Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/_b8VyqTCk7JAbdUq1WSR3psKxic.roa
File: _b8VyqTCk7JAbdUq1WSR3psKxic.roa (raw, json)
Hash identifier: Xw2IGuYjxgrC5h7G/5AbjS3s2fK9xrr0dS9O82wc8rY=
Subject key identifier: FD:BF:15:CA:A4:C2:93:B2:40:6D:D5:2A:D5:64:91:DE:9B:0A:C6:27
Certificate issuer: /CN=f324581e4368825d5e13f4f2a0d6ff8e484c95e6
Certificate serial: 019A113AE3F201889B4150FCB186F25BCE6F
Authority key identifier: F3:24:58:1E:43:68:82:5D:5E:13:F4:F2:A0:D6:FF:8E:48:4C:95:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/_b8VyqTCk7JAbdUq1WSR3psKxic.roa
Signing time: Thu 23 Oct 2025 13:21:03 +0000
ROA not before: Thu 23 Oct 2025 13:21:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61138
IP address blocks: 109.205.193.0/24 maxlen: 24
2a01:fb05:3000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 14:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:11:3a:e3:f2:01:88:9b:41:50:fc:b1:86:f2:5b:ce:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f324581e4368825d5e13f4f2a0d6ff8e484c95e6
Validity
Not Before: Oct 23 13:21:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fdbf15caa4c293b2406dd52ad56491de9b0ac627
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6e:e4:1f:7e:c3:f8:b6:cc:28:c7:2b:88:f9:
2b:1a:6b:fe:08:1f:43:81:ef:55:9e:a4:c7:8e:78:
a8:cb:97:a8:60:26:9c:e6:0f:20:e2:57:2c:b2:4e:
94:7f:e1:79:25:e8:eb:93:72:fb:4f:ba:e2:50:a2:
2c:51:c5:af:0b:2a:65:a1:23:88:c3:e1:bc:dc:cc:
5f:b3:ca:e2:df:6d:4c:d3:32:91:30:f0:7c:de:aa:
07:dd:d2:f4:d3:05:de:a9:62:a1:55:74:01:b7:75:
9a:9d:3e:1a:45:b0:73:b5:1d:d0:f3:7e:f3:70:77:
12:0d:f0:ad:1e:4f:84:d4:a8:59:56:ef:d6:1b:fb:
fa:88:d0:22:fa:19:49:0c:7a:47:a8:a3:53:b2:dd:
3c:c7:7a:c4:84:11:50:e0:21:af:1c:9d:6e:46:9f:
73:ca:8f:d6:6e:b0:ef:3d:e5:5c:1e:47:b1:b5:72:
d6:7d:03:1d:20:15:cd:a5:16:2a:e4:c5:68:a8:71:
f9:3a:3f:6d:ed:b2:38:aa:90:0a:ea:2d:6b:22:5e:
b7:31:81:85:c4:29:b7:75:09:2a:4c:05:1d:ce:bb:
15:9c:b2:68:6d:69:3f:6d:04:c9:f0:56:6c:cb:03:
0b:16:cb:30:68:11:1b:22:cd:28:20:b1:b8:83:87:
a7:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:BF:15:CA:A4:C2:93:B2:40:6D:D5:2A:D5:64:91:DE:9B:0A:C6:27
X509v3 Authority Key Identifier:
keyid:F3:24:58:1E:43:68:82:5D:5E:13:F4:F2:A0:D6:FF:8E:48:4C:95:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/_b8VyqTCk7JAbdUq1WSR3psKxic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.205.193.0/24
IPv6:
2a01:fb05:3000::/36
Signature Algorithm: sha256WithRSAEncryption
87:54:5b:af:05:87:d1:99:86:c9:fe:80:2e:42:b8:69:1a:61:
fc:30:7e:ab:c7:f3:26:58:b4:33:6a:3d:dc:b7:25:92:c4:6c:
75:d6:0f:69:12:aa:fe:78:25:da:03:39:10:c2:c9:45:30:95:
00:2e:8d:dc:e8:9e:f4:b6:89:7b:91:e1:ab:ca:d0:95:9d:fd:
b0:78:a6:8a:6c:92:21:9e:76:24:c4:4c:39:68:97:0e:92:78:
68:6e:b1:fb:c6:33:c4:83:72:06:30:90:ed:95:4e:55:15:86:
d7:40:07:4a:38:ed:27:8b:69:e8:23:bf:f9:b9:aa:aa:d7:15:
c4:fa:c5:08:85:26:51:4f:96:c7:7f:53:f5:81:52:39:02:ee:
e4:ca:89:f0:5a:f5:93:54:8e:70:19:d3:ea:0e:36:41:7c:ca:
29:98:f5:b6:7a:60:21:43:4c:0a:a8:4d:3a:b8:1c:3e:bb:e7:
cc:f6:59:51:e3:55:9f:6c:54:64:01:1b:ed:c6:64:a3:e6:8e:
4e:3c:a3:b7:6e:7c:d8:32:4e:d7:0f:b4:aa:cf:77:d0:9c:41:
c6:57:93:db:15:de:31:7c:e4:6d:53:f8:e5:33:6b:9b:1a:15:
09:60:af:4d:36:52:dc:87:34:23:d6:1e:5e:a7:2c:1d:be:f6:
d3:db:88:34
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgISAZoROuPyAYibQVD8sYbyW85vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzMjQ1ODFlNDM2ODgyNWQ1ZTEzZjRmMmEwZDZmZjhlNDg0
Yzk1ZTYwHhcNMjUxMDIzMTMyMTAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZGJmMTVjYWE0YzI5M2IyNDA2ZGQ1MmFkNTY0OTFkZTliMGFjNjI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArW7kH37D+LbMKMcriPkrGmv+CB9D
ge9VnqTHjnioy5eoYCac5g8g4lcssk6Uf+F5Jejrk3L7T7riUKIsUcWvCyploSOI
w+G83Mxfs8ri321M0zKRMPB83qoH3dL00wXeqWKhVXQBt3WanT4aRbBztR3Q837z
cHcSDfCtHk+E1KhZVu/WG/v6iNAi+hlJDHpHqKNTst08x3rEhBFQ4CGvHJ1uRp9z
yo/WbrDvPeVcHkextXLWfQMdIBXNpRYq5MVoqHH5Oj9t7bI4qpAK6i1rIl63MYGF
xCm3dQkqTAUdzrsVnLJobWk/bQTJ8FZsywMLFsswaBEbIs0oILG4g4enOwIDAQAB
o4ICGTCCAhUwHQYDVR0OBBYEFP2/FcqkwpOyQG3VKtVkkd6bCsYnMB8GA1UdIwQY
MBaAFPMkWB5DaIJdXhP08qDW/45ITJXmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHlSWUhrTm9nbDFlRV9UeW9OYl9qa2hNbGVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS82YjkxYWItOTlkYi00NjQ4LWIxNTMt
NmUyZDk3Y2ExNWZmLzEvX2I4VnlxVENrN0pBYmRVcTFXU1IzcHNLeGljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS82YjkxYWItOTlkYi00NjQ4LWIxNTMtNmUyZDk3Y2ExNWZm
LzEvOHlSWUhrTm9nbDFlRV9UeW9OYl9qa2hNbGVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAbc3BMA4E
AgACMAgDBgQqAfsFMDANBgkqhkiG9w0BAQsFAAOCAQEAh1RbrwWH0ZmGyf6ALkK4
aRph/DB+q8fzJli0M2o93LclksRsddYPaRKq/ngl2gM5EMLJRTCVAC6N3Oie9LaJ
e5Hhq8rQlZ39sHimimySIZ52JMRMOWiXDpJ4aG6x+8YzxINyBjCQ7ZVOVRWG10AH
SjjtJ4tp6CO/+bmqqtcVxPrFCIUmUU+Wx39T9YFSOQLu5MqJ8Fr1k1SOcBnT6g42
QXzKKZj1tnpgIUNMCqhNOrgcPrvnzPZZUeNVn2xUZAEb7cZko+aOTjyjt2582DJO
1w+0qs930JxBxleT2xXeMXzkbVP45TNrmxoVCWCvTTZS3Ic0I9YeXqcsHb7209uI
NA==
-----END CERTIFICATE-----
Generated at Mon Oct 27 16:22:47 2025 by rpki-client