Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/6BizQIFQNxmvgZZZRqldkym-0r4.roa
File: 6BizQIFQNxmvgZZZRqldkym-0r4.roa (raw, json)
Hash identifier: sdKpPUioPe7bar7pvbiRZm1i1Qb6yWNcK+RnwGlD0EE=
Subject key identifier: E8:18:B3:40:81:50:37:19:AF:81:96:59:46:A9:5D:93:29:BE:D2:BE
Certificate issuer: /CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4
Certificate serial: 01993D936B6B898D26194C097E70998C1216
Authority key identifier: F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/6BizQIFQNxmvgZZZRqldkym-0r4.roa
Signing time: Fri 12 Sep 2025 10:58:15 +0000
ROA not before: Fri 12 Sep 2025 10:58:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212666
IP address blocks: 176.103.224.0/22 maxlen: 24
176.103.232.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Sep 2025 14:36:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:3d:93:6b:6b:89:8d:26:19:4c:09:7e:70:99:8c:12:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4
Validity
Not Before: Sep 12 10:58:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e818b34081503719af81965946a95d9329bed2be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:80:0b:9a:6e:4a:fd:09:d7:d9:4c:a1:e7:ab:
d4:64:c7:36:c4:bc:19:f3:f9:38:52:b8:e6:4f:21:
7b:4b:77:54:9d:8f:e4:8d:80:fc:df:ac:20:f0:62:
f1:6c:2f:96:e4:bd:81:ca:f0:19:bb:c7:42:bd:9b:
1c:76:d2:66:5d:f4:d9:0a:be:5c:dd:0e:a9:39:24:
a3:81:59:7e:3c:4d:3b:29:b2:29:f5:12:90:20:8d:
9e:b0:29:b7:4b:b1:ab:51:b7:2f:ca:be:24:2d:68:
30:ba:ba:96:8e:52:03:a1:71:6a:cc:07:12:93:af:
79:2b:18:76:45:78:ae:62:f2:51:d4:72:30:a2:6d:
79:55:ec:a0:34:8c:45:07:fa:f0:39:78:2c:68:ee:
28:a9:48:d8:92:17:5b:ef:ab:12:a8:14:d4:0f:90:
9e:13:b3:8c:1e:e6:74:5b:2f:eb:f5:8c:c7:34:43:
e9:0a:c5:b2:fa:38:34:b2:ba:29:09:43:51:26:c2:
0b:89:a6:ee:56:6e:d8:f0:c6:1e:4f:70:d0:10:34:
84:8a:fa:91:3a:e5:68:7c:12:c6:c6:41:93:f7:ee:
55:69:94:26:ef:e0:b9:e9:35:2d:33:84:d0:62:6a:
88:b1:fc:87:8a:60:21:5f:e2:5d:2c:8b:29:bd:a8:
33:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:18:B3:40:81:50:37:19:AF:81:96:59:46:A9:5D:93:29:BE:D2:BE
X509v3 Authority Key Identifier:
keyid:F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/6BizQIFQNxmvgZZZRqldkym-0r4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.103.224.0/22
176.103.232.0/22
Signature Algorithm: sha256WithRSAEncryption
8c:76:fa:40:d9:c7:45:3f:a6:cc:92:a2:8d:d5:54:dd:76:24:
e7:90:59:e8:a8:14:ef:65:7d:18:d0:f0:37:49:f1:a5:7f:7a:
