Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/R9gd9olo67uwC-kmrgG1_1cQvV4.roa
File: R9gd9olo67uwC-kmrgG1_1cQvV4.roa (raw, json)
Hash identifier: SOVTrWbUc+t1UDE/N7lK/bdJS7LdpOB52xojrqLEUjQ=
Subject key identifier: 47:D8:1D:F6:89:68:EB:BB:B0:0B:E9:26:AE:01:B5:FF:57:10:BD:5E
Certificate issuer: /CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Certificate serial: 0199A73C390E224885F2518CA494A2E7F9B5
Authority key identifier: BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/R9gd9olo67uwC-kmrgG1_1cQvV4.roa
Signing time: Thu 02 Oct 2025 23:22:45 +0000
ROA not before: Thu 02 Oct 2025 23:22:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60253
IP address blocks: 92.205.80.0/21 maxlen: 21
92.205.156.0/22 maxlen: 24
92.205.192.0/20 maxlen: 24
188.121.60.0/24 maxlen: 24
188.121.61.0/24 maxlen: 24
2a00:116a::/40 maxlen: 48
2a00:116a:100::/40 maxlen: 48
2a00:116a:200::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:a7:3c:39:0e:22:48:85:f2:51:8c:a4:94:a2:e7:f9:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Validity
Not Before: Oct 2 23:22:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=47d81df68968ebbbb00be926ae01b5ff5710bd5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5b:f6:1a:5a:f7:53:ab:47:ef:20:1d:a4:6c:
eb:d4:a2:09:06:9e:e4:8e:c0:8d:30:cd:5b:df:14:
32:20:90:e6:26:91:5b:ed:bb:f3:0b:ec:82:98:0c:
0d:94:d3:34:5d:e1:82:1b:51:4e:fd:64:4e:15:ef:
6b:19:df:3a:c5:3a:e7:76:80:e6:8e:30:61:ae:16:
55:62:02:33:cd:a7:56:6f:f9:a6:4b:40:1c:04:f3:
79:a2:ce:e0:8e:ea:e6:12:1b:5d:a2:bc:e1:e8:58:
bf:4d:bf:59:17:e3:0d:f1:f8:95:c4:f9:e9:5b:93:
b8:29:ee:bf:d9:32:8c:e8:6e:d5:51:58:6f:60:9c:
59:78:d4:a0:5a:9a:d5:35:92:04:2d:77:91:28:c7:
b7:2c:5f:5e:dd:5f:f6:b0:84:48:2e:c2:f6:c4:4a:
a3:bb:19:fb:e6:a3:f5:de:85:a0:57:a2:cc:3e:30:
5a:5c:64:7b:27:00:01:eb:4d:4b:32:bb:5c:e7:bd:
d0:79:fd:5e:47:75:58:52:f7:02:be:11:39:e6:ca:
67:e9:0e:65:4b:c0:f8:2d:92:ba:60:49:7b:e5:cb:
69:e2:9c:54:80:49:cb:04:cc:a5:b2:a2:ef:91:24:
26:c2:42:f4:41:f2:60:3e:a5:06:50:3e:f4:f4:e2:
68:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:D8:1D:F6:89:68:EB:BB:B0:0B:E9:26:AE:01:B5:FF:57:10:BD:5E
X509v3 Authority Key Identifier:
keyid:BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/R9gd9olo67uwC-kmrgG1_1cQvV4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.205.80.0/21
92.205.156.0/22
92.205.192.0/20
188.121.60.0/23
IPv6:
2a00:116a::-2a00:116a:2ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
56:1c:c0:b0:fb:b4:81:cf:c8:e8:d9:fa:47:cc:b6:60:11:29:
