Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/j_6AzHf1ORox-cpp96lL8tMxQCM.roa
File: j_6AzHf1ORox-cpp96lL8tMxQCM.roa (raw, json)
Hash identifier: oyUZmzQDpHzW96QkGCFyB3HUhTpQZx2hTu4rFoPW6nI=
Subject key identifier: 8F:FE:80:CC:77:F5:39:1A:31:F9:CA:69:F7:A9:4B:F2:D3:31:40:23
Certificate issuer: /CN=17c203e3f365923a843d3220317a1c68cf74de0f
Certificate serial: 019A49AAD24AFD0A6DF7D71D366CE3CBEBC1
Authority key identifier: 17:C2:03:E3:F3:65:92:3A:84:3D:32:20:31:7A:1C:68:CF:74:DE:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F8ID4_NlkjqEPTIgMXocaM903g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/j_6AzHf1ORox-cpp96lL8tMxQCM.roa
Signing time: Mon 03 Nov 2025 12:22:03 +0000
ROA not before: Mon 03 Nov 2025 12:22:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215373
IP address blocks: 37.203.35.0/24 maxlen: 24
37.203.37.0/24 maxlen: 24
37.203.38.0/24 maxlen: 24
89.111.22.0/24 maxlen: 24
89.111.25.0/24 maxlen: 24
89.111.26.0/24 maxlen: 24
89.111.27.0/24 maxlen: 24
89.111.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/F8ID4_NlkjqEPTIgMXocaM903g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:49:aa:d2:4a:fd:0a:6d:f7:d7:1d:36:6c:e3:cb:eb:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17c203e3f365923a843d3220317a1c68cf74de0f
Validity
Not Before: Nov 3 12:22:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8ffe80cc77f5391a31f9ca69f7a94bf2d3314023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:41:fe:66:6f:40:ff:e8:a8:0d:85:fb:a9:c5:
ae:9b:58:aa:db:1f:96:b6:ee:83:87:90:9e:e2:c7:
a6:a5:45:19:ae:87:fb:c8:3d:62:cc:ac:88:7c:4a:
cd:13:97:fc:44:43:75:8c:2f:63:17:3f:52:39:b7:
27:35:f6:45:e9:3b:e2:40:77:2a:bf:b6:71:66:5a:
bd:e3:8b:80:c1:f0:52:3e:60:2d:f6:90:13:ca:f0:
a7:c0:ed:63:64:bf:68:42:9f:59:34:dc:59:cb:5a:
38:ad:52:38:ac:71:60:6e:ac:ba:eb:56:e2:02:7a:
4e:85:4a:dd:5a:81:4f:c4:2f:7a:68:a5:be:fb:d9:
6b:72:32:63:03:27:8d:50:9f:a5:8d:b1:84:13:6c:
3f:ad:67:27:b1:9c:a7:5a:6c:31:b4:a4:68:6b:b5:
93:46:72:54:0b:75:8b:36:5a:63:ba:9a:ea:ef:40:
31:f1:eb:2c:13:07:8c:65:4f:83:6b:39:92:67:f7:
99:d9:21:73:b7:2d:74:15:89:65:5a:4e:cc:c1:6d:
9b:84:f3:82:8d:ff:c5:7d:04:13:01:b2:d2:61:4c:
50:b7:c6:cf:42:9e:e0:bf:d3:af:3b:6e:ad:03:64:
be:1c:23:59:c8:a2:74:a7:1e:76:16:16:a5:41:a8:
26:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:FE:80:CC:77:F5:39:1A:31:F9:CA:69:F7:A9:4B:F2:D3:31:40:23
X509v3 Authority Key Identifier:
keyid:17:C2:03:E3:F3:65:92:3A:84:3D:32:20:31:7A:1C:68:CF:74:DE:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F8ID4_NlkjqEPTIgMXocaM903g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/j_6AzHf1ORox-cpp96lL8tMxQCM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.203.35.0/24
