Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/f96121-0335-402d-8491-4d88fce32399/1/0BbFW_BAMtuxhOMr7yakRiiM3nk.roa
File: 0BbFW_BAMtuxhOMr7yakRiiM3nk.roa (raw, json)
Hash identifier: cNxaXLNhQqWeIbn1R3i1vPo3toGI8Ah5QnfkdRtrGsY=
Subject key identifier: D0:16:C5:5B:F0:40:32:DB:B1:84:E3:2B:EF:26:A4:46:28:8C:DE:79
Certificate issuer: /CN=6204d0f891dc475ea703e6def3d6ead1e8f7c2d6
Certificate serial: 0198F4CAEDAFB5C057C58C05DAC72DB5937C
Authority key identifier: 62:04:D0:F8:91:DC:47:5E:A7:03:E6:DE:F3:D6:EA:D1:E8:F7:C2:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YgTQ-JHcR16nA-be89bq0ej3wtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/f96121-0335-402d-8491-4d88fce32399/1/0BbFW_BAMtuxhOMr7yakRiiM3nk.roa
Signing time: Fri 29 Aug 2025 07:46:36 +0000
ROA not before: Fri 29 Aug 2025 07:46:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51908
IP address blocks: 46.22.144.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/f96121-0335-402d-8491-4d88fce32399/1/YgTQ-JHcR16nA-be89bq0ej3wtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/f96121-0335-402d-8491-4d88fce32399/1/YgTQ-JHcR16nA-be89bq0ej3wtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YgTQ-JHcR16nA-be89bq0ej3wtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:f4:ca:ed:af:b5:c0:57:c5:8c:05:da:c7:2d:b5:93:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6204d0f891dc475ea703e6def3d6ead1e8f7c2d6
Validity
Not Before: Aug 29 07:46:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d016c55bf04032dbb184e32bef26a446288cde79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:05:4f:0d:4a:a4:ee:36:e2:06:f9:43:6a:50:
08:18:0d:30:58:07:24:6f:0e:7f:78:38:60:0a:46:
38:6d:d3:5f:7b:c3:7d:bd:19:49:28:90:0c:44:7a:
0e:6e:e8:89:6d:5f:c6:1a:c0:03:b0:a8:ab:d0:a4:
03:92:63:ac:18:48:9c:5d:7b:ee:63:af:d1:b4:b8:
c8:5f:77:b5:91:7b:ab:eb:6d:c1:94:04:1c:9a:a9:
35:34:9d:e2:ac:bb:1e:b8:81:f7:8b:34:fc:93:c6:
3c:88:6b:9a:9a:ae:68:87:95:99:d3:ad:75:e9:14:
2c:68:fa:aa:d1:f9:21:c7:4a:c4:04:19:c3:4d:61:
b2:a2:ea:4d:5b:c1:f3:df:26:07:0b:88:70:3e:aa:
03:de:84:7c:4f:a3:f6:e8:ae:2d:4a:14:07:86:ce:
4e:c5:9d:04:aa:2c:8e:e6:26:c9:56:9a:f1:c4:71:
14:e8:c0:db:07:e0:c2:f0:ea:7c:f9:11:81:b7:e4:
9d:aa:a5:d3:ad:1d:d5:fc:5e:f4:48:85:06:81:c6:
fc:80:57:3b:28:d3:06:66:9a:8e:c4:73:f7:88:54:
01:ba:9a:33:46:ac:d5:3c:8f:b6:14:24:0f:ec:69:
d1:d6:0c:89:96:9a:34:dd:b3:70:d1:bc:88:06:ab:
8e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:16:C5:5B:F0:40:32:DB:B1:84:E3:2B:EF:26:A4:46:28:8C:DE:79
X509v3 Authority Key Identifier:
keyid:62:04:D0:F8:91:DC:47:5E:A7:03:E6:DE:F3:D6:EA:D1:E8:F7:C2:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YgTQ-JHcR16nA-be89bq0ej3wtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/f96121-0335-402d-8491-4d88fce32399/1/0BbFW_BAMtuxhOMr7yakRiiM3nk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/f96121-0335-402d-8491-4d88fce32399/1/YgTQ-JHcR16nA-be89bq0ej3wtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.22.144.0/22
