Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/_bqJOppJMYlhCqHfIAJ6Sh83vHA.roa
File: _bqJOppJMYlhCqHfIAJ6Sh83vHA.roa (raw, json)
Hash identifier: 1f0aFmNhmLx4lKQjnS1bd4RzjmzmwwV3y7zrSykmheM=
Subject key identifier: FD:BA:89:3A:9A:49:31:89:61:0A:A1:DF:20:02:7A:4A:1F:37:BC:70
Certificate issuer: /CN=22a5d84053e2b0c313af1e3ba5102466a5f79678
Certificate serial: 019928EE5CFD401CE55240118682501C9AB2
Authority key identifier: 22:A5:D8:40:53:E2:B0:C3:13:AF:1E:3B:A5:10:24:66:A5:F7:96:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/_bqJOppJMYlhCqHfIAJ6Sh83vHA.roa
Signing time: Mon 08 Sep 2025 10:45:33 +0000
ROA not before: Mon 08 Sep 2025 10:45:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 137.174.224.0/19 maxlen: 19
147.123.32.0/22 maxlen: 32
155.204.224.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.mft
rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 07:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:28:ee:5c:fd:40:1c:e5:52:40:11:86:82:50:1c:9a:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a5d84053e2b0c313af1e3ba5102466a5f79678
Validity
Not Before: Sep 8 10:45:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fdba893a9a493189610aa1df20027a4a1f37bc70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e0:b0:f7:d8:d9:7b:ab:67:30:5a:5d:4a:d6:
18:19:ce:49:53:22:47:61:fd:c0:ec:08:b7:fa:32:
27:ba:d2:68:e6:b9:de:10:bd:28:9c:f6:6c:ce:4d:
09:06:1a:fa:fe:ac:23:e4:68:1d:c0:ac:92:da:53:
0f:41:ee:39:d6:fc:a3:b0:ee:e8:ed:55:fb:b7:4a:
b8:a9:5e:d4:38:76:04:b3:c6:80:52:22:7e:c6:09:
be:49:0b:5b:4b:56:6b:fb:8a:b0:60:03:4c:a8:00:
e9:03:d3:00:9f:d2:5a:7a:82:52:34:89:94:c4:c7:
b6:92:a1:91:0a:38:c9:79:eb:3f:07:f9:ac:ff:42:
f4:86:cd:a0:1b:bc:6c:3b:b2:77:6e:ea:b3:af:d1:
f3:42:e1:8d:12:93:34:ef:cf:e4:08:b9:62:b7:02:
2d:f0:b4:d8:4a:ae:98:51:c5:78:6a:27:c0:1b:cb:
8a:f1:4f:87:cb:b7:ec:59:b0:a9:dd:f5:33:c2:3b:
b0:77:a6:b9:c8:b1:5e:13:91:d3:24:56:c2:7a:24:
ce:f6:24:23:e1:a9:b8:9c:0f:a2:90:bf:17:a4:bc:
70:ff:c2:fb:a9:e2:cc:6f:d9:6f:fb:f7:cf:fc:df:
e4:3c:7f:f4:b3:5d:7b:c8:6a:bd:59:c5:3e:5e:6d:
5c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:BA:89:3A:9A:49:31:89:61:0A:A1:DF:20:02:7A:4A:1F:37:BC:70
X509v3 Authority Key Identifier:
keyid:22:A5:D8:40:53:E2:B0:C3:13:AF:1E:3B:A5:10:24:66:A5:F7:96:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/_bqJOppJMYlhCqHfIAJ6Sh83vHA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
137.174.224.0/19
147.123.32.0/22
155.204.224.0/19
Signature Algorithm: sha256WithRSAEncryption
