
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/pjFDM6wzAyFnV_7W_SHgCVJP4hc.roa
File: pjFDM6wzAyFnV_7W_SHgCVJP4hc.roa (raw, json)
Hash identifier: 25g7lwwxP1qGazXdPhbau6vE9l12B9+J1HdSOR/R0VU=
Subject key identifier: A6:31:43:33:AC:33:03:21:67:57:FE:D6:FD:21:E0:09:52:4F:E2:17
Certificate issuer: /CN=7f11416ae3929df37bf66a459cd3aca63891e946
Certificate serial: 01990F9184DCDA8127D0E8CBC940827E4E01
Authority key identifier: 7F:11:41:6A:E3:92:9D:F3:7B:F6:6A:45:9C:D3:AC:A6:38:91:E9:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fxFBauOSnfN79mpFnNOspjiR6UY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/pjFDM6wzAyFnV_7W_SHgCVJP4hc.roa
Signing time: Wed 03 Sep 2025 12:33:38 +0000
ROA not before: Wed 03 Sep 2025 12:33:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61146
IP address blocks: 194.0.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/fxFBauOSnfN79mpFnNOspjiR6UY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/fxFBauOSnfN79mpFnNOspjiR6UY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fxFBauOSnfN79mpFnNOspjiR6UY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:0f:91:84:dc:da:81:27:d0:e8:cb:c9:40:82:7e:4e:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f11416ae3929df37bf66a459cd3aca63891e946
Validity
Not Before: Sep 3 12:33:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a6314333ac3303216757fed6fd21e009524fe217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:56:2d:ce:d9:77:d3:21:16:76:b0:7e:21:0c:
dd:e5:e6:f9:b5:db:52:c3:a7:44:74:81:a1:f7:54:
90:53:fc:f1:df:f4:6d:ea:37:51:06:a1:cd:6c:2b:
41:7b:57:23:9d:9e:3e:ea:a5:c9:cf:89:4e:38:c3:
9a:70:21:ce:ad:dc:b2:66:43:cd:7b:77:d9:9c:14:
86:2e:0d:36:80:f6:f1:8e:d2:fd:95:61:64:c4:0c:
0f:23:ae:38:a8:25:72:12:55:60:e1:33:56:71:bf:
c9:47:3c:b7:d1:50:6a:af:87:9f:b4:3d:6f:ad:92:
9e:54:e0:43:c7:35:eb:30:b0:d7:07:84:66:36:9b:
96:b5:3e:eb:40:62:39:cd:0c:b4:09:b5:6f:46:4e:
c5:41:bf:a5:6b:cd:8b:81:77:45:dd:db:d6:2f:e9:
af:c5:96:64:76:fc:cd:12:fe:44:50:a2:4c:c5:cf:
e2:56:1e:32:f7:60:ea:b9:67:5d:74:36:90:46:49:
ef:0d:c1:6b:2a:04:f4:3c:16:02:c1:12:fd:5f:b0:
d3:22:0d:97:7f:74:aa:68:aa:b7:45:93:01:4f:3e:
6c:c8:43:5e:ae:9b:d0:5b:b2:c5:17:9d:c8:ff:d6:
d5:09:7c:e3:5e:ed:db:e8:8a:f4:9a:eb:07:5f:b8:
92:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:31:43:33:AC:33:03:21:67:57:FE:D6:FD:21:E0:09:52:4F:E2:17
X509v3 Authority Key Identifier:
keyid:7F:11:41:6A:E3:92:9D:F3:7B:F6:6A:45:9C:D3:AC:A6:38:91:E9:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fxFBauOSnfN79mpFnNOspjiR6UY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/pjFDM6wzAyFnV_7W_SHgCVJP4hc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/fxFBauOSnfN79mpFnNOspjiR6UY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.217.0/24
