Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/8db67a-c4fc-4c2c-9978-a7be5fa0ff65/1/X6ONNbrSeOBD3kD76GPFoU9VA9Y.roa
File: X6ONNbrSeOBD3kD76GPFoU9VA9Y.roa (raw, json)
Hash identifier: QD4WMSUllUbTUrFaxZU2Uc2vKKDXY/ZvuaWUTTLHo10=
Subject key identifier: 5F:A3:8D:35:BA:D2:78:E0:43:DE:40:FB:E8:63:C5:A1:4F:55:03:D6
Certificate issuer: /CN=ed624c590027a5a8c9eeb369726e4a630cdf414c
Certificate serial: 01990A43C0AA4AC1474CCB265E3261FA7977
Authority key identifier: ED:62:4C:59:00:27:A5:A8:C9:EE:B3:69:72:6E:4A:63:0C:DF:41:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7WJMWQAnpajJ7rNpcm5KYwzfQUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/8db67a-c4fc-4c2c-9978-a7be5fa0ff65/1/X6ONNbrSeOBD3kD76GPFoU9VA9Y.roa
Signing time: Tue 02 Sep 2025 11:50:36 +0000
ROA not before: Tue 02 Sep 2025 11:50:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 45.89.128.0/22 maxlen: 22
2a0b:a200::/48 maxlen: 48
2a0b:a200:1::/48 maxlen: 48
2a0b:a200:2::/48 maxlen: 48
2a0b:a200:3::/48 maxlen: 48
2a0b:a200:4::/48 maxlen: 48
2a0b:a200:5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/8db67a-c4fc-4c2c-9978-a7be5fa0ff65/1/7WJMWQAnpajJ7rNpcm5KYwzfQUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/8db67a-c4fc-4c2c-9978-a7be5fa0ff65/1/7WJMWQAnpajJ7rNpcm5KYwzfQUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7WJMWQAnpajJ7rNpcm5KYwzfQUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 12:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:0a:43:c0:aa:4a:c1:47:4c:cb:26:5e:32:61:fa:79:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed624c590027a5a8c9eeb369726e4a630cdf414c
Validity
Not Before: Sep 2 11:50:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5fa38d35bad278e043de40fbe863c5a14f5503d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0c:76:8c:76:17:9f:f5:78:72:be:cd:4c:2d:
93:7f:ee:2c:df:59:00:13:70:f8:00:6a:f5:e1:3f:
a1:30:ce:d1:48:6f:16:54:67:99:c9:6c:a4:cc:d3:
23:33:9b:34:07:c5:15:70:01:06:61:c1:fb:5b:0b:
9c:72:9c:28:bf:cc:f3:aa:59:81:89:0c:b8:dc:fb:
ae:1d:4a:dd:77:9e:de:be:40:f1:d1:b2:b7:2c:47:
29:93:ad:df:47:d7:89:ae:da:59:a4:5f:fe:f3:c9:
a3:6d:2f:59:67:61:96:38:3f:52:6e:b5:8e:5d:17:
53:0f:ab:05:13:92:d0:de:32:7c:4d:46:31:74:9a:
e2:48:b0:72:fe:8b:99:b4:81:c7:57:86:76:5c:f4:
c6:a1:a5:e4:3d:2a:7d:e5:3f:56:88:e3:d4:a6:27:
d2:ab:d2:f8:84:ab:b0:b8:38:bc:f7:99:a0:95:03:
fd:21:d9:d3:06:da:8e:36:68:6c:0a:56:61:1f:0c:
a2:04:0a:22:c1:78:16:95:2c:57:d4:93:f4:98:4a:
14:d8:7e:75:11:19:ae:7c:52:0f:20:67:4e:7e:97:
b4:cf:ce:e7:11:bf:60:ab:be:49:66:01:9f:84:b7:
5b:95:61:99:3e:2f:92:dd:74:1b:75:33:5b:d5:ec:
4a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:A3:8D:35:BA:D2:78:E0:43:DE:40:FB:E8:63:C5:A1:4F:55:03:D6
X509v3 Authority Key Identifier:
