Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/8795e0-efb7-48c5-849f-cfceb87973dd/1/6P_gjpklOUDV-ve9569qPN1TSWk.roa
File: 6P_gjpklOUDV-ve9569qPN1TSWk.roa (raw, json)
Hash identifier: nsUb94k03FiZ9rWYZ36yrlnNORo6w84WRFHmo8Sy34I=
Subject key identifier: E8:FF:E0:8E:99:25:39:40:D5:FA:F7:BD:E7:AF:6A:3C:DD:53:49:69
Certificate issuer: /CN=81f3a87e11366b545a5a127b83287653b18c8a56
Certificate serial: 019A5EE32D17864FBC05249BA4BD68669C85
Authority key identifier: 81:F3:A8:7E:11:36:6B:54:5A:5A:12:7B:83:28:76:53:B1:8C:8A:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gfOofhE2a1RaWhJ7gyh2U7GMilY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/8795e0-efb7-48c5-849f-cfceb87973dd/1/6P_gjpklOUDV-ve9569qPN1TSWk.roa
Signing time: Fri 07 Nov 2025 15:15:37 +0000
ROA not before: Fri 07 Nov 2025 15:15:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208363
IP address blocks: 45.128.112.0/24 maxlen: 24
45.128.113.0/24 maxlen: 24
45.128.114.0/23 maxlen: 23
185.171.164.0/23 maxlen: 23
185.232.134.0/24 maxlen: 24
188.93.38.0/23 maxlen: 23
213.184.72.0/23 maxlen: 23
213.184.74.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/8795e0-efb7-48c5-849f-cfceb87973dd/1/gfOofhE2a1RaWhJ7gyh2U7GMilY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/8795e0-efb7-48c5-849f-cfceb87973dd/1/gfOofhE2a1RaWhJ7gyh2U7GMilY.mft
rsync://rpki.ripe.net/repository/DEFAULT/gfOofhE2a1RaWhJ7gyh2U7GMilY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:5e:e3:2d:17:86:4f:bc:05:24:9b:a4:bd:68:66:9c:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81f3a87e11366b545a5a127b83287653b18c8a56
Validity
Not Before: Nov 7 15:15:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e8ffe08e99253940d5faf7bde7af6a3cdd534969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:98:a4:38:92:de:78:1c:4d:97:d1:b1:8b:c9:
d6:48:a7:9d:56:29:f4:37:cd:48:5b:40:ab:ee:b3:
85:6d:d2:3b:86:b9:55:ea:74:0c:0e:3f:2e:48:86:
ea:be:7a:53:ef:1d:3a:2e:47:99:dd:aa:be:78:bf:
82:bc:63:8d:b7:96:65:c8:c7:75:5c:fe:23:63:1d:
86:a4:da:01:43:96:df:40:79:a6:89:2e:db:a2:2c:
49:56:7b:87:db:df:16:d9:5c:36:22:ca:56:11:a5:
db:5d:9e:26:2b:c0:b7:d9:b4:51:ea:ff:b0:39:bf:
1a:1e:e1:c0:9d:7a:2e:72:6d:15:fe:9f:88:ac:84:
06:dc:07:3d:cd:da:1f:73:cf:74:66:e6:17:46:f7:
6f:c3:5f:3d:3b:86:84:e4:ce:af:2e:b2:56:0e:a6:
9e:ed:ab:49:ff:fa:8f:79:35:a7:88:73:38:6f:d6:
13:e9:5c:2b:a9:f5:24:30:f3:ff:80:77:7b:f3:a6:
e3:34:94:fe:06:41:19:f0:85:83:b4:44:c8:8d:7d:
77:da:ae:22:e0:2f:cd:2c:e0:d7:b1:18:fe:4f:ff:
30:71:00:92:f8:93:4b:c0:1b:78:df:d7:b6:8b:8f:
98:9c:09:89:c4:9c:5d:7f:8d:c3:61:46:45:89:81:
bc:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:FF:E0:8E:99:25:39:40:D5:FA:F7:BD:E7:AF:6A:3C:DD:53:49:69
X509v3 Authority Key Identifier:
keyid:81:F3:A8:7E:11:36:6B:54:5A:5A:12:7B:83:28:76:53:B1:8C:8A:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gfOofhE2a1RaWhJ7gyh2U7GMilY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/8795e0-efb7-48c5-849f-cfceb87973dd/1/6P_gjpklOUDV-ve9569qPN1TSWk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/8795e0-efb7-48c5-849f-cfceb87973dd/1/gfOofhE2a1RaWhJ7gyh2U7GMilY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.112.0/22
185.171.164.0/23
185.232.134.0/24
188.93.38.0/23
213.184.72.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:90:de:51:b3:38:e9:2c:d0:c1:77:f1:f8:85:03:c6:24:c1:
84:4c:7f:0d:2c:d0:14:a9:81:9b:59:d2:86:e4:0d:ea:e0:a1:
d0:e3:ac:4c:17:e3:f7:da:f1:1b:07:11:e8:fa:12:6e:39:fb:
5f:af:b8:c0:86:2b:f0:3c:c1:39:cc:57:8e:0e:85:92:09:e6:
12:b9:83:7c:e3:a7:04:b0:19:49:96:55:f8:78:99:af:06:57:
ae:c2:3a:8b:0f:d5:92:5b:ae:8c:ac:bf:b8:11:1c:eb:68:66:
89:17:87:cb:d4:42:02:e9:b8:bf:21:14:ee:bb:a8:e7:93:5c:
46:ab:37:74:90:7c:6f:01:01:ac:52:d8:e2:e5:3d:65:83:b0:
6a:0b:ad:44:9c:bc:07:f9:b5:cb:c6:5a:d9:a1:ec:13:ef:25:
48:5b:5a:b9:7a:7b:98:6f:5c:9d:5d:6b:c8:bf:78:67:cf:71:
81:5d:55:48:47:8b:8b:8d:26:ec:a2:fa:b9:76:09:82:8e:d5:
a4:20:20:ef:0a:c6:ef:ea:69:5e:f9:a7:2b:fc:6d:61:23:18:
29:4d:93:40:15:b8:04:75:37:4d:5a:b0:ab:2d:3c:e9:37:5c:
ec:aa:ea:27:4e:d3:44:fe:44:08:43:44:10:55:35:16:74:8b:
ef:ef:ef:5d
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZpe4y0Xhk+8BSSbpL1oZpyFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxZjNhODdlMTEzNjZiNTQ1YTVhMTI3YjgzMjg3NjUzYjE4
YzhhNTYwHhcNMjUxMTA3MTUxNTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOGZmZTA4ZTk5MjUzOTQwZDVmYWY3YmRlN2FmNmEzY2RkNTM0OTY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZikOJLeeBxNl9Gxi8nWSKedVin0
N81IW0Cr7rOFbdI7hrlV6nQMDj8uSIbqvnpT7x06LkeZ3aq+eL+CvGONt5ZlyMd1
XP4jYx2GpNoBQ5bfQHmmiS7boixJVnuH298W2Vw2IspWEaXbXZ4mK8C32bRR6v+w
Ob8aHuHAnXoucm0V/p+IrIQG3Ac9zdofc890ZuYXRvdvw189O4aE5M6vLrJWDqae
7atJ//qPeTWniHM4b9YT6VwrqfUkMPP/gHd786bjNJT+BkEZ8IWDtETIjX132q4i
4C/NLODXsRj+T/8wcQCS+JNLwBt439e2i4+YnAmJxJxdf43DYUZFiYG8FQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFOj/4I6ZJTlA1fr3veevajzdU0lpMB8GA1UdIwQY
MBaAFIHzqH4RNmtUWloSe4ModlOxjIpWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2ZPb2ZoRTJhMVJhV2hKN2d5aDJVN0dNaWxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC84Nzk1ZTAtZWZiNy00OGM1LTg0OWYt
Y2ZjZWI4Nzk3M2RkLzEvNlBfZ2pwa2xPVURWLXZlOTU2OXFQTjFUU1drLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC84Nzk1ZTAtZWZiNy00OGM1LTg0OWYtY2ZjZWI4Nzk3M2Rk
LzEvZ2ZPb2ZoRTJhMVJhV2hKN2d5aDJVN0dNaWxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQCLYBwAwQB
uaukAwQAueiGAwQBvF0mAwQC1bhIMA0GCSqGSIb3DQEBCwUAA4IBAQAbkN5Rszjp
LNDBd/H4hQPGJMGETH8NLNAUqYGbWdKG5A3q4KHQ46xMF+P32vEbBxHo+hJuOftf
r7jAhivwPME5zFeODoWSCeYSuYN846cEsBlJllX4eJmvBleuwjqLD9WSW66MrL+4
ERzraGaJF4fL1EIC6bi/IRTuu6jnk1xGqzd0kHxvAQGsUtji5T1lg7BqC61EnLwH
+bXLxlrZoewT7yVIW1q5enuYb1ydXWvIv3hnz3GBXVVIR4uLjSbsovq5dgmCjtWk
ICDvCsbv6mle+acr/G1hIxgpTZNAFbgEdTdNWrCrLTzpN1zsquonTtNE/kQIQ0QQ
VTUWdIvv7+9d
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:53:14 2025 by rpki-client