37.203.37.0-37.203.38.255
89.111.22.0/24
89.111.25.0-89.111.28.255
Signature Algorithm: sha256WithRSAEncryption
21:6c:ad:e1:5a:b9:46:ed:f9:52:08:e6:9f:b2:47:cf:cc:d3:
c9:0e:39:0d:39:8b:83:da:5f:31:85:79:e2:d3:d3:67:66:73:
59:37:90:cd:63:8d:6c:a1:07:65:99:d5:23:7e:7b:b3:70:1f:
4e:68:cc:9d:c8:a9:32:2c:ca:1b:cd:a0:15:66:7a:5b:c8:64:
62:f5:9c:47:ef:f4:bc:d4:22:3f:1c:98:4d:a1:d6:de:ae:de:
1e:1d:45:d7:0b:16:66:83:6b:8c:ac:ed:5e:14:5a:8c:3b:27:
e9:21:0e:bc:bc:f1:7a:20:b7:a7:91:06:2a:3c:f8:2e:31:df:
cf:67:93:0a:2f:34:9d:bb:3e:a6:ec:2d:03:03:b8:fd:30:66:
8f:bf:91:7a:d2:61:6f:42:6f:10:5a:9f:a6:43:4e:85:7a:d0:
ea:fc:e7:b6:77:1f:1f:f2:c8:df:07:0a:d9:97:ab:61:9d:41:
b0:17:a5:4b:0e:7e:80:e0:d4:4b:a4:3b:d6:11:e9:bd:d8:71:
91:71:36:7e:9c:b3:55:4e:af:d5:8e:6b:75:17:31:54:64:69:
6a:9e:dd:e2:5e:ca:20:3f:5c:83:38:a4:3d:7d:65:86:2d:85:
2c:bc:e3:b4:8a:88:67:c4:68:83:33:1d:4b:8a:a7:dc:c0:a1:
59:96:a1:71
-----BEGIN CERTIFICATE-----
MIIFHzCCBAegAwIBAgISAZpJqtJK/Qpt99cdNmzjy+vBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3YzIwM2UzZjM2NTkyM2E4NDNkMzIyMDMxN2ExYzY4Y2Y3
NGRlMGYwHhcNMjUxMTAzMTIyMjAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZmZlODBjYzc3ZjUzOTFhMzFmOWNhNjlmN2E5NGJmMmQzMzE0MDIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0H+Zm9A/+ioDYX7qcWum1iq2x+W
tu6Dh5Ce4sempUUZrof7yD1izKyIfErNE5f8REN1jC9jFz9SObcnNfZF6TviQHcq
v7ZxZlq944uAwfBSPmAt9pATyvCnwO1jZL9oQp9ZNNxZy1o4rVI4rHFgbqy661bi
AnpOhUrdWoFPxC96aKW++9lrcjJjAyeNUJ+ljbGEE2w/rWcnsZynWmwxtKRoa7WT
RnJUC3WLNlpjuprq70Ax8essEweMZU+DazmSZ/eZ2SFzty10FYllWk7MwW2bhPOC
jf/FfQQTAbLSYUxQt8bPQp7gv9OvO26tA2S+HCNZyKJ0px52FhalQagmnQIDAQAB
o4ICKzCCAicwHQYDVR0OBBYEFI/+gMx39TkaMfnKafepS/LTMUAjMB8GA1UdIwQY
MBaAFBfCA+PzZZI6hD0yIDF6HGjPdN4PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjhJRDRfTmxranFFUFRJZ01Yb2NhTTkwM2c4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy84OWFlOGUtNDY3NC00NTVkLTlmMjMt
YWM2N2EzNmU0YWFiLzEval82QXpIZjFPUm94LWNwcDk2bEw4dE14UUNNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy84OWFlOGUtNDY3NC00NTVkLTlmMjMtYWM2N2EzNmU0YWFi
LzEvRjhJRDRfTmxranFFUFRJZ01Yb2NhTTkwM2c4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoAwQAJcsjMAwD
BAAlyyUDBAAlyyYDBABZbxYwDAMEAFlvGQMEAFlvHDANBgkqhkiG9w0BAQsFAAOC
AQEAIWyt4Vq5Ru35Ugjmn7JHz8zTyQ45DTmLg9pfMYV54tPTZ2ZzWTeQzWONbKEH
ZZnVI357s3AfTmjMncipMizKG82gFWZ6W8hkYvWcR+/0vNQiPxyYTaHW3q7eHh1F
1wsWZoNrjKztXhRajDsn6SEOvLzxeiC3p5EGKjz4LjHfz2eTCi80nbs+puwtAwO4
/TBmj7+RetJhb0JvEFqfpkNOhXrQ6vzntncfH/LI3wcK2ZerYZ1BsBelSw5+gODU
S6Q71hHpvdhxkXE2fpyzVU6v1Y5rdRcxVGRpap7d4l7KID9cgzikPX1lhi2FLLzj
tIqIZ8RogzMdS4qn3MChWZahcQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:46:21 2025 by rpki-client