Signature Algorithm: sha256WithRSAEncryption
65:b7:d3:1d:90:bb:1e:7f:c9:f0:4a:6f:21:63:43:7d:c3:b6:
31:93:a2:c0:18:74:32:13:21:b5:93:8b:41:43:6a:f8:cb:b1:
96:94:6a:14:e2:74:ea:7e:a9:83:61:2a:18:02:0e:70:11:15:
08:e6:0c:38:80:d6:48:10:9f:68:96:7e:51:6f:a1:6d:ef:88:
2f:6e:54:d2:65:22:ea:90:d8:f5:84:14:9e:04:4a:9f:67:cb:
90:30:15:29:ae:a5:a8:0c:23:c6:40:2a:e8:d5:5e:a6:9d:58:
91:26:7c:b1:55:ee:dd:61:a7:5d:90:e8:41:67:b8:5c:35:04:
11:59:d3:75:10:7b:91:d0:a8:ad:6e:0c:b3:ea:31:e5:7b:96:
9a:8c:18:7e:02:1b:61:0a:9e:e4:07:a6:c5:1e:79:e6:be:4a:
91:a6:ed:d6:56:9e:c1:28:d7:9b:18:ef:67:c6:9c:c7:e2:64:
84:7d:2a:db:95:50:2c:c9:59:74:1b:25:bc:fc:e7:12:12:1d:
1a:75:34:33:e6:c8:bc:c9:3a:81:b3:52:11:75:73:53:2e:3f:
cf:32:d8:2b:c6:4c:46:67:b1:51:fb:7a:b6:34:6b:b6:d9:8c:
00:46:25:75:e4:e8:d7:84:b0:7f:8c:7e:4f:96:a3:ab:0e:bf:
25:c7:fe:7d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZkPkYTc2oEn0OjLyUCCfk4BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmMTE0MTZhZTM5MjlkZjM3YmY2NmE0NTljZDNhY2E2Mzg5
MWU5NDYwHhcNMjUwOTAzMTIzMzM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNjMxNDMzM2FjMzMwMzIxNjc1N2ZlZDZmZDIxZTAwOTUyNGZlMjE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVYtztl30yEWdrB+IQzd5eb5tdtS
w6dEdIGh91SQU/zx3/Rt6jdRBqHNbCtBe1cjnZ4+6qXJz4lOOMOacCHOrdyyZkPN
e3fZnBSGLg02gPbxjtL9lWFkxAwPI644qCVyElVg4TNWcb/JRzy30VBqr4eftD1v
rZKeVOBDxzXrMLDXB4RmNpuWtT7rQGI5zQy0CbVvRk7FQb+la82LgXdF3dvWL+mv
xZZkdvzNEv5EUKJMxc/iVh4y92DquWdddDaQRknvDcFrKgT0PBYCwRL9X7DTIg2X
f3SqaKq3RZMBTz5syENerpvQW7LFF53I/9bVCXzjXu3b6Ir0musHX7iSZwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKYxQzOsMwMhZ1f+1v0h4AlST+IXMB8GA1UdIwQY
MBaAFH8RQWrjkp3ze/ZqRZzTrKY4kelGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnhGQmF1T1NuZk43OW1wRm5OT3NwamlSNlVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi82YjIyZTgtM2RjZC00NGRkLTk1MTQt
Njc1NmY3YjBjMGRiLzEvcGpGRE02d3pBeUZuVl83V19TSGdDVkpQNGhjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi82YjIyZTgtM2RjZC00NGRkLTk1MTQtNjc1NmY3YjBjMGRi
LzEvZnhGQmF1T1NuZk43OW1wRm5OT3NwamlSNlVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwgDZMA0G
CSqGSIb3DQEBCwUAA4IBAQBlt9MdkLsef8nwSm8hY0N9w7Yxk6LAGHQyEyG1k4tB
Q2r4y7GWlGoU4nTqfqmDYSoYAg5wERUI5gw4gNZIEJ9oln5Rb6Ft74gvblTSZSLq
kNj1hBSeBEqfZ8uQMBUprqWoDCPGQCro1V6mnViRJnyxVe7dYaddkOhBZ7hcNQQR
WdN1EHuR0Kitbgyz6jHle5aajBh+AhthCp7kB6bFHnnmvkqRpu3WVp7BKNebGO9n
xpzH4mSEfSrblVAsyVl0GyW8/OcSEh0adTQz5si8yTqBs1IRdXNTLj/PMtgrxkxG
Z7FR+3q2NGu22YwARiV15OjXhLB/jH5PlqOrDr8lx/59
-----END CERTIFICATE-----
Generated at Mon Oct 20 13:28:47 2025 by rpki-client