Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/0dff12-4e72-430e-9df6-bdaa6fbd4347/1/O_uK3Zu_QXJWMOuzZ4N9lrg41Eo.roa
File: O_uK3Zu_QXJWMOuzZ4N9lrg41Eo.roa (raw, json)
Hash identifier: XfsGt0J7O4EdBwVu7o4CD1xoooiqwOChTXXKbThpML4=
Subject key identifier: 3B:FB:8A:DD:9B:BF:41:72:56:30:EB:B3:67:83:7D:96:B8:38:D4:4A
Certificate issuer: /CN=95ebd8066f1090c3119cdb69e9d4dc40d90304f8
Certificate serial: 01992F8AFFD05F59F337352378ADE71D32CA
Authority key identifier: 95:EB:D8:06:6F:10:90:C3:11:9C:DB:69:E9:D4:DC:40:D9:03:04:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/levYBm8QkMMRnNtp6dTcQNkDBPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/0dff12-4e72-430e-9df6-bdaa6fbd4347/1/O_uK3Zu_QXJWMOuzZ4N9lrg41Eo.roa
Signing time: Tue 09 Sep 2025 17:34:22 +0000
ROA not before: Tue 09 Sep 2025 17:34:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201241
IP address blocks: 185.51.24.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/0dff12-4e72-430e-9df6-bdaa6fbd4347/1/levYBm8QkMMRnNtp6dTcQNkDBPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/0dff12-4e72-430e-9df6-bdaa6fbd4347/1/levYBm8QkMMRnNtp6dTcQNkDBPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/levYBm8QkMMRnNtp6dTcQNkDBPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2f:8a:ff:d0:5f:59:f3:37:35:23:78:ad:e7:1d:32:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95ebd8066f1090c3119cdb69e9d4dc40d90304f8
Validity
Not Before: Sep 9 17:34:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3bfb8add9bbf41725630ebb367837d96b838d44a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1b:cf:ad:35:da:72:43:9f:b3:ac:cb:1b:6d:
6e:38:3f:18:77:b8:1a:e7:b2:c8:f0:81:97:42:5a:
de:15:7e:69:57:d3:18:41:8c:2e:30:c5:07:15:a1:
1a:aa:5c:3b:33:ae:e9:0f:84:2d:13:a0:a2:82:a1:
b8:7e:bb:b3:6d:14:1f:d7:4f:0f:e1:ad:8f:9b:fd:
46:6c:06:74:07:9e:55:0a:a6:b6:51:0f:ad:5f:a6:
d9:eb:11:ad:46:11:5e:ba:ff:7d:da:3c:5c:32:9f:
5b:81:40:db:0f:4f:f8:1b:b8:90:4d:a4:8c:dc:cc:
3f:42:6d:23:ef:1a:22:3b:18:3f:63:f2:cf:ed:81:
b4:9c:e0:b6:b7:c4:99:df:83:df:e1:1c:5b:6b:a5:
a6:ab:4e:40:56:23:6f:da:3d:55:02:65:ce:6e:fb:
f9:03:29:01:9a:73:0c:b2:83:ba:46:11:e2:0e:02:
d1:ac:76:00:e5:1c:73:ab:b4:fe:e5:87:01:3c:d6:
3c:9c:c0:64:5f:0d:cd:ee:49:ac:19:c8:92:9a:ab:
51:24:dd:23:0f:b3:12:ed:d1:c0:ce:cc:fa:3e:85:
ba:04:ab:23:b4:c2:4a:6e:81:e4:c6:0b:b6:cc:28:
e5:8c:d7:2e:46:9d:0d:38:9d:59:7d:f8:f1:0b:55:
bf:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:FB:8A:DD:9B:BF:41:72:56:30:EB:B3:67:83:7D:96:B8:38:D4:4A
X509v3 Authority Key Identifier:
