Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/f3d572-3dc7-4b46-9269-3c30a0ad13f6/1/ow60WK19GLScvXjofKcYY7rIu7Q.roa
File: ow60WK19GLScvXjofKcYY7rIu7Q.roa (raw, json)
Hash identifier: k9aBIwcpyP8JupLuwo0clAFTDBkWTnr5IYecYXpvwdY=
Subject key identifier: A3:0E:B4:58:AD:7D:18:B4:9C:BD:78:E8:7C:A7:18:63:BA:C8:BB:B4
Certificate issuer: /CN=8e8e977abefa2a1f995e89c947fefd4636b7961c
Certificate serial: 019A06DE9A74A15D9D1C1032A0DB4411F355
Authority key identifier: 8E:8E:97:7A:BE:FA:2A:1F:99:5E:89:C9:47:FE:FD:46:36:B7:96:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jo6Xer76Kh-ZXonJR_79Rja3lhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/f3d572-3dc7-4b46-9269-3c30a0ad13f6/1/ow60WK19GLScvXjofKcYY7rIu7Q.roa
Signing time: Tue 21 Oct 2025 13:04:03 +0000
ROA not before: Tue 21 Oct 2025 13:04:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48185
IP address blocks: 2a02:2b8::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/f3d572-3dc7-4b46-9269-3c30a0ad13f6/1/jo6Xer76Kh-ZXonJR_79Rja3lhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/f3d572-3dc7-4b46-9269-3c30a0ad13f6/1/jo6Xer76Kh-ZXonJR_79Rja3lhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jo6Xer76Kh-ZXonJR_79Rja3lhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:06:de:9a:74:a1:5d:9d:1c:10:32:a0:db:44:11:f3:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e8e977abefa2a1f995e89c947fefd4636b7961c
Validity
Not Before: Oct 21 13:04:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a30eb458ad7d18b49cbd78e87ca71863bac8bbb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3b:f0:fa:29:f8:e6:9a:7f:83:e9:a5:4e:3f:
5a:8f:d6:5d:d4:0c:62:1d:55:7b:54:b5:ff:87:c3:
58:ff:b3:02:1e:cf:84:28:f1:9d:5d:04:1f:fd:c5:
62:7d:00:60:9e:3a:6a:aa:b1:e2:27:c2:aa:f2:67:
40:07:d1:1b:a9:f1:3f:c4:4d:dc:d9:8b:1e:55:8b:
1d:c8:1d:79:0c:72:9d:9a:9d:e2:9c:73:1e:79:f6:
75:d8:88:30:94:a8:3b:5b:48:e4:08:4b:2e:7e:ca:
77:00:6b:6b:62:f4:9e:a4:cc:be:97:d9:a1:1c:d4:
60:8f:9b:cd:ac:7d:5b:99:04:03:bb:14:71:ac:b7:
38:b2:1d:d4:d9:a8:43:68:96:ff:b0:69:93:b2:16:
dd:fc:83:da:3c:73:67:f4:07:41:4c:dd:25:2f:45:
c5:65:5d:78:0e:6c:ba:b6:4d:b0:67:fa:b2:a8:21:
94:94:8a:e5:80:07:26:8e:00:5a:ec:3f:cc:87:86:
a5:5a:f5:02:d9:e5:8b:a9:f1:9d:e6:b4:e5:ff:18:
c9:71:cf:a3:aa:be:4a:3c:36:5d:c1:5d:a7:ef:30:
cb:25:48:ff:d0:51:cb:4c:2b:3d:f2:2a:e2:c3:1d:
0f:f3:d5:24:e8:24:4e:57:c3:cd:52:dc:be:e1:6e:
89:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:0E:B4:58:AD:7D:18:B4:9C:BD:78:E8:7C:A7:18:63:BA:C8:BB:B4
X509v3 Authority Key Identifier:
keyid:8E:8E:97:7A:BE:FA:2A:1F:99:5E:89:C9:47:FE:FD:46:36:B7:96:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jo6Xer76Kh-ZXonJR_79Rja3lhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f3d572-3dc7-4b46-9269-3c30a0ad13f6/1/ow60WK19GLScvXjofKcYY7rIu7Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f3d572-3dc7-4b46-9269-3c30a0ad13f6/1/jo6Xer76Kh-ZXonJR_79Rja3lhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:2b8::/32