b3:f1:53:74:02:0e:1a:1b:9d:22:97:97:23:1e:ca:d2:dc:a3:
b8:13:5b:7f:d4:9e:50:cd:c6:59:a8:e6:31:6f:68:e2:ec:92:
68:9a:f8:8d:d4:77:8b:82:ef:e8:60:48:c0:5e:c7:75:f0:ee:
59:e4:6f:19:48:87:bb:85:d7:6b:ff:75:b0:54:d7:e0:e8:af:
73:5f:34:6d:5b:c8:92:56:72:b3:bf:df:41:8d:e4:84:aa:bb:
d9:89:0b:e9:c4:fa:64:29:17:82:6a:a9:b3:a8:c8:82:4f:5e:
d6:ee:71:07:50:d5:4a:04:fc:a3:eb:dd:94:e3:ba:f8:9a:9e:
24:9d:28:e3:99:a8:73:f3:74:1e:fd:e5:a5:78:fc:73:9e:42:
b0:19:76:0d:87:cb:88:d3:15:bf:a8:66:7b:dd:d4:0f:6a:96:
bf:90:69:d9:42:46:a4:39:8a:37:1b:73:fa:1c:d2:e8:2d:6f:
90:49:e6:ee:fa:0c:e4:56:b7:c5:bb:37:9c:10:6f:96:86:fa:
5d:43:53:2e:a1:06:c4:1b:42:a5:1a:dd:8e:2e:0a:84:19:10:
3c:81:cc:7f
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZk9k2triY0mGUwJfnCZjBIWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0YjllYTRkOWQ4M2E3MjhkZDQxMDI5ZTg2YWY4YTEzMGQz
ODllZDQwHhcNMjUwOTEyMTA1ODE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlODE4YjM0MDgxNTAzNzE5YWY4MTk2NTk0NmE5NWQ5MzI5YmVkMmJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1YALmm5K/QnX2Uyh56vUZMc2xLwZ
8/k4UrjmTyF7S3dUnY/kjYD836wg8GLxbC+W5L2ByvAZu8dCvZscdtJmXfTZCr5c
3Q6pOSSjgVl+PE07KbIp9RKQII2esCm3S7GrUbcvyr4kLWgwurqWjlIDoXFqzAcS
k695Kxh2RXiuYvJR1HIwom15VeygNIxFB/rwOXgsaO4oqUjYkhdb76sSqBTUD5Ce
E7OMHuZ0Wy/r9YzHNEPpCsWy+jg0sropCUNRJsILiabuVm7Y8MYeT3DQEDSEivqR
OuVofBLGxkGT9+5VaZQm7+C56TUtM4TQYmqIsfyHimAhX+JdLIspvagzVQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFOgYs0CBUDcZr4GWWUapXZMpvtK+MB8GA1UdIwQY
MBaAFPS56k2dg6co3UECnoavihMNOJ7UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUxucVRaMkRweWpkUVFLZWhxLUtFdzA0bnRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8xNGYzMDUtMDEzYi00NTNlLWFjNTMt
MDgxY2IyYjE3YWI1LzEvNkJpelFJRlFOeG12Z1paWlJxbGRreW0tMHI0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My8xNGYzMDUtMDEzYi00NTNlLWFjNTMtMDgxY2IyYjE3YWI1
LzEvOUxucVRaMkRweWpkUVFLZWhxLUtFdzA0bnRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCsGfgAwQC
sGfoMA0GCSqGSIb3DQEBCwUAA4IBAQCMdvpA2cdFP6bMkqKN1VTddiTnkFnoqBTv
ZX0Y0PA3SfGlf3qz8VN0Ag4aG50il5cjHsrS3KO4E1t/1J5QzcZZqOYxb2ji7JJo
mviN1HeLgu/oYEjAXsd18O5Z5G8ZSIe7hddr/3WwVNfg6K9zXzRtW8iSVnKzv99B
jeSEqrvZiQvpxPpkKReCaqmzqMiCT17W7nEHUNVKBPyj692U47r4mp4knSjjmahz
83Qe/eWlePxznkKwGXYNh8uI0xW/qGZ73dQPapa/kGnZQkakOYo3G3P6HNLoLW+Q
Sebu+gzkVrfFuzecEG+WhvpdQ1MuoQbEG0KlGt2OLgqEGRA8gcx/
-----END CERTIFICATE-----
Generated at Fri Sep 19 18:06:29 2025 by rpki-client