Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/ysDvjpkml6g6K-DqIYRi6J0baPU.roa
File: ysDvjpkml6g6K-DqIYRi6J0baPU.roa (raw, json)
Hash identifier: mj+sLh9AiZOjQbPEbepB6nVkT3f+6xwkTScTIa3lm3k=
Subject key identifier: CA:C0:EF:8E:99:26:97:A8:3A:2B:E0:EA:21:84:62:E8:9D:1B:68:F5
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 0199152F9604A979B608953C67813923DED8
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/ysDvjpkml6g6K-DqIYRi6J0baPU.roa
Signing time: Thu 04 Sep 2025 14:44:24 +0000
ROA not before: Thu 04 Sep 2025 14:44:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48678
IP address blocks: 109.236.49.0/24 maxlen: 24
109.236.50.0/24 maxlen: 24
109.236.51.0/24 maxlen: 24
185.254.28.0/24 maxlen: 24
185.254.29.0/24 maxlen: 24
193.35.152.0/24 maxlen: 24
193.35.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 17:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:15:2f:96:04:a9:79:b6:08:95:3c:67:81:39:23:de:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Sep 4 14:44:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cac0ef8e992697a83a2be0ea218462e89d1b68f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a3:96:c0:34:aa:06:f5:bb:0c:10:79:51:e2:
3b:91:72:2c:fa:45:eb:4c:d5:a2:35:91:53:92:fd:
54:52:7d:2b:db:b4:fd:da:8d:94:a2:18:e2:41:af:
c6:67:d7:f2:d9:6d:9d:83:05:f4:29:2d:5b:2d:95:
87:57:eb:84:17:41:ae:b1:63:f8:db:0d:58:86:4d:
b2:13:f4:69:6a:1c:5a:67:fa:dc:ce:6e:2d:57:60:
1c:9b:b9:eb:76:0e:d9:8e:28:ea:2f:3d:ef:41:d5:
77:99:8b:94:e3:e6:c0:32:ef:5a:87:db:de:e7:7b:
7d:af:d8:54:02:09:39:91:b8:ea:74:f6:f7:27:45:
56:10:03:89:9d:c5:c1:41:64:57:68:9c:f5:70:ed:
c6:8c:5a:9f:70:6f:59:3c:50:83:4c:10:8b:91:51:
04:31:68:5e:2b:55:45:d6:9e:04:51:26:f5:03:28:
ed:9c:d8:f8:c5:e4:66:4f:a0:5d:07:f1:b5:17:dc:
9f:73:c5:55:1f:11:30:b1:01:2a:d4:3b:38:96:30:
f7:fa:e3:b0:08:20:49:57:47:93:62:22:b5:c6:39:
3c:3e:f5:9d:f8:47:82:cd:3a:7f:ea:71:11:4f:fa:
b7:32:1b:3c:68:1b:73:ba:34:db:88:cb:70:06:be:
0d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:C0:EF:8E:99:26:97:A8:3A:2B:E0:EA:21:84:62:E8:9D:1B:68:F5
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/ysDvjpkml6g6K-DqIYRi6J0baPU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.236.49.0-109.236.51.255
185.254.28.0/23
193.35.152.0/23
Signature Algorithm: sha256WithRSAEncryption
5f:7a:9c:45:ef:fe:46:b4:e4:2e:52:58:b3:12:5b:bf:02:10:
d1:f9:28:a9:05:11:a5:d3:04:40:1e:90:cd:82:8e:81:d5:8a:
fd:13:d1:3c:64:93:6c:6d:de:e0:a6:b3:e1:58:6a:49:bb:af:
1b:56:de:af:43:81:40:d5:58:fa:7e:7a:be:48:32:9b:f4:e9:
0d:ce:b0:a9:39:da:80:0c:73:f5:31:68:56:9f:d9:ac:be:44:
59:9e:f1:fe:1f:4e:bd:ae:11:6f:6b:c5:dd:dc:bb:16:d6:56:
78:e2:e9:23:35:ca:b8:5d:c8:33:5b:dc:2a:29:e3:bb:d4:c0:
e1:e7:8d:de:4a:f3:1f:55:c0:59:b8:c8:f4:c3:1f:9b:d3:02:
11:ac:d9:b7:8d:b1:b6:78:28:34:17:02:e6:9b:51:14:69:c3:
df:c9:4b:0b:49:89:9a:d3:84:76:b0:fa:56:97:8e:72:18:43:
4f:5d:4f:bd:da:4c:1a:9b:18:03:1f:ed:a8:33:79:55:f8:25:
f4:f1:51:18:fb:62:6e:f4:3d:35:f7:fe:fe:f7:83:6e:3b:62:
09:68:52:18:0d:21:10:db:e6:0b:64:a0:ca:7e:db:72:5b:10:
59:bf:18:49:1f:f0:cb:41:c7:46:7c:c4:a2:a1:85:98:35:c5:
52:d5:89:7a
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAZkVL5YEqXm2CJU8Z4E5I97YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2MTZjNDE5NTE1MmVmZmVkYmY3YjNhZmVlMmFhNzJlMTkw
OTBlNGQwHhcNMjUwOTA0MTQ0NDI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYWMwZWY4ZTk5MjY5N2E4M2EyYmUwZWEyMTg0NjJlODlkMWI2OGY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3aOWwDSqBvW7DBB5UeI7kXIs+kXr
TNWiNZFTkv1UUn0r27T92o2UohjiQa/GZ9fy2W2dgwX0KS1bLZWHV+uEF0GusWP4
2w1Yhk2yE/RpahxaZ/rczm4tV2Acm7nrdg7ZjijqLz3vQdV3mYuU4+bAMu9ah9ve
53t9r9hUAgk5kbjqdPb3J0VWEAOJncXBQWRXaJz1cO3GjFqfcG9ZPFCDTBCLkVEE
MWheK1VF1p4EUSb1AyjtnNj4xeRmT6BdB/G1F9yfc8VVHxEwsQEq1Ds4ljD3+uOw
CCBJV0eTYiK1xjk8PvWd+EeCzTp/6nERT/q3Mhs8aBtzujTbiMtwBr4NdQIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFMrA746ZJpeoOivg6iGEYuidG2j1MB8GA1UdIwQY
MBaAFMYWxBlRUu/+2/ezr+4qpy4ZCQ5NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjkt
MzlmZGI5ODZmMDU5LzEveXNEdmpwa21sNmc2Sy1EcUlZUmk2SjBiYVBVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjktMzlmZGI5ODZmMDU5
LzEveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBABt7DED
BAJt7DADBAG5/hwDBAHBI5gwDQYJKoZIhvcNAQELBQADggEBAF96nEXv/ka05C5S
WLMSW78CENH5KKkFEaXTBEAekM2CjoHViv0T0Txkk2xt3uCms+FYakm7rxtW3q9D
gUDVWPp+er5IMpv06Q3OsKk52oAMc/UxaFaf2ay+RFme8f4fTr2uEW9rxd3cuxbW
Vnji6SM1yrhdyDNb3Cop47vUwOHnjd5K8x9VwFm4yPTDH5vTAhGs2beNsbZ4KDQX
AuabURRpw9/JSwtJiZrThHaw+laXjnIYQ09dT73aTBqbGAMf7agzeVX4JfTxURj7
Ym70PTX3/v73g247YgloUhgNIRDb5gtkoMp+23JbEFm/GEkf8MtBx0Z8xKKhhZg1
xVLViXo=
-----END CERTIFICATE-----
Generated at Sat Sep 6 00:34:20 2025 by rpki-client