Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/a50c7c-878a-47fd-8107-79f105aef8d6/1/bQ335Qu1IpD2FIjMI78ziScUVGI.roa
File: bQ335Qu1IpD2FIjMI78ziScUVGI.roa (raw, json)
Hash identifier: ZV4IqpYmx61tlbVAfX/UDuIrlcXCWTu1WQJfIwsAz60=
Subject key identifier: 6D:0D:F7:E5:0B:B5:22:90:F6:14:88:CC:23:BF:33:89:27:14:54:62
Certificate issuer: /CN=1f0f78a55a5be5c01db803f438ca611b7f150307
Certificate serial: 019995D670A59F294443E6B78FF3194D5495
Authority key identifier: 1F:0F:78:A5:5A:5B:E5:C0:1D:B8:03:F4:38:CA:61:1B:7F:15:03:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hw94pVpb5cAduAP0OMphG38VAwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/a50c7c-878a-47fd-8107-79f105aef8d6/1/bQ335Qu1IpD2FIjMI78ziScUVGI.roa
Signing time: Mon 29 Sep 2025 14:18:02 +0000
ROA not before: Mon 29 Sep 2025 14:18:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199939
IP address blocks: 2a00:b500::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/a50c7c-878a-47fd-8107-79f105aef8d6/1/Hw94pVpb5cAduAP0OMphG38VAwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/a50c7c-878a-47fd-8107-79f105aef8d6/1/Hw94pVpb5cAduAP0OMphG38VAwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hw94pVpb5cAduAP0OMphG38VAwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:95:d6:70:a5:9f:29:44:43:e6:b7:8f:f3:19:4d:54:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f0f78a55a5be5c01db803f438ca611b7f150307
Validity
Not Before: Sep 29 14:18:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6d0df7e50bb52290f61488cc23bf338927145462
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:08:c4:a9:4b:83:33:2e:c7:d2:5a:02:4a:6a:
f6:0c:5a:fa:61:1f:d9:f9:1f:e8:70:4e:13:11:cb:
6c:81:11:af:c4:59:d9:81:1c:76:26:0c:7f:18:a2:
09:f4:37:63:cc:6a:c8:ef:39:e8:38:b5:81:ea:45:
2b:6a:25:49:7e:28:69:0c:a8:b0:30:3a:fe:af:1e:
9f:01:bf:3f:ee:b1:25:6b:09:47:10:54:f5:d1:cd:
1c:b2:4b:10:14:e8:e0:cb:18:4d:65:54:4d:be:99:
2f:76:cd:7d:a1:4a:96:da:e2:84:6d:ec:de:54:f3:
7e:79:a2:18:c5:51:c5:21:2d:91:f7:21:c8:88:6f:
f3:0c:74:59:70:0d:9c:47:8d:73:48:99:97:9e:d8:
41:4d:e9:8d:b7:b2:a7:a6:69:ae:f0:24:2c:38:62:
db:1b:cd:98:a2:b4:fb:f6:91:98:19:45:36:6f:ec:
86:1d:d6:fc:e5:c6:18:00:6a:1f:9c:8f:37:10:a1:
f1:80:5d:23:30:4a:d0:2e:8e:21:d0:fd:d6:52:8b:
2a:0b:d4:3b:d6:01:a2:09:f6:2d:53:7c:60:de:ac:
c1:80:cc:0c:93:cc:3e:bf:f1:4f:57:36:91:e8:99:
b6:ef:7c:14:ac:90:c2:f1:e4:69:6f:cd:7a:89:57:
2c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:0D:F7:E5:0B:B5:22:90:F6:14:88:CC:23:BF:33:89:27:14:54:62
X509v3 Authority Key Identifier:
keyid:1F:0F:78:A5:5A:5B:E5:C0:1D:B8:03:F4:38:CA:61:1B:7F:15:03:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hw94pVpb5cAduAP0OMphG38VAwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/a50c7c-878a-47fd-8107-79f105aef8d6/1/bQ335Qu1IpD2FIjMI78ziScUVGI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/a50c7c-878a-47fd-8107-79f105aef8d6/1/Hw94pVpb5cAduAP0OMphG38VAwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:b500::/32
