Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/4s9-2JVtP2giu2Io6GHUsZ22KZk.roa
File: 4s9-2JVtP2giu2Io6GHUsZ22KZk.roa (raw, json)
Hash identifier: 7KfJCLS1AXq205sjqon7m1iopfbESWbrVFHuyd5D9Ss=
Subject key identifier: E2:CF:7E:D8:95:6D:3F:68:22:BB:62:28:E8:61:D4:B1:9D:B6:29:99
Certificate issuer: /CN=962bd76a5cac283ece0a0f8eab2c97021401fb89
Certificate serial: 0198E252A813873508B22A3401D54F52BA69
Authority key identifier: 96:2B:D7:6A:5C:AC:28:3E:CE:0A:0F:8E:AB:2C:97:02:14:01:FB:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/4s9-2JVtP2giu2Io6GHUsZ22KZk.roa
Signing time: Mon 25 Aug 2025 17:42:04 +0000
ROA not before: Mon 25 Aug 2025 17:42:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206804
IP address blocks: 85.203.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 02:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e2:52:a8:13:87:35:08:b2:2a:34:01:d5:4f:52:ba:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=962bd76a5cac283ece0a0f8eab2c97021401fb89
Validity
Not Before: Aug 25 17:42:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e2cf7ed8956d3f6822bb6228e861d4b19db62999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:5e:f4:c2:14:6c:81:10:e2:e8:20:7f:a2:4b:
8e:f5:94:9d:5b:28:ed:d3:03:2d:0a:a5:ef:73:f2:
02:e7:ca:05:98:05:33:3b:0e:2e:1d:3e:50:b9:e3:
86:09:37:56:7d:04:d9:82:12:c4:5f:c6:5c:1f:cb:
f5:6b:26:ba:87:28:11:20:6a:68:51:92:cb:e2:c6:
c5:c5:5c:4c:df:3b:6e:12:db:53:30:e0:ea:3a:16:
aa:c9:d8:00:1b:b9:5c:d3:3a:73:74:1b:de:e7:09:
50:1e:ad:4d:06:09:8b:8c:72:56:c1:88:b2:08:17:
6f:f9:6e:49:63:04:61:4f:2e:e7:15:52:f2:84:e2:
1d:fa:cb:c7:b2:66:cd:91:9d:89:d1:a9:4f:c1:76:
60:ee:8f:3a:64:06:1f:c1:61:a4:30:a9:5e:13:4c:
1a:6f:2b:4a:b3:ff:60:71:35:03:46:f8:9c:71:8c:
f9:c9:ae:5b:75:94:36:ae:9f:3c:e0:94:f3:c6:89:
09:fc:3f:97:45:7a:ee:ec:fb:c3:0e:63:73:c2:b3:
d1:e6:4e:2f:71:17:06:e1:8f:8b:6a:b2:90:1f:e2:
53:28:9a:e5:7e:5f:87:08:5c:c4:3e:92:d3:ed:ad:
1f:cd:c6:b6:95:78:83:ac:96:7c:cd:27:5c:44:74:
8b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:CF:7E:D8:95:6D:3F:68:22:BB:62:28:E8:61:D4:B1:9D:B6:29:99
X509v3 Authority Key Identifier:
keyid:96:2B:D7:6A:5C:AC:28:3E:CE:0A:0F:8E:AB:2C:97:02:14:01:FB:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/4s9-2JVtP2giu2Io6GHUsZ22KZk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.203.39.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:39:3e:75:4f:0e:78:41:ea:02:d5:00:ff:55:1b:dd:b1:91:
