Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/f4506e-fb88-48a9-8285-c9acfe3f3121/1/0j6_9vvephSCvIt3tJbWOsjgSpM.roa
File: 0j6_9vvephSCvIt3tJbWOsjgSpM.roa (raw, json)
Hash identifier: 5VTQaynCng/n8uyC8z0wS4FDrSTGbWVkNJEEjTUW3/4=
Subject key identifier: D2:3E:BF:F6:FB:DE:A6:14:82:BC:8B:77:B4:96:D6:3A:C8:E0:4A:93
Certificate issuer: /CN=f1c064460ea6d5cfd3f88dc1cf4ed07502bbb699
Certificate serial: 019A72C5EAB950ED7B08C3AD3793C1450952
Authority key identifier: F1:C0:64:46:0E:A6:D5:CF:D3:F8:8D:C1:CF:4E:D0:75:02:BB:B6:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8cBkRg6m1c_T-I3Bz07QdQK7tpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/f4506e-fb88-48a9-8285-c9acfe3f3121/1/0j6_9vvephSCvIt3tJbWOsjgSpM.roa
Signing time: Tue 11 Nov 2025 11:56:04 +0000
ROA not before: Tue 11 Nov 2025 11:56:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216067
IP address blocks: 104.167.26.0/23 maxlen: 23
185.77.23.0/24 maxlen: 24
185.188.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/f4506e-fb88-48a9-8285-c9acfe3f3121/1/8cBkRg6m1c_T-I3Bz07QdQK7tpk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/f4506e-fb88-48a9-8285-c9acfe3f3121/1/8cBkRg6m1c_T-I3Bz07QdQK7tpk.mft
rsync://rpki.ripe.net/repository/DEFAULT/8cBkRg6m1c_T-I3Bz07QdQK7tpk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:c5:ea:b9:50:ed:7b:08:c3:ad:37:93:c1:45:09:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1c064460ea6d5cfd3f88dc1cf4ed07502bbb699
Validity
Not Before: Nov 11 11:56:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d23ebff6fbdea61482bc8b77b496d63ac8e04a93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b1:89:8b:96:9e:3d:3d:ba:b1:18:dc:df:06:
55:a6:8b:b4:85:f5:dc:b2:11:f2:e6:09:e7:07:d5:
9b:a0:a1:c6:89:d7:50:4f:ff:53:15:50:6f:c0:5c:
ff:02:9b:df:43:fe:9b:80:58:a1:94:0e:b2:fa:eb:
34:53:19:fa:a6:9f:39:ac:4b:19:b1:71:bd:9e:4d:
e3:82:66:55:79:ff:63:a3:67:02:ac:8b:f3:91:f7:
d9:c4:27:b0:c2:99:2c:cd:13:fb:29:68:d9:c3:68:
15:d8:c1:50:13:78:f5:df:03:67:56:53:e7:5d:47:
24:12:70:3d:12:90:7d:56:5f:f4:76:d6:c7:d9:c7:
bd:38:4d:26:58:ed:b2:c5:ce:af:87:93:b0:50:3a:
6c:eb:4f:64:b7:b7:23:54:44:20:fd:da:8a:9f:df:
fe:55:45:f6:d1:04:1b:69:54:73:92:e9:a4:9d:84:
c6:7b:dd:81:26:ef:ec:d3:c0:c3:1f:75:f5:6f:b0:
f7:bb:b5:d1:61:26:ad:00:4b:4b:78:9f:70:2f:85:
9b:08:d1:ca:6e:5d:e3:20:be:9d:37:d8:c7:af:eb:
81:dd:5f:aa:35:4e:14:ea:ad:51:c1:ef:64:ca:83:
c4:b0:36:b0:b3:73:b9:c4:e6:01:ec:c0:2b:c1:44:
2c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:3E:BF:F6:FB:DE:A6:14:82:BC:8B:77:B4:96:D6:3A:C8:E0:4A:93
X509v3 Authority Key Identifier:
keyid:F1:C0:64:46:0E:A6:D5:CF:D3:F8:8D:C1:CF:4E:D0:75:02:BB:B6:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8cBkRg6m1c_T-I3Bz07QdQK7tpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/f4506e-fb88-48a9-8285-c9acfe3f3121/1/0j6_9vvephSCvIt3tJbWOsjgSpM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/f4506e-fb88-48a9-8285-c9acfe3f3121/1/8cBkRg6m1c_T-I3Bz07QdQK7tpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.167.26.0/23
