Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/c25650-4727-4f88-8f21-c997ae6c5bd4/1/gLtRgaxc3dQh-hyBwzctMY8Z2Kg.roa
File: gLtRgaxc3dQh-hyBwzctMY8Z2Kg.roa (raw, json)
Hash identifier: kQ5eH+OBT0t4XuJxKyLguz534gAGBpghvIPZ6PMDpiI=
Subject key identifier: 80:BB:51:81:AC:5C:DD:D4:21:FA:1C:81:C3:37:2D:31:8F:19:D8:A8
Certificate issuer: /CN=dd2bc5403ab353d5fc25e5aadce0932b29f4176a
Certificate serial: 019A5EBF774101BBA0E059F263511236C4DB
Authority key identifier: DD:2B:C5:40:3A:B3:53:D5:FC:25:E5:AA:DC:E0:93:2B:29:F4:17:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3SvFQDqzU9X8JeWq3OCTKyn0F2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/c25650-4727-4f88-8f21-c997ae6c5bd4/1/gLtRgaxc3dQh-hyBwzctMY8Z2Kg.roa
Signing time: Fri 07 Nov 2025 14:36:37 +0000
ROA not before: Fri 07 Nov 2025 14:36:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43260
IP address blocks: 185.13.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/c25650-4727-4f88-8f21-c997ae6c5bd4/1/3SvFQDqzU9X8JeWq3OCTKyn0F2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/c25650-4727-4f88-8f21-c997ae6c5bd4/1/3SvFQDqzU9X8JeWq3OCTKyn0F2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/3SvFQDqzU9X8JeWq3OCTKyn0F2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:5e:bf:77:41:01:bb:a0:e0:59:f2:63:51:12:36:c4:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd2bc5403ab353d5fc25e5aadce0932b29f4176a
Validity
Not Before: Nov 7 14:36:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=80bb5181ac5cddd421fa1c81c3372d318f19d8a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:4e:23:43:8f:36:6c:8b:95:92:80:50:6b:1a:
2c:2c:8a:fb:d4:a3:db:66:62:73:a0:7e:08:62:c7:
95:a8:2d:69:72:15:96:f5:47:e7:e0:26:27:8c:6a:
6c:79:f9:06:b6:17:93:06:fb:dd:ff:7b:ec:43:88:
80:63:14:74:5c:bd:27:13:94:9d:0a:9c:6c:6e:f4:
4d:47:cc:e3:56:4e:00:61:85:2d:97:8d:d7:90:e1:
8b:41:b1:2a:56:a9:77:b6:fe:95:9d:df:0a:12:69:
15:22:bf:b3:fa:13:ec:4c:21:ac:63:69:58:cb:69:
73:d3:5f:c7:4f:90:46:80:33:e6:73:ad:77:63:32:
d9:a3:d6:35:d7:f2:3c:76:a9:58:5f:00:e3:c0:6e:
b1:9e:b1:6f:e6:cc:e5:5e:b0:3c:16:f3:09:29:34:
e7:36:00:60:9e:e3:c1:b4:0b:1c:03:00:66:ed:f2:
1a:aa:b8:35:4d:7e:80:8d:94:7a:3b:55:c0:eb:ef:
b0:dd:f0:1d:ba:38:18:b0:40:e6:4d:0f:c1:fd:e4:
ce:af:51:83:6f:9c:8c:d0:e4:83:d4:aa:25:e4:06:
bb:74:8e:86:7d:4c:ba:90:91:86:25:a9:7b:f8:9c:
be:76:47:76:b8:7b:c1:50:42:88:db:49:74:59:f4:
e6:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:BB:51:81:AC:5C:DD:D4:21:FA:1C:81:C3:37:2D:31:8F:19:D8:A8
X509v3 Authority Key Identifier:
keyid:DD:2B:C5:40:3A:B3:53:D5:FC:25:E5:AA:DC:E0:93:2B:29:F4:17:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SvFQDqzU9X8JeWq3OCTKyn0F2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/c25650-4727-4f88-8f21-c997ae6c5bd4/1/gLtRgaxc3dQh-hyBwzctMY8Z2Kg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/c25650-4727-4f88-8f21-c997ae6c5bd4/1/3SvFQDqzU9X8JeWq3OCTKyn0F2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.13.56.0/24
