Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c6015c-39e4-4561-90c1-aff70d233eef/1/o_RVkUo12yIsWwd92ReBZuoWw6Q.roa
File: o_RVkUo12yIsWwd92ReBZuoWw6Q.roa (raw, json)
Hash identifier: SRUesdEiY2Y5wOgnJsCRLKIjGy9NIgo1L8w/6rAHzkU=
Subject key identifier: A3:F4:55:91:4A:35:DB:22:2C:5B:07:7D:D9:17:81:66:EA:16:C3:A4
Certificate issuer: /CN=14a9d3c7406e276005488871d5218c05a07166d1
Certificate serial: 0199C3983D03B90BBB9A7368A24A0174D2BA
Authority key identifier: 14:A9:D3:C7:40:6E:27:60:05:48:88:71:D5:21:8C:05:A0:71:66:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FKnTx0BuJ2AFSIhx1SGMBaBxZtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c6015c-39e4-4561-90c1-aff70d233eef/1/o_RVkUo12yIsWwd92ReBZuoWw6Q.roa
Signing time: Wed 08 Oct 2025 11:32:38 +0000
ROA not before: Wed 08 Oct 2025 11:32:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57795
IP address blocks: 45.67.110.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/c6015c-39e4-4561-90c1-aff70d233eef/1/FKnTx0BuJ2AFSIhx1SGMBaBxZtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/c6015c-39e4-4561-90c1-aff70d233eef/1/FKnTx0BuJ2AFSIhx1SGMBaBxZtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/FKnTx0BuJ2AFSIhx1SGMBaBxZtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c3:98:3d:03:b9:0b:bb:9a:73:68:a2:4a:01:74:d2:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14a9d3c7406e276005488871d5218c05a07166d1
Validity
Not Before: Oct 8 11:32:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a3f455914a35db222c5b077dd9178166ea16c3a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2f:46:3e:0a:40:74:2a:a4:6b:92:b3:e1:95:
c0:51:10:e7:d9:f5:85:ef:72:0d:05:69:5c:93:c4:
5a:59:21:b2:83:c4:69:43:5d:16:05:02:8d:51:c9:
a8:d7:6c:88:33:07:98:1d:c0:82:6a:78:9b:8a:a2:
50:b4:e7:a3:6a:48:39:34:80:a6:1f:9d:6c:3e:82:
d1:c2:9e:cd:ae:76:60:a8:7a:fc:9f:3e:9e:e2:c3:
65:13:26:96:44:9e:e7:e2:ba:60:a3:2a:f9:ca:3a:
2c:cb:07:a9:50:0b:b2:48:6f:90:7f:bf:c9:7a:e4:
84:df:d7:c9:54:50:e3:d0:51:ce:91:f2:aa:2b:15:
57:9b:34:33:94:40:5b:27:a4:27:af:25:22:bf:a6:
2d:aa:60:b5:12:46:7f:a4:7b:ef:ff:ee:f6:54:02:
69:3f:75:62:53:32:40:c9:b4:6e:93:09:fd:94:b5:
eb:b5:e5:f7:be:42:a5:3e:54:3d:e4:47:6d:0a:98:
21:35:70:3b:63:ac:24:3f:eb:70:8d:d9:d5:f4:f9:
e6:ba:f0:7d:55:d0:58:74:df:41:f2:6c:cb:39:be:
b6:1d:1d:eb:bd:d7:8a:6d:e8:34:f2:5a:b5:b3:3d:
aa:4b:58:85:d5:cb:b3:68:24:25:0b:ff:2c:a9:7c:
be:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:F4:55:91:4A:35:DB:22:2C:5B:07:7D:D9:17:81:66:EA:16:C3:A4
X509v3 Authority Key Identifier:
keyid:14:A9:D3:C7:40:6E:27:60:05:48:88:71:D5:21:8C:05:A0:71:66:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FKnTx0BuJ2AFSIhx1SGMBaBxZtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c6015c-39e4-4561-90c1-aff70d233eef/1/o_RVkUo12yIsWwd92ReBZuoWw6Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c6015c-39e4-4561-90c1-aff70d233eef/1/FKnTx0BuJ2AFSIhx1SGMBaBxZtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.110.0/23
