Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/IJwA86yfWxasLC0gUp34HsSsHj0.roa
File: IJwA86yfWxasLC0gUp34HsSsHj0.roa (raw, json)
Hash identifier: +RLIosYADN+7XpaLxN/SpQe2XkwdsGukjbGqH12+o3I=
Subject key identifier: 20:9C:00:F3:AC:9F:5B:16:AC:2C:2D:20:52:9D:F8:1E:C4:AC:1E:3D
Certificate issuer: /CN=962bd76a5cac283ece0a0f8eab2c97021401fb89
Certificate serial: 0198E2547E7DFE18DB4C2F33B5CFCC48F254
Authority key identifier: 96:2B:D7:6A:5C:AC:28:3E:CE:0A:0F:8E:AB:2C:97:02:14:01:FB:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/IJwA86yfWxasLC0gUp34HsSsHj0.roa
Signing time: Mon 25 Aug 2025 17:44:04 +0000
ROA not before: Mon 25 Aug 2025 17:44:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210636
IP address blocks: 85.203.17.0/24 maxlen: 24
85.203.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 02:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e2:54:7e:7d:fe:18:db:4c:2f:33:b5:cf:cc:48:f2:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=962bd76a5cac283ece0a0f8eab2c97021401fb89
Validity
Not Before: Aug 25 17:44:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=209c00f3ac9f5b16ac2c2d20529df81ec4ac1e3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:33:5e:76:7a:ac:9d:25:32:59:0f:70:8a:f3:
33:f3:3c:33:76:b0:1f:ba:63:05:56:5e:40:49:4e:
2b:d3:a3:44:4c:47:51:d9:3b:c5:bd:d9:1f:98:3a:
69:e3:b2:d3:66:83:c2:13:04:84:a3:33:3c:32:66:
c4:eb:a7:dd:93:31:2c:83:a6:4b:71:4e:20:6c:85:
c7:4a:34:8b:22:92:a2:f0:3b:70:bc:fe:9d:51:b5:
af:01:99:16:b2:c4:e3:ef:a9:f5:de:0d:5f:5f:3c:
e9:72:f0:d2:b5:10:a8:6b:83:b8:ea:4d:ce:18:7b:
2c:65:e9:bc:63:dc:8a:cb:07:2e:ab:17:31:fa:27:
fb:e1:83:b9:5c:5d:44:e4:57:09:79:f8:e7:f8:a2:
5e:c4:81:ab:1c:3f:5f:21:f1:eb:e8:bc:7b:b6:ad:
84:50:f3:e4:55:2d:7c:bc:86:30:9a:43:35:d0:55:
06:5b:fc:69:fa:ab:79:4f:88:03:4a:87:95:76:94:
f5:3c:6f:2c:ee:54:b7:c0:36:22:2b:a2:12:6c:61:
b7:c7:df:ff:e3:57:78:7c:90:41:5a:af:83:53:92:
e0:77:67:c0:8b:5f:0e:03:56:39:1d:8c:9e:94:6c:
39:11:c3:4b:df:67:99:a2:26:b5:87:44:62:df:53:
77:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:9C:00:F3:AC:9F:5B:16:AC:2C:2D:20:52:9D:F8:1E:C4:AC:1E:3D
X509v3 Authority Key Identifier:
keyid:96:2B:D7:6A:5C:AC:28:3E:CE:0A:0F:8E:AB:2C:97:02:14:01:FB:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/IJwA86yfWxasLC0gUp34HsSsHj0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.203.17.0-85.203.18.255
Signature Algorithm: sha256WithRSAEncryption
96:c0:f6:65:b9:c9:71:05:6e:ad:fa:02:69:03:e3:0c:85:67:
b2:66:de:df:b4:19:44:68:af:00:98:be:99:34:66:0a:cd:1b:
d9:ca:c2:c3:78:cd:28:96:05:c4:a2:16:8e:72:79:55:87:5f:
5e:e1:6c:55:54:cd:ee:ae:60:ca:5a:bb:7d:51:80:fb:02:54:
08:e4:10:1a:1e:b7:05:69:3b:9a:fb:a7:d9:0a:4d:f4:4d:df:
09:40:31:e2:d5:98:2f:fa:39:8c:c7:da:64:bc:91:0a:90:8d:
d3:84:0d:80:15:08:40:c3:39:77:9d:2b:4a:67:73:32:25:6a:
ce:9a:7e:62:f5:b8:d7:58:4c:2b:cc:a4:4f:2d:27:e0:88:a0:
6d:ca:8f:86:ae:95:f9:ea:4a:a2:45:11:36:01:fa:36:d5:2f:
eb:8e:8c:3a:d5:a1:ed:6b:e6:d5:30:6d:da:c3:7f:c0:c8:21:
b4:b7:39:77:05:cf:5a:cc:6f:ea:d1:a3:bb:e3:ea:4e:5c:42:
3e:fd:a7:dc:71:5d:19:4c:8f:9a:b7:dd:33:5d:d7:63:e4:ef:
a4:fe:ef:e3:86:39:1a:ac:dc:0c:b8:38:88:e5:67:e0:78:b6:
7f:f3:18:d8:bf:df:74:cc:f1:e9:84:3b:7b:5a:96:69:66:15:
5b:f4:d8:b4
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZjiVH59/hjbTC8ztc/MSPJUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2MmJkNzZhNWNhYzI4M2VjZTBhMGY4ZWFiMmM5NzAyMTQw
MWZiODkwHhcNMjUwODI1MTc0NDA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMDljMDBmM2FjOWY1YjE2YWMyYzJkMjA1MjlkZjgxZWM0YWMxZTNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7TNednqsnSUyWQ9wivMz8zwzdrAf
umMFVl5ASU4r06NETEdR2TvFvdkfmDpp47LTZoPCEwSEozM8MmbE66fdkzEsg6ZL
cU4gbIXHSjSLIpKi8DtwvP6dUbWvAZkWssTj76n13g1fXzzpcvDStRCoa4O46k3O
GHssZem8Y9yKywcuqxcx+if74YO5XF1E5FcJefjn+KJexIGrHD9fIfHr6Lx7tq2E
UPPkVS18vIYwmkM10FUGW/xp+qt5T4gDSoeVdpT1PG8s7lS3wDYiK6ISbGG3x9//
41d4fJBBWq+DU5Lgd2fAi18OA1Y5HYyelGw5EcNL32eZoia1h0Ri31N3wQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFCCcAPOsn1sWrCwtIFKd+B7ErB49MB8GA1UdIwQY
MBaAFJYr12pcrCg+zgoPjqsslwIUAfuJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGl2WGFseXNLRDdPQ2ctT3F5eVhBaFFCLTRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8wNDY0NjAtMTAyYy00OTMwLTg0MmMt
NmFiMTExNTVmNmZiLzEvSUp3QTg2eWZXeGFzTEMwZ1VwMzRIc1NzSGowLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC8wNDY0NjAtMTAyYy00OTMwLTg0MmMtNmFiMTExNTVmNmZi
LzEvbGl2WGFseXNLRDdPQ2ctT3F5eVhBaFFCLTRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABVyxED
BABVyxIwDQYJKoZIhvcNAQELBQADggEBAJbA9mW5yXEFbq36AmkD4wyFZ7Jm3t+0
GURorwCYvpk0ZgrNG9nKwsN4zSiWBcSiFo5yeVWHX17hbFVUze6uYMpau31RgPsC
VAjkEBoetwVpO5r7p9kKTfRN3wlAMeLVmC/6OYzH2mS8kQqQjdOEDYAVCEDDOXed
K0pnczIlas6afmL1uNdYTCvMpE8tJ+CIoG3Kj4aulfnqSqJFETYB+jbVL+uOjDrV
oe1r5tUwbdrDf8DIIbS3OXcFz1rMb+rRo7vj6k5cQj79p9xxXRlMj5q33TNd12Pk
76T+7+OGORqs3Ay4OIjlZ+B4tn/zGNi/33TM8emEO3talmlmFVv02LQ=
-----END CERTIFICATE-----
Generated at Sat Sep 6 07:33:24 2025 by rpki-client