185.77.23.0/24
185.188.16.0/24
Signature Algorithm: sha256WithRSAEncryption
17:df:db:7a:33:69:40:ff:56:d7:b7:72:25:ef:f0:6e:6e:5a:
51:9c:0b:1a:8f:d1:2c:9e:ab:7f:cb:ca:37:62:c0:d8:06:d8:
35:3e:b8:d7:8f:cc:84:dd:8c:03:c3:e1:8e:c3:f8:ee:78:20:
cf:dd:58:d5:15:e3:ec:b0:89:07:5b:f0:09:71:49:2e:ec:a2:
32:35:04:78:e5:94:80:71:35:52:e2:d2:c6:73:04:26:29:b1:
8e:f6:e4:36:d5:21:5d:6a:d9:9c:43:43:a4:7f:59:98:7f:13:
ee:b1:12:47:34:90:85:fb:b3:e3:42:5f:b1:49:8a:67:cf:f1:
de:a4:d2:e6:14:4e:dd:03:5f:14:98:c6:a7:2a:eb:84:3c:4b:
7f:dd:f1:f9:01:5f:5d:e8:98:c9:67:0b:0c:48:eb:3d:92:2d:
3c:da:99:6e:4b:4f:c5:c4:e2:23:23:95:88:d3:10:e4:28:35:
a2:cc:ce:10:87:90:11:a2:cc:50:87:a4:3a:2e:83:a9:23:dc:
02:3a:ec:ea:e1:bc:c3:0f:dd:a5:47:1d:bc:73:8f:c3:67:ba:
05:15:34:4a:c1:f0:44:7a:0e:f5:98:7f:04:9d:25:2f:5a:c3:
fc:55:b5:0c:5d:65:0d:cb:a7:d0:90:52:94:61:b5:79:41:a1:
8b:f8:4e:c6
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZpyxeq5UO17CMOtN5PBRQlSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxYzA2NDQ2MGVhNmQ1Y2ZkM2Y4OGRjMWNmNGVkMDc1MDJi
YmI2OTkwHhcNMjUxMTExMTE1NjA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMjNlYmZmNmZiZGVhNjE0ODJiYzhiNzdiNDk2ZDYzYWM4ZTA0YTkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkrGJi5aePT26sRjc3wZVpou0hfXc
shHy5gnnB9WboKHGiddQT/9TFVBvwFz/ApvfQ/6bgFihlA6y+us0Uxn6pp85rEsZ
sXG9nk3jgmZVef9jo2cCrIvzkffZxCewwpkszRP7KWjZw2gV2MFQE3j13wNnVlPn
XUckEnA9EpB9Vl/0dtbH2ce9OE0mWO2yxc6vh5OwUDps609kt7cjVEQg/dqKn9/+
VUX20QQbaVRzkumknYTGe92BJu/s08DDH3X1b7D3u7XRYSatAEtLeJ9wL4WbCNHK
bl3jIL6dN9jHr+uB3V+qNU4U6q1Rwe9kyoPEsDaws3O5xOYB7MArwUQsUQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFNI+v/b73qYUgryLd7SW1jrI4EqTMB8GA1UdIwQY
MBaAFPHAZEYOptXP0/iNwc9O0HUCu7aZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGNCa1JnNm0xY19ULUkzQnowN1FkUUs3dHBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9mNDUwNmUtZmI4OC00OGE5LTgyODUt
YzlhY2ZlM2YzMTIxLzEvMGo2Xzl2dmVwaFNDdkl0M3RKYldPc2pnU3BNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC9mNDUwNmUtZmI4OC00OGE5LTgyODUtYzlhY2ZlM2YzMTIx
LzEvOGNCa1JnNm0xY19ULUkzQnowN1FkUUs3dHBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBaKcaAwQA
uU0XAwQAubwQMA0GCSqGSIb3DQEBCwUAA4IBAQAX39t6M2lA/1bXt3Il7/BublpR
nAsaj9Esnqt/y8o3YsDYBtg1PrjXj8yE3YwDw+GOw/jueCDP3VjVFePssIkHW/AJ
cUku7KIyNQR45ZSAcTVS4tLGcwQmKbGO9uQ21SFdatmcQ0Okf1mYfxPusRJHNJCF
+7PjQl+xSYpnz/HepNLmFE7dA18UmManKuuEPEt/3fH5AV9d6JjJZwsMSOs9ki08
2pluS0/FxOIjI5WI0xDkKDWizM4Qh5ARosxQh6Q6LoOpI9wCOuzq4bzDD92lRx28
c4/DZ7oFFTRKwfBEeg71mH8EnSUvWsP8VbUMXWUNy6fQkFKUYbV5QaGL+E7G
-----END CERTIFICATE-----
Generated at Tue Nov 11 18:22:55 2025 by rpki-client