Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/CvTICXgG71zKpLjIaO2yda3HXSI.roa
File: CvTICXgG71zKpLjIaO2yda3HXSI.roa (raw, json)
Hash identifier: pNb5yeN6zlswabEWsFMqdJrq/apipaEKdygeRTrP38s=
Subject key identifier: 0A:F4:C8:09:78:06:EF:5C:CA:A4:B8:C8:68:ED:B2:75:AD:C7:5D:22
Certificate issuer: /CN=c65a1da1cb1c920ae2f9b748270fded8737a9184
Certificate serial: 019A5E0EC50DCD3EE080E5D59C1DBCB5AFDF
Authority key identifier: C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/CvTICXgG71zKpLjIaO2yda3HXSI.roa
Signing time: Fri 07 Nov 2025 11:23:37 +0000
ROA not before: Fri 07 Nov 2025 11:23:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12722
IP address blocks: 85.235.81.0/24 maxlen: 24
192.109.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:5e:0e:c5:0d:cd:3e:e0:80:e5:d5:9c:1d:bc:b5:af:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c65a1da1cb1c920ae2f9b748270fded8737a9184
Validity
Not Before: Nov 7 11:23:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0af4c8097806ef5ccaa4b8c868edb275adc75d22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5b:15:23:d7:2f:83:5b:01:15:7e:f3:39:4d:
e0:f7:63:a5:a1:22:41:d3:00:ee:39:a3:82:53:6e:
84:e3:11:3d:54:ba:65:7d:16:f5:a1:35:dc:3a:3c:
84:36:42:f8:d9:c8:05:38:74:e2:1d:dd:c1:92:6d:
6a:7b:0a:35:e0:33:50:e5:d5:5f:f9:19:3b:b0:ef:
6c:fa:55:68:9e:64:22:ce:a7:f0:89:99:39:95:c8:
25:25:f8:8a:28:d8:18:29:36:5a:3f:9f:d5:c0:59:
2a:8b:24:78:e5:68:b3:be:0e:2b:c9:19:a1:71:78:
48:8d:ca:73:ce:e1:93:b8:60:5e:a9:e9:61:90:03:
2e:dd:4c:83:8b:ec:a1:fe:af:e7:c8:4a:99:12:20:
a1:1a:b5:20:79:e1:ce:85:a7:98:b9:42:4e:45:dd:
87:01:4a:79:6b:60:3d:96:61:ee:04:62:d0:61:41:
7a:0a:34:b7:8a:fd:a1:b0:66:a8:c0:db:76:5f:e7:
30:c9:3f:a0:82:bb:53:11:85:8c:89:f2:1f:78:ce:
6b:80:a7:bd:3e:13:2c:e8:75:4a:e7:a7:0c:06:ce:
f6:3c:94:82:e2:2c:b0:91:9f:25:8b:ec:91:cf:57:
a1:d5:49:cf:7a:13:57:8d:1e:15:8d:a4:44:e8:ab:
20:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:F4:C8:09:78:06:EF:5C:CA:A4:B8:C8:68:ED:B2:75:AD:C7:5D:22
X509v3 Authority Key Identifier:
keyid:C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/CvTICXgG71zKpLjIaO2yda3HXSI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.235.81.0/24
192.109.97.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:e3:1f:89:af:31:7c:c9:2e:64:66:58:c3:c2:69:1c:8d:09:
6d:30:b1:c2:9a:eb:df:36:92:27:e0:94:16:9a:10:22:a9:37:
25:d0:ab:ed:48:56:63:bd:f5:e6:ef:89:65:55:c9:50:e3:59:
