Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/u6NL_ogOmQanKJmr1VOq5ASIrTw.roa
File: u6NL_ogOmQanKJmr1VOq5ASIrTw.roa (raw, json)
Hash identifier: IVLfxh3xnjFSGQTmPY15cQ9GzgVAKww2vTiXyy5nK8w=
Subject key identifier: BB:A3:4B:FE:88:0E:99:06:A7:28:99:AB:D5:53:AA:E4:04:88:AD:3C
Certificate issuer: /CN=003b2c3871069002ad0b2f42b0cbf5e92e3be4b3
Certificate serial: 0199952040DD4D09C25714EFFB692B68942E
Authority key identifier: 00:3B:2C:38:71:06:90:02:AD:0B:2F:42:B0:CB:F5:E9:2E:3B:E4:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ADssOHEGkAKtCy9CsMv16S475LM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/u6NL_ogOmQanKJmr1VOq5ASIrTw.roa
Signing time: Mon 29 Sep 2025 10:59:02 +0000
ROA not before: Mon 29 Sep 2025 10:59:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3257
IP address blocks: 45.152.20.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/ADssOHEGkAKtCy9CsMv16S475LM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/ADssOHEGkAKtCy9CsMv16S475LM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ADssOHEGkAKtCy9CsMv16S475LM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 Oct 2025 12:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:95:20:40:dd:4d:09:c2:57:14:ef:fb:69:2b:68:94:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=003b2c3871069002ad0b2f42b0cbf5e92e3be4b3
Validity
Not Before: Sep 29 10:59:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bba34bfe880e9906a72899abd553aae40488ad3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8e:e3:c5:08:88:26:aa:2e:92:06:50:9b:49:
7a:b0:49:08:0c:2b:8e:4f:f0:9c:7c:cb:d7:a7:97:
47:12:b5:5f:39:39:65:fd:ae:27:e5:ff:28:90:c0:
be:55:b4:c9:a8:53:6d:06:e2:53:18:40:c5:c3:15:
d8:92:65:0a:29:f6:77:33:cf:bd:f5:02:b4:86:83:
75:97:07:48:13:bd:ef:f4:dc:f9:29:e6:6f:19:11:
40:69:da:dc:18:3f:fd:6d:40:6a:f4:83:dc:23:9e:
e1:22:54:2c:ca:af:db:85:c0:bd:c3:06:93:a5:ec:
d4:11:26:39:3b:3e:ed:2c:6d:d0:34:0b:cd:22:2a:
4f:82:e1:82:12:25:a0:9c:90:a2:5b:04:36:09:ee:
e3:0a:3d:5f:db:83:e8:8d:b3:73:87:37:63:57:56:
cc:ba:fc:14:58:75:01:3a:15:db:46:23:be:0d:da:
27:6d:5e:8e:69:ff:cb:c5:37:de:a8:9a:e3:80:c5:
96:30:93:a2:b0:a5:94:db:d4:38:05:00:85:72:34:
9a:9c:51:21:35:84:f3:ed:47:fe:92:8a:a4:c5:87:
21:ef:36:e1:2b:d0:58:c6:15:b1:e5:a0:6f:67:41:
0d:ea:22:2d:b0:77:26:a1:fd:a5:4b:5b:ab:c8:5c:
bd:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:A3:4B:FE:88:0E:99:06:A7:28:99:AB:D5:53:AA:E4:04:88:AD:3C
X509v3 Authority Key Identifier:
keyid:00:3B:2C:38:71:06:90:02:AD:0B:2F:42:B0:CB:F5:E9:2E:3B:E4:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ADssOHEGkAKtCy9CsMv16S475LM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/u6NL_ogOmQanKJmr1VOq5ASIrTw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/ADssOHEGkAKtCy9CsMv16S475LM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.20.0/23
