Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/iyhHvdxrCDpCx0rthc1y2PDRVeM.roa
File: iyhHvdxrCDpCx0rthc1y2PDRVeM.roa (raw, json)
Hash identifier: tsQpmBoieuwyK9NLkB/rFB9zv5VDj/xDszDJZlsYm+M=
Subject key identifier: 8B:28:47:BD:DC:6B:08:3A:42:C7:4A:ED:85:CD:72:D8:F0:D1:55:E3
Certificate issuer: /CN=c2d2ac1d7c9eccf5658b88f16f613d7b3e8e8c72
Certificate serial: 0199AA2EE0454665708206AAF7851AB074FA
Authority key identifier: C2:D2:AC:1D:7C:9E:CC:F5:65:8B:88:F1:6F:61:3D:7B:3E:8E:8C:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtKsHXyezPVli4jxb2E9ez6OjHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/iyhHvdxrCDpCx0rthc1y2PDRVeM.roa
Signing time: Fri 03 Oct 2025 13:07:02 +0000
ROA not before: Fri 03 Oct 2025 13:07:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199724
IP address blocks: 185.250.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/wtKsHXyezPVli4jxb2E9ez6OjHI.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/wtKsHXyezPVli4jxb2E9ez6OjHI.mft
rsync://rpki.ripe.net/repository/DEFAULT/wtKsHXyezPVli4jxb2E9ez6OjHI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:aa:2e:e0:45:46:65:70:82:06:aa:f7:85:1a:b0:74:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2d2ac1d7c9eccf5658b88f16f613d7b3e8e8c72
Validity
Not Before: Oct 3 13:07:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8b2847bddc6b083a42c74aed85cd72d8f0d155e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b2:2d:e6:fe:36:14:00:0f:3a:dd:c1:88:a9:
13:20:91:c2:f5:5e:6c:61:03:3d:70:a0:1c:1d:fa:
83:2b:32:93:2c:2e:e4:95:75:66:de:16:3d:54:58:
b6:9f:0f:bc:3f:6b:68:96:2f:9e:08:1c:64:28:92:
83:df:8d:a7:2a:63:4d:01:7b:cf:73:7a:0f:2d:02:
c4:22:f6:88:04:81:ea:b7:55:7e:6a:bb:23:1d:4e:
9d:e2:a2:e4:9d:62:4c:44:dc:49:11:f5:e4:d5:70:
c3:54:63:6d:2d:91:12:3a:60:5d:70:c0:5d:60:7f:
72:15:2d:26:f2:76:6b:35:50:ef:46:2f:29:c9:46:
82:e1:ae:5d:e4:14:08:51:28:33:88:10:be:87:b1:
05:60:30:cc:99:81:3f:ec:9a:3c:c5:5d:07:39:57:
9a:a5:83:13:72:14:be:94:d5:e4:d9:f4:22:b7:03:
70:36:08:13:02:57:94:88:62:0c:ea:0c:95:35:21:
92:4e:fd:b1:67:4d:e8:9d:96:e3:a3:00:93:5c:55:
e8:f3:39:a7:c0:f7:e5:aa:04:60:f9:29:9d:f4:a9:
43:e4:30:e9:5b:45:04:24:43:a4:b9:a4:4b:49:a6:
b8:d5:dc:fd:20:ef:17:45:34:6c:08:84:5c:71:41:
1b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:28:47:BD:DC:6B:08:3A:42:C7:4A:ED:85:CD:72:D8:F0:D1:55:E3
X509v3 Authority Key Identifier:
keyid:C2:D2:AC:1D:7C:9E:CC:F5:65:8B:88:F1:6F:61:3D:7B:3E:8E:8C:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtKsHXyezPVli4jxb2E9ez6OjHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/iyhHvdxrCDpCx0rthc1y2PDRVeM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/wtKsHXyezPVli4jxb2E9ez6OjHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.250.241.0/24