Signature Algorithm: sha256WithRSAEncryption
94:22:a7:f6:c8:0d:cc:96:75:6e:de:52:c3:bb:82:dc:d9:05:
cc:a5:12:f7:83:d5:74:59:8f:a9:85:e4:b0:a4:54:53:c1:43:
71:bb:f3:af:95:ef:66:23:43:c2:2c:34:93:ed:4c:6e:9b:bf:
0c:67:eb:29:7d:20:00:a4:37:e9:01:6c:a5:00:20:14:3f:e7:
b5:91:11:21:7d:66:9f:17:e6:f4:00:84:86:ba:5a:cd:6e:8a:
c0:5d:e1:28:d9:b1:46:f3:fa:a1:62:9f:6e:36:f0:48:94:98:
52:91:3b:aa:b7:f2:06:5a:76:b0:a7:60:4e:4a:0c:1d:ff:2e:
12:68:87:6a:0d:03:e1:df:30:69:bb:27:38:8e:f7:cd:26:75:
7f:8c:62:15:b8:e8:cb:3f:e8:9a:45:ec:1d:74:4f:ea:f5:5c:
a3:53:f3:f1:2b:28:61:25:78:c4:bc:17:e4:5e:23:c8:2f:cc:
8a:9e:10:08:f9:44:9a:78:3a:be:f8:59:fc:a2:37:f1:de:37:
1d:27:6a:0a:47:47:9e:8d:0d:79:cc:f2:28:dc:12:23:9b:40:
ac:8e:c4:69:79:ec:c8:3e:de:d3:97:8b:de:de:4e:9d:16:28:
de:8b:29:16:11:ef:79:8c:9f:07:eb:63:26:c7:8c:a3:de:04:
3a:9d:a9:3f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZpev3dBAbug4FnyY1ESNsTbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkMmJjNTQwM2FiMzUzZDVmYzI1ZTVhYWRjZTA5MzJiMjlm
NDE3NmEwHhcNMjUxMTA3MTQzNjM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MGJiNTE4MWFjNWNkZGQ0MjFmYTFjODFjMzM3MmQzMThmMTlkOGE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh04jQ482bIuVkoBQaxosLIr71KPb
ZmJzoH4IYseVqC1pchWW9Ufn4CYnjGpsefkGtheTBvvd/3vsQ4iAYxR0XL0nE5Sd
CpxsbvRNR8zjVk4AYYUtl43XkOGLQbEqVql3tv6Vnd8KEmkVIr+z+hPsTCGsY2lY
y2lz01/HT5BGgDPmc613YzLZo9Y11/I8dqlYXwDjwG6xnrFv5szlXrA8FvMJKTTn
NgBgnuPBtAscAwBm7fIaqrg1TX6AjZR6O1XA6++w3fAdujgYsEDmTQ/B/eTOr1GD
b5yM0OSD1Kol5Aa7dI6GfUy6kJGGJal7+Jy+dkd2uHvBUEKI20l0WfTmmQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIC7UYGsXN3UIfocgcM3LTGPGdioMB8GA1UdIwQY
MBaAFN0rxUA6s1PV/CXlqtzgkysp9BdqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1N2RlFEcXpVOVg4SmVXcTNPQ1RLeW4wRjJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9jMjU2NTAtNDcyNy00Zjg4LThmMjEt
Yzk5N2FlNmM1YmQ0LzEvZ0x0UmdheGMzZFFoLWh5Qnd6Y3RNWThaMktnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9jMjU2NTAtNDcyNy00Zjg4LThmMjEtYzk5N2FlNmM1YmQ0
LzEvM1N2RlFEcXpVOVg4SmVXcTNPQ1RLeW4wRjJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuQ04MA0G
CSqGSIb3DQEBCwUAA4IBAQCUIqf2yA3MlnVu3lLDu4Lc2QXMpRL3g9V0WY+pheSw
pFRTwUNxu/Ovle9mI0PCLDST7Uxum78MZ+spfSAApDfpAWylACAUP+e1kREhfWaf
F+b0AISGulrNborAXeEo2bFG8/qhYp9uNvBIlJhSkTuqt/IGWnawp2BOSgwd/y4S
aIdqDQPh3zBpuyc4jvfNJnV/jGIVuOjLP+iaRewddE/q9VyjU/PxKyhhJXjEvBfk
XiPIL8yKnhAI+USaeDq++Fn8ojfx3jcdJ2oKR0eejQ15zPIo3BIjm0CsjsRpeezI
Pt7Tl4ve3k6dFijeiykWEe95jJ8H62Mmx4yj3gQ6nak/
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:56:34 2025 by rpki-client