Signature Algorithm: sha256WithRSAEncryption
84:d9:22:60:92:26:00:95:42:e7:3b:c1:25:cf:94:cb:8e:0b:
c3:47:de:99:6d:7b:0d:55:98:40:b6:86:bc:4c:fe:8e:07:b9:
01:28:29:a2:29:21:4d:bb:97:4c:4d:b0:ab:ad:52:36:64:44:
0a:51:a7:35:69:d2:03:e1:5a:74:a5:98:65:3d:3f:08:59:9d:
11:ba:91:d6:02:b1:3d:d0:6a:98:12:6f:64:69:9e:bb:2e:8e:
71:c6:7d:af:19:89:cf:c1:07:61:00:13:60:7d:79:30:11:13:
ed:ed:e5:6f:e7:1c:69:8f:39:8a:9c:1c:26:6c:7b:62:ce:de:
6a:73:2c:fe:8c:54:c6:1e:d6:80:0f:e3:e3:28:72:64:6a:85:
b8:5c:68:66:76:e9:23:d8:7a:95:ea:18:2b:14:6c:4d:1e:d5:
c8:df:da:98:d2:85:75:b0:76:6e:ee:5a:6a:94:b9:2e:c9:f2:
80:9c:7d:8e:3a:78:0a:67:10:67:8d:8f:1e:5c:ee:de:19:ef:
50:86:3f:55:f1:cb:a7:32:1c:e7:3c:c0:2f:b2:44:34:9e:a9:
93:a5:ce:d7:ab:2e:77:2b:ac:51:be:1f:f6:f9:8b:a0:a6:0f:
56:06:bd:73:f1:6b:7a:c8:14:2a:cd:d3:63:6b:64:9c:57:9e:
e5:1f:23:f2
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZoG3pp0oV2dHBAyoNtEEfNVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlOGU5NzdhYmVmYTJhMWY5OTVlODljOTQ3ZmVmZDQ2MzZi
Nzk2MWMwHhcNMjUxMDIxMTMwNDAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMzBlYjQ1OGFkN2QxOGI0OWNiZDc4ZTg3Y2E3MTg2M2JhYzhiYmI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzvw+in45pp/g+mlTj9aj9Zd1Axi
HVV7VLX/h8NY/7MCHs+EKPGdXQQf/cVifQBgnjpqqrHiJ8Kq8mdAB9EbqfE/xE3c
2YseVYsdyB15DHKdmp3inHMeefZ12IgwlKg7W0jkCEsufsp3AGtrYvSepMy+l9mh
HNRgj5vNrH1bmQQDuxRxrLc4sh3U2ahDaJb/sGmTshbd/IPaPHNn9AdBTN0lL0XF
ZV14Dmy6tk2wZ/qyqCGUlIrlgAcmjgBa7D/Mh4alWvUC2eWLqfGd5rTl/xjJcc+j
qr5KPDZdwV2n7zDLJUj/0FHLTCs98iriwx0P89Uk6CROV8PNUty+4W6JKQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFKMOtFitfRi0nL146HynGGO6yLu0MB8GA1UdIwQY
MBaAFI6Ol3q++iofmV6JyUf+/UY2t5YcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvam82WGVyNzZLaC1aWG9uSlJfNzlSamEzbGh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9mM2Q1NzItM2RjNy00YjQ2LTkyNjkt
M2MzMGEwYWQxM2Y2LzEvb3c2MFdLMTlHTFNjdlhqb2ZLY1lZN3JJdTdRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy9mM2Q1NzItM2RjNy00YjQ2LTkyNjktM2MzMGEwYWQxM2Y2
LzEvam82WGVyNzZLaC1aWG9uSlJfNzlSamEzbGh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgICuDAN
BgkqhkiG9w0BAQsFAAOCAQEAhNkiYJImAJVC5zvBJc+Uy44Lw0femW17DVWYQLaG
vEz+jge5ASgpoikhTbuXTE2wq61SNmREClGnNWnSA+FadKWYZT0/CFmdEbqR1gKx
PdBqmBJvZGmeuy6OccZ9rxmJz8EHYQATYH15MBET7e3lb+ccaY85ipwcJmx7Ys7e
anMs/oxUxh7WgA/j4yhyZGqFuFxoZnbpI9h6leoYKxRsTR7VyN/amNKFdbB2bu5a
apS5LsnygJx9jjp4CmcQZ42PHlzu3hnvUIY/VfHLpzIc5zzAL7JENJ6pk6XO16su
dyusUb4f9vmLoKYPVga9c/FresgUKs3TY2tknFee5R8j8g==
-----END CERTIFICATE-----
Generated at Mon Oct 27 06:46:08 2025 by rpki-client