Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/lW-y3MSyoxZXkUGTLFbjOQxJ93E.roa
File: lW-y3MSyoxZXkUGTLFbjOQxJ93E.roa (raw, json)
Hash identifier: Xoq9nRjqLde3pIA7P/kVvMZt2lrej2cE23kpg6ALV18=
Subject key identifier: 95:6F:B2:DC:C4:B2:A3:16:57:91:41:93:2C:56:E3:39:0C:49:F7:71
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019A0B293DCE45F5E3A0B85D9C130CB500CF
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/lW-y3MSyoxZXkUGTLFbjOQxJ93E.roa
Signing time: Wed 22 Oct 2025 09:04:03 +0000
ROA not before: Wed 22 Oct 2025 09:04:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208111
IP address blocks: 89.106.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 05:08:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0b:29:3d:ce:45:f5:e3:a0:b8:5d:9c:13:0c:b5:00:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 22 09:04:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=956fb2dcc4b2a316579141932c56e3390c49f771
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c9:5c:7a:b9:89:b9:49:c4:30:54:ac:42:1f:
8a:cb:4c:48:02:18:01:c3:e7:08:08:77:48:dd:36:
bc:49:0b:6b:09:15:e8:76:5b:6b:6a:eb:30:a8:73:
31:54:fb:60:8d:31:b4:d5:36:8d:14:d3:02:17:16:
0f:c6:b8:c0:08:7b:c9:fc:a6:3a:2e:ed:ae:47:41:
da:6e:31:59:fd:a2:b4:d2:d5:64:2b:2d:47:70:ab:
ba:de:92:6e:b0:98:db:36:af:4c:3f:0d:d9:01:ae:
84:6b:76:68:82:d9:08:5e:19:e1:4f:84:c8:ab:d6:
18:e4:ee:a8:7b:43:b2:73:01:2e:62:5e:9b:9a:17:
9b:96:52:fa:35:e0:ae:3f:04:77:eb:18:fd:f5:c5:
7c:2a:d9:fa:c9:48:fc:30:66:69:fb:bd:67:a3:fe:
71:8a:3a:53:b5:6c:61:b9:8e:14:e0:d8:4c:ea:01:
5b:7c:70:f3:ca:e3:a3:ac:f0:ab:4d:c2:72:b7:20:
11:5a:ba:70:15:98:b2:28:da:d4:df:ec:bd:90:73:
b6:be:c9:66:1a:39:1a:9d:00:d1:78:78:c0:0d:c2:
48:92:52:c0:6a:47:19:01:df:bc:48:35:8d:ab:6a:
01:ce:2a:d4:96:29:e5:59:9f:1d:6d:91:bf:7a:2d:
2d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:6F:B2:DC:C4:B2:A3:16:57:91:41:93:2C:56:E3:39:0C:49:F7:71
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/lW-y3MSyoxZXkUGTLFbjOQxJ93E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.106.64.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:d0:bc:54:28:ad:88:88:d4:e3:7d:84:7b:f7:b5:5d:20:41:
8c:28:b5:d6:7a:34:42:15:97:ec:c3:e6:eb:8d:72:53:0a:19:
42:61:8a:43:60:79:5e:d9:8e:50:50:cc:29:d1:73:69:f4:0d:
f7:e7:8a:da:ac:f0:ad:3a:4f:95:08:63:e4:59:e2:f5:45:7f:
8e:bf:4f:c7:89:bb:aa:c9:51:07:39:06:f2:2b:64:5a:75:4a:
82:4d:fb:8a:e2:fe:b4:e2:64:75:12:04:97:30:15:75:af:98:
11:c2:d4:6a:05:9c:5e:c2:3e:7a:23:5a:d5:2b:31:48:dc:40:
41:8e:e8:aa:26:86:f7:d8:00:68:91:35:b2:1e:08:8f:6c:3e:
13:31:8f:8f:5b:b8:6b:84:da:3b:2b:63:87:c7:cd:e1:52:a9:
3a:43:47:2f:b4:ed:16:70:ab:93:2a:23:50:8d:98:02:9d:33:
d2:ba:23:26:f4:ea:7c:ba:46:b3:c8:b6:21:a2:73:1e:1e:f7:
d7:6c:04:38:c1:c8:46:c7:b3:85:94:6d:83:55:44:5d:91:50:
b4:b2:a7:6e:e9:14:7e:1d:1d:18:32:2e:8a:4e:82:e9:19:ad:
79:1f:8e:6d:41:6a:98:57:fc:87:ac:1a:c9:ac:52:98:9e:9e:
00:60:49:ac
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZoLKT3ORfXjoLhdnBMMtQDPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjUxMDIyMDkwNDAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NTZmYjJkY2M0YjJhMzE2NTc5MTQxOTMyYzU2ZTMzOTBjNDlmNzcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtclcermJuUnEMFSsQh+Ky0xIAhgB
w+cICHdI3Ta8SQtrCRXodltrauswqHMxVPtgjTG01TaNFNMCFxYPxrjACHvJ/KY6
Lu2uR0HabjFZ/aK00tVkKy1HcKu63pJusJjbNq9MPw3ZAa6Ea3ZogtkIXhnhT4TI
q9YY5O6oe0OycwEuYl6bmhebllL6NeCuPwR36xj99cV8Ktn6yUj8MGZp+71no/5x
ijpTtWxhuY4U4NhM6gFbfHDzyuOjrPCrTcJytyARWrpwFZiyKNrU3+y9kHO2vslm
GjkanQDReHjADcJIklLAakcZAd+8SDWNq2oBzirUlinlWZ8dbZG/ei0t3wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJVvstzEsqMWV5FBkyxW4zkMSfdxMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvbFcteTNNU3lveFpYa1VHVExGYmpPUXhKOTNFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWWpAMA0G
CSqGSIb3DQEBCwUAA4IBAQCc0LxUKK2IiNTjfYR797VdIEGMKLXWejRCFZfsw+br
jXJTChlCYYpDYHle2Y5QUMwp0XNp9A3354rarPCtOk+VCGPkWeL1RX+Ov0/Hibuq
yVEHOQbyK2RadUqCTfuK4v604mR1EgSXMBV1r5gRwtRqBZxewj56I1rVKzFI3EBB
juiqJob32ABokTWyHgiPbD4TMY+PW7hrhNo7K2OHx83hUqk6Q0cvtO0WcKuTKiNQ
jZgCnTPSuiMm9Op8ukazyLYhonMeHvfXbAQ4wchGx7OFlG2DVURdkVC0sqdu6RR+
HR0YMi6KToLpGa15H45tQWqYV/yHrBrJrFKYnp4AYEms
-----END CERTIFICATE-----
Generated at Mon Oct 27 09:15:01 2025 by rpki-client