Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/02f63e-4ea2-43ac-abd5-0dab2312902a/1/7alJhVEJ8xj6IpTwu6Ih8OhjFkA.roa
File: 7alJhVEJ8xj6IpTwu6Ih8OhjFkA.roa (raw, json)
Hash identifier: 7jCnG6JINMEyq9hp7eyBgT5bk5thbVgVLLuXRq467tI=
Subject key identifier: ED:A9:49:85:51:09:F3:18:FA:22:94:F0:BB:A2:21:F0:E8:63:16:40
Certificate issuer: /CN=3c8a0498ec3b4eb44f4df2541ae39180abb65f44
Certificate serial: 0199CA562D1FDF17D3517617E675F1BEA148
Authority key identifier: 3C:8A:04:98:EC:3B:4E:B4:4F:4D:F2:54:1A:E3:91:80:AB:B6:5F:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PIoEmOw7TrRPTfJUGuORgKu2X0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/02f63e-4ea2-43ac-abd5-0dab2312902a/1/7alJhVEJ8xj6IpTwu6Ih8OhjFkA.roa
Signing time: Thu 09 Oct 2025 18:57:49 +0000
ROA not before: Thu 09 Oct 2025 18:57:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213644
IP address blocks: 92.42.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/02f63e-4ea2-43ac-abd5-0dab2312902a/1/PIoEmOw7TrRPTfJUGuORgKu2X0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/02f63e-4ea2-43ac-abd5-0dab2312902a/1/PIoEmOw7TrRPTfJUGuORgKu2X0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/PIoEmOw7TrRPTfJUGuORgKu2X0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ca:56:2d:1f:df:17:d3:51:76:17:e6:75:f1:be:a1:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c8a0498ec3b4eb44f4df2541ae39180abb65f44
Validity
Not Before: Oct 9 18:57:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eda949855109f318fa2294f0bba221f0e8631640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5a:5d:26:fa:65:8a:5b:be:30:00:a0:57:e0:
4c:4d:33:ae:ac:8c:d6:80:6e:1e:83:75:d9:d0:c7:
b2:6b:ac:98:b5:e0:5c:aa:9b:16:e9:e5:44:89:cc:
9e:ab:b2:35:97:38:07:37:60:39:57:07:2e:7b:22:
99:cd:b5:68:1e:65:94:59:bd:0b:a9:a7:89:c5:47:
b2:61:cc:20:4f:02:0c:ec:b9:32:29:4d:91:50:13:
44:7e:78:9f:97:36:44:d6:29:c8:57:14:33:4e:fa:
7a:79:29:a4:c3:1b:a6:d9:3e:ae:4d:dc:d3:7c:4b:
06:8d:cd:db:dc:bc:d7:89:c0:ed:43:56:8e:1d:c5:
da:c6:06:7e:fa:ed:02:31:b5:e9:c6:26:b6:8c:c2:
21:46:3a:4f:1c:98:a3:a6:c6:f2:87:80:73:11:b2:
32:02:0e:21:02:4e:da:74:ab:db:f8:72:a2:03:cc:
d8:6d:1a:0d:fc:d0:0c:c7:b8:66:74:6a:b4:9e:3d:
64:97:5f:10:2c:88:71:29:0f:19:08:1e:0e:6f:47:
b5:37:eb:ae:4b:ab:9a:5f:c8:ba:2a:7b:79:fc:ab:
9c:e1:7c:49:d1:0b:34:ae:5b:c4:9a:fa:48:80:23:
99:04:05:b7:56:df:aa:bc:3f:4c:05:26:75:6a:27:
32:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:A9:49:85:51:09:F3:18:FA:22:94:F0:BB:A2:21:F0:E8:63:16:40
X509v3 Authority Key Identifier:
keyid:3C:8A:04:98:EC:3B:4E:B4:4F:4D:F2:54:1A:E3:91:80:AB:B6:5F:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PIoEmOw7TrRPTfJUGuORgKu2X0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/02f63e-4ea2-43ac-abd5-0dab2312902a/1/7alJhVEJ8xj6IpTwu6Ih8OhjFkA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/02f63e-4ea2-43ac-abd5-0dab2312902a/1/PIoEmOw7TrRPTfJUGuORgKu2X0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.42.203.0/24