Signature Algorithm: sha256WithRSAEncryption
20:50:b9:cf:29:51:3a:3d:9f:d0:21:df:87:03:ea:c6:4a:2c:
92:89:1e:26:3a:48:10:37:8e:a0:ec:d1:26:7e:4d:75:eb:ce:
41:b6:eb:a0:46:96:25:96:5e:3b:c2:70:10:38:64:8f:92:9f:
17:ba:c4:cf:90:d0:4e:fd:33:3c:d0:c5:19:02:b8:e1:d1:e3:
ae:4c:04:d0:30:c1:df:63:f7:6c:4c:bf:75:7b:a5:0d:50:81:
88:ce:38:8b:0b:3d:69:19:3e:f7:2b:7b:47:b3:4e:56:d3:5b:
c1:10:18:9b:0c:1c:b5:04:c9:f2:96:fb:18:58:06:52:c3:5c:
77:25:41:47:73:78:e5:cc:3f:2e:10:9e:3f:b7:7e:80:27:10:
45:7d:72:d3:c9:b4:15:62:b6:d2:65:4e:7d:a2:46:a9:8e:8f:
cc:c5:af:7f:f4:ad:d6:f4:a6:ae:8f:30:f4:e7:a5:87:05:e3:
a6:b1:a0:7a:cc:b3:0d:60:e6:bf:0f:c6:f1:30:c9:68:04:19:
cd:40:53:34:c9:6c:0e:9b:11:87:1a:ee:c8:b5:4f:c9:f7:ec:
9f:f5:f7:6e:5d:65:d6:dd:ab:96:39:fb:43:8a:b5:eb:56:be:
11:cb:98:11:90:98:9e:4e:2d:4d:1c:3b:d5:12:c1:59:e5:7a:
12:16:75:d4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZj0yu2vtcBXxYwF2scttZN8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyMDRkMGY4OTFkYzQ3NWVhNzAzZTZkZWYzZDZlYWQxZThm
N2MyZDYwHhcNMjUwODI5MDc0NjM2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMDE2YzU1YmYwNDAzMmRiYjE4NGUzMmJlZjI2YTQ0NjI4OGNkZTc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQVPDUqk7jbiBvlDalAIGA0wWAck
bw5/eDhgCkY4bdNfe8N9vRlJKJAMRHoObuiJbV/GGsADsKir0KQDkmOsGEicXXvu
Y6/RtLjIX3e1kXur623BlAQcmqk1NJ3irLseuIH3izT8k8Y8iGuamq5oh5WZ0611
6RQsaPqq0fkhx0rEBBnDTWGyoupNW8Hz3yYHC4hwPqoD3oR8T6P26K4tShQHhs5O
xZ0EqiyO5ibJVprxxHEU6MDbB+DC8Op8+RGBt+SdqqXTrR3V/F70SIUGgcb8gFc7
KNMGZpqOxHP3iFQBupozRqzVPI+2FCQP7GnR1gyJlpo03bNw0byIBquOjQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNAWxVvwQDLbsYTjK+8mpEYojN55MB8GA1UdIwQY
MBaAFGIE0PiR3EdepwPm3vPW6tHo98LWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWdUUS1KSGNSMTZuQS1iZTg5YnEwZWozd3RZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9mOTYxMjEtMDMzNS00MDJkLTg0OTEt
NGQ4OGZjZTMyMzk5LzEvMEJiRldfQkFNdHV4aE9Ncjd5YWtSaWlNM25rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC9mOTYxMjEtMDMzNS00MDJkLTg0OTEtNGQ4OGZjZTMyMzk5
LzEvWWdUUS1KSGNSMTZuQS1iZTg5YnEwZWozd3RZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLhaQMA0G
CSqGSIb3DQEBCwUAA4IBAQAgULnPKVE6PZ/QId+HA+rGSiySiR4mOkgQN46g7NEm
fk11685BtuugRpYlll47wnAQOGSPkp8XusTPkNBO/TM80MUZArjh0eOuTATQMMHf
Y/dsTL91e6UNUIGIzjiLCz1pGT73K3tHs05W01vBEBibDBy1BMnylvsYWAZSw1x3
JUFHc3jlzD8uEJ4/t36AJxBFfXLTybQVYrbSZU59okapjo/Mxa9/9K3W9KaujzD0
56WHBeOmsaB6zLMNYOa/D8bxMMloBBnNQFM0yWwOmxGHGu7ItU/J9+yf9fduXWXW
3auWOftDirXrVr4Ry5gRkJieTi1NHDvVEsFZ5XoSFnXU
-----END CERTIFICATE-----
Generated at Mon Sep 8 06:19:25 2025 by rpki-client