Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/1Y62m6PAoQN16SPF0N8wibWycfk.roa
File: 1Y62m6PAoQN16SPF0N8wibWycfk.roa (raw, json)
Hash identifier: 1p+u2bM92AxaS116YPDdsceX61F9LlCG3iRgoyNwrMg=
Subject key identifier: D5:8E:B6:9B:A3:C0:A1:03:75:E9:23:C5:D0:DF:30:89:B5:B2:71:F9
Certificate issuer: /CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
Certificate serial: 0198A2A081F2B5F8DF81B210D4E05464BC37
Authority key identifier: FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/1Y62m6PAoQN16SPF0N8wibWycfk.roa
Signing time: Wed 13 Aug 2025 08:51:24 +0000
ROA not before: Wed 13 Aug 2025 08:51:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216138
IP address blocks: 185.125.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Aug 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a2:a0:81:f2:b5:f8:df:81:b2:10:d4:e0:54:64:bc:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
Validity
Not Before: Aug 13 08:51:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d58eb69ba3c0a10375e923c5d0df3089b5b271f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d3:32:40:b0:e3:43:b8:c5:34:9c:7e:50:0c:
a7:b9:55:0e:23:30:fe:8f:5b:d6:57:75:20:9d:b5:
54:be:94:0a:40:16:ab:a1:2a:59:8c:f0:aa:59:a5:
cf:06:e0:68:cb:34:62:bd:8c:89:90:e3:a9:f9:be:
77:96:17:40:30:06:09:e1:eb:0c:4b:db:b6:a7:2b:
fb:b8:10:02:35:93:47:e1:73:d3:8f:63:f3:e2:bf:
bb:be:13:39:02:ef:13:c7:22:ce:81:8a:01:2b:7f:
27:da:86:a1:23:bb:ea:2b:ac:d9:e9:ee:20:9e:ee:
70:71:25:07:ea:35:38:86:a4:d7:cf:b8:06:b4:3a:
a9:77:ab:2c:da:88:5e:00:f2:e9:ef:17:81:91:25:
a7:07:da:d0:f1:c8:a0:36:1e:f0:55:8f:77:29:aa:
80:27:ff:37:06:89:dc:52:f8:1e:e0:74:c9:c9:6f:
d3:48:59:fb:96:f4:71:e9:51:f1:5c:fc:e1:0f:fb:
af:a2:04:a6:de:f8:05:13:03:a7:07:3f:c5:b4:7f:
f1:ca:4f:31:80:d0:4d:b8:24:fb:7c:c0:d1:d3:cd:
3d:c8:0c:12:c8:85:53:c5:96:8c:b7:2a:5e:8c:bd:
99:40:70:c7:9e:59:3d:72:56:26:12:e2:65:a9:85:
10:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:8E:B6:9B:A3:C0:A1:03:75:E9:23:C5:D0:DF:30:89:B5:B2:71:F9
X509v3 Authority Key Identifier:
keyid:FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/1Y62m6PAoQN16SPF0N8wibWycfk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.125.243.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:c3:86:14:39:46:04:de:80:2d:e1:4e:9d:9a:09:f2:76:40:
3a:5f:0f:8a:53:17:83:a4:e9:d8:29:0a:cd:fe:75:ec:3d:34:
c0:02:bd:68:1f:7e:b3:d0:be:14:2a:16:78:52:91:4b:b9:3d:
0b:c7:85:f2:40:55:0c:84:a9:c2:0d:a8:dc:e7:04:d7:a2:86:
7b:a6:6d:d3:d5:a8:26:6d:f7:a7:ac:c4:6f:fd:d9:06:a4:70:
5e:b1:a3:e7:65:22:d3:66:e2:b0:b1:57:b0:65:95:0d:7b:2d:
6c:06:0c:b3:2c:f9:53:06:a5:f3:a8:08:0a:64:13:46:8e:36:
c8:53:e6:d8:a9:94:13:cd:9c:77:2e:c7:ab:7f:69:41:86:b7:
fa:aa:26:06:a0:7c:61:aa:40:7f:cd:ad:de:16:0e:cc:8e:bf:
ec:4a:d1:7c:33:87:7d:d2:2c:1c:c6:ab:62:e8:51:33:a9:d3:
6b:66:29:d0:0b:55:46:fb:24:ca:a5:09:3c:a5:22:57:d7:c2:
ba:81:85:49:fd:da:0d:08:e1:32:e7:f2:a4:07:de:64:ad:69:
15:ba:4c:2e:fb:59:05:27:9e:42:db:15:f2:37:3e:3a:7a:cd:
e4:22:d8:86:d0:9b:73:e4:2a:32:9b:75:e8:6e:5b:43:5f:92:
91:a4:b3:f6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZiioIHytfjfgbIQ1OBUZLw3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkZDZlZTAxMGI5OTBhMzM3MzU3NTZiNGZlMmYzZDNjMjY3
MWRkOWQwHhcNMjUwODEzMDg1MTI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNThlYjY5YmEzYzBhMTAzNzVlOTIzYzVkMGRmMzA4OWI1YjI3MWY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtMyQLDjQ7jFNJx+UAynuVUOIzD+
j1vWV3UgnbVUvpQKQBaroSpZjPCqWaXPBuBoyzRivYyJkOOp+b53lhdAMAYJ4esM
S9u2pyv7uBACNZNH4XPTj2Pz4r+7vhM5Au8TxyLOgYoBK38n2oahI7vqK6zZ6e4g
nu5wcSUH6jU4hqTXz7gGtDqpd6ss2oheAPLp7xeBkSWnB9rQ8cigNh7wVY93KaqA
J/83BoncUvge4HTJyW/TSFn7lvRx6VHxXPzhD/uvogSm3vgFEwOnBz/FtH/xyk8x
gNBNuCT7fMDR0809yAwSyIVTxZaMtypejL2ZQHDHnlk9clYmEuJlqYUQIwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNWOtpujwKEDdekjxdDfMIm1snH5MB8GA1UdIwQY
MBaAFP3W7gELmQozc1dWtP4vPTwmcd2dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2RidUFRdVpDak56VjFhMF9pODlQQ1p4M1owLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8yZDFhMzUtZmY4YS00NmI0LThjNDct
NjNjNzIxY2YxZjU2LzEvMVk2Mm02UEFvUU4xNlNQRjBOOHdpYld5Y2ZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS8yZDFhMzUtZmY4YS00NmI0LThjNDctNjNjNzIxY2YxZjU2
LzEvX2RidUFRdVpDak56VjFhMF9pODlQQ1p4M1owLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuX3zMA0G
CSqGSIb3DQEBCwUAA4IBAQAaw4YUOUYE3oAt4U6dmgnydkA6Xw+KUxeDpOnYKQrN
/nXsPTTAAr1oH36z0L4UKhZ4UpFLuT0Lx4XyQFUMhKnCDajc5wTXooZ7pm3T1agm
bfenrMRv/dkGpHBesaPnZSLTZuKwsVewZZUNey1sBgyzLPlTBqXzqAgKZBNGjjbI
U+bYqZQTzZx3Lserf2lBhrf6qiYGoHxhqkB/za3eFg7Mjr/sStF8M4d90iwcxqti
6FEzqdNrZinQC1VG+yTKpQk8pSJX18K6gYVJ/doNCOEy5/KkB95krWkVukwu+1kF
J55C2xXyNz46es3kItiG0Jtz5Coym3XobltDX5KRpLP2
-----END CERTIFICATE-----
Generated at Thu Aug 21 17:51:56 2025 by rpki-client