66:47:48:4d:dd:69:ff:f0:0a:db:22:57:08:c9:48:a4:4e:cf:
2e:1d:fb:51:fc:f9:39:c9:58:a6:2e:73:24:44:7e:3e:32:61:
9d:2d:88:18:9e:82:43:a3:c4:42:13:6c:24:24:73:05:96:a9:
b2:d0:78:05:16:8f:cd:68:67:3f:d8:2f:dc:a5:36:85:c8:38:
1f:98:9d:1c:9b:53:87:8d:55:37:0d:59:75:f4:57:fa:6a:e1:
6c:7a:5b:3c:34:7a:7f:05:83:8d:1e:e5:e2:49:5f:f0:09:27:
41:f2:db:5c:e1:1d:f6:bf:46:78:fe:77:df:6b:e8:60:70:75:
05:a0:a7:a5:dc:e6:79:8d:90:0c:33:8e:02:a3:f3:59:23:61:
a5:8d:95:1a:d4:d6:8c:14:9f:af:68:dd:04:d3:33:3e:5b:f2:
c2:30:17:87:72:23:1d:54:00:16:5b:d9:a3:48:9b:11:44:31:
09:4d:71:95:d6:9f:6e:c2:43:4d:04:01:e0:bb:ac:61:c1:07:
15:a6:5f:b6:0e:56:91:5a:d1:06:37:f8:ee:cb:87:c5:63:9c:
27:88:aa:3a:74:35:20:4a:ef:0b:2a:9e:71:d5:03:f2:cf:6e:
15:e3:fc:53:13:35:ec:1f:36:66:73:fb:88:7b:7e:f3:11:c0:
59:58:95:52
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZko7lz9QBzlUkARhoJQHJqyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYTVkODQwNTNlMmIwYzMxM2FmMWUzYmE1MTAyNDY2YTVm
Nzk2NzgwHhcNMjUwOTA4MTA0NTMzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZGJhODkzYTlhNDkzMTg5NjEwYWExZGYyMDAyN2E0YTFmMzdiYzcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuCw99jZe6tnMFpdStYYGc5JUyJH
Yf3A7Ai3+jInutJo5rneEL0onPZszk0JBhr6/qwj5GgdwKyS2lMPQe451vyjsO7o
7VX7t0q4qV7UOHYEs8aAUiJ+xgm+SQtbS1Zr+4qwYANMqADpA9MAn9JaeoJSNImU
xMe2kqGRCjjJees/B/ms/0L0hs2gG7xsO7J3buqzr9HzQuGNEpM078/kCLlitwIt
8LTYSq6YUcV4aifAG8uK8U+Hy7fsWbCp3fUzwjuwd6a5yLFeE5HTJFbCeiTO9iQj
4am4nA+ikL8XpLxw/8L7qeLMb9lv+/fP/N/kPH/0s117yGq9WcU+Xm1cjQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFP26iTqaSTGJYQqh3yACekofN7xwMB8GA1UdIwQY
MBaAFCKl2EBT4rDDE68eO6UQJGal95Z4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXFYWVFGUGlzTU1Ucng0N3BSQWtacVgzbG5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9lM2ZiN2QtZGQ0Yi00ZDg1LWIwOGUt
NTkxY2FmNTM2ZWNjLzEvX2JxSk9wcEpNWWxoQ3FIZklBSjZTaDgzdkhBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi9lM2ZiN2QtZGQ0Yi00ZDg1LWIwOGUtNTkxY2FmNTM2ZWNj
LzEvSXFYWVFGUGlzTU1Ucng0N3BSQWtacVgzbG5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQFia7gAwQC
k3sgAwQFm8zgMA0GCSqGSIb3DQEBCwUAA4IBAQBmR0hN3Wn/8ArbIlcIyUikTs8u
HftR/Pk5yVimLnMkRH4+MmGdLYgYnoJDo8RCE2wkJHMFlqmy0HgFFo/NaGc/2C/c
pTaFyDgfmJ0cm1OHjVU3DVl19Ff6auFsels8NHp/BYONHuXiSV/wCSdB8ttc4R32
v0Z4/nffa+hgcHUFoKel3OZ5jZAMM44Co/NZI2GljZUa1NaMFJ+vaN0E0zM+W/LC
MBeHciMdVAAWW9mjSJsRRDEJTXGV1p9uwkNNBAHgu6xhwQcVpl+2DlaRWtEGN/ju
y4fFY5wniKo6dDUgSu8LKp5x1QPyz24V4/xTEzXsHzZmc/uIe37zEcBZWJVS
-----END CERTIFICATE-----
Generated at Wed Sep 10 15:21:49 2025 by rpki-client