g5Z
y5ehgEs5PpZEPiqKBo+m4ZzjoyCff8I3K76sao+i5sx6Xt6t1p4OVYa5QeW8xx/2
ClIW5hrP+5GJMtoZaManoO8IB49MVUAn3XCYBdhUhUk67nV0eTnoeaSzkAFZTl3c
iRbFn8KtV+pjcJK8mkDzwM4wuCS3CtM5WbdI9NvK5h8yxtUO847ZXUkWd04WkKnI
SEBY4qSmxCkmfzRocBcj5a1yEKK2PuANCqwD3+WIrZMkdz5H+oqycxA48vVztk/S
KEyapt3fKZcf+00XcJrayLoQw3EKF+k4PyvC0KhcpDNnMcOuE6cxQLm3UwIDAQAB
o4ICEjCCAg4wHQYDVR0OBBYEFKg/xwdKOwzlkgVlyPjZeopufG6oMB8GA1UdIwQY
MBaAFINbybtUfid4jSIbyLvV+wLgJEgPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzF2SnUxUi1KM2lOSWh2SXU5WDdBdUFrU0E4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC85NjJmYjEtM2RmMC00ZWMyLWI1MGEt
YjM2YTI0ZDM5NDI3LzEvcURfSEIwbzdET1dTQldYSS1ObDZpbTU4YnFnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC85NjJmYjEtM2RmMC00ZWMyLWI1MGEtYjM2YTI0ZDM5NDI3
LzEvZzF2SnUxUi1KM2lOSWh2SXU5WDdBdUFrU0E4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCgGCCsGAQUFBwEHAQH/BBkwFzAVBAIAAjAPAwUAKgtrggMG
ACoLa4YTMA0GCSqGSIb3DQEBCwUAA4IBAQA11eVG4QNK1Lk9UqBLoUhSUcaXLwgh
Zj2ruODxiCqNmAg58nJR7uiw95e9w7O9Qtha/MgwID8FAm+7Wt+DlwEfXkGXofPg
2CtSAWoFjR623vjP/xJHcZM1trORKqaDEa1VjsieShQ1/JyzOMEnMBK98EDv5Cwq
hpBGTzyQYdCV5JfWHmhwVS3n4DrSQFnOxOv4Yq5RT6xzw9znt6By9YTxkS5T2wp3
V1dUKvloxQPafFkpMHITW+LOJfKSqmaKXkTeb4Gdr2VLqTTHPCzkKzcrp4Pr4sE5
nvpHAGdAL9iXVSB25XUtQDai9bREJHJVhhpumKzTJWRRwXUgG3UXU4bZ
-----END CERTIFICATE-----
Generated at Fri Oct 10 09:48:00 2025 by rpki-client