Signature Algorithm: sha256WithRSAEncryption
37:fd:1e:70:ce:9b:e2:f0:5f:1e:c2:2f:c7:b0:eb:ce:c2:7e:
1f:12:00:94:ce:68:0b:4a:78:ca:e0:54:81:01:a1:4d:fa:ce:
66:bc:3f:14:1f:c2:54:f0:cf:36:15:05:55:85:b5:8e:23:f0:
ca:22:84:78:11:bf:e3:6c:51:93:0c:5f:b3:61:04:e2:41:44:
35:02:f3:b3:f9:d4:fa:9c:d8:82:89:dd:9d:d0:4c:5a:d6:1e:
28:57:c3:dc:61:a2:94:1a:d2:7e:12:51:8e:b5:9f:51:27:e9:
c0:f9:bc:87:94:52:c3:fc:62:b1:ee:42:b3:a8:9d:70:e6:49:
87:31:75:2a:50:af:34:e1:b7:7a:dc:8d:d0:97:02:a6:34:3a:
3c:9d:46:cb:7a:ce:59:64:77:68:6a:3f:2d:6c:1b:fb:c2:aa:
b7:a8:08:ed:82:5a:83:36:c1:83:fd:a2:c5:36:5d:0d:d5:c2:
3b:a8:80:67:9a:90:c5:eb:4b:78:dc:c3:cd:bb:c8:f8:fa:82:
63:0e:3b:d9:f9:c4:da:75:7c:41:af:23:66:e4:66:5b:f1:c1:
56:20:38:9b:47:8d:cb:f6:aa:9f:02:a2:eb:c9:ac:14:cc:f7:
36:4d:b5:af:31:76:1b:c2:dd:c3:c7:cb:36:bf:78:32:01:56:
cc:1a:ae:84
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZnKVi0f3xfTUXYX5nXxvqFIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjOGEwNDk4ZWMzYjRlYjQ0ZjRkZjI1NDFhZTM5MTgwYWJi
NjVmNDQwHhcNMjUxMDA5MTg1NzQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZGE5NDk4NTUxMDlmMzE4ZmEyMjk0ZjBiYmEyMjFmMGU4NjMxNjQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlpdJvplilu+MACgV+BMTTOurIzW
gG4eg3XZ0Meya6yYteBcqpsW6eVEicyeq7I1lzgHN2A5VwcueyKZzbVoHmWUWb0L
qaeJxUeyYcwgTwIM7LkyKU2RUBNEfniflzZE1inIVxQzTvp6eSmkwxum2T6uTdzT
fEsGjc3b3LzXicDtQ1aOHcXaxgZ++u0CMbXpxia2jMIhRjpPHJijpsbyh4BzEbIy
Ag4hAk7adKvb+HKiA8zYbRoN/NAMx7hmdGq0nj1kl18QLIhxKQ8ZCB4Ob0e1N+uu
S6uaX8i6Knt5/Kuc4XxJ0Qs0rlvEmvpIgCOZBAW3Vt+qvD9MBSZ1aicyAwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO2pSYVRCfMY+iKU8LuiIfDoYxZAMB8GA1UdIwQY
MBaAFDyKBJjsO060T03yVBrjkYCrtl9EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUElvRW1PdzdUclJQVGZKVUd1T1JnS3UyWDBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8wMmY2M2UtNGVhMi00M2FjLWFiZDUt
MGRhYjIzMTI5MDJhLzEvN2FsSmhWRUo4eGo2SXBUd3U2SWg4T2hqRmtBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC8wMmY2M2UtNGVhMi00M2FjLWFiZDUtMGRhYjIzMTI5MDJh
LzEvUElvRW1PdzdUclJQVGZKVUd1T1JnS3UyWDBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXCrLMA0G
CSqGSIb3DQEBCwUAA4IBAQA3/R5wzpvi8F8ewi/HsOvOwn4fEgCUzmgLSnjK4FSB
AaFN+s5mvD8UH8JU8M82FQVVhbWOI/DKIoR4Eb/jbFGTDF+zYQTiQUQ1AvOz+dT6
nNiCid2d0Exa1h4oV8PcYaKUGtJ+ElGOtZ9RJ+nA+byHlFLD/GKx7kKzqJ1w5kmH
MXUqUK804bd63I3QlwKmNDo8nUbLes5ZZHdoaj8tbBv7wqq3qAjtglqDNsGD/aLF
Nl0N1cI7qIBnmpDF60t43MPNu8j4+oJjDjvZ+cTadXxBryNm5GZb8cFWIDibR43L
9qqfAqLryawUzPc2TbWvMXYbwt3Dx8s2v3gyAVbMGq6E
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:35:45 2025 by rpki-client