Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/cf6unF5sRhvMUJu4is7AhHXyTKU.roa
File: cf6unF5sRhvMUJu4is7AhHXyTKU.roa (raw, json)
Hash identifier: IeWKY13tSm6lq+2DmwxVBeNKG99Tav+Q0fSea/lBCZA=
Subject key identifier: 71:FE:AE:9C:5E:6C:46:1B:CC:50:9B:B8:8A:CE:C0:84:75:F2:4C:A5
Certificate issuer: /CN=962bd76a5cac283ece0a0f8eab2c97021401fb89
Certificate serial: 0198E252A71FD26AC43BD400D4779200DFD2
Authority key identifier: 96:2B:D7:6A:5C:AC:28:3E:CE:0A:0F:8E:AB:2C:97:02:14:01:FB:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/cf6unF5sRhvMUJu4is7AhHXyTKU.roa
Signing time: Mon 25 Aug 2025 17:42:04 +0000
ROA not before: Mon 25 Aug 2025 17:42:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62240
IP address blocks: 85.203.8.0/24 maxlen: 24
85.203.15.0/24 maxlen: 24
85.203.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 02:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e2:52:a7:1f:d2:6a:c4:3b:d4:00:d4:77:92:00:df:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=962bd76a5cac283ece0a0f8eab2c97021401fb89
Validity
Not Before: Aug 25 17:42:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=71feae9c5e6c461bcc509bb88acec08475f24ca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:7f:85:05:7c:ed:1e:92:c8:64:88:a2:79:91:
93:89:93:36:7f:a0:85:29:0b:8f:de:bb:3f:81:a6:
ed:61:ba:92:55:1d:4a:ac:ce:33:66:bb:db:e9:15:
03:52:d5:6a:fe:90:a1:63:f2:f2:d0:77:5b:04:57:
09:73:68:c8:7f:2b:47:88:e1:21:1a:ff:71:b8:66:
57:76:50:a0:0b:9a:14:4f:3e:32:87:bb:51:d7:6b:
1f:f3:07:6a:b2:be:21:a4:92:58:c6:f9:ad:97:b0:
cc:f3:2d:e5:b3:55:0d:f0:aa:a5:a1:59:53:64:2e:
85:9f:ae:61:31:b9:cd:30:60:1b:3b:b4:98:1f:66:
66:74:89:26:72:36:87:27:1c:64:3d:e8:f0:bf:77:
a6:70:0f:5d:01:ac:39:52:a2:d4:ec:48:a2:41:2e:
7f:9b:89:3b:d4:2d:6b:4f:75:25:3a:22:68:a7:78:
8d:21:1e:37:2d:6d:3b:27:d9:b0:21:ba:f3:8f:ca:
cc:d7:e8:94:1c:10:8a:e6:48:29:dc:35:06:e5:74:
2a:e4:ef:ed:46:71:88:6c:b6:bb:ad:b2:62:9a:12:
e8:4f:d2:a4:28:9c:38:00:e8:ee:00:6b:98:45:06:
44:7b:37:66:4b:26:8a:a5:7f:79:76:91:9b:b1:e0:
fa:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:FE:AE:9C:5E:6C:46:1B:CC:50:9B:B8:8A:CE:C0:84:75:F2:4C:A5
X509v3 Authority Key Identifier:
keyid:96:2B:D7:6A:5C:AC:28:3E:CE:0A:0F:8E:AB:2C:97:02:14:01:FB:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/cf6unF5sRhvMUJu4is7AhHXyTKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.203.8.0/24
85.203.15.0/24
85.203.36.0/24
Signature Algorithm: sha256WithRSAEncryption
36:c9:74:c1:8f:a4:e2:a7:93:37:08:fd:55:f4:95:5f:66:cb:
e3:5e:25:10:a7:9f:ed:50:13:02:cd:52:c6:81:ef:21:93:03:
3a:1b:41:e3:74:4f:9b:4b:01:7d:73:7e:4d:7b:08:50:4f:35:
e1:26:9b:5f:b9:1c:f8:ed:65:0e:ca:78:98:4f:5c:77:5d:97:
2d:eb:6b:9d:85:f2:64:57:8a:7e:3c:d3:ec:d2:3a:8b:60:da:
54:e6:5c:c1:c0:93:30:7c:ca:a6:db:50:0f:11:90:95:fc:e9:
79:9d:b0:67:39:48:ec:12:0f:27:aa:87:ad:16:ea:cf:4f:69:
2c:05:82:19:49:8d:c6:95:e8:75:d2:61:26:66:5d:05:1a:94:
79:ee:77:14:be:cc:3f:2f:5f:79:05:14:3e:a8:d3:99:c7:39:
07:c2:ac:22:7c:08:bc:ee:9d:55:87:86:af:83:74:94:4e:ed:
87:18:f2:1d:50:15:49:ab:cc:6a:1e:7f:14:f3:60:e1:dd:09:
e1:3f:ea:f3:8f:80:72:93:63:f0:ce:23:89:c2:0d:d4:02:6b:
96:3a:6c:cd:f6:10:0f:47:5c:09:14:61:f4:bc:89:b6:a0:a4:
7e:8d:63:47:f5:40:1d:e3:4f:d3:61:48:d8:fd:a5:b5:be:b3:
14:98:15:ea
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZjiUqcf0mrEO9QA1HeSAN/SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2MmJkNzZhNWNhYzI4M2VjZTBhMGY4ZWFiMmM5NzAyMTQw
MWZiODkwHhcNMjUwODI1MTc0MjA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MWZlYWU5YzVlNmM0NjFiY2M1MDliYjg4YWNlYzA4NDc1ZjI0Y2E1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAin+FBXztHpLIZIiieZGTiZM2f6CF
KQuP3rs/gabtYbqSVR1KrM4zZrvb6RUDUtVq/pChY/Ly0HdbBFcJc2jIfytHiOEh
Gv9xuGZXdlCgC5oUTz4yh7tR12sf8wdqsr4hpJJYxvmtl7DM8y3ls1UN8KqloVlT
ZC6Fn65hMbnNMGAbO7SYH2ZmdIkmcjaHJxxkPejwv3emcA9dAaw5UqLU7EiiQS5/
m4k71C1rT3UlOiJop3iNIR43LW07J9mwIbrzj8rM1+iUHBCK5kgp3DUG5XQq5O/t
RnGIbLa7rbJimhLoT9KkKJw4AOjuAGuYRQZEezdmSyaKpX95dpGbseD6ywIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFHH+rpxebEYbzFCbuIrOwIR18kylMB8GA1UdIwQY
MBaAFJYr12pcrCg+zgoPjqsslwIUAfuJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGl2WGFseXNLRDdPQ2ctT3F5eVhBaFFCLTRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8wNDY0NjAtMTAyYy00OTMwLTg0MmMt
NmFiMTExNTVmNmZiLzEvY2Y2dW5GNXNSaHZNVUp1NGlzN0FoSFh5VEtVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC8wNDY0NjAtMTAyYy00OTMwLTg0MmMtNmFiMTExNTVmNmZi
LzEvbGl2WGFseXNLRDdPQ2ctT3F5eVhBaFFCLTRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAVcsIAwQA
VcsPAwQAVcskMA0GCSqGSIb3DQEBCwUAA4IBAQA2yXTBj6Tip5M3CP1V9JVfZsvj
XiUQp5/tUBMCzVLGge8hkwM6G0HjdE+bSwF9c35NewhQTzXhJptfuRz47WUOyniY
T1x3XZct62udhfJkV4p+PNPs0jqLYNpU5lzBwJMwfMqm21APEZCV/Ol5nbBnOUjs
Eg8nqoetFurPT2ksBYIZSY3Gleh10mEmZl0FGpR57ncUvsw/L195BRQ+qNOZxzkH
wqwifAi87p1Vh4avg3SUTu2HGPIdUBVJq8xqHn8U82Dh3QnhP+rzj4Byk2PwziOJ
wg3UAmuWOmzN9hAPR1wJFGH0vIm2oKR+jWNH9UAd40/TYUjY/aW1vrMUmBXq
-----END CERTIFICATE-----
Generated at Sat Sep 6 07:33:28 2025 by rpki-client