Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/vy5zTXe1FQxKmoVnLtT-YONwy5w.roa
File: vy5zTXe1FQxKmoVnLtT-YONwy5w.roa (raw, json)
Hash identifier: AqKcisSO89b2UHYN+H37mx/RlCQTo8dhRQYzWSzGyh8=
Subject key identifier: BF:2E:73:4D:77:B5:15:0C:4A:9A:85:67:2E:D4:FE:60:E3:70:CB:9C
Certificate issuer: /CN=881ab180cb3517186221b3999b08b83af4f66945
Certificate serial: 0199BDD95894A362DA3B412EB54BAB66E388
Authority key identifier: 88:1A:B1:80:CB:35:17:18:62:21:B3:99:9B:08:B8:3A:F4:F6:69:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBqxgMs1FxhiIbOZmwi4OvT2aUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/vy5zTXe1FQxKmoVnLtT-YONwy5w.roa
Signing time: Tue 07 Oct 2025 08:46:01 +0000
ROA not before: Tue 07 Oct 2025 08:46:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215742
IP address blocks: 91.211.85.0/24 maxlen: 24
2a0d:ebc0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/iBqxgMs1FxhiIbOZmwi4OvT2aUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:bd:d9:58:94:a3:62:da:3b:41:2e:b5:4b:ab:66:e3:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=881ab180cb3517186221b3999b08b83af4f66945
Validity
Not Before: Oct 7 08:46:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bf2e734d77b5150c4a9a85672ed4fe60e370cb9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:4e:93:73:be:0a:82:45:57:34:09:c8:8b:94:
55:70:d5:5c:ad:b7:6a:53:0b:77:c0:e0:9a:ce:2c:
26:c6:7d:89:d9:32:d2:d8:5c:3d:0b:25:aa:26:aa:
f4:09:ac:1a:df:d9:38:4c:4e:29:61:fe:e9:21:8e:
d5:19:ef:42:55:cb:23:9a:ae:75:54:01:5a:c2:fa:
80:bc:95:30:0c:87:45:9d:20:3b:4c:7b:3b:7d:fc:
90:08:19:b4:0f:ee:a9:65:88:32:1d:d8:aa:9b:59:
01:24:a8:69:fc:20:a4:25:03:de:11:a7:0f:ce:19:
35:59:f0:0c:14:05:e2:2b:1d:e5:3e:30:23:ed:28:
92:f5:97:6d:25:d0:94:8e:da:10:73:7d:b9:b9:03:
3a:26:bd:61:62:60:6d:b2:77:57:be:6e:e6:7a:39:
92:0c:37:1f:fa:d9:73:e8:0d:64:88:ce:ee:85:60:
69:79:4f:64:a1:bc:42:11:d8:eb:47:c6:b7:b9:8b:
b2:26:a2:84:4b:4d:9b:13:ef:f3:8b:ee:4c:5c:87:
17:b0:04:2b:f5:6e:21:58:25:1c:33:8d:26:64:f4:
13:2e:b3:5a:23:27:ca:e4:88:c3:15:cb:8d:e6:ef:
66:4e:28:00:57:8a:5b:68:47:f7:0d:a7:6b:3e:28:
a4:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:2E:73:4D:77:B5:15:0C:4A:9A:85:67:2E:D4:FE:60:E3:70:CB:9C
X509v3 Authority Key Identifier:
keyid:88:1A:B1:80:CB:35:17:18:62:21:B3:99:9B:08:B8:3A:F4:F6:69:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBqxgMs1FxhiIbOZmwi4OvT2aUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/vy5zTXe1FQxKmoVnLtT-YONwy5w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.211.85.0/24
IPv6:
2a0d:ebc0::/32
