Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/6e272d-add1-41ec-954b-220bc43cd246/1/rVfDbsZrGJpjUZeNznbeAo8CFJY.roa
File: rVfDbsZrGJpjUZeNznbeAo8CFJY.roa (raw, json)
Hash identifier: F3KrQHQkHhqUHzLoNM3e3utebm2/Ci8CxuSs7+7DOWk=
Subject key identifier: AD:57:C3:6E:C6:6B:18:9A:63:51:97:8D:CE:76:DE:02:8F:02:14:96
Certificate issuer: /CN=689c1d61c0f33c30b00b5ca80a15d1d2556c0743
Certificate serial: 019A7D2572E8D1B99593D40CB2888A63B957
Authority key identifier: 68:9C:1D:61:C0:F3:3C:30:B0:0B:5C:A8:0A:15:D1:D2:55:6C:07:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aJwdYcDzPDCwC1yoChXR0lVsB0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/6e272d-add1-41ec-954b-220bc43cd246/1/rVfDbsZrGJpjUZeNznbeAo8CFJY.roa
Signing time: Thu 13 Nov 2025 12:16:37 +0000
ROA not before: Thu 13 Nov 2025 12:16:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211760
IP address blocks: 195.211.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/6e272d-add1-41ec-954b-220bc43cd246/1/aJwdYcDzPDCwC1yoChXR0lVsB0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/6e272d-add1-41ec-954b-220bc43cd246/1/aJwdYcDzPDCwC1yoChXR0lVsB0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/aJwdYcDzPDCwC1yoChXR0lVsB0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Nov 2025 18:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:7d:25:72:e8:d1:b9:95:93:d4:0c:b2:88:8a:63:b9:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=689c1d61c0f33c30b00b5ca80a15d1d2556c0743
Validity
Not Before: Nov 13 12:16:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ad57c36ec66b189a6351978dce76de028f021496
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:96:89:e9:0b:a4:55:47:9a:02:86:8d:ef:9d:
21:b9:30:c6:2a:64:69:23:07:e8:81:ef:a2:2f:b1:
ea:be:c1:84:cf:b2:c4:15:ea:be:53:fb:7f:f0:7d:
12:8c:91:69:ff:9f:cd:cb:a8:35:cd:78:18:05:40:
3a:e3:31:29:36:d4:b2:0d:60:52:81:bc:c4:ed:65:
b9:4d:14:9b:32:fb:95:8a:e8:15:19:d6:85:cc:e5:
24:ef:00:68:f0:ba:2a:e2:0d:a1:7e:b1:3f:82:32:
09:5c:fb:46:b4:b9:31:a6:28:05:b4:29:f5:ab:cf:
aa:c7:e1:98:d5:2d:90:8b:fa:5c:b2:82:ee:84:be:
7c:98:94:39:0b:0c:c3:2d:61:b6:42:fe:86:64:ab:
e5:75:e0:ce:a5:d5:b0:40:f1:92:2c:41:53:24:49:
e6:64:b1:ad:28:62:a2:10:f8:7d:9f:e5:64:47:c3:
e8:fd:f1:26:7a:31:1f:0b:99:bf:ad:a0:a2:3e:68:
3c:fe:fa:df:3a:51:1a:79:c5:98:f3:9d:8f:79:02:
43:69:f8:7a:39:af:10:a2:1f:7b:68:9d:87:b6:a2:
8c:6c:56:fe:a1:46:fe:c7:a0:a6:f8:5c:0e:a7:06:
32:1c:73:e3:ee:33:d9:b4:a8:7d:7e:0c:9d:14:ff:
67:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:57:C3:6E:C6:6B:18:9A:63:51:97:8D:CE:76:DE:02:8F:02:14:96
X509v3 Authority Key Identifier:
keyid:68:9C:1D:61:C0:F3:3C:30:B0:0B:5C:A8:0A:15:D1:D2:55:6C:07:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aJwdYcDzPDCwC1yoChXR0lVsB0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6e272d-add1-41ec-954b-220bc43cd246/1/rVfDbsZrGJpjUZeNznbeAo8CFJY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6e272d-add1-41ec-954b-220bc43cd246/1/aJwdYcDzPDCwC1yoChXR0lVsB0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.211.69.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:f5:f5:e1:6a:a0:48:29:3c:5b:7d:65:31:8d:ea:97:29:3f:
35:22:22:08:29:d0:ed:39:b2:46:75:8a:23:01:e0:85:52:84:
f1:e0:eb:7d:f0:06:87:0c:d6:f5:4e:39:c8:09:91:d5:5b:e8:
e1:af:a1:ff:5d:01:97:f1:bb:fe:b5:f6:d7:c7:26:1e:24:28:
ee:17:c5:8a:9f:2c:83:94:49:44:81:4b:e0:cc:21:38:e4:32:
ad:36:ab:93:40:1c:9e:ae:ea:83:c6:33:ce:e9:8f:7d:35:16:
37:91:6b:a1:bf:4f:bd:e1:cd:ca:d2:fa:8b:3c:ec:51:ea:85:
f9:9c:1d:b4:02:ad:3e:d7:5f:ad:66:85:45:5d:3d:21:08:6d:
2d:3e:90:20:0d:e9:6b:b0:0b:92:17:b1:2c:68:3f:22:41:8d:
8b:1c:e1:bb:d8:f7:55:ab:7b:bc:71:22:13:37:40:6e:b5:21:
14:0a:59:86:14:20:5f:ee:90:6e:ab:33:2f:4f:30:71:23:f6:
34:76:0e:ff:9d:56:b5:ab:c0:0b:6c:b1:b9:74:39:25:6f:4a:
ce:ea:cc:e7:2c:e0:f5:dd:5b:c9:8e:1e:3b:9b:e1:de:ca:8c:
25:f2:64:20:f7:09:b8:81:94:f0:24:05:44:b9:d4:08:56:a5:
59:64:8e:1d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZp9JXLo0bmVk9QMsoiKY7lXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4OWMxZDYxYzBmMzNjMzBiMDBiNWNhODBhMTVkMWQyNTU2
YzA3NDMwHhcNMjUxMTEzMTIxNjM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZDU3YzM2ZWM2NmIxODlhNjM1MTk3OGRjZTc2ZGUwMjhmMDIxNDk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZaJ6QukVUeaAoaN750huTDGKmRp
Iwfoge+iL7HqvsGEz7LEFeq+U/t/8H0SjJFp/5/Ny6g1zXgYBUA64zEpNtSyDWBS
gbzE7WW5TRSbMvuViugVGdaFzOUk7wBo8Loq4g2hfrE/gjIJXPtGtLkxpigFtCn1
q8+qx+GY1S2Qi/pcsoLuhL58mJQ5CwzDLWG2Qv6GZKvldeDOpdWwQPGSLEFTJEnm
ZLGtKGKiEPh9n+VkR8Po/fEmejEfC5m/raCiPmg8/vrfOlEaecWY852PeQJDafh6
Oa8Qoh97aJ2HtqKMbFb+oUb+x6Cm+FwOpwYyHHPj7jPZtKh9fgydFP9n7QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFK1Xw27GaxiaY1GXjc523gKPAhSWMB8GA1UdIwQY
MBaAFGicHWHA8zwwsAtcqAoV0dJVbAdDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUp3ZFljRHpQREN3QzF5b0NoWFIwbFZzQjBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS82ZTI3MmQtYWRkMS00MWVjLTk1NGIt
MjIwYmM0M2NkMjQ2LzEvclZmRGJzWnJHSnBqVVplTnpuYmVBbzhDRkpZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS82ZTI3MmQtYWRkMS00MWVjLTk1NGItMjIwYmM0M2NkMjQ2
LzEvYUp3ZFljRHpQREN3QzF5b0NoWFIwbFZzQjBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw9NFMA0G
CSqGSIb3DQEBCwUAA4IBAQA79fXhaqBIKTxbfWUxjeqXKT81IiIIKdDtObJGdYoj
AeCFUoTx4Ot98AaHDNb1TjnICZHVW+jhr6H/XQGX8bv+tfbXxyYeJCjuF8WKnyyD
lElEgUvgzCE45DKtNquTQByeruqDxjPO6Y99NRY3kWuhv0+94c3K0vqLPOxR6oX5
nB20Aq0+11+tZoVFXT0hCG0tPpAgDelrsAuSF7EsaD8iQY2LHOG72PdVq3u8cSIT
N0ButSEUClmGFCBf7pBuqzMvTzBxI/Y0dg7/nVa1q8ALbLG5dDklb0rO6sznLOD1
3VvJjh47m+Heyowl8mQg9wm4gZTwJAVEudQIVqVZZI4d
-----END CERTIFICATE-----
Generated at Sun Nov 16 01:59:21 2025 by rpki-client