Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/9BXUrv8yMotCa9wi2rTgBBgI1OA.roa
File: 9BXUrv8yMotCa9wi2rTgBBgI1OA.roa (raw, json)
Hash identifier: 4WrQuplF7eXybB0cG6ut10OAMsEsYkXu1xsES1nQaEs=
Subject key identifier: F4:15:D4:AE:FF:32:32:8B:42:6B:DC:22:DA:B4:E0:04:18:08:D4:E0
Certificate issuer: /CN=f0d9cbbefde612e61e0cd0ff0b871961cbf797e3
Certificate serial: 0199A516E21751F66CC814165D7BE7EE1AF5
Authority key identifier: F0:D9:CB:BE:FD:E6:12:E6:1E:0C:D0:FF:0B:87:19:61:CB:F7:97:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8NnLvv3mEuYeDND_C4cZYcv3l-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/9BXUrv8yMotCa9wi2rTgBBgI1OA.roa
Signing time: Thu 02 Oct 2025 13:22:44 +0000
ROA not before: Thu 02 Oct 2025 13:22:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214673
IP address blocks: 92.62.118.0/24 maxlen: 24
178.251.232.0/24 maxlen: 24
193.143.69.0/24 maxlen: 24
2a11:4880::/32 maxlen: 32
2a11:4881::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/8NnLvv3mEuYeDND_C4cZYcv3l-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:a5:16:e2:17:51:f6:6c:c8:14:16:5d:7b:e7:ee:1a:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0d9cbbefde612e61e0cd0ff0b871961cbf797e3
Validity
Not Before: Oct 2 13:22:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f415d4aeff32328b426bdc22dab4e0041808d4e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c6:a1:4b:64:da:1c:d4:5d:3d:6c:b9:73:f5:
c6:85:3f:f3:fe:f4:d4:8b:e4:c2:a0:4e:d2:70:b7:
4d:38:39:6f:bc:f3:3e:30:96:6b:1f:4c:c0:c7:96:
b3:07:aa:b6:09:ca:16:f0:e6:1a:68:5c:1b:07:c0:
42:fc:6b:8c:e6:6f:2b:54:55:50:81:b0:a7:6e:22:
f2:5c:db:e7:85:78:76:78:75:69:54:7a:db:14:7d:
9b:27:ce:ed:95:dd:29:08:2a:5e:44:8d:cc:b9:fb:
4e:ed:53:e0:99:76:72:ff:8a:74:59:45:47:63:ac:
8c:00:66:8a:23:b6:b4:f5:0e:52:b7:4d:11:2b:31:
8a:2e:96:65:dc:32:6c:51:fc:64:5e:80:0f:30:a4:
9e:87:c4:e7:8d:db:03:e1:93:1d:2c:08:4e:bd:83:
8f:b8:db:05:db:3e:51:6f:1f:05:0f:9b:9d:42:15:
21:5c:e1:a0:b2:85:dd:80:b7:a1:79:73:42:0b:19:
8a:50:ab:dc:16:21:63:c5:f3:63:bf:91:17:97:db:
41:a9:af:9d:ab:95:3c:c8:f2:59:7c:d4:67:b8:27:
e1:53:d6:03:dd:98:cf:59:cc:5f:f9:3d:3d:2f:95:
42:c7:1a:65:cd:72:cb:ed:29:ef:13:69:e1:27:48:
c6:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:15:D4:AE:FF:32:32:8B:42:6B:DC:22:DA:B4:E0:04:18:08:D4:E0
X509v3 Authority Key Identifier:
keyid:F0:D9:CB:BE:FD:E6:12:E6:1E:0C:D0:FF:0B:87:19:61:CB:F7:97:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NnLvv3mEuYeDND_C4cZYcv3l-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/9BXUrv8yMotCa9wi2rTgBBgI1OA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.62.118.0/24
178.251.232.0/24