6b:6e:f9:17:ea:22:4f:bf:b1:2b:a7:26:0c:3b:18:ed:5c:08:
f6:82:e1:a2:2c:72:7e:16:df:5a:3b:43:59:65:a9:1b:7e:25:
ee:3d:26:56:0b:4b:1e:f1:5e:b7:9b:b9:ee:81:0c:21:49:7f:
ae:3e:ea:5e:30:a0:17:34:9d:2b:6d:4d:87:e7:9c:97:78:6a:
02:1d:fa:72:68:29:4a:56:d4:dc:54:e2:c5:a6:f5:12:7d:0b:
78:67:14:25:bb:e2:88:6e:66:6b:e4:25:6d:b9:f6:3c:da:af:
f4:2e:05:42:23:81:45:0d:82:39:e1:67:b2:eb:cf:a8:04:dc:
b8:48:75:7f:22:38:11:d8:3b:01:c4:5a:86:63:8f:45:57:06:
58:7b:7b:a0:82:1a:29:4b:0a:ce:92:d3:ac:05:65:11:7a:74:
f1:1c:36:64:07:93:3f:99:27:fa:7a:5f:d5:20:96:d1:67:83:
3b:12:d4:8f:a3:dc:c9:39:80:c7:0f:57:3c:24:ad:b1:c7:9e:
22:dd:50:50:ae:62:01:20:61:21:01:bb:2c:08:70:25:3c:13:
ae:5d:1b:aa:5d:04:ae:ea:ea:f1:da:ef:9a:5c:87:e4:60:a6:
2d:82:d1:c2
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgISAZmnPDkOIkiF8lGMpJSi5/m1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhNmVkMGZiN2IzMjA4MzJhYzE1ODA1MzRjN2IyNjNmMzA0
ZTk4MWIwHhcNMjUxMDAyMjMyMjQ1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0N2Q4MWRmNjg5NjhlYmJiYjAwYmU5MjZhZTAxYjVmZjU3MTBiZDVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlv2Glr3U6tH7yAdpGzr1KIJBp7k
jsCNMM1b3xQyIJDmJpFb7bvzC+yCmAwNlNM0XeGCG1FO/WROFe9rGd86xTrndoDm
jjBhrhZVYgIzzadWb/mmS0AcBPN5os7gjurmEhtdorzh6Fi/Tb9ZF+MN8fiVxPnp
W5O4Ke6/2TKM6G7VUVhvYJxZeNSgWprVNZIELXeRKMe3LF9e3V/2sIRILsL2xEqj
uxn75qP13oWgV6LMPjBaXGR7JwAB601LMrtc573Qef1eR3VYUvcCvhE55spn6Q5l
S8D4LZK6YEl75ctp4pxUgEnLBMylsqLvkSQmwkL0QfJgPqUGUD709OJoqQIDAQAB
o4ICNDCCAjAwHQYDVR0OBBYEFEfYHfaJaOu7sAvpJq4Btf9XEL1eMB8GA1UdIwQY
MBaAFLpu0Pt7MggyrBWAU0x7Jj8wTpgbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdW03US0zc3lDREtzRllCVFRIc21QekJPbUJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC80MjA0MWQtNTkzMS00ODI0LTkyNTQt
MTYxZjM0MjM4N2QxLzEvUjlnZDlvbG82N3V3Qy1rbXJnRzFfMWNRdlY0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC80MjA0MWQtNTkzMS00ODI0LTkyNTQtMTYxZjM0MjM4N2Qx
LzEvdW03US0zc3lDREtzRllCVFRIc21QekJPbUJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEoGCCsGAQUFBwEHAQH/BDswOTAeBAIAATAYAwQDXM1QAwQC
XM2cAwQEXM3AAwQBvHk8MBcEAgACMBEwDwMFASoAEWoDBgAqABFqAjANBgkqhkiG
9w0BAQsFAAOCAQEAVhzAsPu0gc/I6Nn6R8y2YBEpa275F+oiT7+xK6cmDDsY7VwI
9oLhoixyfhbfWjtDWWWpG34l7j0mVgtLHvFet5u57oEMIUl/rj7qXjCgFzSdK21N
h+ecl3hqAh36cmgpSlbU3FTixab1En0LeGcUJbviiG5ma+Qlbbn2PNqv9C4FQiOB
RQ2COeFnsuvPqATcuEh1fyI4Edg7AcRahmOPRVcGWHt7oIIaKUsKzpLTrAVlEXp0
8Rw2ZAeTP5kn+npf1SCW0WeDOxLUj6PcyTmAxw9XPCStsceeIt1QUK5iASBhIQG7
LAhwJTwTrl0bql0Erurq8drvmlyH5GCmLYLRwg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 03:15:07 2025 by rpki-client