Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/ax8BOGm-GJfb7NvYozzZ62QdRvA.roa
File: ax8BOGm-GJfb7NvYozzZ62QdRvA.roa (raw, json)
Hash identifier: cIhLyiLj0Foy8DN1xACbtMKul9Di0Oi3YIqfjaju72U=
Subject key identifier: 6B:1F:01:38:69:BE:18:97:DB:EC:DB:D8:A3:3C:D9:EB:64:1D:46:F0
Certificate issuer: /CN=53c77312e0d2cec845a04613845f8a1be263c399
Certificate serial: 0198F111DC2A60927586515D28D99BC39682
Authority key identifier: 53:C7:73:12:E0:D2:CE:C8:45:A0:46:13:84:5F:8A:1B:E2:63:C3:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8dzEuDSzshFoEYThF-KG-Jjw5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/ax8BOGm-GJfb7NvYozzZ62QdRvA.roa
Signing time: Thu 28 Aug 2025 14:25:36 +0000
ROA not before: Thu 28 Aug 2025 14:25:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209240
IP address blocks: 92.119.236.0/22 maxlen: 24
92.119.236.0/24 maxlen: 24
92.119.237.0/24 maxlen: 24
92.119.238.0/24 maxlen: 24
92.119.239.0/24 maxlen: 24
2a09:bc40::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/U8dzEuDSzshFoEYThF-KG-Jjw5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/U8dzEuDSzshFoEYThF-KG-Jjw5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/U8dzEuDSzshFoEYThF-KG-Jjw5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:f1:11:dc:2a:60:92:75:86:51:5d:28:d9:9b:c3:96:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53c77312e0d2cec845a04613845f8a1be263c399
Validity
Not Before: Aug 28 14:25:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6b1f013869be1897dbecdbd8a33cd9eb641d46f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2a:27:f0:4b:ed:59:c9:f8:c1:64:db:8e:3d:
ab:42:ea:ce:e3:92:6a:2d:33:77:f8:78:97:36:98:
c2:62:b7:f3:9a:76:a2:a9:e2:7a:e6:5e:4e:30:25:
7d:e0:47:af:ff:93:34:b0:87:3b:f8:b1:e4:e8:bf:
c3:15:2c:c8:99:37:25:9b:54:09:99:7b:8f:99:ca:
92:f8:5e:ad:a9:bd:3e:89:46:ad:d4:a8:de:ba:e2:
4d:a5:4d:dc:48:63:a0:56:e2:43:b3:aa:c2:c0:b6:
04:64:88:e3:64:5c:da:03:69:ef:b9:b9:ed:eb:b1:
f8:95:1f:b1:e6:13:6a:5b:1d:e2:73:28:77:93:54:
62:9d:a6:fd:d5:40:a5:99:86:6e:1c:bb:16:65:2d:
8c:6c:9b:0e:e3:97:5e:45:f6:24:5a:f0:98:08:36:
17:08:56:0b:d6:e0:76:34:92:98:66:71:15:ac:0f:
6f:a7:2c:21:54:d3:03:c8:e2:15:0b:2c:ac:e6:c6:
77:1d:f6:96:37:ef:fb:01:43:64:33:a6:87:70:78:
b4:63:44:dd:c1:16:55:ae:a6:a3:3c:f5:be:14:06:
83:70:3f:01:b0:b9:ad:22:b5:7a:14:09:9c:e8:45:
b0:fd:63:41:d8:df:b5:e1:53:90:9c:01:dd:f9:ca:
62:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:1F:01:38:69:BE:18:97:DB:EC:DB:D8:A3:3C:D9:EB:64:1D:46:F0
X509v3 Authority Key Identifier:
keyid:53:C7:73:12:E0:D2:CE:C8:45:A0:46:13:84:5F:8A:1B:E2:63:C3:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8dzEuDSzshFoEYThF-KG-Jjw5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/ax8BOGm-GJfb7NvYozzZ62QdRvA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/U8dzEuDSzshFoEYThF-KG-Jjw5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.236.0/22
