Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/fB-ssibWXaRRn-H-CuY5gFjXB58.roa
File: fB-ssibWXaRRn-H-CuY5gFjXB58.roa (raw, json)
Hash identifier: +rRXgbrojhz8T8xdIQ3ATRqFXS8HI9jaMh1zG4jjEV4=
Subject key identifier: 7C:1F:AC:B2:26:D6:5D:A4:51:9F:E1:FE:0A:E6:39:80:58:D7:07:9F
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 01997138ACE28AC66FCDF5077041B0D3F1F1
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/fB-ssibWXaRRn-H-CuY5gFjXB58.roa
Signing time: Mon 22 Sep 2025 11:39:23 +0000
ROA not before: Mon 22 Sep 2025 11:39:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20648
IP address blocks: 188.255.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 18:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:71:38:ac:e2:8a:c6:6f:cd:f5:07:70:41:b0:d3:f1:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Sep 22 11:39:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7c1facb226d65da4519fe1fe0ae6398058d7079f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:71:9c:16:e1:17:56:6c:75:c4:fd:24:0e:c8:
90:3f:d4:13:b1:4c:b2:4d:69:2f:fc:1b:73:fa:f3:
76:c2:b7:20:5a:87:68:aa:a8:d4:02:8f:80:ba:63:
15:b5:8e:8d:bd:6f:b6:01:44:17:d5:5b:82:89:c0:
5a:42:b1:6b:1a:cd:cc:96:43:12:00:c0:1f:2e:be:
26:a9:7e:97:06:d0:3c:c1:0d:6d:9f:50:0c:29:e4:
02:d5:95:2a:9a:98:6b:a3:86:62:c9:a9:5a:21:76:
cd:2b:ee:4b:df:b2:69:12:e0:94:65:89:58:b4:07:
93:f4:08:db:dc:18:67:6b:a7:32:9c:4b:ae:51:3a:
f2:7f:7b:33:1d:4d:8f:9e:71:b5:61:28:12:92:b3:
5a:9b:1e:0c:f5:79:da:b6:4f:20:22:2f:df:27:e0:
e7:5b:46:b5:9a:5c:e1:e2:94:5a:61:d8:17:9e:95:
5a:56:19:36:61:66:25:1d:ee:1c:a2:0c:80:4d:7a:
c7:81:0f:d8:83:e9:26:f7:8a:d3:56:a9:cf:be:1b:
e0:f5:5d:89:34:b7:fd:4d:2e:29:53:5b:66:20:c8:
3f:08:6c:a1:1b:a0:42:c9:63:75:80:34:fd:1d:45:
f3:52:4c:0e:0d:2f:05:2a:81:f5:e8:84:61:90:d9:
3d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:1F:AC:B2:26:D6:5D:A4:51:9F:E1:FE:0A:E6:39:80:58:D7:07:9F
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/fB-ssibWXaRRn-H-CuY5gFjXB58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.255.185.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:eb:3e:05:bd:5d:8c:c7:77:46:08:f7:41:15:89:f1:fb:fb:
8c:51:a2:19:63:73:9c:aa:cc:2d:5e:9f:c8:2b:52:96:a0:e6:
80:ab:00:f0:b5:a9:69:b9:2b:f4:be:8e:f5:0a:4f:70:e9:62:
1c:a5:16:37:8a:ea:53:2f:66:a4:b5:21:04:76:43:42:74:1e:
3e:aa:5f:87:6f:24:89:df:21:fb:bd:53:6d:ec:fb:08:f1:95:
06:d7:e0:cf:44:4c:a3:33:10:6e:c8:76:4d:6b:62:48:28:3d:
1d:18:26:ca:cb:f3:09:0d:64:cc:fd:17:f5:dc:65:83:49:c5:
7d:54:e5:ae:fd:ed:18:8d:29:3b:c4:5c:0c:6c:9e:4d:aa:70:
2f:c6:6e:8e:d7:5e:a7:7a:48:19:bd:ea:26:fb:e5:f3:11:57:
78:dc:bb:cf:54:ad:50:4a:1a:6f:ff:ba:ec:b7:c6:27:fd:fa:
74:0a:b0:06:84:f2:0c:32:2e:69:2b:89:0e:5b:90:75:58:71:
9d:ad:06:ff:a2:ca:90:72:7e:21:2f:51:7d:dd:98:d0:ee:e6:
55:cc:c8:a9:42:33:17:54:43:1a:b9:56:35:b9:cc:e7:65:a2:
e9:c8:00:3c:f1:90:af:d4:85:ee:f6:3e:34:65:c4:72:1c:60:
76:58:fd:ea
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZlxOKziisZvzfUHcEGw0/HxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj
N2U5MTUwHhcNMjUwOTIyMTEzOTIzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YzFmYWNiMjI2ZDY1ZGE0NTE5ZmUxZmUwYWU2Mzk4MDU4ZDcwNzlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHGcFuEXVmx1xP0kDsiQP9QTsUyy
TWkv/Btz+vN2wrcgWodoqqjUAo+AumMVtY6NvW+2AUQX1VuCicBaQrFrGs3MlkMS
AMAfLr4mqX6XBtA8wQ1tn1AMKeQC1ZUqmphro4ZiyalaIXbNK+5L37JpEuCUZYlY
tAeT9Ajb3Bhna6cynEuuUTryf3szHU2PnnG1YSgSkrNamx4M9Xnatk8gIi/fJ+Dn
W0a1mlzh4pRaYdgXnpVaVhk2YWYlHe4cogyATXrHgQ/Yg+km94rTVqnPvhvg9V2J
NLf9TS4pU1tmIMg/CGyhG6BCyWN1gDT9HUXzUkwODS8FKoH16IRhkNk9fwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHwfrLIm1l2kUZ/h/grmOYBY1wefMB8GA1UdIwQY
MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt
ZmFlNWRiZWQzYjFiLzEvZkItc3NpYldYYVJSbi1ILUN1WTVnRmpYQjU4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi
LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvP+5MA0G
CSqGSIb3DQEBCwUAA4IBAQBO6z4FvV2Mx3dGCPdBFYnx+/uMUaIZY3OcqswtXp/I
K1KWoOaAqwDwtalpuSv0vo71Ck9w6WIcpRY3iupTL2aktSEEdkNCdB4+ql+HbySJ
3yH7vVNt7PsI8ZUG1+DPREyjMxBuyHZNa2JIKD0dGCbKy/MJDWTM/Rf13GWDScV9
VOWu/e0YjSk7xFwMbJ5NqnAvxm6O116nekgZveom++XzEVd43LvPVK1QShpv/7rs
t8Yn/fp0CrAGhPIMMi5pK4kOW5B1WHGdrQb/osqQcn4hL1F93ZjQ7uZVzMipQjMX
VEMauVY1ucznZaLpyAA88ZCv1IXu9j40ZcRyHGB2WP3q
-----END CERTIFICATE-----
Generated at Mon Oct 20 03:42:28 2025 by rpki-client