Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/299959-12f4-4fe7-9f30-99e76c2739fb/1/pqKjRcHlDiTELm_P0k88IdYl64A.roa
File: pqKjRcHlDiTELm_P0k88IdYl64A.roa (raw, json)
Hash identifier: uOigO0BbOXYSDcxSVpkhh97Q9VqPSwLH4vkq9m1CYjE=
Subject key identifier: A6:A2:A3:45:C1:E5:0E:24:C4:2E:6F:CF:D2:4F:3C:21:D6:25:EB:80
Certificate issuer: /CN=7679884f6330b65060edc41ccac0e546d380a504
Certificate serial: 0198E0D221B2FA21B766289D1655CCFCCE37
Authority key identifier: 76:79:88:4F:63:30:B6:50:60:ED:C4:1C:CA:C0:E5:46:D3:80:A5:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dnmIT2MwtlBg7cQcysDlRtOApQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/299959-12f4-4fe7-9f30-99e76c2739fb/1/pqKjRcHlDiTELm_P0k88IdYl64A.roa
Signing time: Mon 25 Aug 2025 10:42:04 +0000
ROA not before: Mon 25 Aug 2025 10:42:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31072
IP address blocks: 193.23.53.0/24 maxlen: 24
195.3.196.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/299959-12f4-4fe7-9f30-99e76c2739fb/1/dnmIT2MwtlBg7cQcysDlRtOApQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/299959-12f4-4fe7-9f30-99e76c2739fb/1/dnmIT2MwtlBg7cQcysDlRtOApQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/dnmIT2MwtlBg7cQcysDlRtOApQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 22:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e0:d2:21:b2:fa:21:b7:66:28:9d:16:55:cc:fc:ce:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7679884f6330b65060edc41ccac0e546d380a504
Validity
Not Before: Aug 25 10:42:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a6a2a345c1e50e24c42e6fcfd24f3c21d625eb80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a8:63:4a:0c:92:81:a0:68:8b:fa:09:4a:2a:
2f:f8:74:d4:28:cf:90:c5:2d:7d:a6:dc:61:fa:99:
0d:91:77:e1:26:e7:12:29:f6:56:d0:f5:cc:4d:b0:
f7:b3:1f:53:dd:8c:27:71:f5:02:6a:bd:d5:d9:54:
3e:98:9b:00:d8:71:44:1c:99:88:72:ab:17:3c:e1:
eb:ce:11:da:3e:a0:4c:f3:80:22:17:86:33:39:95:
f6:5e:45:90:63:cb:4e:f6:38:28:4d:95:a2:46:40:
86:b9:85:53:78:ed:9c:32:59:fb:19:56:20:9b:44:
32:de:65:6c:fe:78:5e:67:12:0f:fe:c0:57:72:c8:
e8:9a:58:e3:90:22:7f:8e:cf:b3:e3:d3:f8:76:c2:
5d:9a:c9:3b:a9:ea:9b:10:11:e2:51:1d:95:fe:55:
32:21:2c:02:d2:7a:a4:f4:d9:ae:42:68:84:09:2f:
e2:ea:90:22:d5:9b:02:b7:c3:35:6b:98:3c:b2:a6:
1c:d0:e7:bd:bf:e9:9d:2f:d9:a0:73:1b:83:71:ea:
fd:c5:cd:c5:29:c4:97:62:e6:33:9f:02:f7:aa:49:
57:c5:9f:8e:51:93:a9:6c:1c:be:cd:ce:03:46:fb:
4f:bc:be:d2:1a:2a:dd:41:45:62:d0:4d:a1:f7:ab:
f5:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:A2:A3:45:C1:E5:0E:24:C4:2E:6F:CF:D2:4F:3C:21:D6:25:EB:80
X509v3 Authority Key Identifier:
keyid:76:79:88:4F:63:30:B6:50:60:ED:C4:1C:CA:C0:E5:46:D3:80:A5:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dnmIT2MwtlBg7cQcysDlRtOApQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/299959-12f4-4fe7-9f30-99e76c2739fb/1/pqKjRcHlDiTELm_P0k88IdYl64A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/299959-12f4-4fe7-9f30-99e76c2739fb/1/dnmIT2MwtlBg7cQcysDlRtOApQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.23.53.0/24
195.3.196.0/22
Signature Algorithm: sha256WithRSAEncryption
87:c7:63:b0:75:d6:23:22:d4:0b:c9:57:7f:11:97:31:57:f9:
ab:90:25:0e:19:74:54:4b:93:60:19:ba:15:b9:e4:eb:00:33:
8e:cc:77:66:58:9f:9f:17:80:b3:be:86:0d:24:37:13:6b:cb:
be:c4:a9:2d:1d:01:29:37:46:44:13:3d:84:60:44:da:88:ac:
9d:b1:ef:ef:93:70:50:ef:4b:87:37:c1:07:04:4f:e1:59:c1:
09:41:d7:cc:0a:75:08:78:9b:ef:cd:3c:34:9c:64:2f:92:5b:
fa:be:5d:77:07:7d:50:c2:c7:6a:41:02:4a:88:a0:ab:63:db:
ee:66:82:c4:ee:6d:fe:42:8e:bb:5e:93:a9:cc:8e:d8:67:ad:
a8:0b:48:d4:43:34:30:b9:27:34:78:d4:cd:78:60:66:99:f7:
9f:ae:9d:87:6e:00:43:78:6b:57:f2:0d:7c:53:75:66:f4:32:
3a:38:5d:83:3e:ae:c2:69:69:2d:19:de:6b:2e:51:0c:48:40:
e9:be:36:b6:28:b3:06:3e:56:f2:18:78:cb:ab:ac:7e:bc:85:
2b:91:2c:39:e8:eb:21:bd:a8:bd:a6:13:6c:27:e7:da:ed:5d:
2c:7f:fa:50:e6:56:de:04:c7:a1:19:d3:98:7f:8d:2a:54:ce:
cb:a5:29:33
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZjg0iGy+iG3ZiidFlXM/M43MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2Nzk4ODRmNjMzMGI2NTA2MGVkYzQxY2NhYzBlNTQ2ZDM4
MGE1MDQwHhcNMjUwODI1MTA0MjA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNmEyYTM0NWMxZTUwZTI0YzQyZTZmY2ZkMjRmM2MyMWQ2MjVlYjgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsahjSgySgaBoi/oJSiov+HTUKM+Q
xS19ptxh+pkNkXfhJucSKfZW0PXMTbD3sx9T3YwncfUCar3V2VQ+mJsA2HFEHJmI
cqsXPOHrzhHaPqBM84AiF4YzOZX2XkWQY8tO9jgoTZWiRkCGuYVTeO2cMln7GVYg
m0Qy3mVs/nheZxIP/sBXcsjomljjkCJ/js+z49P4dsJdmsk7qeqbEBHiUR2V/lUy
ISwC0nqk9NmuQmiECS/i6pAi1ZsCt8M1a5g8sqYc0Oe9v+mdL9mgcxuDcer9xc3F
KcSXYuYznwL3qklXxZ+OUZOpbBy+zc4DRvtPvL7SGirdQUVi0E2h96v1NQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFKaio0XB5Q4kxC5vz9JPPCHWJeuAMB8GA1UdIwQY
MBaAFHZ5iE9jMLZQYO3EHMrA5UbTgKUEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZG5tSVQyTXd0bEJnN2NRY3lzRGxSdE9BcFFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8yOTk5NTktMTJmNC00ZmU3LTlmMzAt
OTllNzZjMjczOWZiLzEvcHFLalJjSGxEaVRFTG1fUDBrODhJZFlsNjRBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi8yOTk5NTktMTJmNC00ZmU3LTlmMzAtOTllNzZjMjczOWZi
LzEvZG5tSVQyTXd0bEJnN2NRY3lzRGxSdE9BcFFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwRc1AwQC
wwPEMA0GCSqGSIb3DQEBCwUAA4IBAQCHx2OwddYjItQLyVd/EZcxV/mrkCUOGXRU
S5NgGboVueTrADOOzHdmWJ+fF4CzvoYNJDcTa8u+xKktHQEpN0ZEEz2EYETaiKyd
se/vk3BQ70uHN8EHBE/hWcEJQdfMCnUIeJvvzTw0nGQvklv6vl13B31QwsdqQQJK
iKCrY9vuZoLE7m3+Qo67XpOpzI7YZ62oC0jUQzQwuSc0eNTNeGBmmfefrp2HbgBD
eGtX8g18U3Vm9DI6OF2DPq7CaWktGd5rLlEMSEDpvja2KLMGPlbyGHjLq6x+vIUr
kSw56Oshvai9phNsJ+fa7V0sf/pQ5lbeBMehGdOYf40qVM7LpSkz
-----END CERTIFICATE-----
Generated at Mon Sep 8 06:11:50 2025 by rpki-client