keyid:95:EB:D8:06:6F:10:90:C3:11:9C:DB:69:E9:D4:DC:40:D9:03:04:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/levYBm8QkMMRnNtp6dTcQNkDBPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0dff12-4e72-430e-9df6-bdaa6fbd4347/1/O_uK3Zu_QXJWMOuzZ4N9lrg41Eo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0dff12-4e72-430e-9df6-bdaa6fbd4347/1/levYBm8QkMMRnNtp6dTcQNkDBPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.51.24.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:8c:6d:b8:fd:b5:b0:4e:16:e0:b3:b6:f1:e4:8f:b2:d4:a7:
55:a9:37:85:61:6f:12:e7:ac:13:08:4d:87:f0:00:f8:f5:57:
ee:29:63:59:52:86:31:a4:47:99:eb:c5:c0:5a:1c:5f:70:a1:
a9:e1:e6:62:2b:31:33:8a:e5:34:2e:51:9b:f8:0e:ac:f0:95:
cb:2a:32:72:13:e8:00:34:7a:0e:ba:50:fd:55:fe:8e:c9:5a:
f0:6d:cf:71:d1:33:dd:32:66:83:70:9a:52:cf:e1:e6:18:e1:
8f:b0:dc:a3:05:98:e4:9a:bd:64:7b:bc:70:88:17:42:fa:5b:
65:ee:81:57:b8:55:3b:bd:ea:ba:c6:f5:bc:ee:8e:e6:2d:8c:
d5:28:4f:4e:c8:24:5c:37:57:e3:ee:bb:d0:76:6a:2e:a2:62:
93:22:15:0e:c2:e7:e6:9d:76:cd:26:0d:dd:c4:3e:52:db:2c:
90:b7:11:5a:89:29:cc:cc:a1:70:d6:2f:1b:85:4f:4e:2a:70:
d5:b9:43:56:f2:73:86:4a:de:19:27:12:d5:3e:62:03:a9:3f:
79:2d:85:08:cc:af:1d:cd:81:23:b3:7d:3e:fd:64:77:fb:de:
62:a0:b6:0a:c0:47:ac:a2:44:13:7f:51:84:cb:c6:0d:df:ae:
b8:ee:38:90
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZkviv/QX1nzNzUjeK3nHTLKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1ZWJkODA2NmYxMDkwYzMxMTljZGI2OWU5ZDRkYzQwZDkw
MzA0ZjgwHhcNMjUwOTA5MTczNDIyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYmZiOGFkZDliYmY0MTcyNTYzMGViYjM2NzgzN2Q5NmI4MzhkNDRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRvPrTXackOfs6zLG21uOD8Yd7ga
57LI8IGXQlreFX5pV9MYQYwuMMUHFaEaqlw7M67pD4QtE6CigqG4fruzbRQf108P
4a2Pm/1GbAZ0B55VCqa2UQ+tX6bZ6xGtRhFeuv992jxcMp9bgUDbD0/4G7iQTaSM
3Mw/Qm0j7xoiOxg/Y/LP7YG0nOC2t8SZ34Pf4Rxba6Wmq05AViNv2j1VAmXObvv5
AykBmnMMsoO6RhHiDgLRrHYA5Rxzq7T+5YcBPNY8nMBkXw3N7kmsGciSmqtRJN0j
D7MS7dHAzsz6PoW6BKsjtMJKboHkxgu2zCjljNcuRp0NOJ1ZffjxC1W/wwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDv7it2bv0FyVjDrs2eDfZa4ONRKMB8GA1UdIwQY
MBaAFJXr2AZvEJDDEZzbaenU3EDZAwT4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGV2WUJtOFFrTU1Sbk50cDZkVGNRTmtEQlBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8wZGZmMTItNGU3Mi00MzBlLTlkZjYt
YmRhYTZmYmQ0MzQ3LzEvT191SzNadV9RWEpXTU91elo0Tjlscmc0MUVvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC8wZGZmMTItNGU3Mi00MzBlLTlkZjYtYmRhYTZmYmQ0MzQ3
LzEvbGV2WUJtOFFrTU1Sbk50cDZkVGNRTmtEQlBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuTMYMA0G
CSqGSIb3DQEBCwUAA4IBAQCbjG24/bWwThbgs7bx5I+y1KdVqTeFYW8S56wTCE2H
8AD49VfuKWNZUoYxpEeZ68XAWhxfcKGp4eZiKzEziuU0LlGb+A6s8JXLKjJyE+gA
NHoOulD9Vf6OyVrwbc9x0TPdMmaDcJpSz+HmGOGPsNyjBZjkmr1ke7xwiBdC+ltl
7oFXuFU7veq6xvW87o7mLYzVKE9OyCRcN1fj7rvQdmouomKTIhUOwufmnXbNJg3d
xD5S2yyQtxFaiSnMzKFw1i8bhU9OKnDVuUNW8nOGSt4ZJxLVPmIDqT95LYUIzK8d
zYEjs30+/WR3+95ioLYKwEesokQTf1GEy8YN36647jiQ
-----END CERTIFICATE-----
Generated at Mon Oct 20 02:05:50 2025 by rpki-client