Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/b63517-3f1e-451e-8850-8db0efb5620a/1/pNaiOm8VSjwm_Pu9LpbyEzU38Qk.roa
File: pNaiOm8VSjwm_Pu9LpbyEzU38Qk.roa (raw, json)
Hash identifier: aJUnjDaTqib7CSeeX7ryyzVGByoqlihHOgf+TQ3wW+k=
Subject key identifier: A4:D6:A2:3A:6F:15:4A:3C:26:FC:FB:BD:2E:96:F2:13:35:37:F1:09
Certificate issuer: /CN=a800ba639e65dbdcc690f58a5a740641b4ff88d4
Certificate serial: 019A6D3148B1CA2A96D69B95027F036B698F
Authority key identifier: A8:00:BA:63:9E:65:DB:DC:C6:90:F5:8A:5A:74:06:41:B4:FF:88:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qAC6Y55l29zGkPWKWnQGQbT_iNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/b63517-3f1e-451e-8850-8db0efb5620a/1/pNaiOm8VSjwm_Pu9LpbyEzU38Qk.roa
Signing time: Mon 10 Nov 2025 09:55:37 +0000
ROA not before: Mon 10 Nov 2025 09:55:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207794
IP address blocks: 194.113.139.0/24 maxlen: 24
194.113.140.0/24 maxlen: 24
194.113.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/b63517-3f1e-451e-8850-8db0efb5620a/1/qAC6Y55l29zGkPWKWnQGQbT_iNQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/b63517-3f1e-451e-8850-8db0efb5620a/1/qAC6Y55l29zGkPWKWnQGQbT_iNQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qAC6Y55l29zGkPWKWnQGQbT_iNQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:6d:31:48:b1:ca:2a:96:d6:9b:95:02:7f:03:6b:69:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a800ba639e65dbdcc690f58a5a740641b4ff88d4
Validity
Not Before: Nov 10 09:55:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a4d6a23a6f154a3c26fcfbbd2e96f2133537f109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:81:09:42:6a:f2:83:2c:be:26:96:9d:3d:a0:
04:18:bd:54:90:a3:d3:bb:88:26:b4:6e:f1:a1:3d:
ac:9f:70:9d:2a:ce:87:d3:7a:63:83:19:a4:a9:76:
f6:92:18:5d:be:70:11:ed:27:1e:3b:42:c4:1a:bf:
79:bd:a1:f0:e0:1e:30:80:94:0c:32:e3:96:38:9d:
d0:a1:51:fb:f7:86:fd:46:3b:98:22:aa:07:cb:d9:
e6:5a:99:18:9e:ba:49:d9:96:14:a3:39:93:45:68:
01:28:9d:85:c1:4c:67:78:3d:39:45:9f:3a:ce:e8:
a5:ac:f2:f2:53:10:36:c2:96:65:69:e5:3f:2d:d9:
8a:6b:31:3f:d0:e2:62:a8:6a:2f:44:43:97:8e:5c:
3b:35:a5:0b:93:d1:df:08:99:1c:82:44:e3:b2:a9:
df:d4:e1:21:80:eb:ac:c4:d0:c5:49:1e:46:2f:62:
92:65:ed:80:4a:32:3d:fe:10:e1:f3:e4:a2:d7:a0:
5b:2d:11:9b:7b:84:a1:ef:36:c1:8d:6b:d9:ee:5c:
b8:8a:6a:ba:9c:ba:12:d4:9a:a6:7b:44:6f:1c:74:
35:ed:4c:59:ce:14:ba:25:95:59:d0:b1:a9:04:0b:
f7:77:a6:ce:21:29:b6:e3:60:3b:3a:2e:60:6b:39:
26:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:D6:A2:3A:6F:15:4A:3C:26:FC:FB:BD:2E:96:F2:13:35:37:F1:09
X509v3 Authority Key Identifier:
keyid:A8:00:BA:63:9E:65:DB:DC:C6:90:F5:8A:5A:74:06:41:B4:FF:88:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qAC6Y55l29zGkPWKWnQGQbT_iNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b63517-3f1e-451e-8850-8db0efb5620a/1/pNaiOm8VSjwm_Pu9LpbyEzU38Qk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b63517-3f1e-451e-8850-8db0efb5620a/1/qAC6Y55l29zGkPWKWnQGQbT_iNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.113.139.0-194.113.140.255