193.143.69.0/24
IPv6:
2a11:4880::/31
Signature Algorithm: sha256WithRSAEncryption
98:e1:41:1b:67:80:80:1e:bc:91:f7:dc:f9:ce:54:cb:20:87:
2c:b3:71:5f:9c:24:02:bc:39:cd:57:77:fa:79:fa:15:e3:b8:
18:5c:43:2d:27:99:6e:b6:a4:8c:02:23:96:2f:93:a1:35:f2:
7f:27:5a:06:c9:96:f7:02:8a:b5:0c:d3:f3:39:5e:77:93:b2:
c7:5f:ca:2f:46:80:c9:0d:fc:c2:25:d5:bc:b4:5f:38:a9:ec:
8d:0b:ac:7b:c8:5b:00:61:df:68:fc:a9:58:ff:18:bd:46:3a:
15:bc:a7:53:3a:74:07:3e:f8:ba:62:4e:55:7a:8b:21:4d:14:
24:3b:7e:55:84:b2:87:dd:6c:e5:2b:af:35:10:ca:31:cb:90:
10:d8:07:82:4b:f6:a9:eb:c9:8e:64:d0:65:50:c4:8c:5b:51:
5d:a1:45:59:fb:af:da:da:23:05:cd:e5:e0:4e:fc:7e:2b:bd:
b0:28:82:d4:93:65:44:b2:bd:ba:30:67:20:f4:11:67:de:70:
a7:6e:12:e6:1d:75:6a:3b:26:7e:8a:c5:38:16:f8:f8:66:d9:
4e:5f:32:23:19:ed:e7:7c:eb:da:bc:4e:df:bf:5a:a9:d3:1c:
f7:ff:35:22:72:6d:4b:a7:fe:e2:1d:c1:e9:ce:9d:0e:0e:a2:
e3:87:19:d8
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAZmlFuIXUfZsyBQWXXvn7hr1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwZDljYmJlZmRlNjEyZTYxZTBjZDBmZjBiODcxOTYxY2Jm
Nzk3ZTMwHhcNMjUxMDAyMTMyMjQ0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNDE1ZDRhZWZmMzIzMjhiNDI2YmRjMjJkYWI0ZTAwNDE4MDhkNGUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8ahS2TaHNRdPWy5c/XGhT/z/vTU
i+TCoE7ScLdNODlvvPM+MJZrH0zAx5azB6q2CcoW8OYaaFwbB8BC/GuM5m8rVFVQ
gbCnbiLyXNvnhXh2eHVpVHrbFH2bJ87tld0pCCpeRI3MuftO7VPgmXZy/4p0WUVH
Y6yMAGaKI7a09Q5St00RKzGKLpZl3DJsUfxkXoAPMKSeh8TnjdsD4ZMdLAhOvYOP
uNsF2z5Rbx8FD5udQhUhXOGgsoXdgLeheXNCCxmKUKvcFiFjxfNjv5EXl9tBqa+d
q5U8yPJZfNRnuCfhU9YD3ZjPWcxf+T09L5VCxxplzXLL7SnvE2nhJ0jGwQIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFPQV1K7/MjKLQmvcItq04AQYCNTgMB8GA1UdIwQY
MBaAFPDZy7795hLmHgzQ/wuHGWHL95fjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOE5uTHZ2M21FdVllRE5EX0M0Y1pZY3YzbC1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC80OTk2OWUtNTQ2Yy00M2U1LThkYmQt
ZjkyOTE1YTk2OGJjLzEvOUJYVXJ2OHlNb3RDYTl3aTJyVGdCQmdJMU9BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC80OTk2OWUtNTQ2Yy00M2U1LThkYmQtZjkyOTE1YTk2OGJj
LzEvOE5uTHZ2M21FdVllRE5EX0M0Y1pZY3YzbC1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQAXD52AwQA
svvoAwQAwY9FMA0EAgACMAcDBQEqEUiAMA0GCSqGSIb3DQEBCwUAA4IBAQCY4UEb
Z4CAHryR99z5zlTLIIcss3FfnCQCvDnNV3f6efoV47gYXEMtJ5lutqSMAiOWL5Oh
NfJ/J1oGyZb3Aoq1DNPzOV53k7LHX8ovRoDJDfzCJdW8tF84qeyNC6x7yFsAYd9o
/KlY/xi9RjoVvKdTOnQHPvi6Yk5VeoshTRQkO35VhLKH3WzlK681EMoxy5AQ2AeC
S/ap68mOZNBlUMSMW1FdoUVZ+6/a2iMFzeXgTvx+K72wKILUk2VEsr26MGcg9BFn
3nCnbhLmHXVqOyZ+isU4Fvj4ZtlOXzIjGe3nfOvavE7fv1qp0xz3/zUicm1Lp/7i
HcHpzp0ODqLjhxnY
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:32:19 2025 by rpki-client