Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/r9EPyN5fwEIDf0Cubv7QIh6zkh0.roa
File: r9EPyN5fwEIDf0Cubv7QIh6zkh0.roa (raw, json)
Hash identifier: YpqZ3bWTbUQ9thJIsreCIw9L/RfaMD4sQZtGRxNIVfg=
Subject key identifier: AF:D1:0F:C8:DE:5F:C0:42:03:7F:40:AE:6E:FE:D0:22:1E:B3:92:1D
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0199E7E3552E5D89A8661BB7E93B6762C718
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/r9EPyN5fwEIDf0Cubv7QIh6zkh0.roa
Signing time: Wed 15 Oct 2025 12:40:59 +0000
ROA not before: Wed 15 Oct 2025 12:40:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43548
IP address blocks: 87.120.99.0/24 maxlen: 24
87.121.108.0/23 maxlen: 23
91.92.168.0/22 maxlen: 22
93.123.65.0/24 maxlen: 24
94.156.4.0/23 maxlen: 23
94.156.80.0/21 maxlen: 21
94.156.97.0/24 maxlen: 24
2a00:1728:2d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e7:e3:55:2e:5d:89:a8:66:1b:b7:e9:3b:67:62:c7:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 15 12:40:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=afd10fc8de5fc042037f40ae6efed0221eb3921d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ff:d1:aa:96:82:39:6d:55:05:fd:5f:c8:65:
b6:5d:cb:41:12:e4:38:19:b6:45:70:d5:f0:bd:84:
5b:8e:1a:16:1d:1a:d0:de:07:c4:8c:8d:89:23:93:
fa:a0:b6:bb:88:71:37:ca:ef:d9:52:d0:fb:93:ff:
9a:fb:cc:24:69:88:08:94:49:2e:b8:b1:95:8f:1d:
90:3d:9b:89:c3:a3:71:c4:d1:01:02:2a:af:41:33:
57:23:d4:87:45:37:1e:ce:52:46:02:d0:21:18:b0:
c8:e0:b9:b0:ce:00:17:6c:00:d1:29:ea:88:5c:dd:
a1:06:56:60:e8:83:bc:ad:84:11:61:4d:84:70:5b:
46:31:d3:4b:95:d1:84:b5:32:7c:f3:d5:44:89:5a:
b3:2f:56:1d:fa:04:33:9a:57:35:93:73:58:e0:1c:
f2:25:af:c0:46:37:4c:a2:38:a7:ed:ce:7d:e8:9f:
7a:7f:38:0d:4c:65:f1:2b:0e:cc:89:ff:22:b4:7b:
d9:a3:84:34:a6:b8:94:f9:9d:3d:b7:8e:08:ab:cb:
76:5e:1a:82:4f:fa:e6:0f:96:76:6e:f6:ec:dc:c2:
52:bc:f7:09:57:75:28:1a:cb:17:a5:8c:86:ea:97:
81:52:35:66:f7:ba:b0:1e:d0:dd:8f:4d:d4:1b:7a:
8a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:D1:0F:C8:DE:5F:C0:42:03:7F:40:AE:6E:FE:D0:22:1E:B3:92:1D
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/r9EPyN5fwEIDf0Cubv7QIh6zkh0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.99.0/24
87.121.108.0/23
91.92.168.0/22
93.123.65.0/24
94.156.4.0/23
94.156.80.0/21
94.156.97.0/24
IPv6:
2a00:1728:2d::/48
