Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/96rPJp6i-0yTIl2eXrRIOjD_WkY.roa
File: 96rPJp6i-0yTIl2eXrRIOjD_WkY.roa (raw, json)
Hash identifier: qm6kevYtgMGHrywZZ1sb+uSxDy/NiPleVQQT1cxeiZE=
Subject key identifier: F7:AA:CF:26:9E:A2:FB:4C:93:22:5D:9E:5E:B4:48:3A:30:FF:5A:46
Certificate issuer: /CN=19193cd0cfb9395989358e0396312cfbb1c88ffe
Certificate serial: 0199862346C70948FF2564B6FB7BC8BF6D5C
Authority key identifier: 19:19:3C:D0:CF:B9:39:59:89:35:8E:03:96:31:2C:FB:B1:C8:8F:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GRk80M-5OVmJNY4DljEs-7HIj_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/96rPJp6i-0yTIl2eXrRIOjD_WkY.roa
Signing time: Fri 26 Sep 2025 13:08:02 +0000
ROA not before: Fri 26 Sep 2025 13:08:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60608
IP address blocks: 152.233.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/GRk80M-5OVmJNY4DljEs-7HIj_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/GRk80M-5OVmJNY4DljEs-7HIj_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/GRk80M-5OVmJNY4DljEs-7HIj_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:86:23:46:c7:09:48:ff:25:64:b6:fb:7b:c8:bf:6d:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19193cd0cfb9395989358e0396312cfbb1c88ffe
Validity
Not Before: Sep 26 13:08:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f7aacf269ea2fb4c93225d9e5eb4483a30ff5a46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:55:a1:ec:12:41:75:7d:37:69:04:cc:fe:08:
f5:54:82:1d:f1:c3:36:59:36:52:75:14:34:e1:cb:
c7:66:a9:db:ea:f5:fc:1f:6f:ab:81:dc:74:c5:85:
a9:66:f1:66:37:27:6a:77:d2:0b:2e:49:53:32:f1:
a4:e3:23:75:c8:83:5b:d6:74:7f:f3:49:3b:21:d2:
99:2a:77:ff:f7:88:fb:91:64:2d:6f:83:35:1b:bb:
6d:58:82:17:81:16:a6:4b:95:12:b8:e3:13:e6:1a:
76:3f:9d:d0:35:9a:b2:05:87:57:4c:8d:0f:f3:a5:
03:18:3a:d1:da:33:18:88:b2:bd:30:42:2b:9d:7f:
f2:af:82:99:78:a8:02:42:92:4a:ef:17:50:77:81:
13:0e:15:56:6e:c5:c7:40:7e:e5:1c:35:09:3d:a5:
d2:1e:95:df:d5:7a:a3:c5:5d:f3:10:2e:64:93:91:
ec:05:27:41:2d:4d:5f:46:f5:48:49:89:1b:af:08:
fa:1b:6c:08:75:02:62:31:fd:4d:6c:8b:6e:20:9d:
63:42:9e:4f:02:f3:2c:a5:84:f3:59:71:09:69:10:
f7:74:5c:4d:e2:e4:ba:f4:4c:5c:08:16:77:f1:73:
9c:8d:b9:94:09:16:25:89:4f:36:eb:0a:53:82:68:
ec:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:AA:CF:26:9E:A2:FB:4C:93:22:5D:9E:5E:B4:48:3A:30:FF:5A:46
X509v3 Authority Key Identifier:
keyid:19:19:3C:D0:CF:B9:39:59:89:35:8E:03:96:31:2C:FB:B1:C8:8F:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GRk80M-5OVmJNY4DljEs-7HIj_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/96rPJp6i-0yTIl2eXrRIOjD_WkY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/GRk80M-5OVmJNY4DljEs-7HIj_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.233.123.0/24
