Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/IJcybt1xkn0urO-ZHQShiYhbnJ0.roa
File: IJcybt1xkn0urO-ZHQShiYhbnJ0.roa (raw, json)
Hash identifier: zs0JpNNUKfjCJ538AcsNNQvHUGGrrlbHUgFYr41N4Iw=
Subject key identifier: 20:97:32:6E:DD:71:92:7D:2E:AC:EF:99:1D:04:A1:89:88:5B:9C:9D
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019A5F7FBBAC61DC51B494B17B8906717BD0
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/IJcybt1xkn0urO-ZHQShiYhbnJ0.roa
Signing time: Fri 07 Nov 2025 18:06:37 +0000
ROA not before: Fri 07 Nov 2025 18:06:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 32132
IP address blocks: 178.18.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Nov 2025 20:52:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:5f:7f:bb:ac:61:dc:51:b4:94:b1:7b:89:06:71:7b:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Nov 7 18:06:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2097326edd71927d2eacef991d04a189885b9c9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4e:43:d5:70:bf:ba:76:b7:45:ba:e0:48:f6:
d6:21:7a:78:a8:19:37:95:d8:56:21:9d:4c:62:52:
e6:cc:93:21:e0:78:53:a9:45:42:06:eb:c4:d3:b0:
c7:15:d3:58:64:2f:e4:5d:ac:2f:37:de:15:88:99:
58:df:c9:a5:02:e0:03:1a:54:f6:5b:aa:19:dc:a9:
89:21:b6:5c:da:2a:f4:db:20:26:a3:8f:90:ae:4c:
59:fa:92:65:6a:98:80:a0:20:3b:23:4d:d4:94:5a:
ec:ec:01:a5:a8:59:58:c8:35:e1:18:ee:c0:8b:c3:
4c:1d:53:c6:8e:1a:2c:4d:bd:d7:7c:b8:07:41:bb:
2e:34:8f:33:3a:c2:00:5b:d2:05:90:ad:8d:2e:30:
d8:bf:52:80:f7:1c:84:02:f9:1d:3f:d2:ee:b5:32:
a2:41:3b:5b:d8:0d:7c:1a:dd:13:17:4d:6f:8e:0b:
f4:d8:ac:3e:a1:49:a6:6c:b9:e6:2f:a5:f5:78:22:
54:26:a7:eb:0f:0f:b7:7a:33:ce:0c:d3:bc:c5:31:
ce:0e:82:5e:f9:4a:85:f8:0d:8d:27:41:b2:9d:5b:
fa:cd:38:7c:a7:28:54:58:92:d3:48:ab:ea:f1:89:
6c:c0:f7:07:19:cf:24:7c:b0:77:3c:5b:f7:08:c1:
7e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:97:32:6E:DD:71:92:7D:2E:AC:EF:99:1D:04:A1:89:88:5B:9C:9D
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/IJcybt1xkn0urO-ZHQShiYhbnJ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.18.144.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:ef:00:04:67:23:6d:55:43:74:38:88:f1:79:68:cb:2e:18:
80:18:55:63:bd:f9:4c:a7:30:0c:d9:5c:01:78:bf:6a:0d:1e:
4e:d8:cb:f9:9a:5b:b1:6f:57:e6:4f:82:36:81:23:89:26:ef:
22:cc:b5:15:79:49:b8:e3:d6:a2:f6:f2:09:4e:30:b8:81:e8:
75:b5:5e:e9:e6:f4:e7:e8:8b:b2:d1:02:84:e1:15:39:2a:1a:
c1:9a:d6:11:a4:e1:19:8d:fa:92:dc:ec:20:25:a0:12:f5:95:
a0:c6:62:de:b8:8b:da:02:39:31:d8:d4:94:cf:02:b6:61:e6:
db:41:92:58:82:f9:8b:d0:e7:a1:5c:3d:a1:a3:39:e9:38:60:
5e:ea:87:59:38:88:9e:0b:90:2a:46:4b:38:09:80:55:2c:5b:
3e:71:b2:39:27:ec:c4:44:23:7d:4a:01:c0:cc:cf:8a:9d:df:
d9:92:2c:b3:22:87:48:28:83:6a:aa:b7:9c:ed:60:a7:c7:7f:
7b:6b:b7:5e:ed:83:35:72:88:ee:57:22:63:fa:08:4d:9b:86:
f1:e9:d5:2f:46:95:be:95:72:a3:82:77:09:57:c4:ee:c2:3a:
64:f1:bb:e6:d4:db:ed:62:55:06:a0:a2:90:f1:39:78:10:6a:
8c:30:7c:23
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZpff7usYdxRtJSxe4kGcXvQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjUxMTA3MTgwNjM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMDk3MzI2ZWRkNzE5MjdkMmVhY2VmOTkxZDA0YTE4OTg4NWI5YzlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArE5D1XC/una3RbrgSPbWIXp4qBk3
ldhWIZ1MYlLmzJMh4HhTqUVCBuvE07DHFdNYZC/kXawvN94ViJlY38mlAuADGlT2
W6oZ3KmJIbZc2ir02yAmo4+QrkxZ+pJlapiAoCA7I03UlFrs7AGlqFlYyDXhGO7A
i8NMHVPGjhosTb3XfLgHQbsuNI8zOsIAW9IFkK2NLjDYv1KA9xyEAvkdP9LutTKi
QTtb2A18Gt0TF01vjgv02Kw+oUmmbLnmL6X1eCJUJqfrDw+3ejPODNO8xTHODoJe
+UqF+A2NJ0GynVv6zTh8pyhUWJLTSKvq8YlswPcHGc8kfLB3PFv3CMF+vwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCCXMm7dcZJ9LqzvmR0EoYmIW5ydMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvSUpjeWJ0MXhrbjB1ck8tWkhRU2hpWWhibkowLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAshKQMA0G
CSqGSIb3DQEBCwUAA4IBAQDL7wAEZyNtVUN0OIjxeWjLLhiAGFVjvflMpzAM2VwB
eL9qDR5O2Mv5mluxb1fmT4I2gSOJJu8izLUVeUm449ai9vIJTjC4geh1tV7p5vTn
6Iuy0QKE4RU5KhrBmtYRpOEZjfqS3OwgJaAS9ZWgxmLeuIvaAjkx2NSUzwK2Yebb
QZJYgvmL0OehXD2hoznpOGBe6odZOIieC5AqRks4CYBVLFs+cbI5J+zERCN9SgHA
zM+Knd/ZkiyzIodIKINqqrec7WCnx397a7de7YM1cojuVyJj+ghNm4bx6dUvRpW+
lXKjgncJV8Tuwjpk8bvm1NvtYlUGoKKQ8Tl4EGqMMHwj
-----END CERTIFICATE-----
Generated at Fri Nov 14 06:40:40 2025 by rpki-client