Signature Algorithm: sha256WithRSAEncryption
66:94:a6:6e:5c:99:5e:3c:5d:93:57:35:86:47:53:0c:06:9c:
ed:ea:2b:84:41:37:0e:0c:78:5c:5e:7f:1d:5b:66:fb:30:2f:
d8:3d:66:ce:13:86:fe:e4:66:9c:e1:2a:a1:3b:9a:37:2a:5b:
d9:58:69:c5:ed:cd:cc:9a:93:aa:22:42:e8:e3:1a:9d:0b:f4:
86:9d:11:ad:2b:c9:54:c1:25:d6:18:4a:32:70:3c:63:6c:35:
c1:77:6d:96:99:cb:4c:32:02:c6:d0:bf:5e:f3:4e:f4:00:04:
6d:0a:9a:5b:64:87:41:dc:06:fc:b1:6a:c3:30:48:64:a0:a9:
a3:40:36:8c:e3:d5:3a:f7:f4:ba:00:d2:cd:76:1d:40:0d:14:
73:67:5b:f6:a1:04:fc:e0:f9:b5:80:8d:5f:49:6d:4a:f4:62:
86:88:0d:28:62:5b:88:7c:1d:0c:df:e4:84:86:c1:33:40:4c:
85:26:03:f9:bc:04:70:7a:f7:ac:61:44:ef:91:da:01:6b:e3:
e7:2b:89:00:b7:dd:1a:a0:c9:65:b6:6f:a8:c0:79:44:25:3f:
b3:29:27:8f:af:e5:d1:bd:c8:c0:0f:c8:9f:21:10:b9:16:f7:
db:c7:c0:7e:10:92:33:54:2b:36:13:c5:c4:d6:fa:2c:1d:5d:
b6:26:bc:43
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZm92ViUo2LaO0EutUurZuOIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4MWFiMTgwY2IzNTE3MTg2MjIxYjM5OTliMDhiODNhZjRm
NjY5NDUwHhcNMjUxMDA3MDg0NjAxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZjJlNzM0ZDc3YjUxNTBjNGE5YTg1NjcyZWQ0ZmU2MGUzNzBjYjljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1k6Tc74KgkVXNAnIi5RVcNVcrbdq
Uwt3wOCaziwmxn2J2TLS2Fw9CyWqJqr0Cawa39k4TE4pYf7pIY7VGe9CVcsjmq51
VAFawvqAvJUwDIdFnSA7THs7ffyQCBm0D+6pZYgyHdiqm1kBJKhp/CCkJQPeEacP
zhk1WfAMFAXiKx3lPjAj7SiS9ZdtJdCUjtoQc325uQM6Jr1hYmBtsndXvm7mejmS
DDcf+tlz6A1kiM7uhWBpeU9kobxCEdjrR8a3uYuyJqKES02bE+/zi+5MXIcXsAQr
9W4hWCUcM40mZPQTLrNaIyfK5IjDFcuN5u9mTigAV4pbaEf3DadrPiikQwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFL8uc013tRUMSpqFZy7U/mDjcMucMB8GA1UdIwQY
MBaAFIgasYDLNRcYYiGzmZsIuDr09mlFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUJxeGdNczFGeGhpSWJPWm13aTRPdlQyYVVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9jN2Y2MDEtM2ZhMi00ZGI2LWEwM2Qt
M2E2M2JmNzYzMGY1LzEvdnk1elRYZTFGUXhLbW9Wbkx0VC1ZT053eTV3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy9jN2Y2MDEtM2ZhMi00ZGI2LWEwM2QtM2E2M2JmNzYzMGY1
LzEvaUJxeGdNczFGeGhpSWJPWm13aTRPdlQyYVVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAW9NVMA0E
AgACMAcDBQAqDevAMA0GCSqGSIb3DQEBCwUAA4IBAQBmlKZuXJlePF2TVzWGR1MM
Bpzt6iuEQTcODHhcXn8dW2b7MC/YPWbOE4b+5Gac4SqhO5o3KlvZWGnF7c3MmpOq
IkLo4xqdC/SGnRGtK8lUwSXWGEoycDxjbDXBd22WmctMMgLG0L9e8070AARtCppb
ZIdB3Ab8sWrDMEhkoKmjQDaM49U69/S6ANLNdh1ADRRzZ1v2oQT84Pm1gI1fSW1K
9GKGiA0oYluIfB0M3+SEhsEzQEyFJgP5vARwevesYUTvkdoBa+PnK4kAt90aoMll
tm+owHlEJT+zKSePr+XRvcjAD8ifIRC5Fvfbx8B+EJIzVCs2E8XE1vosHV22JrxD
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:58:04 2025 by rpki-client