Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d4ee39-80b4-4239-8c39-051b00f858ed/1/FZlDRwQNmXCg3_Qh5afXAwCGih4.roa
File: FZlDRwQNmXCg3_Qh5afXAwCGih4.roa (raw, json)
Hash identifier: SoWjx9Et7z/xhRKKbjGE/59bJXf4bvrCWGT22R3gJr8=
Subject key identifier: 15:99:43:47:04:0D:99:70:A0:DF:F4:21:E5:A7:D7:03:00:86:8A:1E
Certificate issuer: /CN=6a26b9e8df5da569854c61af714db303492b62f1
Certificate serial: 0199DD2ED58A5DEE1A276A14F0E6C147A620
Authority key identifier: 6A:26:B9:E8:DF:5D:A5:69:85:4C:61:AF:71:4D:B3:03:49:2B:62:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aia56N9dpWmFTGGvcU2zA0krYvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d4ee39-80b4-4239-8c39-051b00f858ed/1/FZlDRwQNmXCg3_Qh5afXAwCGih4.roa
Signing time: Mon 13 Oct 2025 10:47:38 +0000
ROA not before: Mon 13 Oct 2025 10:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212665
IP address blocks: 130.193.28.0/24 maxlen: 24
193.200.217.0/24 maxlen: 24
2a14:9980::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/d4ee39-80b4-4239-8c39-051b00f858ed/1/aia56N9dpWmFTGGvcU2zA0krYvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/d4ee39-80b4-4239-8c39-051b00f858ed/1/aia56N9dpWmFTGGvcU2zA0krYvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/aia56N9dpWmFTGGvcU2zA0krYvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:dd:2e:d5:8a:5d:ee:1a:27:6a:14:f0:e6:c1:47:a6:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a26b9e8df5da569854c61af714db303492b62f1
Validity
Not Before: Oct 13 10:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=15994347040d9970a0dff421e5a7d70300868a1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:5d:32:ef:0c:9b:ea:68:f3:ff:79:ce:5c:7c:
16:ab:64:22:1d:6e:01:3d:5f:9b:b4:64:b3:97:59:
22:d8:69:0a:4b:27:39:ba:bf:d1:8f:18:6b:f5:e9:
c3:82:cd:ee:09:6a:88:41:a8:d4:af:24:b0:24:b2:
86:82:cd:a4:68:c7:b5:e9:73:23:6e:6a:f2:01:67:
5f:8b:08:77:10:3e:d0:45:55:af:0f:6a:ae:d6:67:
dc:8a:e0:3d:5c:13:a4:95:42:70:61:5d:c6:c8:e2:
9f:73:50:23:dc:69:83:eb:63:42:1f:e1:3b:ba:ca:
b2:b3:ec:74:2d:9d:13:c6:cb:7b:08:0d:da:87:c5:
b0:f8:d4:b0:ed:67:7d:0e:10:50:1c:10:d2:79:e6:
01:67:c0:ee:c9:2a:a6:c0:2d:c9:d3:21:c2:98:c6:
4c:90:fd:e1:59:c0:94:40:d3:d5:04:fd:54:22:12:
65:7b:bd:9e:29:c5:dc:cb:ff:3f:25:5d:af:c8:ac:
7c:10:3a:b1:df:6b:a1:15:85:9a:59:e7:ee:ca:1d:
5b:23:c4:25:60:14:88:37:10:47:e4:a1:89:1e:d8:
34:d2:5d:b3:e2:b7:41:e3:f5:a7:47:79:4c:9f:54:
f9:ad:32:dd:e3:9e:ea:51:03:66:67:a5:df:d9:71:
39:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:99:43:47:04:0D:99:70:A0:DF:F4:21:E5:A7:D7:03:00:86:8A:1E
X509v3 Authority Key Identifier:
keyid:6A:26:B9:E8:DF:5D:A5:69:85:4C:61:AF:71:4D:B3:03:49:2B:62:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aia56N9dpWmFTGGvcU2zA0krYvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d4ee39-80b4-4239-8c39-051b00f858ed/1/FZlDRwQNmXCg3_Qh5afXAwCGih4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d4ee39-80b4-4239-8c39-051b00f858ed/1/aia56N9dpWmFTGGvcU2zA0krYvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.193.28.0/24