Signature Algorithm: sha256WithRSAEncryption
25:4d:08:63:eb:a0:2f:41:89:16:62:83:8f:ae:7a:53:6d:8d:
5e:c3:63:78:89:f6:4e:6f:f3:57:cb:42:ef:73:c3:c6:aa:69:
89:31:34:18:c4:45:21:b2:66:14:e1:ae:9e:79:a4:bf:f9:88:
44:89:c7:3f:50:e9:ca:3d:31:38:a6:cb:34:af:a2:60:99:f3:
41:1b:7b:db:c5:84:25:bb:d1:3a:40:9b:63:b4:46:15:bf:ed:
37:92:48:e1:34:e6:35:d6:c0:7d:72:f7:ec:43:a9:23:ff:97:
32:f9:91:fd:40:4d:c3:6f:0a:59:a3:3f:2c:61:93:9d:1c:a2:
dd:71:fb:b4:89:91:05:c7:3d:60:47:e6:c5:c6:13:36:af:e8:
fc:ad:c1:51:e0:3a:de:fa:6c:3a:e3:fc:1b:49:5b:fe:95:87:
39:37:08:da:ef:2b:2d:c9:91:1f:c4:08:94:63:40:ed:cd:45:
79:3f:a1:20:f0:1a:52:ee:89:65:42:69:eb:58:88:d6:8b:e5:
47:db:b3:9a:68:79:74:96:c7:c4:da:22:a9:53:8b:1f:1d:c4:
cc:41:19:88:bd:c5:9f:4e:8c:51:2c:5f:1f:9a:86:24:22:a8:
99:2e:2a:d6:e6:3b:75:3c:92:69:d5:e3:12:5c:da:87:aa:aa:
c8:85:28:d4
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZmV1nClnylEQ+a3j/MZTVSVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmMGY3OGE1NWE1YmU1YzAxZGI4MDNmNDM4Y2E2MTFiN2Yx
NTAzMDcwHhcNMjUwOTI5MTQxODAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZDBkZjdlNTBiYjUyMjkwZjYxNDg4Y2MyM2JmMzM4OTI3MTQ1NDYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7gjEqUuDMy7H0loCSmr2DFr6YR/Z
+R/ocE4TEctsgRGvxFnZgRx2Jgx/GKIJ9DdjzGrI7znoOLWB6kUraiVJfihpDKiw
MDr+rx6fAb8/7rElawlHEFT10c0csksQFOjgyxhNZVRNvpkvds19oUqW2uKEbeze
VPN+eaIYxVHFIS2R9yHIiG/zDHRZcA2cR41zSJmXnthBTemNt7Knpmmu8CQsOGLb
G82YorT79pGYGUU2b+yGHdb85cYYAGofnI83EKHxgF0jMErQLo4h0P3WUosqC9Q7
1gGiCfYtU3xg3qzBgMwMk8w+v/FPVzaR6Jm273wUrJDC8eRpb816iVcsRwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFG0N9+ULtSKQ9hSIzCO/M4knFFRiMB8GA1UdIwQY
MBaAFB8PeKVaW+XAHbgD9DjKYRt/FQMHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHc5NHBWcGI1Y0FkdUFQME9NcGhHMzhWQXdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9hNTBjN2MtODc4YS00N2ZkLTgxMDct
NzlmMTA1YWVmOGQ2LzEvYlEzMzVRdTFJcEQyRklqTUk3OHppU2NVVkdJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS9hNTBjN2MtODc4YS00N2ZkLTgxMDctNzlmMTA1YWVmOGQ2
LzEvSHc5NHBWcGI1Y0FkdUFQME9NcGhHMzhWQXdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgC1ADAN
BgkqhkiG9w0BAQsFAAOCAQEAJU0IY+ugL0GJFmKDj656U22NXsNjeIn2Tm/zV8tC
73PDxqppiTE0GMRFIbJmFOGunnmkv/mIRInHP1Dpyj0xOKbLNK+iYJnzQRt728WE
JbvROkCbY7RGFb/tN5JI4TTmNdbAfXL37EOpI/+XMvmR/UBNw28KWaM/LGGTnRyi
3XH7tImRBcc9YEfmxcYTNq/o/K3BUeA63vpsOuP8G0lb/pWHOTcI2u8rLcmRH8QI
lGNA7c1FeT+hIPAaUu6JZUJp61iI1ovlR9uzmmh5dJbHxNoiqVOLHx3EzEEZiL3F
n06MUSxfH5qGJCKomS4q1uY7dTySadXjElzah6qqyIUo1A==
-----END CERTIFICATE-----
Generated at Mon Oct 20 02:05:31 2025 by rpki-client