Signature Algorithm: sha256WithRSAEncryption
99:23:df:a8:de:24:7e:9b:9c:37:e7:15:0e:82:b8:49:79:cb:
b1:1f:06:86:55:bc:a8:d7:15:38:c5:04:67:3e:00:9b:00:f5:
42:26:44:15:60:1d:88:9f:d5:91:03:6e:54:56:9d:a9:9b:8c:
4f:8d:6d:84:4b:f4:e2:06:36:3e:48:56:0f:d8:a7:ea:ee:24:
19:e5:9c:ff:b9:d7:58:67:54:1a:46:eb:0c:16:6f:3f:51:d9:
e0:ef:03:57:5f:e5:49:68:54:6d:8f:1c:eb:00:c6:aa:91:5f:
cb:ce:6d:30:73:6f:78:04:44:bf:e3:d6:4d:b2:d9:99:36:cc:
04:7b:89:25:65:cc:d6:89:18:19:d1:1f:a5:7d:dd:b7:c1:5c:
61:61:06:04:5f:9e:e5:1f:24:30:be:e2:39:a4:41:67:d5:73:
d2:ef:1f:91:77:3d:80:1f:1f:19:68:da:1a:e8:01:2e:92:6d:
a1:84:66:f2:e5:03:39:f7:f2:fc:fa:ad:46:69:ef:0b:81:61:
76:d7:3c:fb:eb:6c:4f:50:9a:d8:aa:4a:3c:51:04:1a:28:f2:
a8:59:6d:29:88:7d:36:dd:39:5a:3b:eb:25:62:04:36:c5:e3:
d9:52:5f:c4:b8:7b:32:a9:7d:a7:1d:b6:56:6d:57:b8:5b:b2:
11:3e:75:d5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZnDmD0DuQu7mnNookoBdNK6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0YTlkM2M3NDA2ZTI3NjAwNTQ4ODg3MWQ1MjE4YzA1YTA3
MTY2ZDEwHhcNMjUxMDA4MTEzMjM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhM2Y0NTU5MTRhMzVkYjIyMmM1YjA3N2RkOTE3ODE2NmVhMTZjM2E0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyi9GPgpAdCqka5Kz4ZXAURDn2fWF
73INBWlck8RaWSGyg8RpQ10WBQKNUcmo12yIMweYHcCCanibiqJQtOejakg5NICm
H51sPoLRwp7NrnZgqHr8nz6e4sNlEyaWRJ7n4rpgoyr5yjosywepUAuySG+Qf7/J
euSE39fJVFDj0FHOkfKqKxVXmzQzlEBbJ6QnryUiv6YtqmC1EkZ/pHvv/+72VAJp
P3ViUzJAybRukwn9lLXrteX3vkKlPlQ95EdtCpghNXA7Y6wkP+twjdnV9PnmuvB9
VdBYdN9B8mzLOb62HR3rvdeKbeg08lq1sz2qS1iF1cuzaCQlC/8sqXy+EQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKP0VZFKNdsiLFsHfdkXgWbqFsOkMB8GA1UdIwQY
MBaAFBSp08dAbidgBUiIcdUhjAWgcWbRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRktuVHgwQnVKMkFGU0loeDFTR01CYUJ4WnRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9jNjAxNWMtMzllNC00NTYxLTkwYzEt
YWZmNzBkMjMzZWVmLzEvb19SVmtVbzEyeUlzV3dkOTJSZUJadW9XdzZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi9jNjAxNWMtMzllNC00NTYxLTkwYzEtYWZmNzBkMjMzZWVm
LzEvRktuVHgwQnVKMkFGU0loeDFTR01CYUJ4WnRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLUNuMA0G
CSqGSIb3DQEBCwUAA4IBAQCZI9+o3iR+m5w35xUOgrhJecuxHwaGVbyo1xU4xQRn
PgCbAPVCJkQVYB2In9WRA25UVp2pm4xPjW2ES/TiBjY+SFYP2Kfq7iQZ5Zz/uddY
Z1QaRusMFm8/Udng7wNXX+VJaFRtjxzrAMaqkV/Lzm0wc294BES/49ZNstmZNswE
e4klZczWiRgZ0R+lfd23wVxhYQYEX57lHyQwvuI5pEFn1XPS7x+Rdz2AHx8ZaNoa
6AEukm2hhGby5QM59/L8+q1Gae8LgWF21zz762xPUJrYqko8UQQaKPKoWW0piH02
3TlaO+slYgQ2xePZUl/EuHsyqX2nHbZWbVe4W7IRPnXV
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:32:10 2025 by rpki-client