Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/qO7IhFc2Ngzfe9in0y1jJpIj8yo.roa
File: qO7IhFc2Ngzfe9in0y1jJpIj8yo.roa (raw, json)
Hash identifier: jsJA3sr6bjM5iq01WoqnUNY/zyI9pzhWP6lSIF2UDJc=
Subject key identifier: A8:EE:C8:84:57:36:36:0C:DF:7B:D8:A7:D3:2D:63:26:92:23:F3:2A
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 01993EE7FF98FF62BDE33E6EEE70CCFFFC74
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/qO7IhFc2Ngzfe9in0y1jJpIj8yo.roa
Signing time: Fri 12 Sep 2025 17:10:15 +0000
ROA not before: Fri 12 Sep 2025 17:10:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 22773
IP address blocks: 89.34.224.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Sep 2025 08:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:3e:e7:ff:98:ff:62:bd:e3:3e:6e:ee:70:cc:ff:fc:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Sep 12 17:10:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a8eec8845736360cdf7bd8a7d32d63269223f32a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:be:31:13:06:ad:ed:ea:96:b4:f6:ab:21:b8:
8e:ca:39:81:ea:22:ae:a6:af:71:c8:7f:ad:29:72:
75:07:b9:67:48:4e:3c:0b:45:2a:01:34:f0:0c:be:
54:52:38:74:db:4d:71:d5:37:40:6a:1c:d5:72:4b:
f5:3b:17:24:9b:a6:ca:a5:78:f7:a6:63:81:33:0c:
03:93:00:24:29:0e:f2:50:4c:7f:a9:f9:46:40:08:
8c:32:97:c8:0c:7c:f8:0b:de:0a:96:03:fe:d4:4e:
81:0b:2c:e6:4b:f7:a3:2e:3e:c8:81:2a:67:f1:eb:
1e:a7:f0:bf:b3:a1:01:d0:c5:27:b3:ec:54:9a:e7:
f7:67:5b:1c:3b:2e:5a:c6:73:67:a1:43:f8:61:d2:
4e:e6:a8:99:62:09:7c:e7:b8:3a:f7:e1:10:17:99:
c6:85:8c:fa:d6:fc:d8:77:d5:75:1b:2c:37:31:7f:
d3:92:5e:e8:51:8e:66:f3:c8:d3:66:a8:81:eb:38:
e8:25:17:2b:55:02:a4:fc:2e:46:b9:35:09:c1:a3:
02:b4:0d:fb:f5:06:8f:e2:91:39:75:84:31:19:fe:
fa:b3:25:dc:c7:f3:cd:30:b0:b6:13:70:1e:53:af:
26:d1:f9:8b:05:74:6f:ee:32:03:fd:cf:ec:4e:5d:
57:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:EE:C8:84:57:36:36:0C:DF:7B:D8:A7:D3:2D:63:26:92:23:F3:2A
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/qO7IhFc2Ngzfe9in0y1jJpIj8yo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.34.224.0/23
Signature Algorithm: sha256WithRSAEncryption
36:d3:a4:8d:42:7f:04:78:a9:44:f1:19:07:58:8a:a9:76:43:
de:01:a1:26:6b:d3:9a:34:60:7e:2d:71:64:63:7e:c6:20:b9:
03:36:b9:10:34:d4:f5:92:3b:f0:55:94:72:36:71:9d:9f:79:
9e:9a:9d:f3:06:ed:fb:f0:57:f5:83:56:eb:40:6e:e1:bb:e4:
74:79:5a:c6:b7:e9:92:d9:10:72:2d:14:40:ca:76:57:25:e5:
ee:db:28:9a:a2:56:3c:c3:1b:44:4e:11:2c:f5:a0:0f:86:93:
30:3f:46:b5:7c:80:dd:79:8a:d1:23:0b:69:e6:97:a4:68:75:
aa:74:2d:a0:e4:48:66:ad:4a:f7:b5:82:fa:02:f3:d2:dd:ae:
53:cd:86:44:4e:85:e1:a9:95:10:8d:e2:48:95:3e:9c:f2:4c:
4d:ed:fa:31:0d:3d:99:f2:e3:97:0f:53:a2:86:08:92:b2:84:
be:89:e2:15:3b:4b:1a:f7:e4:33:32:8d:24:fd:56:7c:f3:2f:
7d:22:82:50:d5:ea:7b:fe:ed:1d:a4:9c:f2:e3:8d:24:04:1b:
81:af:ee:f8:a2:6a:bf:8d:de:ee:e1:b9:46:1c:b8:6d:a1:c5:
91:e2:d4:9e:b6:96:52:c7:e2:d9:63:0a:a4:49:e2:4e:22:99:
84:bb:e1:50
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZk+5/+Y/2K94z5u7nDM//x0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZDQ2ZTBlM2U4Y2FhYWVkNGE1MjliZDdkNzMwOGJkMWVm
MDFjMWQwHhcNMjUwOTEyMTcxMDE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOGVlYzg4NDU3MzYzNjBjZGY3YmQ4YTdkMzJkNjMyNjkyMjNmMzJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl74xEwat7eqWtParIbiOyjmB6iKu
pq9xyH+tKXJ1B7lnSE48C0UqATTwDL5UUjh0201x1TdAahzVckv1Oxckm6bKpXj3
pmOBMwwDkwAkKQ7yUEx/qflGQAiMMpfIDHz4C94KlgP+1E6BCyzmS/ejLj7IgSpn
8esep/C/s6EB0MUns+xUmuf3Z1scOy5axnNnoUP4YdJO5qiZYgl857g69+EQF5nG
hYz61vzYd9V1Gyw3MX/Tkl7oUY5m88jTZqiB6zjoJRcrVQKk/C5GuTUJwaMCtA37
9QaP4pE5dYQxGf76syXcx/PNMLC2E3AeU68m0fmLBXRv7jID/c/sTl1XJQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKjuyIRXNjYM33vYp9MtYyaSI/MqMB8GA1UdIwQY
MBaAFPHUbg4+jKqu1KUpvX1zCL0e8BwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMt
YjQyZjIzZDgyOGMzLzEvcU83SWhGYzJOZ3pmZTlpbjB5MWpKcElqOHlvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMtYjQyZjIzZDgyOGMz
LzEvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBWSLgMA0G
CSqGSIb3DQEBCwUAA4IBAQA206SNQn8EeKlE8RkHWIqpdkPeAaEma9OaNGB+LXFk
Y37GILkDNrkQNNT1kjvwVZRyNnGdn3memp3zBu378Ff1g1brQG7hu+R0eVrGt+mS
2RByLRRAynZXJeXu2yiaolY8wxtEThEs9aAPhpMwP0a1fIDdeYrRIwtp5pekaHWq
dC2g5EhmrUr3tYL6AvPS3a5TzYZEToXhqZUQjeJIlT6c8kxN7foxDT2Z8uOXD1Oi
hgiSsoS+ieIVO0sa9+QzMo0k/VZ88y99IoJQ1ep7/u0dpJzy440kBBuBr+74omq/
jd7u4blGHLhtocWR4tSetpZSx+LZYwqkSeJOIpmEu+FQ
-----END CERTIFICATE-----
Generated at Thu Sep 18 12:19:56 2025 by rpki-client