Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/vaMAEqjcMkvH6y-5OvFOz1w_mU4.roa
File: vaMAEqjcMkvH6y-5OvFOz1w_mU4.roa (raw, json)
Hash identifier: keZjBn73pIW4PKlhodbog2eBUEbjStbSn55ErmksOpM=
Subject key identifier: BD:A3:00:12:A8:DC:32:4B:C7:EB:2F:B9:3A:F1:4E:CF:5C:3F:99:4E
Certificate issuer: /CN=94f8bf9f305527521508697e2eaa3be1c7a18454
Certificate serial: 0199CD8791E97E93C751E53F36E7ED8C34F8
Authority key identifier: 94:F8:BF:9F:30:55:27:52:15:08:69:7E:2E:AA:3B:E1:C7:A1:84:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/vaMAEqjcMkvH6y-5OvFOz1w_mU4.roa
Signing time: Fri 10 Oct 2025 09:50:37 +0000
ROA not before: Fri 10 Oct 2025 09:50:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210064
IP address blocks: 91.192.160.0/24 maxlen: 24
2a03:8fc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:cd:87:91:e9:7e:93:c7:51:e5:3f:36:e7:ed:8c:34:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94f8bf9f305527521508697e2eaa3be1c7a18454
Validity
Not Before: Oct 10 09:50:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bda30012a8dc324bc7eb2fb93af14ecf5c3f994e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:9b:2e:82:0f:40:ac:08:1a:33:0f:48:4e:50:
6a:56:37:a8:2b:c8:71:d9:7a:71:33:e4:56:ec:7b:
08:e2:f0:78:6f:0e:6e:25:0f:c6:13:52:ae:e0:69:
67:2b:4d:dc:70:86:90:d1:4a:a3:51:42:ed:c9:af:
8f:81:0f:37:1e:3d:a9:0f:1f:9d:de:7c:b1:65:4a:
70:43:18:da:ec:83:48:9e:64:8a:b4:2d:82:4f:87:
8c:06:32:73:75:a5:ad:91:5a:96:b1:32:32:3a:0e:
6a:bb:7a:cb:9f:a7:df:83:89:75:ef:b6:f4:ae:75:
3d:af:15:6e:25:27:e8:f3:c4:7e:9b:29:ca:20:34:
87:c7:60:28:ab:04:87:5d:01:8b:ea:8d:d7:f2:83:
ec:4f:8c:d8:a2:81:ea:90:b2:25:ee:da:77:59:49:
90:30:bd:ab:dc:bc:89:ba:d3:5b:6a:fe:9c:c7:6f:
ce:b1:64:cc:62:a5:59:f6:19:3e:a1:ac:60:55:2c:
08:36:b0:46:a4:6c:86:1b:ad:d2:ab:dd:34:0f:fb:
16:43:85:b9:cf:89:61:34:cc:f7:a6:02:f5:a4:f1:
a0:dc:fe:05:5d:09:5d:08:ea:80:e1:4a:05:12:db:
63:ba:02:55:ef:ad:26:7e:04:d5:be:92:29:8b:ea:
cc:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:A3:00:12:A8:DC:32:4B:C7:EB:2F:B9:3A:F1:4E:CF:5C:3F:99:4E
X509v3 Authority Key Identifier:
keyid:94:F8:BF:9F:30:55:27:52:15:08:69:7E:2E:AA:3B:E1:C7:A1:84:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/vaMAEqjcMkvH6y-5OvFOz1w_mU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.192.160.0/24
IPv6:
2a03:8fc0::/29
Signature Algorithm: sha256WithRSAEncryption
27:5f:9b:73:be:46:e8:e9:84:7e:16:35:eb:49:8c:0e:3d:c6:
79:5b:8b:77:8a:31:99:22:bc:99:36:38:27:36:dc:fd:5e:7d:
17:8b:69:78:0d:e8:ea:21:a2:c1:f5:d1:11:0a:47:bd:93:26:
fa:31:26:c4:59:99:2e:6d:07:16:cd:ac:7d:19:69:d4:da:5d:
ea:85:b2:1c:f3:7d:85:34:06:7d:5c:71:bc:ed:2d:d0:3f:23:
c3:c6:98:b9:b2:56:b7:df:06:5d:93:21:74:ea:2f:3e:54:c8:
3c:c4:bf:91:31:0a:f7:39:1d:91:93:f5:60:9e:01:e2:22:df:
1d:44:6f:de:3f:13:da:a1:53:3e:8b:00:a9:a4:a2:57:ab:93:
4a:70:63:e4:af:90:97:90:70:a1:f1:1a:c5:11:aa:1a:68:c5:
3a:1d:09:5c:d4:d8:6e:6e:bd:c8:0b:e4:9b:b1:a3:9d:a8:88:
7b:d8:a1:96:43:6e:f1:35:07:50:86:f1:01:5f:fc:a8:4b:10:
a6:75:3c:a8:6f:f3:66:22:49:6a:00:00:1f:e4:26:11:77:9e:
5d:67:69:fa:b3:7c:ed:d1:db:92:a3:c2:f4:79:c3:6a:28:d2:
07:9f:59:98:17:89:4c:dd:7c:bf:e8:bd:6f:75:aa:ea:3e:2d:
b6:8a:e8:54
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZnNh5HpfpPHUeU/NuftjDT4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0ZjhiZjlmMzA1NTI3NTIxNTA4Njk3ZTJlYWEzYmUxYzdh
MTg0NTQwHhcNMjUxMDEwMDk1MDM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZGEzMDAxMmE4ZGMzMjRiYzdlYjJmYjkzYWYxNGVjZjVjM2Y5OTRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Jsugg9ArAgaMw9ITlBqVjeoK8hx
2XpxM+RW7HsI4vB4bw5uJQ/GE1Ku4GlnK03ccIaQ0UqjUULtya+PgQ83Hj2pDx+d
3nyxZUpwQxja7INInmSKtC2CT4eMBjJzdaWtkVqWsTIyOg5qu3rLn6ffg4l177b0
rnU9rxVuJSfo88R+mynKIDSHx2AoqwSHXQGL6o3X8oPsT4zYooHqkLIl7tp3WUmQ
ML2r3LyJutNbav6cx2/OsWTMYqVZ9hk+oaxgVSwINrBGpGyGG63Sq900D/sWQ4W5
z4lhNMz3pgL1pPGg3P4FXQldCOqA4UoFEttjugJV760mfgTVvpIpi+rMOQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFL2jABKo3DJLx+svuTrxTs9cP5lOMB8GA1UdIwQY
MBaAFJT4v58wVSdSFQhpfi6qO+HHoYRUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFBpX256QlZKMUlWQ0dsLUxxbzc0Y2VoaEZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9lNzNlOTUtYzNjOS00OWFlLWEyZDkt
YTdiODU0NjBmMzY2LzEvdmFNQUVxamNNa3ZINnktNU92Rk96MXdfbVU0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9lNzNlOTUtYzNjOS00OWFlLWEyZDktYTdiODU0NjBmMzY2
LzEvbFBpX256QlZKMUlWQ0dsLUxxbzc0Y2VoaEZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAW8CgMA0E
AgACMAcDBQMqA4/AMA0GCSqGSIb3DQEBCwUAA4IBAQAnX5tzvkbo6YR+FjXrSYwO
PcZ5W4t3ijGZIryZNjgnNtz9Xn0Xi2l4DejqIaLB9dERCke9kyb6MSbEWZkubQcW
zax9GWnU2l3qhbIc832FNAZ9XHG87S3QPyPDxpi5sla33wZdkyF06i8+VMg8xL+R
MQr3OR2Rk/VgngHiIt8dRG/ePxPaoVM+iwCppKJXq5NKcGPkr5CXkHCh8RrFEaoa
aMU6HQlc1Nhubr3IC+SbsaOdqIh72KGWQ27xNQdQhvEBX/yoSxCmdTyob/NmIklq
AAAf5CYRd55dZ2n6s3zt0duSo8L0ecNqKNIHn1mYF4lM3Xy/6L1vdarqPi22iuhU
-----END CERTIFICATE-----
Generated at Mon Oct 20 09:59:12 2025 by rpki-client