Signature Algorithm: sha256WithRSAEncryption
3e:ae:70:67:da:15:e1:5d:6a:5c:c5:19:0a:ec:43:51:de:0f:
1f:73:d4:4b:37:53:52:98:55:88:11:30:e3:27:12:66:14:96:
19:6a:73:aa:fd:0d:71:33:1f:a2:6e:a4:7f:8a:82:9f:e1:79:
91:70:b5:5f:9a:88:3b:4f:7d:12:c1:5e:1e:48:e5:d4:73:96:
82:ed:7a:19:aa:42:c3:52:5f:63:0b:b1:1e:f5:7b:6b:69:f8:
65:f6:72:43:3b:42:a0:b6:dd:0b:96:09:9f:f5:6d:48:e1:19:
ba:40:b3:eb:b6:59:e2:2b:f4:c0:31:74:78:93:ed:79:2e:0d:
47:3c:36:ae:79:43:0c:08:55:a1:6a:cd:16:5d:a2:7b:a1:ac:
c3:74:5d:52:8c:9c:12:d1:7f:d0:5e:9e:3c:f6:ec:96:24:42:
6c:5f:59:1f:e9:0c:2f:0d:5f:04:69:b7:95:08:4a:87:17:c8:
c3:d6:4b:06:ba:76:91:a4:e1:05:40:26:6b:4d:e0:52:95:dc:
b6:9d:2e:da:29:d3:79:93:2c:8f:ea:28:65:67:2d:f6:3d:11:
69:61:9d:67:3d:06:78:e7:e8:79:05:5f:64:7b:01:31:45:ec:
51:7e:43:6c:35:22:b8:bf:4d:56:4d:79:ad:a3:78:1d:b8:77:
08:02:0e:fc
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgISAZnn41UuXYmoZhu36TtnYscYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjUxMDE1MTI0MDU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZmQxMGZjOGRlNWZjMDQyMDM3ZjQwYWU2ZWZlZDAyMjFlYjM5MjFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsv/RqpaCOW1VBf1fyGW2XctBEuQ4
GbZFcNXwvYRbjhoWHRrQ3gfEjI2JI5P6oLa7iHE3yu/ZUtD7k/+a+8wkaYgIlEku
uLGVjx2QPZuJw6NxxNEBAiqvQTNXI9SHRTcezlJGAtAhGLDI4LmwzgAXbADRKeqI
XN2hBlZg6IO8rYQRYU2EcFtGMdNLldGEtTJ889VEiVqzL1Yd+gQzmlc1k3NY4Bzy
Ja/ARjdMojin7c596J96fzgNTGXxKw7Mif8itHvZo4Q0priU+Z09t44Iq8t2XhqC
T/rmD5Z2bvbs3MJSvPcJV3UoGssXpYyG6peBUjVm97qwHtDdj03UG3qKcQIDAQAB
o4ICPjCCAjowHQYDVR0OBBYEFK/RD8jeX8BCA39Arm7+0CIes5IdMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvcjlFUHlONWZ3RUlEZjBDdWJ2N1FJaDZ6a2gwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFQGCCsGAQUFBwEHAQH/BEUwQzAwBAIAATAqAwQAV3hjAwQB
V3lsAwQCW1yoAwQAXXtBAwQBXpwEAwQDXpxQAwQAXpxhMA8EAgACMAkDBwAqABco
AC0wDQYJKoZIhvcNAQELBQADggEBAD6ucGfaFeFdalzFGQrsQ1HeDx9z1Es3U1KY
VYgRMOMnEmYUlhlqc6r9DXEzH6JupH+Kgp/heZFwtV+aiDtPfRLBXh5I5dRzloLt
ehmqQsNSX2MLsR71e2tp+GX2ckM7QqC23QuWCZ/1bUjhGbpAs+u2WeIr9MAxdHiT
7XkuDUc8Nq55QwwIVaFqzRZdonuhrMN0XVKMnBLRf9Benjz27JYkQmxfWR/pDC8N
XwRpt5UISocXyMPWSwa6dpGk4QVAJmtN4FKV3LadLtop03mTLI/qKGVnLfY9EWlh
nWc9Bnjn6HkFX2R7ATFF7FF+Q2w1Iri/TVZNea2jeB24dwgCDvw=
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:03:49 2025 by rpki-client