Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1-T63bDKa8sbVE2zOKbjk_RDguQY.roa
File: 1-T63bDKa8sbVE2zOKbjk_RDguQY.roa (raw, json)
Hash identifier: oXcIAJud1Oich/eTQVG/ZNNpf/NUXNmtoRtpxKlNWOA=
Subject key identifier: F9:3E:B7:6C:32:9A:F2:C6:D5:13:6C:CE:29:B8:E4:FD:10:E0:B9:06
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0199E6DD2C8E74AF197406D33FDB26FACF97
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1-T63bDKa8sbVE2zOKbjk_RDguQY.roa
Signing time: Wed 15 Oct 2025 07:54:38 +0000
ROA not before: Wed 15 Oct 2025 07:54:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210705
IP address blocks: 5.231.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e6:dd:2c:8e:74:af:19:74:06:d3:3f:db:26:fa:cf:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 15 07:54:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f93eb76c329af2c6d5136cce29b8e4fd10e0b906
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:26:f2:e1:93:68:42:40:c1:9f:d8:9d:c2:b2:
64:27:60:e8:39:96:0b:f1:cf:69:03:43:9a:a7:8e:
00:e1:24:38:c0:ce:83:a8:26:aa:ae:c3:54:4a:1e:
d3:a0:1d:b3:46:da:42:b9:36:2a:f3:d6:be:7e:7a:
6f:a0:c2:b4:3a:67:db:08:fb:b9:e8:48:10:8d:ee:
b7:26:47:36:e7:b8:39:e2:e1:1e:cd:60:97:58:4d:
a5:2d:25:56:20:45:fe:2d:2f:9c:39:13:f3:14:0c:
f3:0d:51:f8:36:ca:20:fa:f6:12:af:73:d5:cb:e6:
e6:c6:5f:ee:d3:9a:18:0c:64:8b:8b:c7:e3:6d:d9:
9c:45:f6:c0:a1:ca:ab:89:28:59:46:45:9b:01:35:
65:44:2a:57:d0:88:6b:3f:d3:5a:d0:eb:67:b9:20:
fa:b0:f9:23:3c:6f:00:b4:a9:34:cb:f3:31:d1:39:
75:9c:b5:74:d2:aa:b0:76:f7:c3:0a:1b:dc:93:9d:
b2:4d:df:89:db:c9:5b:6f:b3:e4:2a:23:ec:82:f1:
1e:c9:b7:2b:23:bb:a3:21:5a:40:ad:9e:af:f9:b8:
39:01:ec:12:c4:f3:c1:01:f5:94:fd:9b:19:61:df:
39:2b:1f:98:e2:3f:ee:97:44:0a:a7:20:b1:46:1e:
12:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:3E:B7:6C:32:9A:F2:C6:D5:13:6C:CE:29:B8:E4:FD:10:E0:B9:06
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1-T63bDKa8sbVE2zOKbjk_RDguQY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.204.0/24
Signature Algorithm: sha256WithRSAEncryption
94:fd:2a:8b:be:cb:d7:dd:ef:63:eb:96:78:86:ea:be:0c:f3:
d1:94:ff:50:e5:8b:b1:38:3d:ac:74:08:46:53:7f:27:8c:5e:
65:14:8a:8f:3d:1b:12:09:5b:dd:93:71:7f:03:1a:70:c2:0f:
f4:f5:38:8b:50:89:91:3c:35:30:62:4a:71:d9:08:c8:a3:99:
53:1a:d4:bd:27:da:64:43:e3:d5:4a:a3:22:3e:56:bd:03:52:
7c:fe:95:67:41:02:44:0a:ba:5b:a3:b4:d7:40:12:49:a1:16:
79:d1:fa:d8:9a:9d:e0:df:39:ce:04:2c:b3:de:2e:e0:cb:25:
b6:9e:d8:b2:3c:07:a1:33:d0:8a:94:a3:ad:54:4a:cb:26:7f:
48:e4:d3:83:07:39:84:73:ec:a5:b0:13:44:a9:33:68:c3:69:
43:6d:34:7e:b1:3c:32:30:5c:65:76:c7:0e:38:5c:61:3f:f8:
69:3a:49:94:db:e7:7d:06:d2:b1:a7:e5:78:af:e1:d1:c6:51:
de:66:94:57:37:2b:c4:49:46:47:f3:5d:85:20:51:43:31:94:
74:ec:f1:ff:c5:b7:3f:69:04:ea:42:8b:45:dc:51:2c:9a:33:
99:a8:d5:a0:b3:92:f2:21:59:98:98:0a:48:63:b1:8b:37:6f:
a8:f2:1e:12
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZnm3SyOdK8ZdAbTP9sm+s+XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjUxMDE1MDc1NDM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOTNlYjc2YzMyOWFmMmM2ZDUxMzZjY2UyOWI4ZTRmZDEwZTBiOTA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCby4ZNoQkDBn9idwrJkJ2DoOZYL
8c9pA0Oap44A4SQ4wM6DqCaqrsNUSh7ToB2zRtpCuTYq89a+fnpvoMK0OmfbCPu5
6EgQje63Jkc257g54uEezWCXWE2lLSVWIEX+LS+cORPzFAzzDVH4Nsog+vYSr3PV
y+bmxl/u05oYDGSLi8fjbdmcRfbAocqriShZRkWbATVlRCpX0IhrP9Na0OtnuSD6
sPkjPG8AtKk0y/Mx0Tl1nLV00qqwdvfDChvck52yTd+J28lbb7PkKiPsgvEeybcr
I7ujIVpArZ6v+bg5AewSxPPBAfWU/ZsZYd85Kx+Y4j/ul0QKpyCxRh4SqwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPk+t2wymvLG1RNszim45P0Q4LkGMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvMS1UNjNiREthOHNiVkUyek9LYmprX1JEZ3VRWS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMTAvOTY1ODM3LTUyY2ItNDZiNC1hZWRiLWUxYmQ4OGQzZmQw
Ny8xL1BtQ1hhWWFHNFZWZlVmYklnN3hhV0ZTYkkySS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAAXnzDAN
BgkqhkiG9w0BAQsFAAOCAQEAlP0qi77L193vY+uWeIbqvgzz0ZT/UOWLsTg9rHQI
RlN/J4xeZRSKjz0bEglb3ZNxfwMacMIP9PU4i1CJkTw1MGJKcdkIyKOZUxrUvSfa
ZEPj1UqjIj5WvQNSfP6VZ0ECRAq6W6O010ASSaEWedH62Jqd4N85zgQss94u4Msl
tp7YsjwHoTPQipSjrVRKyyZ/SOTTgwc5hHPspbATRKkzaMNpQ200frE8MjBcZXbH
DjhcYT/4aTpJlNvnfQbSsafleK/h0cZR3maUVzcrxElGR/NdhSBRQzGUdOzx/8W3
P2kE6kKLRdxRLJozmajVoLOS8iFZmJgKSGOxizdvqPIeEg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 21:16:09 2025 by rpki-client