Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/6aGDqB6zTTZjCBfP5YRuloy9Ado.roa
File: 6aGDqB6zTTZjCBfP5YRuloy9Ado.roa (raw, json)
Hash identifier: Jsw6J2dvplRCWXPLk7WA0FiHFQe7TiXPeaMlIBY4918=
Subject key identifier: E9:A1:83:A8:1E:B3:4D:36:63:08:17:CF:E5:84:6E:96:8C:BD:01:DA
Certificate issuer: /CN=962bd76a5cac283ece0a0f8eab2c97021401fb89
Certificate serial: 0198E25392973B5D9F50165F7CDD72EA5C05
Authority key identifier: 96:2B:D7:6A:5C:AC:28:3E:CE:0A:0F:8E:AB:2C:97:02:14:01:FB:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/6aGDqB6zTTZjCBfP5YRuloy9Ado.roa
Signing time: Mon 25 Aug 2025 17:43:04 +0000
ROA not before: Mon 25 Aug 2025 17:43:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206092
IP address blocks: 85.203.13.0/24 maxlen: 24
85.203.21.0/24 maxlen: 24
85.203.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 02:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e2:53:92:97:3b:5d:9f:50:16:5f:7c:dd:72:ea:5c:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=962bd76a5cac283ece0a0f8eab2c97021401fb89
Validity
Not Before: Aug 25 17:43:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e9a183a81eb34d36630817cfe5846e968cbd01da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:a1:a0:6f:04:3f:a4:80:38:f7:46:58:45:d9:
d6:3a:1d:31:16:51:cc:a4:39:ea:c5:93:34:04:e8:
af:78:45:3e:3d:9d:c9:ae:82:66:57:79:36:f2:60:
19:58:76:34:a9:d9:a1:69:8b:91:67:7b:f9:18:10:
11:40:08:41:a0:ff:db:53:ef:b5:6b:56:aa:13:02:
5b:60:3d:27:5e:fc:7a:16:ff:c7:59:4c:b0:8a:d3:
97:65:e0:5e:be:25:62:b9:85:ac:6b:ca:5a:60:53:
4f:bb:d0:f7:79:5f:96:be:d4:1a:d6:de:57:a6:fa:
8e:f3:9d:98:42:18:89:9a:09:76:3a:10:1a:5a:92:
6b:6f:b2:a1:f2:49:72:f8:08:26:88:51:9d:36:55:
f3:b0:0f:0c:b0:34:d0:59:af:c1:a1:12:a5:c6:1c:
62:e5:90:8d:7f:b6:11:d4:4b:e4:69:87:dd:d1:04:
2f:9e:07:ba:60:93:73:18:50:5e:6e:e5:f6:11:1f:
5a:81:e7:38:a5:98:ef:f1:9a:f7:5b:bd:93:e1:d3:
3e:34:08:6a:cc:1f:47:93:00:98:82:b9:1f:a8:c3:
db:a8:52:02:37:41:46:f9:e7:40:1c:82:93:04:fc:
dd:b6:51:7a:20:25:27:d3:17:cc:d4:aa:f6:86:a7:
24:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:A1:83:A8:1E:B3:4D:36:63:08:17:CF:E5:84:6E:96:8C:BD:01:DA
X509v3 Authority Key Identifier:
keyid:96:2B:D7:6A:5C:AC:28:3E:CE:0A:0F:8E:AB:2C:97:02:14:01:FB:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/6aGDqB6zTTZjCBfP5YRuloy9Ado.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.203.13.0/24
85.203.21.0/24
85.203.34.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:7c:ad:08:5b:84:1e:79:9b:71:51:67:81:d6:bf:19:37:36:
