Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/6XPoxcH-aw3tkMIsi-AynHYWaLo.roa
File: 6XPoxcH-aw3tkMIsi-AynHYWaLo.roa (raw, json)
Hash identifier: BFZ2VPR3CE26KjzSTrA+p4TxydcUWtEwP+M+6bTA0/c=
Subject key identifier: E9:73:E8:C5:C1:FE:6B:0D:ED:90:C2:2C:8B:E0:32:9C:76:16:68:BA
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 0199168B7CC8BF175E5B97B2DDD704313F64
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/6XPoxcH-aw3tkMIsi-AynHYWaLo.roa
Signing time: Thu 04 Sep 2025 21:04:24 +0000
ROA not before: Thu 04 Sep 2025 21:04:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208328
IP address blocks: 194.36.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:8b:7c:c8:bf:17:5e:5b:97:b2:dd:d7:04:31:3f:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Sep 4 21:04:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e973e8c5c1fe6b0ded90c22c8be0329c761668ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:f9:0f:f9:3e:14:a4:7a:06:a0:c0:9a:80:c2:
22:5b:0e:9c:8b:7b:a0:77:c2:af:76:4a:9d:60:bf:
6f:5e:5e:f7:eb:30:83:dd:96:df:e5:38:e6:0a:08:
87:fd:c9:c1:69:d7:d1:af:7d:bd:bd:df:4d:8d:cf:
ed:7d:97:75:a7:0f:e2:49:a8:2a:72:ef:6d:2e:4d:
68:70:e6:3f:5a:cf:42:f0:b3:97:5f:99:83:9b:a2:
1d:c8:2b:45:5b:68:21:dc:09:70:4b:e3:77:58:95:
b7:0e:88:33:b5:4c:d0:54:44:55:19:e4:ee:1c:36:
58:0e:32:e1:22:4e:a5:16:d1:aa:25:2a:cd:a3:00:
be:86:89:c8:52:73:1b:67:64:a2:37:60:67:d1:1a:
83:1e:8c:0a:50:76:b7:91:2d:a1:57:c0:f1:cc:b0:
1e:5e:37:78:03:5a:3f:d4:70:79:44:2a:d2:b3:d8:
88:b9:1e:45:58:b6:f8:8f:c3:54:9f:ef:20:b4:12:
b7:6b:84:33:2e:a6:c2:a0:16:e3:0b:04:b4:3b:15:
eb:f9:2e:97:aa:29:ef:7d:5b:14:ec:fc:5d:99:f8:
05:c1:a7:10:15:0e:82:ce:97:3d:b0:06:16:88:28:
3d:c1:fa:f5:40:5a:ee:73:d9:54:09:31:27:72:34:
6e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:73:E8:C5:C1:FE:6B:0D:ED:90:C2:2C:8B:E0:32:9C:76:16:68:BA
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/6XPoxcH-aw3tkMIsi-AynHYWaLo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.36.27.0/24
Signature Algorithm: sha256WithRSAEncryption
38:da:80:d8:81:60:9c:a7:12:40:5e:f8:9b:cb:cf:1c:1d:6d:
b9:5c:54:88:d0:a3:e6:e7:32:a4:94:c6:31:c6:d8:2b:c5:30:
9c:f3:6c:6b:a9:65:85:86:e4:03:8e:d4:db:4c:d2:08:b3:cb:
e8:3c:fd:ba:15:f7:d5:d3:ba:df:0c:b4:05:ff:19:21:2c:31:
85:5b:1a:3e:26:47:e5:d4:b6:91:86:62:5a:c2:7a:41:19:a1:
0b:c8:a0:57:b0:f3:a7:33:05:a4:86:21:c9:15:61:8b:92:29:
13:c4:ac:bf:7b:ac:d3:f4:a5:31:96:38:2b:41:55:38:66:39:
36:8a:be:91:21:5c:74:ac:2c:60:bd:8a:cb:86:86:87:da:22:
7f:9a:7c:3f:f9:f7:02:2f:ab:0f:14:65:08:64:1e:79:98:c5:
3b:84:cb:bc:0b:1b:5a:d8:ac:35:7e:3f:54:87:35:ea:f4:ec:
f1:4d:5c:bb:e4:a8:0f:23:ba:39:34:d8:1d:12:aa:67:73:ce:
e5:8c:4a:07:ff:7f:b1:6f:05:4a:15:03:55:a1:e1:c9:92:7d:
3e:ac:0d:d7:87:ff:22:f6:a4:aa:ac:b4:bb:51:60:ff:5c:78:
05:80:67:44:4c:0c:be:71:a0:8f:8e:c4:08:a1:32:cf:3a:10:
9f:85:4d:38
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZkWi3zIvxdeW5ey3dcEMT9kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1NzZlYjJjYzQ2MmU2ZTRiZjBkZTY5YjlmNjM0ODc1ZGVi
YmFhZTIwHhcNMjUwOTA0MjEwNDI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOTczZThjNWMxZmU2YjBkZWQ5MGMyMmM4YmUwMzI5Yzc2MTY2OGJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvkP+T4UpHoGoMCagMIiWw6ci3ug
d8KvdkqdYL9vXl736zCD3Zbf5TjmCgiH/cnBadfRr329vd9Njc/tfZd1pw/iSagq
cu9tLk1ocOY/Ws9C8LOXX5mDm6IdyCtFW2gh3AlwS+N3WJW3DogztUzQVERVGeTu
HDZYDjLhIk6lFtGqJSrNowC+honIUnMbZ2SiN2Bn0RqDHowKUHa3kS2hV8DxzLAe
Xjd4A1o/1HB5RCrSs9iIuR5FWLb4j8NUn+8gtBK3a4QzLqbCoBbjCwS0OxXr+S6X
qinvfVsU7PxdmfgFwacQFQ6Czpc9sAYWiCg9wfr1QFruc9lUCTEncjRuFQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOlz6MXB/msN7ZDCLIvgMpx2Fmi6MB8GA1UdIwQY
MBaAFKV26yzEYubkvw3mm59jSHXeu6riMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFhickxNUmk1dVNfRGVhYm4yTklkZDY3cXVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85MzE5MjctOWYzOC00MWI2LTg3ZmEt
MjU0YWNkOTJiNGUxLzEvNlhQb3hjSC1hdzN0a01Jc2ktQXluSFlXYUxvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny85MzE5MjctOWYzOC00MWI2LTg3ZmEtMjU0YWNkOTJiNGUx
LzEvcFhickxNUmk1dVNfRGVhYm4yTklkZDY3cXVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwiQbMA0G
CSqGSIb3DQEBCwUAA4IBAQA42oDYgWCcpxJAXviby88cHW25XFSI0KPm5zKklMYx
xtgrxTCc82xrqWWFhuQDjtTbTNIIs8voPP26FffV07rfDLQF/xkhLDGFWxo+Jkfl
1LaRhmJawnpBGaELyKBXsPOnMwWkhiHJFWGLkikTxKy/e6zT9KUxljgrQVU4Zjk2
ir6RIVx0rCxgvYrLhoaH2iJ/mnw/+fcCL6sPFGUIZB55mMU7hMu8Cxta2Kw1fj9U
hzXq9OzxTVy75KgPI7o5NNgdEqpnc87ljEoH/3+xbwVKFQNVoeHJkn0+rA3Xh/8i
9qSqrLS7UWD/XHgFgGdETAy+caCPjsQIoTLPOhCfhU04
-----END CERTIFICATE-----
Generated at Tue Sep 9 04:25:25 2025 by rpki-client