Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/c0e4d6-e7dc-41b4-b563-bbc76129c89b/1/c629yVpij03V1st9fGOWPyErFvY.roa
File: c629yVpij03V1st9fGOWPyErFvY.roa (raw, json)
Hash identifier: FRnWCc8f5gKDYC/CiB/l2kK1E8DLO/vnELNJE9pd/8Y=
Subject key identifier: 73:AD:BD:C9:5A:62:8F:4D:D5:D6:CB:7D:7C:63:96:3F:21:2B:16:F6
Certificate issuer: /CN=8ec3bb12f5f62a1088b07a9816c46306d1161e1d
Certificate serial: 0199111F8B189B1505EB157555B19652D9FB
Authority key identifier: 8E:C3:BB:12:F5:F6:2A:10:88:B0:7A:98:16:C4:63:06:D1:16:1E:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jsO7EvX2KhCIsHqYFsRjBtEWHh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/c0e4d6-e7dc-41b4-b563-bbc76129c89b/1/c629yVpij03V1st9fGOWPyErFvY.roa
Signing time: Wed 03 Sep 2025 19:48:23 +0000
ROA not before: Wed 03 Sep 2025 19:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216302
IP address blocks: 31.24.248.0/24 maxlen: 24
2a12:48c0::/29 maxlen: 32
2a12:48c1::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/c0e4d6-e7dc-41b4-b563-bbc76129c89b/1/jsO7EvX2KhCIsHqYFsRjBtEWHh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/c0e4d6-e7dc-41b4-b563-bbc76129c89b/1/jsO7EvX2KhCIsHqYFsRjBtEWHh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/jsO7EvX2KhCIsHqYFsRjBtEWHh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Sep 2025 04:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:11:1f:8b:18:9b:15:05:eb:15:75:55:b1:96:52:d9:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ec3bb12f5f62a1088b07a9816c46306d1161e1d
Validity
Not Before: Sep 3 19:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=73adbdc95a628f4dd5d6cb7d7c63963f212b16f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ee:74:a6:b0:f8:da:46:20:21:62:1a:5e:df:
b9:4d:5b:c0:28:91:c3:43:2e:be:8a:f5:c1:fc:55:
ff:db:e5:5f:1b:25:5e:24:22:f5:b8:15:78:b8:44:
7a:64:fc:05:35:28:04:d6:54:06:32:c0:71:13:52:
43:d1:9a:6d:1b:53:b1:a9:da:86:2e:89:74:c3:c7:
6d:07:0b:e7:a6:88:84:39:04:b0:8f:9d:f5:4d:49:
43:f7:33:b7:7f:1d:06:a3:cd:3c:f7:42:e2:9e:e5:
d3:dc:cd:76:e6:55:7c:5e:5f:a1:c1:01:3c:01:ed:
29:86:ba:40:f5:3d:ed:37:09:2a:b8:b1:17:15:96:
f4:f9:d2:dd:e4:a0:2b:6a:eb:10:9e:cf:11:f4:8f:
02:fb:83:db:5d:3c:f3:a8:a5:05:05:d0:3e:fd:14:
e6:be:6d:c8:6b:71:ee:5d:23:75:7d:57:f6:bd:66:
8f:2d:28:95:00:43:3a:7e:ab:28:60:45:ee:21:90:
38:12:f2:dd:e2:eb:af:2e:8f:67:8e:bc:3f:a5:5b:
15:87:ba:8f:d1:24:14:e4:a8:99:28:e4:45:82:0b:
f4:0c:c6:4a:f5:2d:6c:46:64:2d:4e:ce:ff:c8:e1:
e5:c5:e1:00:f8:ec:4c:6c:c6:3f:1f:4c:f1:3b:1e:
cf:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:AD:BD:C9:5A:62:8F:4D:D5:D6:CB:7D:7C:63:96:3F:21:2B:16:F6
X509v3 Authority Key Identifier:
keyid:8E:C3:BB:12:F5:F6:2A:10:88:B0:7A:98:16:C4:63:06:D1:16:1E:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsO7EvX2KhCIsHqYFsRjBtEWHh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/c0e4d6-e7dc-41b4-b563-bbc76129c89b/1/c629yVpij03V1st9fGOWPyErFvY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/c0e4d6-e7dc-41b4-b563-bbc76129c89b/1/jsO7EvX2KhCIsHqYFsRjBtEWHh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.24.248.0/24
IPv6:
2a12:48c0::/29
Signature Algorithm: sha256WithRSAEncryption
a8:fc:2e:ad:73:84:12:55:b3:5f:c4:59:40:66:a6:43:09:a5:
30:06:6a:6c:85:56:69:e5:18:94:eb:db:83:2f:df:d2:2d:db:
0f:d2:68:df:3f:87:7e:92:de:cd:46:e6:8a:1a:55:1d:90:27:
4e:2a:a9:e4:6d:e9:88:cb:35:8b:5c:12:51:fd:5c:bb:42:f1:
07:11:a9:85:1a:b8:60:a2:25:b0:59:fe:d7:19:e5:63:f2:06:
d0:02:08:33:11:ca:e8:70:3c:59:3c:7d:a9:3f:b3:44:ea:d3:
9b:f5:c5:8f:a8:61:33:c6:7c:9e:ac:4b:e2:42:73:8c:f4:ac:
14:63:56:b1:01:c0:52:07:e1:80:ae:3f:b8:08:5a:a3:9d:d7:
90:91:d6:4d:7a:e9:93:64:99:66:9f:1a:88:9b:33:02:3c:1a:
ab:75:06:2c:99:45:a2:44:68:15:1d:6a:4a:46:5d:48:09:0d:
44:da:c4:b8:30:a9:85:c4:7b:d9:58:b8:03:28:b8:dd:11:61:
3e:cd:d9:07:ea:a0:6f:c0:75:bc:14:42:9f:e4:e4:eb:a0:e2:
5b:fc:3d:70:23:4e:b1:99:aa:62:03:33:1f:1e:2f:b5:68:25:
22:bc:7a:68:ff:2f:82:39:bb:8c:51:20:1a:45:ef:15:c7:a8:
a9:ec:cd:4f
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZkRH4sYmxUF6xV1VbGWUtn7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlYzNiYjEyZjVmNjJhMTA4OGIwN2E5ODE2YzQ2MzA2ZDEx
NjFlMWQwHhcNMjUwOTAzMTk0ODIzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3M2FkYmRjOTVhNjI4ZjRkZDVkNmNiN2Q3YzYzOTYzZjIxMmIxNmY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAte50prD42kYgIWIaXt+5TVvAKJHD
Qy6+ivXB/FX/2+VfGyVeJCL1uBV4uER6ZPwFNSgE1lQGMsBxE1JD0ZptG1OxqdqG
Lol0w8dtBwvnpoiEOQSwj531TUlD9zO3fx0Go80890LinuXT3M125lV8Xl+hwQE8
Ae0phrpA9T3tNwkquLEXFZb0+dLd5KArausQns8R9I8C+4PbXTzzqKUFBdA+/RTm
vm3Ia3HuXSN1fVf2vWaPLSiVAEM6fqsoYEXuIZA4EvLd4uuvLo9njrw/pVsVh7qP
0SQU5KiZKORFggv0DMZK9S1sRmQtTs7/yOHlxeEA+OxMbMY/H0zxOx7P3QIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFHOtvclaYo9N1dbLfXxjlj8hKxb2MB8GA1UdIwQY
MBaAFI7DuxL19ioQiLB6mBbEYwbRFh4dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanNPN0V2WDJLaENJc0hxWUZzUmpCdEVXSGgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9jMGU0ZDYtZTdkYy00MWI0LWI1NjMt
YmJjNzYxMjljODliLzEvYzYyOXlWcGlqMDNWMXN0OWZHT1dQeUVyRnZZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My9jMGU0ZDYtZTdkYy00MWI0LWI1NjMtYmJjNzYxMjljODli
LzEvanNPN0V2WDJLaENJc0hxWUZzUmpCdEVXSGgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAHxj4MA0E
AgACMAcDBQMqEkjAMA0GCSqGSIb3DQEBCwUAA4IBAQCo/C6tc4QSVbNfxFlAZqZD
CaUwBmpshVZp5RiU69uDL9/SLdsP0mjfP4d+kt7NRuaKGlUdkCdOKqnkbemIyzWL
XBJR/Vy7QvEHEamFGrhgoiWwWf7XGeVj8gbQAggzEcrocDxZPH2pP7NE6tOb9cWP
qGEzxnyerEviQnOM9KwUY1axAcBSB+GArj+4CFqjndeQkdZNeumTZJlmnxqImzMC
PBqrdQYsmUWiRGgVHWpKRl1ICQ1E2sS4MKmFxHvZWLgDKLjdEWE+zdkH6qBvwHW8
FEKf5OTroOJb/D1wI06xmapiAzMfHi+1aCUivHpo/y+CObuMUSAaRe8Vx6ip7M1P
-----END CERTIFICATE-----
Generated at Fri Sep 19 09:36:32 2025 by rpki-client