3e:79:97:b7:3a:03:5d:7b:78:14:39:e3:4b:d6:a2:ce:80:37:
a5:07:b0:75:79:ad:b5:7f:f6:61:a2:1f:04:5d:9a:ad:d0:e9:
f0:44:99:40:37:24:b7:bf:bc:58:fe:14:a3:d9:c9:59:7d:f2:
08:23:5c:65:14:41:98:f5:7d:b0:c9:ad:0e:2a:9e:31:86:fb:
cd:68:31:d2:8c:66:72:df:27:6a:1b:dc:4f:35:e7:c4:a8:34:
6b:31:cb:68:24:3e:a4:29:a1:a8:80:24:a7:f1:d1:91:cc:34:
75:09:07:38:69:cf:1d:49:5c:1a:02:e3:a9:01:5b:14:e3:b4:
46:bf:79:03:04:54:0b:58:75:68:ca:1e:08:e6:0e:a7:ca:ce:
b0:b9:31:12:43:1a:e9:fd:a5:ee:65:96:5b:49:49:f8:08:2a:
25:e1:8d:8b:78:6f:f1:b6:55:1d:a5:4f:1a:c3:d4:12:35:b2:
5e:82:c5:2a:2c:c8:94:d6:79:cb:38:3c:5b:cc:fd:1d:a5:ba:
96:63:d6:11:d3:a9:54:8f:e2:41:55:c8:ec:ca:40:b3:df:e7:
84:31:92:22:6a:bb:32:6a:a9:67:ab:f3:e9:7b:98:6d:92:7a:
b5:5d:6d:2d
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZjiU5KXO12fUBZffN1y6lwFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2MmJkNzZhNWNhYzI4M2VjZTBhMGY4ZWFiMmM5NzAyMTQw
MWZiODkwHhcNMjUwODI1MTc0MzA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOWExODNhODFlYjM0ZDM2NjMwODE3Y2ZlNTg0NmU5NjhjYmQwMWRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6aGgbwQ/pIA490ZYRdnWOh0xFlHM
pDnqxZM0BOiveEU+PZ3JroJmV3k28mAZWHY0qdmhaYuRZ3v5GBARQAhBoP/bU++1
a1aqEwJbYD0nXvx6Fv/HWUywitOXZeBeviViuYWsa8paYFNPu9D3eV+WvtQa1t5X
pvqO852YQhiJmgl2OhAaWpJrb7Kh8kly+AgmiFGdNlXzsA8MsDTQWa/BoRKlxhxi
5ZCNf7YR1EvkaYfd0QQvnge6YJNzGFBebuX2ER9agec4pZjv8Zr3W72T4dM+NAhq
zB9HkwCYgrkfqMPbqFICN0FG+edAHIKTBPzdtlF6ICUn0xfM1Kr2hqckcwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFOmhg6ges002YwgXz+WEbpaMvQHaMB8GA1UdIwQY
MBaAFJYr12pcrCg+zgoPjqsslwIUAfuJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGl2WGFseXNLRDdPQ2ctT3F5eVhBaFFCLTRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8wNDY0NjAtMTAyYy00OTMwLTg0MmMt
NmFiMTExNTVmNmZiLzEvNmFHRHFCNnpUVFpqQ0JmUDVZUnVsb3k5QWRvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC8wNDY0NjAtMTAyYy00OTMwLTg0MmMtNmFiMTExNTVmNmZi
LzEvbGl2WGFseXNLRDdPQ2ctT3F5eVhBaFFCLTRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAVcsNAwQA
VcsVAwQAVcsiMA0GCSqGSIb3DQEBCwUAA4IBAQCpfK0IW4QeeZtxUWeB1r8ZNzY+
eZe3OgNde3gUOeNL1qLOgDelB7B1ea21f/Zhoh8EXZqt0OnwRJlANyS3v7xY/hSj
2clZffIII1xlFEGY9X2wya0OKp4xhvvNaDHSjGZy3ydqG9xPNefEqDRrMctoJD6k
KaGogCSn8dGRzDR1CQc4ac8dSVwaAuOpAVsU47RGv3kDBFQLWHVoyh4I5g6nys6w
uTESQxrp/aXuZZZbSUn4CCol4Y2LeG/xtlUdpU8aw9QSNbJegsUqLMiU1nnLODxb
zP0dpbqWY9YR06lUj+JBVcjsykCz3+eEMZIiarsyaqlnq/Ppe5htknq1XW0t
-----END CERTIFICATE-----
Generated at Sat Sep 6 07:35:42 2025 by rpki-client