Signature Algorithm: sha256WithRSAEncryption
90:ad:9f:46:39:1a:d4:8e:b3:16:29:d4:a0:08:c5:f7:a6:a1:
75:50:0a:fd:76:3b:68:72:71:50:69:da:b9:07:3e:20:87:ee:
10:cd:09:cb:8c:2d:5d:27:c5:14:0b:ad:2b:e9:36:5c:7e:a6:
36:d6:b2:28:fc:07:c4:48:6f:1b:4c:5f:eb:01:fd:49:fe:61:
27:17:af:ee:30:3e:6b:af:3f:f6:7e:5c:29:f3:21:48:e9:93:
ad:8c:c7:a7:1c:8f:92:24:f7:75:0c:32:89:e0:31:44:f5:ef:
58:e6:62:aa:02:97:6b:37:f6:99:c8:c9:ee:d3:26:e8:96:05:
01:05:07:b3:26:07:0f:9b:c6:fd:99:ee:ba:cb:16:53:dc:96:
85:f9:2a:a5:06:ae:fe:57:14:a8:92:92:2b:4d:c1:d6:28:2a:
b5:be:f0:8c:66:9e:b3:54:f8:7b:b1:5a:b7:75:da:4e:f4:0a:
de:7d:23:e0:1b:e7:1c:5d:05:a6:d3:ed:fd:ea:62:77:4b:fa:
db:d7:ea:90:e3:f2:36:ca:e0:37:b3:bb:ad:a5:88:ba:6a:49:
8d:e5:85:f5:11:bb:ed:54:0d:22:f2:9e:91:bd:63:23:70:f5:
d4:95:45:92:19:cc:a8:c3:d2:4b:8e:fe:3f:db:69:e4:0a:fe:
3b:f3:cb:56
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZmGI0bHCUj/JWS2+3vIv21cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5MTkzY2QwY2ZiOTM5NTk4OTM1OGUwMzk2MzEyY2ZiYjFj
ODhmZmUwHhcNMjUwOTI2MTMwODAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmN2FhY2YyNjllYTJmYjRjOTMyMjVkOWU1ZWI0NDgzYTMwZmY1YTQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3lWh7BJBdX03aQTM/gj1VIId8cM2
WTZSdRQ04cvHZqnb6vX8H2+rgdx0xYWpZvFmNydqd9ILLklTMvGk4yN1yINb1nR/
80k7IdKZKnf/94j7kWQtb4M1G7ttWIIXgRamS5USuOMT5hp2P53QNZqyBYdXTI0P
86UDGDrR2jMYiLK9MEIrnX/yr4KZeKgCQpJK7xdQd4ETDhVWbsXHQH7lHDUJPaXS
HpXf1XqjxV3zEC5kk5HsBSdBLU1fRvVISYkbrwj6G2wIdQJiMf1NbItuIJ1jQp5P
AvMspYTzWXEJaRD3dFxN4uS69ExcCBZ38XOcjbmUCRYliU826wpTgmjsVwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPeqzyaeovtMkyJdnl60SDow/1pGMB8GA1UdIwQY
MBaAFBkZPNDPuTlZiTWOA5YxLPuxyI/+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1JrODBNLTVPVm1KTlk0RGxqRXMtN0hJal80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi8wZDY4ZDQtYWRiMy00ZmY5LWI3OGEt
NGVmOWQwN2M0NDA1LzEvOTZyUEpwNmktMHlUSWwyZVhyUklPakRfV2tZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi8wZDY4ZDQtYWRiMy00ZmY5LWI3OGEtNGVmOWQwN2M0NDA1
LzEvR1JrODBNLTVPVm1KTlk0RGxqRXMtN0hJal80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmOl7MA0G
CSqGSIb3DQEBCwUAA4IBAQCQrZ9GORrUjrMWKdSgCMX3pqF1UAr9djtocnFQadq5
Bz4gh+4QzQnLjC1dJ8UUC60r6TZcfqY21rIo/AfESG8bTF/rAf1J/mEnF6/uMD5r
rz/2flwp8yFI6ZOtjMenHI+SJPd1DDKJ4DFE9e9Y5mKqApdrN/aZyMnu0ybolgUB
BQezJgcPm8b9me66yxZT3JaF+SqlBq7+VxSokpIrTcHWKCq1vvCMZp6zVPh7sVq3
ddpO9ArefSPgG+ccXQWm0+396mJ3S/rb1+qQ4/I2yuA3s7utpYi6akmN5YX1Ebvt
VA0i8p6RvWMjcPXUlUWSGcyow9JLjv4/22nkCv4788tW
-----END CERTIFICATE-----
Generated at Mon Oct 20 09:09:49 2025 by rpki-client