keyid:ED:62:4C:59:00:27:A5:A8:C9:EE:B3:69:72:6E:4A:63:0C:DF:41:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7WJMWQAnpajJ7rNpcm5KYwzfQUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/8db67a-c4fc-4c2c-9978-a7be5fa0ff65/1/X6ONNbrSeOBD3kD76GPFoU9VA9Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/8db67a-c4fc-4c2c-9978-a7be5fa0ff65/1/7WJMWQAnpajJ7rNpcm5KYwzfQUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.128.0/22
IPv6:
2a0b:a200::-2a0b:a200:5:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
d4:44:25:40:13:15:33:ea:c4:d9:27:02:f0:42:98:5e:90:4d:
ec:ba:a0:5f:38:5d:88:fe:d5:56:9a:70:78:c5:95:1e:c9:06:
9b:a9:0f:8c:f4:7d:4c:bb:5f:b9:a2:fd:f6:e6:7d:d7:3c:91:
ee:e8:41:74:0b:72:1e:df:e5:6d:f0:07:27:fc:8b:d9:e8:ca:
db:4c:1d:66:8e:75:68:c0:2b:42:b6:05:af:dc:98:cf:41:2c:
2f:0b:a3:d1:03:c5:73:91:37:5a:e4:45:6e:0d:7f:0f:0c:06:
74:cb:b9:31:5d:1c:9c:d3:8c:86:c6:9c:d5:08:a2:dc:8c:6e:
4f:02:4e:5e:c4:b7:d2:f4:cb:ee:11:4e:3a:c9:77:36:5b:1d:
6e:20:9d:fb:7e:08:8f:d6:fd:b5:66:5b:bf:4a:6f:c2:c3:d2:
51:f0:a0:17:bb:20:5e:b4:ce:9c:d9:5e:f9:d6:14:c0:a3:e5:
aa:60:ac:d0:6a:e4:9d:8f:3e:f7:5b:6a:ce:b5:33:ef:99:12:
e7:38:e7:fa:05:77:b0:6b:af:6c:c4:3b:24:40:65:b1:d2:6d:
1a:ad:b8:e5:1f:35:0f:f5:0d:38:88:32:f1:05:72:b1:e8:c5:
18:45:d2:4a:be:55:ea:70:a1:ad:85:8c:47:e2:af:0f:6e:fa:
79:2b:ca:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkKQ8CqSsFHTMsmXjJh+nl3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkNjI0YzU5MDAyN2E1YThjOWVlYjM2OTcyNmU0YTYzMGNk
ZjQxNGMwHhcNMjUwOTAyMTE1MDM2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZmEzOGQzNWJhZDI3OGUwNDNkZTQwZmJlODYzYzVhMTRmNTUwM2Q2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAx2jHYXn/V4cr7NTC2Tf+4s31kA
E3D4AGr14T+hMM7RSG8WVGeZyWykzNMjM5s0B8UVcAEGYcH7Wwuccpwov8zzqlmB
iQy43PuuHUrdd57evkDx0bK3LEcpk63fR9eJrtpZpF/+88mjbS9ZZ2GWOD9SbrWO
XRdTD6sFE5LQ3jJ8TUYxdJriSLBy/ouZtIHHV4Z2XPTGoaXkPSp95T9WiOPUpifS
q9L4hKuwuDi895mglQP9IdnTBtqONmhsClZhHwyiBAoiwXgWlSxX1JP0mEoU2H51
ERmufFIPIGdOfpe0z87nEb9gq75JZgGfhLdblWGZPi+S3XQbdTNb1exKawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF+jjTW60njgQ95A++hjxaFPVQPWMB8GA1UdIwQY
MBaAFO1iTFkAJ6Woye6zaXJuSmMM30FMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1dKTVdRQW5wYWpKN3JOcGNtNUtZd3pmUVV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy84ZGI2N2EtYzRmYy00YzJjLTk5Nzgt
YTdiZTVmYTBmZjY1LzEvWDZPTk5iclNlT0JEM2tENzZHUEZvVTlWQTlZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy84ZGI2N2EtYzRmYy00YzJjLTk5NzgtYTdiZTVmYTBmZjY1
LzEvN1dKTVdRQW5wYWpKN3JOcGNtNUtZd3pmUVV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDgGCCsGAQUFBwEHAQH/BCkwJzAMBAIAATAGAwQCLVmAMBcE
AgACMBEwDwMEASoLogMHASoLogAABDANBgkqhkiG9w0BAQsFAAOCAQEA1EQlQBMV
M+rE2ScC8EKYXpBN7LqgXzhdiP7VVppweMWVHskGm6kPjPR9TLtfuaL99uZ91zyR
7uhBdAtyHt/lbfAHJ/yL2ejK20wdZo51aMArQrYFr9yYz0EsLwuj0QPFc5E3WuRF
bg1/DwwGdMu5MV0cnNOMhsac1Qii3IxuTwJOXsS30vTL7hFOOsl3NlsdbiCd+34I
j9b9tWZbv0pvwsPSUfCgF7sgXrTOnNle+dYUwKPlqmCs0GrknY8+91tqzrUz75kS
5zjn+gV3sGuvbMQ7JEBlsdJtGq245R81D/UNOIgy8QVysejFGEXSSr5V6nChrYWM
R+KvD276eSvK0A==
-----END CERTIFICATE-----
Generated at Wed Oct 8 21:12:34 2025 by rpki-client