fb:c1:26:d9:44:c4:7f:d6:2a:da:1e:81:21:b3:a8:0e:10:b7:
cb:75:6f:57:0d:3d:eb:e6:b0:17:e1:9e:a7:80:a0:65:a5:1f:
1a:26:84:cf:c7:9c:1c:7e:ad:5f:1d:0d:07:f7:7c:07:af:34:
44:99:47:00:8e:60:08:e3:e5:53:84:14:6f:0c:5c:a7:e2:7b:
a2:23:8f:a7:a0:73:df:db:8f:16:9d:92:b3:67:46:90:27:9f:
03:02:ee:71:d9:7a:a1:f3:c4:06:9e:61:24:0a:83:d3:db:4e:
4f:8a:1c:38:41:2f:cb:35:37:99:c7:af:f1:de:9d:7d:48:e3:
0d:72:ef:be:db:a5:9a:d2:48:64:13:99:1e:69:65:ae:36:99:
14:a6:71:11:cc:4e:79:8f:71:be:76:1a:4b:ae:07:46:e1:ae:
76:1e:85:7a:51:89:46:89:ec:66:12:d0:ed:01:ee:dc:9d:2c:
8a:a7:7b:7a:43:0d:72:e2:87:4e:3b:dc:c5:18:5b:f1:45:83:
9a:c9:ca:e3:9e:c5:d7:48:98:52:ae:1a:26:4a:13:0f:5e:88:
3a:0c:b7:62:85:22:d4:f0:e0:8e:a5:91:97:ac:ca:65:c4:40:
5c:29:5a:e0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZjiUqgThzUIsio0AdVPUrppMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2MmJkNzZhNWNhYzI4M2VjZTBhMGY4ZWFiMmM5NzAyMTQw
MWZiODkwHhcNMjUwODI1MTc0MjA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMmNmN2VkODk1NmQzZjY4MjJiYjYyMjhlODYxZDRiMTlkYjYyOTk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnF70whRsgRDi6CB/okuO9ZSdWyjt
0wMtCqXvc/IC58oFmAUzOw4uHT5QueOGCTdWfQTZghLEX8ZcH8v1aya6hygRIGpo
UZLL4sbFxVxM3ztuEttTMODqOhaqydgAG7lc0zpzdBve5wlQHq1NBgmLjHJWwYiy
CBdv+W5JYwRhTy7nFVLyhOId+svHsmbNkZ2J0alPwXZg7o86ZAYfwWGkMKleE0wa
bytKs/9gcTUDRviccYz5ya5bdZQ2rp884JTzxokJ/D+XRXru7PvDDmNzwrPR5k4v
cRcG4Y+LarKQH+JTKJrlfl+HCFzEPpLT7a0fzca2lXiDrJZ8zSdcRHSLhQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOLPftiVbT9oIrtiKOhh1LGdtimZMB8GA1UdIwQY
MBaAFJYr12pcrCg+zgoPjqsslwIUAfuJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGl2WGFseXNLRDdPQ2ctT3F5eVhBaFFCLTRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8wNDY0NjAtMTAyYy00OTMwLTg0MmMt
NmFiMTExNTVmNmZiLzEvNHM5LTJKVnRQMmdpdTJJbzZHSFVzWjIyS1prLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC8wNDY0NjAtMTAyYy00OTMwLTg0MmMtNmFiMTExNTVmNmZi
LzEvbGl2WGFseXNLRDdPQ2ctT3F5eVhBaFFCLTRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVcsnMA0G
CSqGSIb3DQEBCwUAA4IBAQCMOT51Tw54QeoC1QD/VRvdsZH7wSbZRMR/1iraHoEh
s6gOELfLdW9XDT3r5rAX4Z6ngKBlpR8aJoTPx5wcfq1fHQ0H93wHrzREmUcAjmAI
4+VThBRvDFyn4nuiI4+noHPf248WnZKzZ0aQJ58DAu5x2Xqh88QGnmEkCoPT205P
ihw4QS/LNTeZx6/x3p19SOMNcu++26Wa0khkE5keaWWuNpkUpnERzE55j3G+dhpL
rgdG4a52HoV6UYlGiexmEtDtAe7cnSyKp3t6Qw1y4odOO9zFGFvxRYOaycrjnsXX
SJhSrhomShMPXog6DLdihSLU8OCOpZGXrMplxEBcKVrg
-----END CERTIFICATE-----
Generated at Sat Sep 6 07:33:25 2025 by rpki-client