Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/vI0U7fkAkt3cTATzOlCKhJuroAc.roa
File: vI0U7fkAkt3cTATzOlCKhJuroAc.roa (raw, json)
Hash identifier: 5B6VWqHRTBuf463R5V8OHEKJoYOEzFD7hCy/PBP0gEw=
Subject key identifier: BC:8D:14:ED:F9:00:92:DD:DC:4C:04:F3:3A:50:8A:84:9B:AB:A0:07
Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Certificate serial: 019994DF40ECCC5C602815900141126FA638
Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/vI0U7fkAkt3cTATzOlCKhJuroAc.roa
Signing time: Mon 29 Sep 2025 09:48:03 +0000
ROA not before: Mon 29 Sep 2025 09:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 154049
IP address blocks: 84.55.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 21:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:94:df:40:ec:cc:5c:60:28:15:90:01:41:12:6f:a6:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Validity
Not Before: Sep 29 09:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bc8d14edf90092dddc4c04f33a508a849baba007
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:08:6f:11:b5:e6:d1:9f:fc:2a:30:4a:ac:3d:
f6:9a:5f:e2:f8:6f:b6:4f:8b:93:ea:d7:78:07:32:
75:a0:b8:1a:de:c7:0c:50:d5:f7:e0:07:b6:45:ee:
f2:9f:3d:a4:b5:e4:75:6e:03:f7:39:f4:f5:d3:7e:
a1:00:10:e6:bb:cb:8b:97:97:d8:ef:a9:f2:9c:d5:
fb:03:40:c9:6d:9c:af:08:8a:7b:ff:bd:2d:27:52:
6c:2f:47:bc:b4:cd:39:6d:45:ca:4a:70:a3:7a:22:
89:62:75:d8:3d:f5:2c:e6:cd:eb:aa:60:77:60:9f:
76:11:e7:1f:b9:93:95:95:e4:e8:b0:d1:ec:b5:f8:
83:c0:73:9e:2c:99:52:a4:9f:a0:76:c0:cf:20:de:
db:71:8e:0d:1e:32:c2:a3:c5:cf:e4:4d:72:0d:be:
3a:bd:1c:fd:8b:5a:87:4c:37:65:0a:b0:70:82:d4:
0b:86:f3:d1:10:ee:f0:18:a8:5a:be:5b:fa:16:73:
7e:a1:9f:03:49:03:27:63:ea:d2:ad:04:71:c6:8f:
3e:47:84:cc:77:d9:3e:7f:a4:bf:4e:9f:d2:49:f9:
ee:2d:e2:48:11:99:b3:50:ac:8f:d4:8a:91:11:fd:
b3:8d:ab:9c:89:e4:8e:d9:e3:fc:19:ad:4b:51:4f:
dd:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:8D:14:ED:F9:00:92:DD:DC:4C:04:F3:3A:50:8A:84:9B:AB:A0:07
X509v3 Authority Key Identifier:
keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/vI0U7fkAkt3cTATzOlCKhJuroAc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.55.14.0/24
Signature Algorithm: sha256WithRSAEncryption
67:cf:ae:24:5e:08:66:62:31:2c:f4:c6:98:d7:01:fe:0f:41:
e1:44:37:d1:ab:fc:eb:03:e3:10:27:d3:f0:c6:c2:27:14:16:
a6:01:eb:f6:9f:0d:27:d8:0f:f9:a1:eb:87:4d:22:29:80:d9:
35:6c:cf:a2:69:38:23:9f:46:d2:4a:6e:bd:ca:2e:11:86:49:
93:4f:1a:0a:9a:c6:1f:18:2e:75:d7:48:c9:38:25:f4:e9:68:
c6:18:7b:72:58:84:b6:43:c0:19:89:63:51:f3:55:b6:05:cf:
32:2f:5a:64:14:09:93:e5:8f:0c:ac:58:0c:91:73:91:6a:dd:
3d:35:e6:f9:67:b3:98:6c:80:d0:a1:92:1d:95:fc:83:9f:5a:
a0:ff:56:f6:c6:42:cd:a8:1b:60:66:d8:bf:e8:62:e0:ce:61:
f0:86:da:58:5a:5b:4f:5b:c6:e5:76:80:65:23:ac:2a:54:85:
75:c7:b8:73:8e:02:9e:e0:84:e0:84:0c:9f:e4:9d:31:3c:6f:
ca:a2:f4:ae:05:eb:dd:e1:c4:bc:e6:ff:a7:25:06:de:33:37:
66:25:58:db:03:a5:05:1e:4c:a2:7f:5c:32:82:dc:b2:5b:ed:
2d:b8:7b:6f:5b:9e:72:70:11:03:80:d8:e8:f7:73:be:cc:33:
14:4b:c3:20
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZmU30DszFxgKBWQAUESb6Y4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjYxNzU4Y2UzMzA2MjI0NzBhMzlhZThkNmVmNGEyMDQ0
ZjgzYzQwHhcNMjUwOTI5MDk0ODAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYzhkMTRlZGY5MDA5MmRkZGM0YzA0ZjMzYTUwOGE4NDliYWJhMDA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+QhvEbXm0Z/8KjBKrD32ml/i+G+2
T4uT6td4BzJ1oLga3scMUNX34Ae2Re7ynz2kteR1bgP3OfT1036hABDmu8uLl5fY
76nynNX7A0DJbZyvCIp7/70tJ1JsL0e8tM05bUXKSnCjeiKJYnXYPfUs5s3rqmB3
YJ92EecfuZOVleTosNHstfiDwHOeLJlSpJ+gdsDPIN7bcY4NHjLCo8XP5E1yDb46
vRz9i1qHTDdlCrBwgtQLhvPREO7wGKhavlv6FnN+oZ8DSQMnY+rSrQRxxo8+R4TM
d9k+f6S/Tp/SSfnuLeJIEZmzUKyP1IqREf2zjaucieSO2eP8Ga1LUU/d7wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLyNFO35AJLd3EwE8zpQioSbq6AHMB8GA1UdIwQY
MBaAFGBmF1jOMwYiRwo5ro1u9KIET4PEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9lZGQxMjgtNmQ2ZS00OWUzLWI3N2Ut
MWY4NzQ2OTQ1NDgzLzEvdkkwVTdma0FrdDNjVEFUek9sQ0toSnVyb0FjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9lZGQxMjgtNmQ2ZS00OWUzLWI3N2UtMWY4NzQ2OTQ1NDgz
LzEvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVDcOMA0G
CSqGSIb3DQEBCwUAA4IBAQBnz64kXghmYjEs9MaY1wH+D0HhRDfRq/zrA+MQJ9Pw
xsInFBamAev2nw0n2A/5oeuHTSIpgNk1bM+iaTgjn0bSSm69yi4RhkmTTxoKmsYf
GC5110jJOCX06WjGGHtyWIS2Q8AZiWNR81W2Bc8yL1pkFAmT5Y8MrFgMkXORat09
Neb5Z7OYbIDQoZIdlfyDn1qg/1b2xkLNqBtgZti/6GLgzmHwhtpYWltPW8bldoBl
I6wqVIV1x7hzjgKe4ITghAyf5J0xPG/KovSuBevd4cS85v+nJQbeMzdmJVjbA6UF
Hkyif1wygtyyW+0tuHtvW55ycBEDgNjo93O+zDMUS8Mg
-----END CERTIFICATE-----
Generated at Thu Oct 9 06:22:35 2025 by rpki-client