Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/6PUuNM6kD7H9KDBzDlL_59AGPNY.roa
File: 6PUuNM6kD7H9KDBzDlL_59AGPNY.roa (raw, json)
Hash identifier: njnCyxOOncTtTG+MixsjROLgTFP3LTieMN/tci4brok=
Subject key identifier: E8:F5:2E:34:CE:A4:0F:B1:FD:28:30:73:0E:52:FF:E7:D0:06:3C:D6
Certificate issuer: /CN=a8604356c7501ae2104b2cced3cedc5dbdc1163b
Certificate serial: 01997B8EB648127DE10B9C8D374D0D841E4A
Authority key identifier: A8:60:43:56:C7:50:1A:E2:10:4B:2C:CE:D3:CE:DC:5D:BD:C1:16:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qGBDVsdQGuIQSyzO087cXb3BFjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/6PUuNM6kD7H9KDBzDlL_59AGPNY.roa
Signing time: Wed 24 Sep 2025 11:49:34 +0000
ROA not before: Wed 24 Sep 2025 11:49:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59651
IP address blocks: 185.68.152.0/22 maxlen: 22
185.94.32.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/qGBDVsdQGuIQSyzO087cXb3BFjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Oct 2025 08:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:7b:8e:b6:48:12:7d:e1:0b:9c:8d:37:4d:0d:84:1e:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8604356c7501ae2104b2cced3cedc5dbdc1163b
Validity
Not Before: Sep 24 11:49:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e8f52e34cea40fb1fd2830730e52ffe7d0063cd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9c:b8:0a:3f:5e:71:e4:3e:b7:97:16:7c:60:
c4:f1:40:7c:9f:ac:12:5c:08:1c:9f:98:a6:5d:2b:
75:46:ec:12:42:e3:56:43:e8:bf:ee:80:06:6f:fc:
7f:1e:db:8a:65:ca:d8:aa:2c:d9:f5:8b:2c:df:b9:
1d:2e:1f:6a:b1:af:b6:fc:9f:08:be:22:ac:b1:f8:
51:69:7f:e9:97:c8:30:12:4d:ca:d2:b1:cc:e0:52:
81:fc:e7:f1:47:78:26:6e:c1:aa:e5:91:95:f8:70:
9c:e4:0e:e7:70:7b:5b:cd:b4:2b:77:91:67:31:5c:
f2:ea:ee:de:ac:4f:27:98:82:cd:bc:71:50:ce:9b:
43:8a:cb:de:9a:1f:e7:51:67:95:5f:68:c6:a4:ae:
a3:cb:fa:5b:2f:c2:6d:fa:17:f5:ef:8a:f4:3c:41:
5e:03:d8:5b:cc:b6:d4:dd:c0:6d:1a:77:92:90:a1:
64:75:f2:11:e8:53:e2:78:a9:df:6c:31:b2:f6:fa:
17:d0:dd:59:ee:a2:c3:86:cf:01:a1:c6:6a:03:b8:
45:81:6b:f8:04:73:9f:83:ac:dc:ce:8c:6c:73:79:
a6:26:e0:87:89:7c:d7:94:4d:97:81:b5:c9:5c:95:
8c:70:79:59:1d:e2:a3:74:e2:16:57:f9:36:b9:41:
2a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:F5:2E:34:CE:A4:0F:B1:FD:28:30:73:0E:52:FF:E7:D0:06:3C:D6
X509v3 Authority Key Identifier:
keyid:A8:60:43:56:C7:50:1A:E2:10:4B:2C:CE:D3:CE:DC:5D:BD:C1:16:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGBDVsdQGuIQSyzO087cXb3BFjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/6PUuNM6kD7H9KDBzDlL_59AGPNY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.68.152.0/22
