Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/97a5c9-6b28-4c61-96e1-a6d000203fb5/1/ploZ02rlnfRi7ZfIa7yOIhfkagI.roa
File: ploZ02rlnfRi7ZfIa7yOIhfkagI.roa (raw, json)
Hash identifier: R6taM/cNraH8uQShx/CW4Jm1BZ928c9xtETqvasyMTE=
Subject key identifier: A6:5A:19:D3:6A:E5:9D:F4:62:ED:97:C8:6B:BC:8E:22:17:E4:6A:02
Certificate issuer: /CN=47bcd770f8ea3d48ecbb4c3eab895f422ffac90d
Certificate serial: 0199F24D57C096EB8AA3879BEDB891C5E684
Authority key identifier: 47:BC:D7:70:F8:EA:3D:48:EC:BB:4C:3E:AB:89:5F:42:2F:FA:C9:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R7zXcPjqPUjsu0w-q4lfQi_6yQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/97a5c9-6b28-4c61-96e1-a6d000203fb5/1/ploZ02rlnfRi7ZfIa7yOIhfkagI.roa
Signing time: Fri 17 Oct 2025 13:12:58 +0000
ROA not before: Fri 17 Oct 2025 13:12:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8881
IP address blocks: 212.89.192.0/24 maxlen: 24
212.89.200.0/21 maxlen: 21
212.89.208.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/97a5c9-6b28-4c61-96e1-a6d000203fb5/1/R7zXcPjqPUjsu0w-q4lfQi_6yQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/97a5c9-6b28-4c61-96e1-a6d000203fb5/1/R7zXcPjqPUjsu0w-q4lfQi_6yQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/R7zXcPjqPUjsu0w-q4lfQi_6yQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:f2:4d:57:c0:96:eb:8a:a3:87:9b:ed:b8:91:c5:e6:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47bcd770f8ea3d48ecbb4c3eab895f422ffac90d
Validity
Not Before: Oct 17 13:12:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a65a19d36ae59df462ed97c86bbc8e2217e46a02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:cb:47:1a:c6:58:3b:2a:0c:56:7a:52:82:7e:
56:10:8a:5a:cd:6d:39:32:91:61:ac:84:ab:a9:ad:
d6:df:d3:91:64:49:7b:bb:ee:6e:dd:a8:0d:0a:8a:
48:00:e7:99:e3:4d:20:03:b7:a2:96:13:8f:e4:be:
48:db:01:a3:46:e0:10:bd:af:3d:e6:95:6e:df:6c:
fd:52:72:89:9a:51:a3:a9:e1:20:bb:db:1f:90:66:
de:f7:a7:02:b3:59:28:7c:d5:00:93:f0:37:ba:7e:
d3:a9:8b:06:51:22:2a:e7:ef:9f:ba:1e:3b:d0:88:
5f:21:3b:5b:10:99:0c:c9:bb:38:ee:0f:09:33:f8:
6b:33:1e:55:e4:a7:d7:33:ea:32:a6:15:f3:b5:cb:
70:f8:b2:df:5f:5b:f4:1a:14:2e:fa:13:65:b9:8a:
d3:59:d8:5b:a4:22:1e:e7:11:f1:c6:e0:0d:87:5f:
cd:3c:95:55:cd:74:18:56:11:6a:8d:65:3b:cd:ba:
3d:5d:e6:78:39:ea:ed:e7:08:33:1e:3a:33:85:ea:
e5:7d:d1:0c:c1:d1:bb:33:d0:e5:c8:d7:03:d5:dd:
6f:1f:e1:46:e2:f6:bc:ab:3c:45:ba:b3:65:c3:a5:
c5:1d:8b:bf:51:1b:96:fd:82:ee:9b:49:fa:a3:da:
ce:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:5A:19:D3:6A:E5:9D:F4:62:ED:97:C8:6B:BC:8E:22:17:E4:6A:02
X509v3 Authority Key Identifier:
keyid:47:BC:D7:70:F8:EA:3D:48:EC:BB:4C:3E:AB:89:5F:42:2F:FA:C9:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R7zXcPjqPUjsu0w-q4lfQi_6yQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/97a5c9-6b28-4c61-96e1-a6d000203fb5/1/ploZ02rlnfRi7ZfIa7yOIhfkagI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/97a5c9-6b28-4c61-96e1-a6d000203fb5/1/R7zXcPjqPUjsu0w-q4lfQi_6yQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.89.192.0/24
