Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/Q2UQSxpacLlCOi-eV0yQcxV6BpY.roa
File: Q2UQSxpacLlCOi-eV0yQcxV6BpY.roa (raw, json)
Hash identifier: 4TqPmmBO0sbgWguldOYQXdBSwJ1gwEcfJtntHHUnnjU=
Subject key identifier: 43:65:10:4B:1A:5A:70:B9:42:3A:2F:9E:57:4C:90:73:15:7A:06:96
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 0199CF8759864E7C3B95D9F7C8E2A48051D8
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/Q2UQSxpacLlCOi-eV0yQcxV6BpY.roa
Signing time: Fri 10 Oct 2025 19:09:37 +0000
ROA not before: Fri 10 Oct 2025 19:09:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 91.205.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:cf:87:59:86:4e:7c:3b:95:d9:f7:c8:e2:a4:80:51:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Oct 10 19:09:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4365104b1a5a70b9423a2f9e574c9073157a0696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7d:64:49:c5:71:7d:81:80:d3:57:28:12:8e:
90:25:68:3e:32:bd:8e:b7:57:31:d9:8f:ac:c2:6c:
4a:3b:ae:54:f3:5c:62:8e:97:09:d9:30:b5:9a:e6:
b3:bb:d7:6f:58:71:35:8e:d4:53:b7:b0:17:ba:de:
09:ba:8e:77:37:30:7d:8f:a9:b3:62:94:88:1c:fa:
02:21:ba:83:f9:e6:eb:59:ae:39:d9:37:53:64:e6:
a4:10:0a:a6:7f:4c:91:92:44:13:d6:d2:08:a9:93:
cb:41:8e:1a:22:7b:f6:e4:ef:04:db:7f:50:ac:63:
bc:47:4f:05:d1:bc:3c:88:54:91:2b:f0:0c:15:fc:
64:6e:d0:3c:75:7d:1c:ae:33:f2:66:44:83:01:4b:
27:35:fb:25:19:77:62:e8:52:8c:30:2e:a6:b2:d3:
5f:6d:b5:ac:42:3d:63:05:51:b3:f2:7b:e9:8f:73:
92:2d:48:80:33:c1:82:2b:39:db:94:1c:8f:ea:9f:
05:ea:8c:c0:3e:04:80:04:35:f3:a6:ea:42:8f:07:
26:a1:7d:68:fa:eb:96:1b:90:19:7a:83:f2:a8:da:
15:54:43:a5:58:81:34:e9:28:fe:f3:4d:c2:1d:df:
20:94:45:3e:9c:ee:eb:bc:69:40:24:29:46:f4:ca:
c1:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:65:10:4B:1A:5A:70:B9:42:3A:2F:9E:57:4C:90:73:15:7A:06:96
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/Q2UQSxpacLlCOi-eV0yQcxV6BpY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.205.228.0/24
Signature Algorithm: sha256WithRSAEncryption
af:44:2a:26:6d:d2:e0:25:27:ee:6e:d7:ef:a2:07:de:b3:f4:
7e:cb:66:03:07:9c:cb:72:b9:f3:b4:d6:7d:c9:4e:09:d4:19:
6e:ce:26:ff:f4:63:e4:7c:c0:36:36:07:e5:5c:e2:ae:2b:60:
20:46:34:d7:bb:d7:82:0f:2f:f8:9f:fc:60:90:5a:3c:d2:d3:
a4:b0:bb:64:40:70:7c:02:41:d1:d2:5f:57:1f:94:7e:c2:b2:
c9:a0:20:2d:b1:e0:a3:cb:81:8e:5e:2c:67:b6:44:2d:96:4e:
80:e0:e0:e7:a8:ae:94:f7:d9:5e:59:fe:6d:26:7d:24:cd:90:
a6:bc:0b:40:1b:c5:6d:74:7b:21:e2:45:ad:12:e0:a7:d9:00:
f7:9e:fd:65:24:3f:1f:9b:12:78:ba:a6:9e:d4:ea:94:e9:ec:
1a:8c:29:3d:be:d6:8e:b6:51:e3:bf:c5:69:0e:1e:3d:87:1e:
28:06:00:19:f8:e0:41:37:89:2a:e5:43:31:18:87:4a:fc:a3:
ca:07:de:97:17:a6:42:0d:1a:c8:bf:61:0a:d9:bf:ac:55:ff:
3e:bd:d6:a7:26:1f:ea:ed:57:bf:c3:19:32:8e:36:08:95:dc:
13:f0:46:9f:b5:07:15:b2:4f:b8:e8:f6:da:61:03:f3:a1:b9:
61:46:94:6e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZnPh1mGTnw7ldn3yOKkgFHYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzY2YwODg0OTE4YTUwMjM5ZWY3MDUxOGVlOWZjMDRmMWFh
ZTE5MjkwHhcNMjUxMDEwMTkwOTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MzY1MTA0YjFhNWE3MGI5NDIzYTJmOWU1NzRjOTA3MzE1N2EwNjk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvH1kScVxfYGA01coEo6QJWg+Mr2O
t1cx2Y+swmxKO65U81xijpcJ2TC1muazu9dvWHE1jtRTt7AXut4Juo53NzB9j6mz
YpSIHPoCIbqD+ebrWa452TdTZOakEAqmf0yRkkQT1tIIqZPLQY4aInv25O8E239Q
rGO8R08F0bw8iFSRK/AMFfxkbtA8dX0crjPyZkSDAUsnNfslGXdi6FKMMC6mstNf
bbWsQj1jBVGz8nvpj3OSLUiAM8GCKznblByP6p8F6ozAPgSABDXzpupCjwcmoX1o
+uuWG5AZeoPyqNoVVEOlWIE06Sj+803CHd8glEU+nO7rvGlAJClG9MrBMwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFENlEEsaWnC5QjovnldMkHMVegaWMB8GA1UdIwQY
MBaAFNPPCISRilAjnvcFGO6fwE8arhkpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEt
MjMxNTQ5NDA5NzIwLzEvUTJVUVN4cGFjTGxDT2ktZVYweVFjeFY2QnBZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEtMjMxNTQ5NDA5NzIw
LzEvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW83kMA0G
CSqGSIb3DQEBCwUAA4IBAQCvRCombdLgJSfubtfvogfes/R+y2YDB5zLcrnztNZ9
yU4J1Bluzib/9GPkfMA2NgflXOKuK2AgRjTXu9eCDy/4n/xgkFo80tOksLtkQHB8
AkHR0l9XH5R+wrLJoCAtseCjy4GOXixntkQtlk6A4ODnqK6U99leWf5tJn0kzZCm
vAtAG8VtdHsh4kWtEuCn2QD3nv1lJD8fmxJ4uqae1OqU6ewajCk9vtaOtlHjv8Vp
Dh49hx4oBgAZ+OBBN4kq5UMxGIdK/KPKB96XF6ZCDRrIv2EK2b+sVf8+vdanJh/q
7Ve/wxkyjjYIldwT8EaftQcVsk+46PbaYQPzoblhRpRu
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:34:25 2025 by rpki-client