Signature Algorithm: sha256WithRSAEncryption
65:d1:01:1c:00:a2:85:cc:e0:e0:22:63:26:c9:74:c0:15:f4:
ee:b4:ba:1c:63:90:75:f5:da:2d:fe:db:34:1c:af:00:0a:ad:
dd:5b:21:e2:cd:ee:d4:94:6e:a1:8b:21:dc:10:90:ad:ea:19:
77:41:52:bc:8e:f7:6a:de:b1:e8:c1:f6:91:fb:79:af:96:70:
e1:6a:d5:d4:45:74:4a:0e:cb:af:83:bc:80:03:bb:b6:23:09:
4f:c8:af:73:5e:76:3e:ec:8f:25:26:00:97:cc:3a:15:f3:3e:
ad:08:89:dd:32:7e:60:36:d8:13:42:60:03:a0:d5:63:83:5d:
d6:5d:92:37:43:93:4c:83:22:7c:68:c8:76:f1:fa:02:bb:b7:
92:39:1a:d0:51:34:91:08:7d:2a:4f:d1:2e:0d:7c:ce:8c:7b:
a2:70:f5:39:c2:27:3a:1c:9a:1c:24:0b:11:3b:41:54:32:f1:
f2:8b:0d:c8:28:04:89:c0:18:21:11:52:21:31:74:62:de:b4:
5a:da:72:54:5d:e3:05:68:2b:ee:20:f1:7f:5a:14:86:06:6a:
38:a1:09:e2:9c:4c:42:e5:81:a2:13:6d:df:12:56:77:52:e3:
cc:ce:45:c5:fc:6c:8d:aa:43:0a:29:f6:6e:c9:0e:43:d8:f1:
ac:7b:38:dd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZmVIEDdTQnCVxTv+2kraJQuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwM2IyYzM4NzEwNjkwMDJhZDBiMmY0MmIwY2JmNWU5MmUz
YmU0YjMwHhcNMjUwOTI5MTA1OTAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYmEzNGJmZTg4MGU5OTA2YTcyODk5YWJkNTUzYWFlNDA0ODhhZDNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt47jxQiIJqoukgZQm0l6sEkIDCuO
T/CcfMvXp5dHErVfOTll/a4n5f8okMC+VbTJqFNtBuJTGEDFwxXYkmUKKfZ3M8+9
9QK0hoN1lwdIE73v9Nz5KeZvGRFAadrcGD/9bUBq9IPcI57hIlQsyq/bhcC9wwaT
pezUESY5Oz7tLG3QNAvNIipPguGCEiWgnJCiWwQ2Ce7jCj1f24PojbNzhzdjV1bM
uvwUWHUBOhXbRiO+DdonbV6Oaf/LxTfeqJrjgMWWMJOisKWU29Q4BQCFcjSanFEh
NYTz7Uf+koqkxYch7zbhK9BYxhWx5aBvZ0EN6iItsHcmof2lS1uryFy94wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLujS/6IDpkGpyiZq9VTquQEiK08MB8GA1UdIwQY
MBaAFAA7LDhxBpACrQsvQrDL9ekuO+SzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQURzc09IRUdrQUt0Q3k5Q3NNdjE2UzQ3NUxNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kOTY2ODgtMmQ5OC00NjM0LTg2ZGIt
YjM1YTBhMTQ1M2ZiLzEvdTZOTF9vZ09tUWFuS0ptcjFWT3E1QVNJclR3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9kOTY2ODgtMmQ5OC00NjM0LTg2ZGItYjM1YTBhMTQ1M2Zi
LzEvQURzc09IRUdrQUt0Q3k5Q3NNdjE2UzQ3NUxNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLZgUMA0G
CSqGSIb3DQEBCwUAA4IBAQBl0QEcAKKFzODgImMmyXTAFfTutLocY5B19dot/ts0
HK8ACq3dWyHize7UlG6hiyHcEJCt6hl3QVK8jvdq3rHowfaR+3mvlnDhatXURXRK
Dsuvg7yAA7u2IwlPyK9zXnY+7I8lJgCXzDoV8z6tCIndMn5gNtgTQmADoNVjg13W
XZI3Q5NMgyJ8aMh28foCu7eSORrQUTSRCH0qT9EuDXzOjHuicPU5wic6HJocJAsR
O0FUMvHyiw3IKASJwBghEVIhMXRi3rRa2nJUXeMFaCvuIPF/WhSGBmo4oQninExC
5YGiE23fElZ3UuPMzkXF/GyNqkMKKfZuyQ5D2PGsezjd
-----END CERTIFICATE-----
Generated at Wed Oct 15 19:45:45 2025 by rpki-client