185.94.32.0/22
Signature Algorithm: sha256WithRSAEncryption
33:12:fd:9c:b1:08:cf:fc:cb:5b:ad:86:f2:b1:72:c5:7f:f8:
a8:05:91:fa:90:38:d7:0a:f6:94:56:c5:1c:c1:4f:4f:de:54:
d8:7d:3a:2f:ec:f9:22:14:3e:95:65:c6:18:87:40:56:2b:68:
4a:4a:dc:11:71:8f:a0:fc:df:78:91:81:92:75:87:b7:66:09:
33:8e:65:d3:c7:c7:f5:f8:19:30:b3:38:9a:88:8a:a4:3b:33:
10:99:c2:6f:e3:06:9f:fa:06:1c:0a:ea:dd:12:76:93:09:69:
56:ab:02:8f:65:f2:05:ee:25:16:00:14:de:a2:33:01:df:8d:
26:54:5e:ed:cf:ea:9b:b5:66:d8:7e:db:c0:05:18:aa:ee:ff:
83:71:7e:e2:58:d8:d8:aa:2c:d1:09:b4:2c:ff:c9:2a:17:a5:
47:4f:46:72:99:51:00:29:9e:4b:31:35:ab:99:b6:ac:10:f0:
41:c5:00:99:2b:b6:2b:5d:48:00:0a:97:f0:54:69:c3:1b:49:
7c:c0:2a:ba:06:11:d0:bc:ad:a3:5a:be:7c:93:ae:58:ce:c3:
54:47:f9:f2:8b:62:af:27:0c:97:1c:8a:a3:d3:8c:03:59:7e:
92:24:7a:b2:1b:9b:da:c6:ce:8b:41:a8:3f:9b:7e:2a:90:cc:
13:58:96:24
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZl7jrZIEn3hC5yNN00NhB5KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4NjA0MzU2Yzc1MDFhZTIxMDRiMmNjZWQzY2VkYzVkYmRj
MTE2M2IwHhcNMjUwOTI0MTE0OTM0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOGY1MmUzNGNlYTQwZmIxZmQyODMwNzMwZTUyZmZlN2QwMDYzY2Q2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpy4Cj9eceQ+t5cWfGDE8UB8n6wS
XAgcn5imXSt1RuwSQuNWQ+i/7oAGb/x/HtuKZcrYqizZ9Yss37kdLh9qsa+2/J8I
viKssfhRaX/pl8gwEk3K0rHM4FKB/OfxR3gmbsGq5ZGV+HCc5A7ncHtbzbQrd5Fn
MVzy6u7erE8nmILNvHFQzptDisvemh/nUWeVX2jGpK6jy/pbL8Jt+hf174r0PEFe
A9hbzLbU3cBtGneSkKFkdfIR6FPieKnfbDGy9voX0N1Z7qLDhs8BocZqA7hFgWv4
BHOfg6zczoxsc3mmJuCHiXzXlE2XgbXJXJWMcHlZHeKjdOIWV/k2uUEqNQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFOj1LjTOpA+x/Sgwcw5S/+fQBjzWMB8GA1UdIwQY
MBaAFKhgQ1bHUBriEEssztPO3F29wRY7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUdCRFZzZFFHdUlRU3l6TzA4N2NYYjNCRmpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC80NTg1MDEtYWNhYi00MmVkLThhNmEt
N2JlYmJiNzBjMDUwLzEvNlBVdU5NNmtEN0g5S0RCekRsTF81OUFHUE5ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC80NTg1MDEtYWNhYi00MmVkLThhNmEtN2JlYmJiNzBjMDUw
LzEvcUdCRFZzZFFHdUlRU3l6TzA4N2NYYjNCRmpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuUSYAwQC
uV4gMA0GCSqGSIb3DQEBCwUAA4IBAQAzEv2csQjP/MtbrYbysXLFf/ioBZH6kDjX
CvaUVsUcwU9P3lTYfTov7PkiFD6VZcYYh0BWK2hKStwRcY+g/N94kYGSdYe3Zgkz
jmXTx8f1+BkwsziaiIqkOzMQmcJv4waf+gYcCurdEnaTCWlWqwKPZfIF7iUWABTe
ojMB340mVF7tz+qbtWbYftvABRiq7v+DcX7iWNjYqizRCbQs/8kqF6VHT0ZymVEA
KZ5LMTWrmbasEPBBxQCZK7YrXUgACpfwVGnDG0l8wCq6BhHQvK2jWr58k65YzsNU
R/nyi2KvJwyXHIqj04wDWX6SJHqyG5vaxs6LQag/m34qkMwTWJYk
-----END CERTIFICATE-----
Generated at Sat Oct 11 17:36:26 2025 by rpki-client