Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/9576YYlhoP7f2pSzcYlCJOH8MSo.roa
File: 9576YYlhoP7f2pSzcYlCJOH8MSo.roa (raw, json)
Hash identifier: 8ylOR07mWV1t96DQR+NXsOjeZN13g3RKILzsyJYBK2E=
Subject key identifier: F7:9E:FA:61:89:61:A0:FE:DF:DA:94:B3:71:89:42:24:E1:FC:31:2A
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 019986920D9AA5B8281C7BC8A6579FF9655D
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/9576YYlhoP7f2pSzcYlCJOH8MSo.roa
Signing time: Fri 26 Sep 2025 15:09:02 +0000
ROA not before: Fri 26 Sep 2025 15:09:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7029
IP address blocks: 81.22.131.0/24 maxlen: 24
81.22.135.0/24 maxlen: 24
81.22.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 09:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:86:92:0d:9a:a5:b8:28:1c:7b:c8:a6:57:9f:f9:65:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Sep 26 15:09:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f79efa618961a0fedfda94b371894224e1fc312a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:0f:1b:12:f6:7c:a4:3a:ca:90:a8:82:e8:e1:
14:6e:c5:5a:96:76:92:79:f2:aa:26:79:c0:62:de:
eb:39:74:22:0c:dd:48:b2:d8:df:28:cf:72:d6:65:
46:85:6e:12:25:0b:12:10:b9:67:fc:8a:98:0f:4a:
42:c0:0a:07:87:16:f2:91:b0:19:d8:16:8e:d3:b2:
3c:b0:6f:28:c0:1c:64:eb:f4:64:5d:f0:fa:ea:cc:
e2:ed:fe:8e:7d:10:b8:4b:ce:b0:a3:ab:0a:76:ed:
f6:9d:f3:07:06:a0:78:e1:93:34:78:f3:b3:38:08:
0b:6b:ec:d1:ea:31:c5:38:08:28:c5:10:a2:c1:25:
92:a6:65:79:04:77:16:b6:1a:3b:cf:b6:e8:e7:7d:
eb:fc:bf:e6:2b:84:4a:04:64:30:f8:5d:6a:b5:eb:
0f:6e:c5:80:5a:f9:5d:ca:04:a3:67:de:3a:03:5a:
e6:9c:8f:07:67:4b:58:3b:dc:aa:ea:cb:ba:4f:ae:
18:79:13:6c:0e:72:09:4f:f8:71:a1:a6:17:15:44:
22:29:07:cc:69:30:d2:b8:62:5f:94:c5:33:b1:26:
8a:ba:03:d7:4d:c4:ef:a4:01:01:a8:79:1b:fe:2d:
09:2c:4e:24:59:9e:c6:42:85:44:0d:f8:a2:5b:ae:
a3:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:9E:FA:61:89:61:A0:FE:DF:DA:94:B3:71:89:42:24:E1:FC:31:2A
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/9576YYlhoP7f2pSzcYlCJOH8MSo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.131.0/24
81.22.135.0/24
81.22.141.0/24
Signature Algorithm: sha256WithRSAEncryption
08:77:bd:99:44:5b:a8:56:99:d4:aa:1b:ff:f5:72:de:4e:30:
58:a7:50:95:96:d1:e8:5a:d1:18:e5:a4:69:dd:f6:f7:35:35:
c4:3e:43:4f:db:af:d5:34:cc:37:72:b6:f4:6b:3e:30:0e:b1:
68:37:be:59:25:ed:70:a9:a3:42:46:62:e0:8e:9f:c8:09:35:
56:cd:85:d7:07:eb:ab:14:4f:fd:7e:84:01:95:b5:d3:2d:a2:
10:6b:6f:46:1b:ec:4f:2e:6e:91:2a:a9:e7:a6:ea:eb:2d:1a:
46:2e:bb:93:b7:51:dc:dc:7f:c5:e0:4e:9a:07:84:bf:d8:0e:
a3:53:b0:8f:35:85:ff:bf:73:0f:8b:d6:af:44:0d:23:b1:a3:
27:85:9b:01:25:04:a0:5c:60:58:0f:3a:4d:4d:2c:46:47:c7:
73:67:02:25:bf:52:65:91:14:36:dd:0a:a5:f5:e9:cd:0c:92:
23:6b:6d:6a:08:00:76:4c:e4:cc:4b:09:5a:60:38:51:fa:f7:
e1:78:1f:18:14:80:b0:28:78:60:3c:47:fb:b0:8a:bd:47:b2:
a2:6a:c4:74:fc:48:de:d7:13:d3:4e:b3:7c:93:0e:3b:af:8f:
ef:c7:4a:b0:45:27:12:2f:e1:a1:14:90:da:d4:83:e4:75:0f:
af:0e:27:bd
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZmGkg2apbgoHHvIplef+WVdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4MmNmODA5YzBlM2U4ZTU1NTJmOWQwZGQyZTI3ZTBkZDJk
OGRhYmUwHhcNMjUwOTI2MTUwOTAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNzllZmE2MTg5NjFhMGZlZGZkYTk0YjM3MTg5NDIyNGUxZmMzMTJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3w8bEvZ8pDrKkKiC6OEUbsValnaS
efKqJnnAYt7rOXQiDN1IstjfKM9y1mVGhW4SJQsSELln/IqYD0pCwAoHhxbykbAZ
2BaO07I8sG8owBxk6/RkXfD66szi7f6OfRC4S86wo6sKdu32nfMHBqB44ZM0ePOz
OAgLa+zR6jHFOAgoxRCiwSWSpmV5BHcWtho7z7bo533r/L/mK4RKBGQw+F1qtesP
bsWAWvldygSjZ946A1rmnI8HZ0tYO9yq6su6T64YeRNsDnIJT/hxoaYXFUQiKQfM
aTDSuGJflMUzsSaKugPXTcTvpAEBqHkb/i0JLE4kWZ7GQoVEDfiiW66jXQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFPee+mGJYaD+39qUs3GJQiTh/DEqMB8GA1UdIwQY
MBaAFJgs+AnA4+jlVS+dDdLifg3S2Nq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEt
ODJhZDE0NTU1ZWFhLzEvOTU3NllZbGhvUDdmMnBTemNZbENKT0g4TVNvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEtODJhZDE0NTU1ZWFh
LzEvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAURaDAwQA
URaHAwQAURaNMA0GCSqGSIb3DQEBCwUAA4IBAQAId72ZRFuoVpnUqhv/9XLeTjBY
p1CVltHoWtEY5aRp3fb3NTXEPkNP26/VNMw3crb0az4wDrFoN75ZJe1wqaNCRmLg
jp/ICTVWzYXXB+urFE/9foQBlbXTLaIQa29GG+xPLm6RKqnnpurrLRpGLruTt1Hc
3H/F4E6aB4S/2A6jU7CPNYX/v3MPi9avRA0jsaMnhZsBJQSgXGBYDzpNTSxGR8dz
ZwIlv1JlkRQ23Qql9enNDJIja21qCAB2TOTMSwlaYDhR+vfheB8YFICwKHhgPEf7
sIq9R7KiasR0/Eje1xPTTrN8kw47r4/vx0qwRScSL+GhFJDa1IPkdQ+vDie9
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:34:24 2025 by rpki-client