IPv6:
2a09:bc40::/29
Signature Algorithm: sha256WithRSAEncryption
7d:a2:c5:1a:1e:03:ec:cb:0e:f5:d0:b4:63:87:40:ac:39:e8:
3c:1d:d7:46:01:18:6f:67:f5:4c:78:24:23:47:59:95:71:c7:
2d:21:5f:f9:92:3b:9b:80:12:a2:4b:63:c0:ba:50:d3:45:75:
8e:b2:79:72:90:c9:8d:8b:de:7e:51:f9:bb:41:78:9c:80:f9:
bd:90:25:80:0d:e8:99:b9:b1:b9:67:f1:65:a1:e0:e5:5a:ca:
c4:35:64:93:9a:47:eb:f2:91:a5:47:a8:b2:9d:81:8f:b7:6f:
7b:a2:80:16:c7:bf:67:21:b9:93:26:8f:be:47:c6:64:7f:7e:
0e:e4:28:b5:eb:9a:cb:4a:c0:55:de:d7:1c:fb:02:e5:22:3f:
66:7a:c3:53:b7:c8:7e:6e:0f:01:4b:67:16:25:50:68:95:49:
f2:a1:f3:43:15:7c:1d:ce:37:73:a0:cc:4e:a2:ff:35:b3:c4:
94:dc:ad:8e:83:d7:2e:a7:21:c3:7a:c7:6d:70:5a:2a:45:3a:
17:99:17:30:21:8b:2d:7a:8f:f9:25:99:e3:e4:8a:62:53:0e:
8f:a4:39:80:ee:cf:d6:c7:e1:c5:14:e7:cb:90:78:5f:d5:52:
7a:f7:64:88:9a:04:9e:43:aa:ee:03:78:21:18:a3:fc:55:14:
15:41:b5:7a
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZjxEdwqYJJ1hlFdKNmbw5aCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzYzc3MzEyZTBkMmNlYzg0NWEwNDYxMzg0NWY4YTFiZTI2
M2MzOTkwHhcNMjUwODI4MTQyNTM2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YjFmMDEzODY5YmUxODk3ZGJlY2RiZDhhMzNjZDllYjY0MWQ0NmYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtion8EvtWcn4wWTbjj2rQurO45Jq
LTN3+HiXNpjCYrfzmnaiqeJ65l5OMCV94Eev/5M0sIc7+LHk6L/DFSzImTclm1QJ
mXuPmcqS+F6tqb0+iUat1KjeuuJNpU3cSGOgVuJDs6rCwLYEZIjjZFzaA2nvubnt
67H4lR+x5hNqWx3icyh3k1Rinab91UClmYZuHLsWZS2MbJsO45deRfYkWvCYCDYX
CFYL1uB2NJKYZnEVrA9vpywhVNMDyOIVCyys5sZ3HfaWN+/7AUNkM6aHcHi0Y0Td
wRZVrqajPPW+FAaDcD8BsLmtIrV6FAmc6EWw/WNB2N+14VOQnAHd+cpi1QIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFGsfAThpvhiX2+zb2KM82etkHUbwMB8GA1UdIwQY
MBaAFFPHcxLg0s7IRaBGE4RfihviY8OZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVThkekV1RFN6c2hGb0VZVGhGLUtHLUpqdzVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9kZDk4MWQtZTFmNS00ODM3LTkwMjct
YzliZjU1ZDlkMWJhLzEvYXg4Qk9HbS1HSmZiN052WW96elo2MlFkUnZBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS9kZDk4MWQtZTFmNS00ODM3LTkwMjctYzliZjU1ZDlkMWJh
LzEvVThkekV1RFN6c2hGb0VZVGhGLUtHLUpqdzVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCXHfsMA0E
AgACMAcDBQMqCbxAMA0GCSqGSIb3DQEBCwUAA4IBAQB9osUaHgPsyw710LRjh0Cs
Oeg8HddGARhvZ/VMeCQjR1mVccctIV/5kjubgBKiS2PAulDTRXWOsnlykMmNi95+
Ufm7QXicgPm9kCWADeiZubG5Z/FloeDlWsrENWSTmkfr8pGlR6iynYGPt297ooAW
x79nIbmTJo++R8Zkf34O5Ci165rLSsBV3tcc+wLlIj9mesNTt8h+bg8BS2cWJVBo
lUnyofNDFXwdzjdzoMxOov81s8SU3K2Og9cupyHDesdtcFoqRToXmRcwIYsteo/5
JZnj5IpiUw6PpDmA7s/Wx+HFFOfLkHhf1VJ692SImgSeQ6ruA3ghGKP8VRQVQbV6
-----END CERTIFICATE-----
Generated at Mon Sep 8 08:14:37 2025 by rpki-client