212.89.200.0-212.89.223.255
Signature Algorithm: sha256WithRSAEncryption
53:aa:7b:f9:bd:ba:16:3f:70:08:81:8d:f5:c9:9c:30:9d:ad:
0b:6e:d7:86:cb:ee:d3:91:2f:da:21:0c:dc:e1:db:3a:80:8f:
3a:4d:98:10:40:a6:c6:6c:e8:d7:9e:33:35:0c:44:a4:fc:a2:
a2:9c:85:92:9e:42:93:16:cf:5a:3a:ce:3b:07:11:65:a1:45:
4d:52:69:15:7e:3a:1b:f1:3e:a5:c1:64:da:80:c7:7a:04:5c:
12:6b:8b:1a:64:b6:1a:8e:de:05:c4:c6:1e:2c:05:90:04:38:
8b:f9:b2:54:24:93:11:3e:6b:77:4d:eb:c0:f5:89:14:14:6a:
61:43:de:2b:7c:1d:bb:19:77:2a:ae:d8:d7:88:9f:a9:00:1f:
16:b1:ea:0c:26:9b:f9:08:d5:f0:48:fd:a4:66:93:60:0d:b5:
78:1c:a7:44:95:7d:ea:8c:8e:fc:05:e4:fa:b2:e9:9b:81:28:
50:90:ff:6d:6c:f1:57:33:93:82:da:38:3f:b2:8e:34:30:0d:
56:04:29:91:84:3f:57:82:6d:09:00:a5:4c:b0:55:4f:79:62:
44:c3:47:31:4d:8f:cb:90:9c:e6:b4:08:9f:1b:f0:4e:53:ca:
c5:31:bd:a2:b0:a7:7f:c6:55:a8:88:15:3a:87:40:dc:78:70:
aa:3a:bf:21
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAZnyTVfAluuKo4eb7biRxeaEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3YmNkNzcwZjhlYTNkNDhlY2JiNGMzZWFiODk1ZjQyMmZm
YWM5MGQwHhcNMjUxMDE3MTMxMjU4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNjVhMTlkMzZhZTU5ZGY0NjJlZDk3Yzg2YmJjOGUyMjE3ZTQ2YTAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqstHGsZYOyoMVnpSgn5WEIpazW05
MpFhrISrqa3W39ORZEl7u+5u3agNCopIAOeZ400gA7eilhOP5L5I2wGjRuAQva89
5pVu32z9UnKJmlGjqeEgu9sfkGbe96cCs1kofNUAk/A3un7TqYsGUSIq5++fuh47
0IhfITtbEJkMybs47g8JM/hrMx5V5KfXM+oyphXztctw+LLfX1v0GhQu+hNluYrT
WdhbpCIe5xHxxuANh1/NPJVVzXQYVhFqjWU7zbo9XeZ4Oert5wgzHjozherlfdEM
wdG7M9DlyNcD1d1vH+FG4va8qzxFurNlw6XFHYu/URuW/YLum0n6o9rOawIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFKZaGdNq5Z30Yu2XyGu8jiIX5GoCMB8GA1UdIwQY
MBaAFEe813D46j1I7LtMPquJX0Iv+skNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjd6WGNQanFQVWpzdTB3LXE0bGZRaV82eVEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC85N2E1YzktNmIyOC00YzYxLTk2ZTEt
YTZkMDAwMjAzZmI1LzEvcGxvWjAycmxuZlJpN1pmSWE3eU9JaGZrYWdJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC85N2E1YzktNmIyOC00YzYxLTk2ZTEtYTZkMDAwMjAzZmI1
LzEvUjd6WGNQanFQVWpzdTB3LXE0bGZRaV82eVEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQA1FnAMAwD
BAPUWcgDBAXUWcAwDQYJKoZIhvcNAQELBQADggEBAFOqe/m9uhY/cAiBjfXJnDCd
rQtu14bL7tORL9ohDNzh2zqAjzpNmBBApsZs6NeeMzUMRKT8oqKchZKeQpMWz1o6
zjsHEWWhRU1SaRV+OhvxPqXBZNqAx3oEXBJrixpkthqO3gXExh4sBZAEOIv5slQk
kxE+a3dN68D1iRQUamFD3it8HbsZdyqu2NeIn6kAHxax6gwmm/kI1fBI/aRmk2AN
tXgcp0SVfeqMjvwF5Pqy6ZuBKFCQ/21s8Vczk4LaOD+yjjQwDVYEKZGEP1eCbQkA
pUywVU95YkTDRzFNj8uQnOa0CJ8b8E5TysUxvaKwp3/GVaiIFTqHQNx4cKo6vyE=
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:14:37 2025 by rpki-client