Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/qHh2dMf6gzsBLZi2QJoOFRMxXUE.roa
File: qHh2dMf6gzsBLZi2QJoOFRMxXUE.roa (raw, json)
Hash identifier: +vCZjhtO1NUwTGmpJoWATWE7GuZBiydhqPS4mtxNcUM=
Subject key identifier: A8:78:76:74:C7:FA:83:3B:01:2D:98:B6:40:9A:0E:15:13:31:5D:41
Certificate issuer: /CN=61e10dac1f773c55a244753346719e899f4d4432
Certificate serial: 019A0100294A15482C50656209C16C1A672C
Authority key identifier: 61:E1:0D:AC:1F:77:3C:55:A2:44:75:33:46:71:9E:89:9F:4D:44:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YeENrB93PFWiRHUzRnGeiZ9NRDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/qHh2dMf6gzsBLZi2QJoOFRMxXUE.roa
Signing time: Mon 20 Oct 2025 09:42:58 +0000
ROA not before: Mon 20 Oct 2025 09:42:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28997
IP address blocks: 83.136.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YeENrB93PFWiRHUzRnGeiZ9NRDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 12:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:00:29:4a:15:48:2c:50:65:62:09:c1:6c:1a:67:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61e10dac1f773c55a244753346719e899f4d4432
Validity
Not Before: Oct 20 09:42:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a8787674c7fa833b012d98b6409a0e1513315d41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2d:96:75:78:cf:40:6d:18:31:2a:f8:00:e0:
98:9e:c9:57:22:77:9b:8a:f6:41:c8:53:57:62:38:
4b:3f:8b:5e:6b:ac:8f:1a:b6:c8:7b:19:1b:86:03:
5e:6e:26:b0:67:31:b9:53:c1:d4:58:bf:4e:a2:8e:
fd:3c:77:17:97:15:d1:94:5f:bd:c8:df:4a:bd:ee:
41:7d:95:8a:d5:7c:c0:b5:55:0a:31:f1:b6:3c:95:
18:e5:50:9c:18:32:33:7e:c5:aa:91:c6:55:b5:30:
75:b7:4b:36:f5:0c:c7:72:f7:26:b9:11:8c:a1:c3:
08:5d:09:41:e0:2f:95:ef:d4:f1:51:0b:f7:62:3e:
4b:9b:f4:67:b3:96:78:36:96:39:6e:0b:a1:4a:d3:
97:23:6b:e5:37:1b:2f:59:25:ad:9b:b8:fa:65:25:
18:8c:ea:a2:50:f6:ca:5d:4c:b0:73:96:13:10:b1:
2e:87:45:d0:57:e0:ba:18:94:89:5f:77:de:91:e1:
64:5a:cd:9e:2b:9e:91:87:55:af:02:49:12:46:2c:
b4:46:2b:1e:0e:88:dc:9e:cd:11:0b:c9:96:10:15:
d5:c7:dc:5d:55:fe:b4:37:05:af:98:62:7b:94:3a:
80:75:9a:33:5f:41:c1:30:85:c4:1a:72:bf:ea:9f:
b1:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:78:76:74:C7:FA:83:3B:01:2D:98:B6:40:9A:0E:15:13:31:5D:41
X509v3 Authority Key Identifier:
keyid:61:E1:0D:AC:1F:77:3C:55:A2:44:75:33:46:71:9E:89:9F:4D:44:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YeENrB93PFWiRHUzRnGeiZ9NRDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/qHh2dMf6gzsBLZi2QJoOFRMxXUE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.136.16.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:02:7b:21:57:54:40:7c:03:e7:9e:e2:62:c8:b2:77:d6:f0:
d7:92:ae:43:8f:09:1f:aa:e3:bc:75:51:25:12:2b:5c:47:18:
c7:e1:f2:13:21:b3:91:67:a3:c0:34:72:26:14:35:98:6c:de:
01:d7:25:2c:ee:f4:4e:30:83:06:33:ca:8d:5f:11:7a:e0:d2:
e6:86:e8:97:e5:1b:9b:8d:c0:f2:ed:8b:73:0a:14:ae:c1:c1:
d3:de:14:4a:e7:58:fd:dd:50:7c:d4:06:85:91:ff:90:7f:a6:
90:3b:93:89:98:4f:95:53:98:17:f6:a8:17:9b:04:3c:41:4b:
37:54:94:04:5a:15:cc:b6:24:7e:a2:5a:dd:e4:7d:1f:d8:ac:
f1:aa:36:88:02:70:5b:63:fd:31:b2:66:d1:cd:95:af:ea:19:
a2:1a:63:6c:45:93:02:88:f4:9d:33:2f:d8:37:69:2e:2f:ed:
9c:4d:cd:fc:e2:6a:e0:cc:40:d0:e8:de:84:32:09:0b:2e:dc:
63:b4:57:44:75:d6:1c:ce:e9:7e:cd:17:79:32:04:0e:69:ed:
cd:9b:c1:7d:a6:56:20:9e:24:55:46:9b:cc:77:20:48:d5:45:
57:9c:79:c6:8f:44:3a:64:24:30:58:dd:e3:65:18:80:96:c0:
71:a3:dd:7e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZoBAClKFUgsUGViCcFsGmcsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxZTEwZGFjMWY3NzNjNTVhMjQ0NzUzMzQ2NzE5ZTg5OWY0
ZDQ0MzIwHhcNMjUxMDIwMDk0MjU4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhODc4NzY3NGM3ZmE4MzNiMDEyZDk4YjY0MDlhMGUxNTEzMzE1ZDQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApi2WdXjPQG0YMSr4AOCYnslXIneb
ivZByFNXYjhLP4tea6yPGrbIexkbhgNebiawZzG5U8HUWL9Ooo79PHcXlxXRlF+9
yN9Kve5BfZWK1XzAtVUKMfG2PJUY5VCcGDIzfsWqkcZVtTB1t0s29QzHcvcmuRGM
ocMIXQlB4C+V79TxUQv3Yj5Lm/Rns5Z4NpY5bguhStOXI2vlNxsvWSWtm7j6ZSUY
jOqiUPbKXUywc5YTELEuh0XQV+C6GJSJX3fekeFkWs2eK56Rh1WvAkkSRiy0Rise
Dojcns0RC8mWEBXVx9xdVf60NwWvmGJ7lDqAdZozX0HBMIXEGnK/6p+xqwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKh4dnTH+oM7AS2YtkCaDhUTMV1BMB8GA1UdIwQY
MBaAFGHhDawfdzxVokR1M0ZxnomfTUQyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWVFTnJCOTNQRldpUkhVelJuR2VpWjlOUkRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS84NWVmMzUtNjQ3YS00MTcyLThjNjQt
NmRiM2NhZWY3M2Q5LzEvcUhoMmRNZjZnenNCTFppMlFKb09GUk14WFVFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS84NWVmMzUtNjQ3YS00MTcyLThjNjQtNmRiM2NhZWY3M2Q5
LzEvWWVFTnJCOTNQRldpUkhVelJuR2VpWjlOUkRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAU4gQMA0G
CSqGSIb3DQEBCwUAA4IBAQBfAnshV1RAfAPnnuJiyLJ31vDXkq5DjwkfquO8dVEl
EitcRxjH4fITIbORZ6PANHImFDWYbN4B1yUs7vROMIMGM8qNXxF64NLmhuiX5Rub
jcDy7YtzChSuwcHT3hRK51j93VB81AaFkf+Qf6aQO5OJmE+VU5gX9qgXmwQ8QUs3
VJQEWhXMtiR+olrd5H0f2KzxqjaIAnBbY/0xsmbRzZWv6hmiGmNsRZMCiPSdMy/Y
N2kuL+2cTc384mrgzEDQ6N6EMgkLLtxjtFdEddYczul+zRd5MgQOae3Nm8F9plYg
niRVRpvMdyBI1UVXnHnGj0Q6ZCQwWN3jZRiAlsBxo91+
-----END CERTIFICATE-----
Generated at Mon Oct 27 22:01:49 2025 by rpki-client