aa:f8:19:c4:06:99:81:44:b9:91:2c:35:bb:6c:26:8e:2a:c1:
c8:38:f1:a2:00:07:b9:b3:97:55:b8:11:30:cc:42:0f:54:6b:
e8:3c:18:35:c2:3d:cc:cd:16:52:f8:e1:d7:d6:ab:00:e2:c4:
76:c1:d8:52:8e:ed:36:5e:af:ff:24:fe:1c:3d:90:56:dd:68:
3a:da:e8:3d:74:c2:9f:fd:96:5a:2f:fc:75:d5:14:f3:45:bb:
a3:bc:cb:1e:46:1b:5a:fc:41:19:be:8f:fe:96:db:f0:83:ff:
50:48:85:6a:85:80:f0:e1:66:e9:f8:ca:9f:1a:f6:5e:41:03:
17:62:dd:86:62:42:e7:5f:98:2a:65:4e:e1:fb:c7:51:03:11:
12:2d:64:03:3d:f7:15:23:d6:b8:52:35:dc:bc:27:92:f2:e8:
3c:e6:5c:1b:66:30:0d:22:e6:4a:97:18:34:4c:66:21:22:99:
dc:4c:c1:8e:15:77:d0:1d:db:b6:dd:55:1e:12:80:13:e1:7f:
1d:b4:7b:0a
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZpeDsUNzT7ggOXVnB28ta/fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NWExZGExY2IxYzkyMGFlMmY5Yjc0ODI3MGZkZWQ4NzM3
YTkxODQwHhcNMjUxMTA3MTEyMzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYWY0YzgwOTc4MDZlZjVjY2FhNGI4Yzg2OGVkYjI3NWFkYzc1ZDIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlsVI9cvg1sBFX7zOU3g92OloSJB
0wDuOaOCU26E4xE9VLplfRb1oTXcOjyENkL42cgFOHTiHd3Bkm1qewo14DNQ5dVf
+Rk7sO9s+lVonmQizqfwiZk5lcglJfiKKNgYKTZaP5/VwFkqiyR45Wizvg4ryRmh
cXhIjcpzzuGTuGBeqelhkAMu3UyDi+yh/q/nyEqZEiChGrUgeeHOhaeYuUJORd2H
AUp5a2A9lmHuBGLQYUF6CjS3iv2hsGaowNt2X+cwyT+ggrtTEYWMifIfeM5rgKe9
PhMs6HVK56cMBs72PJSC4iywkZ8li+yRz1eh1UnPehNXjR4VjaRE6KsgEwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFAr0yAl4Bu9cyqS4yGjtsnWtx10iMB8GA1UdIwQY
MBaAFMZaHaHLHJIK4vm3SCcP3thzepGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGxvZG9jc2NrZ3JpLWJkSUp3X2UySE42a1lRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS80ZjU0YjQtMDA5Zi00NmNlLTlhYzAt
MzZiYWM4ZDkxZTJlLzEvQ3ZUSUNYZ0c3MXpLcExqSWFPMnlkYTNIWFNJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS80ZjU0YjQtMDA5Zi00NmNlLTlhYzAtMzZiYWM4ZDkxZTJl
LzEveGxvZG9jc2NrZ3JpLWJkSUp3X2UySE42a1lRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVetRAwQA
wG1hMA0GCSqGSIb3DQEBCwUAA4IBAQBb4x+JrzF8yS5kZljDwmkcjQltMLHCmuvf
NpIn4JQWmhAiqTcl0KvtSFZjvfXm74llVclQ41mq+BnEBpmBRLmRLDW7bCaOKsHI
OPGiAAe5s5dVuBEwzEIPVGvoPBg1wj3MzRZS+OHX1qsA4sR2wdhSju02Xq//JP4c
PZBW3Wg62ug9dMKf/ZZaL/x11RTzRbujvMseRhta/EEZvo/+ltvwg/9QSIVqhYDw
4Wbp+MqfGvZeQQMXYt2GYkLnX5gqZU7h+8dRAxESLWQDPfcVI9a4UjXcvCeS8ug8
5lwbZjANIuZKlxg0TGYhIpncTMGOFXfQHdu23VUeEoAT4X8dtHsK
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:56:47 2025 by rpki-client