Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/6eKe40wQFw_IElI8zuS7QLnMNg4.roa
File: 6eKe40wQFw_IElI8zuS7QLnMNg4.roa (raw, json)
Hash identifier: mwVnzWXnINu+28zpnqNx3ogIAlI7EUmZqAGL+SLmsV8=
Subject key identifier: E9:E2:9E:E3:4C:10:17:0F:C8:12:52:3C:CE:E4:BB:40:B9:CC:36:0E
Certificate issuer: /CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9
Certificate serial: 019A0076D579323F12D2FB025C0BD6615E28
Authority key identifier: 1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/6eKe40wQFw_IElI8zuS7QLnMNg4.roa
Signing time: Mon 20 Oct 2025 07:12:59 +0000
ROA not before: Mon 20 Oct 2025 07:12:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208185
IP address blocks: 91.149.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 19:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:76:d5:79:32:3f:12:d2:fb:02:5c:0b:d6:61:5e:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9
Validity
Not Before: Oct 20 07:12:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e9e29ee34c10170fc812523ccee4bb40b9cc360e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f4:34:bc:18:ef:b3:57:d0:40:f5:5c:31:27:
53:ee:b5:50:7a:ba:1d:7c:c8:d2:59:f4:49:12:76:
fa:d7:70:df:3e:29:b0:2b:9e:ec:f8:35:a9:1f:0e:
f7:ac:65:c0:a5:f6:d1:7b:2b:bc:a3:52:43:7a:f0:
8b:65:24:73:98:88:c5:06:29:2e:ef:ef:28:2b:95:
8f:96:e7:57:50:8f:33:48:9c:8f:38:a1:32:19:b9:
13:a1:4c:51:0a:86:42:ef:dd:2e:60:e5:2f:e3:e8:
45:5d:de:8c:f3:93:03:ee:74:91:da:23:45:25:fe:
af:52:19:04:49:a9:40:3d:1e:d5:0c:53:62:4a:80:
7d:13:c5:da:25:32:66:f5:e2:01:f7:54:5e:f7:5c:
91:a6:20:2e:ea:dd:84:54:ca:b6:30:ad:5e:4e:60:
e7:56:b6:3a:67:38:9a:75:1f:63:b2:42:8c:fc:57:
75:e3:c5:8c:d3:2c:5f:26:ae:af:35:9b:e7:64:0a:
57:b9:f0:86:d7:b7:89:d6:88:bd:6d:b5:55:5e:31:
ec:66:90:09:d7:df:da:58:3b:01:7f:eb:5f:74:fb:
35:b2:14:e3:36:73:35:bf:06:5c:41:d3:00:26:d0:
c1:5f:d0:04:c7:e4:bc:46:5d:8e:f3:55:c2:16:03:
21:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:E2:9E:E3:4C:10:17:0F:C8:12:52:3C:CE:E4:BB:40:B9:CC:36:0E
X509v3 Authority Key Identifier:
keyid:1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/6eKe40wQFw_IElI8zuS7QLnMNg4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.149.231.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:ae:47:6d:79:6b:6f:e0:aa:89:e6:74:fe:74:06:22:2c:d2:
4f:ea:a9:77:2a:52:2c:b4:34:b0:f0:fc:cb:ee:ee:72:5d:79:
e9:84:59:54:d9:6a:6b:3e:74:f9:0e:a5:83:09:6c:5f:70:5e:
66:d4:29:57:a9:6e:c8:7c:c0:06:15:c9:41:50:01:3f:4f:25:
ec:50:fd:0c:1b:89:17:1a:3f:28:a9:59:62:69:43:79:3a:21:
0a:45:ab:6a:82:57:0e:a6:a3:2f:6a:86:31:c2:91:86:93:34:
70:1e:48:7d:4f:7e:36:f7:64:28:e9:ed:4f:5c:59:b1:0f:36:
40:80:d0:a7:46:49:83:5c:68:ed:17:e0:96:12:e9:11:19:60:
d0:24:37:9d:96:dd:47:3f:26:cd:2f:72:85:d0:f7:c4:87:ef:
6b:d3:8a:a1:92:06:f2:de:d5:c2:1c:9b:14:ca:42:78:e5:c7:
cc:c6:bd:84:11:35:77:26:5b:22:7f:65:5b:fb:85:22:c1:1e:
f2:79:03:61:74:db:d7:17:2e:74:88:2b:e9:4a:ac:96:a8:cc:
ff:92:22:03:1a:3f:ac:4e:dc:ca:c3:cd:8a:44:0c:59:b0:51:
4c:d6:97:69:e6:a2:66:ea:10:2d:72:6e:2f:f5:82:ba:3f:b8:
12:72:b4:64
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZoAdtV5Mj8S0vsCXAvWYV4oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhY2I2Mzc2YTE2NDhkNDlkNTVlNGQ3YjAxMzcxMzY3YjBk
YzJhZjkwHhcNMjUxMDIwMDcxMjU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOWUyOWVlMzRjMTAxNzBmYzgxMjUyM2NjZWU0YmI0MGI5Y2MzNjBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfQ0vBjvs1fQQPVcMSdT7rVQerod
fMjSWfRJEnb613DfPimwK57s+DWpHw73rGXApfbReyu8o1JDevCLZSRzmIjFBiku
7+8oK5WPludXUI8zSJyPOKEyGbkToUxRCoZC790uYOUv4+hFXd6M85MD7nSR2iNF
Jf6vUhkESalAPR7VDFNiSoB9E8XaJTJm9eIB91Re91yRpiAu6t2EVMq2MK1eTmDn
VrY6ZziadR9jskKM/Fd148WM0yxfJq6vNZvnZApXufCG17eJ1oi9bbVVXjHsZpAJ
19/aWDsBf+tfdPs1shTjNnM1vwZcQdMAJtDBX9AEx+S8Rl2O81XCFgMh2wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOninuNMEBcPyBJSPM7ku0C5zDYOMB8GA1UdIwQY
MBaAFBrLY3ahZI1J1V5NewE3E2ew3Cr5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3N0amRxRmtqVW5WWGsxN0FUY1RaN0RjS3ZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS83MjQ3YjAtNDk4OS00M2VhLTkzNTAt
N2E5MzY3NTFkYjFiLzEvNmVLZTQwd1FGd19JRWxJOHp1UzdRTG5NTmc0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS83MjQ3YjAtNDk4OS00M2VhLTkzNTAtN2E5MzY3NTFkYjFi
LzEvR3N0amRxRmtqVW5WWGsxN0FUY1RaN0RjS3ZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW5XnMA0G
CSqGSIb3DQEBCwUAA4IBAQBMrkdteWtv4KqJ5nT+dAYiLNJP6ql3KlIstDSw8PzL
7u5yXXnphFlU2WprPnT5DqWDCWxfcF5m1ClXqW7IfMAGFclBUAE/TyXsUP0MG4kX
Gj8oqVliaUN5OiEKRatqglcOpqMvaoYxwpGGkzRwHkh9T34292Qo6e1PXFmxDzZA
gNCnRkmDXGjtF+CWEukRGWDQJDedlt1HPybNL3KF0PfEh+9r04qhkgby3tXCHJsU
ykJ45cfMxr2EETV3Jlsif2Vb+4UiwR7yeQNhdNvXFy50iCvpSqyWqMz/kiIDGj+s
TtzKw82KRAxZsFFM1pdp5qJm6hAtcm4v9YK6P7gScrRk
-----END CERTIFICATE-----
Generated at Wed Oct 22 02:09:32 2025 by rpki-client