194.113.155.0/24
Signature Algorithm: sha256WithRSAEncryption
84:68:01:81:d5:5e:c1:08:eb:01:a5:55:db:50:5b:21:18:e9:
44:ca:bb:63:7f:ee:ba:31:79:6e:fa:36:8c:ff:1d:77:09:bc:
cf:2c:ae:fe:7c:be:cc:89:3f:fa:1f:84:39:5d:51:e3:7c:33:
01:c3:cd:79:75:73:52:52:89:68:00:a7:bd:5c:5e:3b:32:d1:
e8:8e:81:75:74:29:63:da:d8:d9:6a:d7:02:19:d3:41:3c:10:
73:9e:b0:e1:07:f1:a4:23:ea:dd:ff:21:00:da:3f:61:6f:46:
06:b6:77:84:f7:3b:f9:a5:82:e3:29:2c:f5:7e:ec:ea:f9:d2:
4d:b5:1b:f9:bc:60:a5:f5:2b:00:f8:dc:75:d1:5b:e8:c7:95:
b6:7f:1c:9f:0a:33:c3:16:f4:67:69:a3:2e:12:95:12:72:2f:
cc:30:94:2c:94:e6:48:68:1c:f8:72:91:d5:93:69:61:a8:89:
f4:13:a9:76:49:54:78:66:97:25:25:f0:d6:57:ba:b8:e7:0e:
4d:4d:de:52:ab:7e:55:7a:bb:aa:07:d2:f2:2b:70:fb:21:88:
96:eb:45:26:50:04:2e:46:df:d5:93:e0:3c:c8:89:8d:94:bc:
29:a3:98:2c:77:bb:22:6e:7d:ff:0d:bd:18:cc:f8:87:e2:01:
43:ad:3a:99
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAZptMUixyiqW1puVAn8Da2mPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4MDBiYTYzOWU2NWRiZGNjNjkwZjU4YTVhNzQwNjQxYjRm
Zjg4ZDQwHhcNMjUxMTEwMDk1NTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNGQ2YTIzYTZmMTU0YTNjMjZmY2ZiYmQyZTk2ZjIxMzM1MzdmMTA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIEJQmrygyy+JpadPaAEGL1UkKPT
u4gmtG7xoT2sn3CdKs6H03pjgxmkqXb2khhdvnAR7SceO0LEGr95vaHw4B4wgJQM
MuOWOJ3QoVH794b9RjuYIqoHy9nmWpkYnrpJ2ZYUozmTRWgBKJ2FwUxneD05RZ86
zuilrPLyUxA2wpZlaeU/LdmKazE/0OJiqGovREOXjlw7NaULk9HfCJkcgkTjsqnf
1OEhgOusxNDFSR5GL2KSZe2ASjI9/hDh8+Si16BbLRGbe4Sh7zbBjWvZ7ly4imq6
nLoS1Jqme0RvHHQ17UxZzhS6JZVZ0LGpBAv3d6bOISm242A7Oi5gazkmcwIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFKTWojpvFUo8Jvz7vS6W8hM1N/EJMB8GA1UdIwQY
MBaAFKgAumOeZdvcxpD1ilp0BkG0/4jUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUFDNlk1NWwyOXpHa1BXS1duUUdRYlRfaU5RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9iNjM1MTctM2YxZS00NTFlLTg4NTAt
OGRiMGVmYjU2MjBhLzEvcE5haU9tOFZTandtX1B1OUxwYnlFelUzOFFrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS9iNjM1MTctM2YxZS00NTFlLTg4NTAtOGRiMGVmYjU2MjBh
LzEvcUFDNlk1NWwyOXpHa1BXS1duUUdRYlRfaU5RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBADCcYsD
BADCcYwDBADCcZswDQYJKoZIhvcNAQELBQADggEBAIRoAYHVXsEI6wGlVdtQWyEY
6UTKu2N/7roxeW76Noz/HXcJvM8srv58vsyJP/ofhDldUeN8MwHDzXl1c1JSiWgA
p71cXjsy0eiOgXV0KWPa2Nlq1wIZ00E8EHOesOEH8aQj6t3/IQDaP2FvRga2d4T3
O/mlguMpLPV+7Or50k21G/m8YKX1KwD43HXRW+jHlbZ/HJ8KM8MW9Gdpoy4SlRJy
L8wwlCyU5khoHPhykdWTaWGoifQTqXZJVHhmlyUl8NZXurjnDk1N3lKrflV6u6oH
0vIrcPshiJbrRSZQBC5G39WT4DzIiY2UvCmjmCx3uyJuff8NvRjM+IfiAUOtOpk=
-----END CERTIFICATE-----
Generated at Tue Nov 11 16:55:48 2025 by rpki-client