193.200.217.0/24
IPv6:
2a14:9980::/29
Signature Algorithm: sha256WithRSAEncryption
cb:24:3f:0e:9a:ef:62:75:27:0d:cb:5b:69:34:56:9f:95:c6:
7c:4a:1f:0a:bb:be:10:13:b0:67:bc:21:6d:cf:05:6b:e0:dd:
9a:f8:80:a7:5e:8e:27:b0:4d:f5:69:9f:5d:ae:cd:2a:de:0f:
f5:a6:7c:93:bf:b6:9d:2d:0f:f7:a5:76:f2:f0:c7:36:c1:b8:
ae:85:f6:9b:f3:bd:6e:df:8b:00:73:7c:df:03:43:52:b1:e2:
b4:95:59:c5:54:01:d3:9d:19:a0:02:63:cb:20:35:0c:e8:c0:
4e:95:3f:4a:85:43:f4:2f:62:0d:81:7b:7f:d3:03:5a:03:93:
79:d3:8a:be:6c:1e:c4:21:f4:72:04:80:ef:f1:99:09:03:67:
e2:58:f6:81:27:92:8d:45:bf:03:2c:41:6a:3e:c2:78:54:22:
d1:fa:b2:f6:23:fe:19:93:da:ee:51:1b:c8:16:2a:fb:c4:80:
dd:59:0d:2e:1a:c3:83:07:53:1f:65:74:cd:38:49:99:dd:a4:
46:e4:e9:4a:a0:9c:89:b2:f7:a9:42:f1:3f:af:78:fb:81:b0:
4a:c4:50:7d:1e:53:d0:31:a6:e8:ed:2d:ee:0d:18:97:47:04:
6d:c5:11:3c:66:58:25:74:f3:14:85:48:ce:34:d4:a9:fa:f0:
44:dd:3c:03
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZndLtWKXe4aJ2oU8ObBR6YgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhMjZiOWU4ZGY1ZGE1Njk4NTRjNjFhZjcxNGRiMzAzNDky
YjYyZjEwHhcNMjUxMDEzMTA0NzM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNTk5NDM0NzA0MGQ5OTcwYTBkZmY0MjFlNWE3ZDcwMzAwODY4YTFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzl0y7wyb6mjz/3nOXHwWq2QiHW4B
PV+btGSzl1ki2GkKSyc5ur/Rjxhr9enDgs3uCWqIQajUrySwJLKGgs2kaMe16XMj
bmryAWdfiwh3ED7QRVWvD2qu1mfciuA9XBOklUJwYV3GyOKfc1Aj3GmD62NCH+E7
usqys+x0LZ0Txst7CA3ah8Ww+NSw7Wd9DhBQHBDSeeYBZ8DuySqmwC3J0yHCmMZM
kP3hWcCUQNPVBP1UIhJle72eKcXcy/8/JV2vyKx8EDqx32uhFYWaWefuyh1bI8Ql
YBSINxBH5KGJHtg00l2z4rdB4/WnR3lMn1T5rTLd457qUQNmZ6Xf2XE52wIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFBWZQ0cEDZlwoN/0IeWn1wMAhooeMB8GA1UdIwQY
MBaAFGomuejfXaVphUxhr3FNswNJK2LxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWlhNTZOOWRwV21GVEdHdmNVMnpBMGtyWXZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9kNGVlMzktODBiNC00MjM5LThjMzkt
MDUxYjAwZjg1OGVkLzEvRlpsRFJ3UU5tWENnM19RaDVhZlhBd0NHaWg0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9kNGVlMzktODBiNC00MjM5LThjMzktMDUxYjAwZjg1OGVk
LzEvYWlhNTZOOWRwV21GVEdHdmNVMnpBMGtyWXZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAgsEcAwQA
wcjZMA0EAgACMAcDBQMqFJmAMA0GCSqGSIb3DQEBCwUAA4IBAQDLJD8Omu9idScN
y1tpNFaflcZ8Sh8Ku74QE7BnvCFtzwVr4N2a+ICnXo4nsE31aZ9drs0q3g/1pnyT
v7adLQ/3pXby8Mc2wbiuhfab871u34sAc3zfA0NSseK0lVnFVAHTnRmgAmPLIDUM
6MBOlT9KhUP0L2INgXt/0wNaA5N504q+bB7EIfRyBIDv8ZkJA2fiWPaBJ5KNRb8D
LEFqPsJ4VCLR+rL2I/4Zk9ruURvIFir7xIDdWQ0uGsODB1MfZXTNOEmZ3aRG5OlK
oJyJsvepQvE/r3j7gbBKxFB9HlPQMabo7S3uDRiXRwRtxRE8ZlgldPMUhUjONNSp
+vBE3TwD
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:04:46 2025 by rpki-client