Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/1Ragckv59-eBU4wjA4HFdKfP8QU.roa
File: 1Ragckv59-eBU4wjA4HFdKfP8QU.roa (raw, json)
Hash identifier: 0vBZBy9D9oD4CRpKfgfs4bXlgNYTLWGPDipCV8xx4Ts=
Subject key identifier: D5:16:A0:72:4B:F9:F7:E7:81:53:8C:23:03:81:C5:74:A7:CF:F1:05
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 019910BD18ED4FF69E105CA3130FFD12091E
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/1Ragckv59-eBU4wjA4HFdKfP8QU.roa
Signing time: Wed 03 Sep 2025 18:00:52 +0000
ROA not before: Wed 03 Sep 2025 18:00:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208485
IP address blocks: 45.132.180.0/24 maxlen: 24
91.223.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 00:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:10:bd:18:ed:4f:f6:9e:10:5c:a3:13:0f:fd:12:09:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Sep 3 18:00:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d516a0724bf9f7e781538c230381c574a7cff105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d6:a3:9b:4a:52:ea:a4:8b:cb:e4:38:3f:34:
ba:e2:bc:06:38:02:3b:3c:85:ec:da:bf:f8:45:95:
08:bb:c9:22:3a:eb:0d:ca:b4:ab:9b:b9:7e:f2:14:
3f:7c:c3:06:cf:ae:2e:43:76:3d:7c:91:74:ac:df:
eb:b0:c3:21:77:1e:15:1e:c9:b2:50:c8:b5:1a:02:
15:eb:80:3a:5c:09:e6:82:67:d7:93:f9:48:d7:4a:
d5:2f:2b:bd:58:a4:40:04:ab:d4:4a:74:2a:1c:86:
8b:bd:9e:62:e4:08:96:16:18:14:06:a8:42:de:31:
4b:0c:a4:68:b8:34:3a:89:94:95:ee:35:54:84:c1:
ab:53:ca:0c:9d:2f:67:ef:dd:3b:52:05:ba:10:3d:
c6:13:fc:f6:69:5c:d1:28:5b:b7:d6:47:4d:0c:f4:
f3:b2:99:bf:fe:d4:89:e5:9c:be:4e:ae:8a:bc:f0:
32:e9:87:85:c2:2f:25:4b:68:de:1b:70:f2:53:f7:
2f:72:2b:87:81:20:06:c1:13:8d:92:7e:5e:dc:4a:
dc:3d:9b:7a:05:55:33:20:49:47:bd:bf:ba:1a:39:
28:43:9c:32:4f:c9:41:a0:f0:73:4a:46:d0:bd:9f:
29:04:bc:90:52:7b:5c:c8:9c:b6:ee:19:d1:51:be:
71:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:16:A0:72:4B:F9:F7:E7:81:53:8C:23:03:81:C5:74:A7:CF:F1:05
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/1Ragckv59-eBU4wjA4HFdKfP8QU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.180.0/24
91.223.110.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:35:0e:ff:91:eb:e7:2c:69:80:68:43:6c:10:8f:ac:91:16:
61:83:47:f1:80:0c:9a:7d:52:2c:50:56:87:bb:0e:3a:ee:d3:
2e:ee:c5:99:0b:f5:1f:96:26:d8:8f:c1:96:07:e9:3e:a8:21:
95:0d:7b:13:7a:7c:5c:c2:d7:ff:75:ab:18:1f:12:e5:54:83:
bb:73:76:72:59:38:f1:63:cf:f9:c8:0e:b5:f6:63:63:a0:02:
26:8b:15:b8:46:e0:74:b8:79:cf:c2:8b:eb:cc:ba:d0:ff:d0:
43:19:1b:b3:95:ed:40:df:8b:ec:b4:4c:f7:4a:49:cd:b2:a6:
c0:fb:6e:4b:c9:42:fb:d3:4e:4b:fc:10:36:d5:7f:b9:ad:e9:
5c:f2:49:70:43:6f:70:be:87:a6:44:3e:9d:bb:ab:c8:b9:44:
0e:a0:22:57:97:32:29:d6:dc:6e:33:83:65:88:1c:83:3f:11:
24:29:04:2a:6c:d5:b4:08:84:9d:09:24:c9:b3:33:78:62:bd:
6b:f3:51:d1:80:4e:36:04:28:b6:ac:fc:76:7d:a8:bf:a1:0d:
b3:52:aa:85:93:00:7e:fb:fe:61:fd:74:dc:0e:ba:90:9c:23:
0d:50:55:7d:cb:70:25:b9:d5:17:71:d3:7e:c1:37:63:d1:2a:
70:f2:06:d2
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZkQvRjtT/aeEFyjEw/9EgkeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy
YTI4YTEwHhcNMjUwOTAzMTgwMDUyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNTE2YTA3MjRiZjlmN2U3ODE1MzhjMjMwMzgxYzU3NGE3Y2ZmMTA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9ajm0pS6qSLy+Q4PzS64rwGOAI7
PIXs2r/4RZUIu8kiOusNyrSrm7l+8hQ/fMMGz64uQ3Y9fJF0rN/rsMMhdx4VHsmy
UMi1GgIV64A6XAnmgmfXk/lI10rVLyu9WKRABKvUSnQqHIaLvZ5i5AiWFhgUBqhC
3jFLDKRouDQ6iZSV7jVUhMGrU8oMnS9n7907UgW6ED3GE/z2aVzRKFu31kdNDPTz
spm//tSJ5Zy+Tq6KvPAy6YeFwi8lS2jeG3DyU/cvciuHgSAGwRONkn5e3ErcPZt6
BVUzIElHvb+6GjkoQ5wyT8lBoPBzSkbQvZ8pBLyQUntcyJy27hnRUb5xRwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFNUWoHJL+ffngVOMIwOBxXSnz/EFMB8GA1UdIwQY
MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt
ZWVmMzUxMWY2YzYwLzEvMVJhZ2NrdjU5LWVCVTR3akE0SEZkS2ZQOFFVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw
LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALYS0AwQA
W99uMA0GCSqGSIb3DQEBCwUAA4IBAQBdNQ7/kevnLGmAaENsEI+skRZhg0fxgAya
fVIsUFaHuw467tMu7sWZC/UflibYj8GWB+k+qCGVDXsTenxcwtf/dasYHxLlVIO7
c3ZyWTjxY8/5yA619mNjoAImixW4RuB0uHnPwovrzLrQ/9BDGRuzle1A34vstEz3
SknNsqbA+25LyUL7005L/BA21X+5relc8klwQ29wvoemRD6du6vIuUQOoCJXlzIp
1txuM4NliByDPxEkKQQqbNW0CISdCSTJszN4Yr1r81HRgE42BCi2rPx2fai/oQ2z
UqqFkwB++/5h/XTcDrqQnCMNUFV9y3AludUXcdN+wTdj0Spw8gbS
-----END CERTIFICATE-----
Generated at Sun Sep 7 09:03:49 2025 by rpki-client