Signature Algorithm: sha256WithRSAEncryption
79:17:61:f3:71:8e:5c:fc:3e:02:7d:4c:38:db:5c:ab:61:0e:
0d:7e:da:10:23:bd:02:c7:1c:99:07:7e:7e:e5:6b:8b:77:72:
15:82:11:a0:32:b9:89:11:60:c6:ea:09:57:69:19:af:33:41:
62:44:74:8b:e1:c8:4c:ab:01:61:f9:32:f6:75:e0:8a:c8:6d:
d8:fc:ad:67:be:3e:25:dc:9b:fb:55:d5:5e:d8:32:54:2b:a2:
85:89:8b:72:d7:f4:32:4b:1b:1d:cf:bb:d5:cc:c6:19:89:12:
82:07:4a:5b:3c:1e:0c:c0:f7:99:f1:a5:98:58:e6:2a:a4:47:
2b:f8:dd:32:c2:2c:87:45:b2:e9:43:12:1b:a6:86:5a:9d:17:
1f:b0:db:f9:69:b9:d9:92:4e:bd:23:c6:af:6e:33:83:b9:6c:
57:bc:63:fe:08:71:11:1d:a0:6e:dc:9d:c9:0d:29:77:03:59:
7b:15:b8:59:42:5c:89:ed:0c:d5:89:a7:b6:32:ad:67:8f:83:
94:74:27:38:bf:fe:6d:34:10:30:87:d4:90:5b:f1:2f:f1:db:
ff:70:52:00:38:e9:26:7d:cc:c9:cf:14:fe:33:c8:96:87:78:
a9:d5:4d:85:8a:5d:85:78:09:4a:19:7b:03:8e:c1:49:b8:ca:
67:02:51:64
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZmqLuBFRmVwggaq94UasHT6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyZDJhYzFkN2M5ZWNjZjU2NThiODhmMTZmNjEzZDdiM2U4
ZThjNzIwHhcNMjUxMDAzMTMwNzAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YjI4NDdiZGRjNmIwODNhNDJjNzRhZWQ4NWNkNzJkOGYwZDE1NWUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAybIt5v42FAAPOt3BiKkTIJHC9V5s
YQM9cKAcHfqDKzKTLC7klXVm3hY9VFi2nw+8P2toli+eCBxkKJKD342nKmNNAXvP
c3oPLQLEIvaIBIHqt1V+arsjHU6d4qLknWJMRNxJEfXk1XDDVGNtLZESOmBdcMBd
YH9yFS0m8nZrNVDvRi8pyUaC4a5d5BQIUSgziBC+h7EFYDDMmYE/7Jo8xV0HOVea
pYMTchS+lNXk2fQitwNwNggTAleUiGIM6gyVNSGSTv2xZ03onZbjowCTXFXo8zmn
wPflqgRg+Smd9KlD5DDpW0UEJEOkuaRLSaa41dz9IO8XRTRsCIRccUEbSQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIsoR73cawg6QsdK7YXNctjw0VXjMB8GA1UdIwQY
MBaAFMLSrB18nsz1ZYuI8W9hPXs+joxyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3RLc0hYeWV6UFZsaTRqeGIyRTllejZPakhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC84YjFiYzItNTkyNi00YWNlLWIxNmYt
MTk3ZmU4MzY1NjQzLzEvaXloSHZkeHJDRHBDeDBydGhjMXkyUERSVmVNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC84YjFiYzItNTkyNi00YWNlLWIxNmYtMTk3ZmU4MzY1NjQz
LzEvd3RLc0hYeWV6UFZsaTRqeGIyRTllejZPakhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAufrxMA0G
CSqGSIb3DQEBCwUAA4IBAQB5F2HzcY5c/D4CfUw421yrYQ4NftoQI70CxxyZB35+
5WuLd3IVghGgMrmJEWDG6glXaRmvM0FiRHSL4chMqwFh+TL2deCKyG3Y/K1nvj4l
3Jv7VdVe2DJUK6KFiYty1/QySxsdz7vVzMYZiRKCB0pbPB4MwPeZ8aWYWOYqpEcr
+N0ywiyHRbLpQxIbpoZanRcfsNv5abnZkk69I8avbjODuWxXvGP+CHERHaBu3J3J
DSl3A1l7FbhZQlyJ7QzViae2Mq1nj4OUdCc4v/5tNBAwh9SQW/Ev8dv/cFIAOOkm
fczJzxT+M8iWh3ip1U2Fil2FeAlKGXsDjsFJuMpnAlFk
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:28:03 2025 by rpki-client