Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/828b0f-80e8-427b-971d-38bbcfaee6ce/1/DK0Us3bVPvYwAyxNA0q9MJojynQ.roa
File: DK0Us3bVPvYwAyxNA0q9MJojynQ.roa (raw, json)
Hash identifier: zFzB2iAPAkpqv4wiU4d7/9a55ppm9DZ9vElT5rhcYD0=
Subject key identifier: 0C:AD:14:B3:76:D5:3E:F6:30:03:2C:4D:03:4A:BD:30:9A:23:CA:74
Certificate issuer: /CN=668d2f64c337465ed38da5f7cc4584df87d4a744
Certificate serial: 01994DB9F1038FE4254BF289595894323E89
Authority key identifier: 66:8D:2F:64:C3:37:46:5E:D3:8D:A5:F7:CC:45:84:DF:87:D4:A7:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zo0vZMM3Rl7TjaX3zEWE34fUp0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/828b0f-80e8-427b-971d-38bbcfaee6ce/1/DK0Us3bVPvYwAyxNA0q9MJojynQ.roa
Signing time: Mon 15 Sep 2025 14:14:15 +0000
ROA not before: Mon 15 Sep 2025 14:14:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49097
IP address blocks: 185.55.232.0/22 maxlen: 24
188.95.0.0/21 maxlen: 24
193.28.96.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/828b0f-80e8-427b-971d-38bbcfaee6ce/1/Zo0vZMM3Rl7TjaX3zEWE34fUp0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/828b0f-80e8-427b-971d-38bbcfaee6ce/1/Zo0vZMM3Rl7TjaX3zEWE34fUp0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zo0vZMM3Rl7TjaX3zEWE34fUp0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 11:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:4d:b9:f1:03:8f:e4:25:4b:f2:89:59:58:94:32:3e:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=668d2f64c337465ed38da5f7cc4584df87d4a744
Validity
Not Before: Sep 15 14:14:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0cad14b376d53ef630032c4d034abd309a23ca74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c2:a0:40:ad:45:7e:f8:ff:7d:06:7f:6f:05:
b9:05:65:2b:ab:90:f8:ac:64:45:ff:88:d1:45:6a:
45:f6:39:4d:87:e0:d3:08:ae:bc:86:65:66:cb:df:
26:83:15:08:b2:25:48:77:aa:f2:17:1a:20:6f:0e:
f3:1b:9b:b3:98:16:d9:24:83:f9:ff:dc:b1:ed:2a:
ed:e9:df:7e:db:75:b9:cd:a6:83:cb:de:b0:8b:1a:
2d:52:15:9b:e6:f7:5b:22:a1:be:6d:e6:3a:78:63:
1b:a5:56:b9:6e:c3:56:4f:b9:7b:b5:4b:62:85:98:
0b:ce:d8:77:f6:98:f5:98:ac:3e:df:60:5a:7d:14:
75:b1:f9:9d:ff:b9:3c:13:3a:cc:ed:61:ab:59:0a:
c9:70:46:b5:9d:cb:b9:4e:90:37:25:18:dd:77:8a:
95:50:6c:73:27:89:1c:99:1f:f6:8c:57:3a:dc:ae:
d4:73:1e:21:84:5e:cc:3c:ba:19:5d:8f:59:8f:70:
6d:77:1a:ae:a1:fc:d6:9e:04:98:4b:5c:47:d0:f8:
59:72:19:be:79:85:14:c1:6f:00:85:7e:75:a1:0d:
6d:0b:d7:cc:ff:8f:19:fe:f6:b2:fe:9a:d3:51:8e:
b1:52:52:fc:8a:dc:5f:36:77:df:37:de:e4:c3:b7:
a0:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:AD:14:B3:76:D5:3E:F6:30:03:2C:4D:03:4A:BD:30:9A:23:CA:74
X509v3 Authority Key Identifier:
keyid:66:8D:2F:64:C3:37:46:5E:D3:8D:A5:F7:CC:45:84:DF:87:D4:A7:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zo0vZMM3Rl7TjaX3zEWE34fUp0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/828b0f-80e8-427b-971d-38bbcfaee6ce/1/DK0Us3bVPvYwAyxNA0q9MJojynQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/828b0f-80e8-427b-971d-38bbcfaee6ce/1/Zo0vZMM3Rl7TjaX3zEWE34fUp0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.55.232.0/22
188.95.0.0/21
193.28.96.0/21
Signature Algorithm: sha256WithRSAEncryption
9c:5b:e1:71:1d:ec:b1:5a:9a:55:7d:2e:ae:f5:22:7e:90:04:
9f:fb:82:2f:32:cf:c2:7d:3d:f3:0d:75:50:df:60:1c:b5:51:
68:fe:ad:0d:c9:20:2e:28:cb:71:06:be:a4:89:74:2c:6c:aa:
53:c9:4f:28:60:8e:80:82:17:e1:a8:a9:e6:cf:19:1c:47:3a:
ed:89:4e:9f:2d:8b:34:b4:16:ff:20:aa:28:bf:8b:04:80:9e:
85:0c:4f:a5:c4:fe:d4:72:6b:e8:ed:40:28:25:cc:12:18:f3:
ef:39:f9:af:fd:7c:eb:80:23:a0:c9:f0:ae:87:33:bc:d0:ef:
27:ed:3f:c5:9c:60:6d:71:6a:7d:55:b7:55:d7:58:82:40:dd:
7e:c6:db:d3:d0:e7:15:68:e1:a0:63:27:bd:bb:d3:50:ed:fe:
95:03:5b:ea:11:98:e3:fe:b3:43:c6:f0:d9:f0:9b:e3:10:82:
27:1b:6c:d3:73:86:66:aa:47:1a:be:15:77:dc:e4:38:34:7d:
a9:9c:42:87:a8:a6:b8:34:be:a9:73:d1:81:18:21:ee:e1:42:
72:f0:a9:28:c0:e2:d9:24:51:62:76:a5:49:f4:ea:de:3e:df:
f2:99:92:35:29:4c:e6:ed:d3:5e:83:a1:59:89:12:f4:1e:e4:
c3:7e:df:19
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZlNufEDj+QlS/KJWViUMj6JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2OGQyZjY0YzMzNzQ2NWVkMzhkYTVmN2NjNDU4NGRmODdk
NGE3NDQwHhcNMjUwOTE1MTQxNDE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwY2FkMTRiMzc2ZDUzZWY2MzAwMzJjNGQwMzRhYmQzMDlhMjNjYTc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscKgQK1Ffvj/fQZ/bwW5BWUrq5D4
rGRF/4jRRWpF9jlNh+DTCK68hmVmy98mgxUIsiVId6ryFxogbw7zG5uzmBbZJIP5
/9yx7Srt6d9+23W5zaaDy96wixotUhWb5vdbIqG+beY6eGMbpVa5bsNWT7l7tUti
hZgLzth39pj1mKw+32BafRR1sfmd/7k8EzrM7WGrWQrJcEa1ncu5TpA3JRjdd4qV
UGxzJ4kcmR/2jFc63K7Ucx4hhF7MPLoZXY9Zj3BtdxquofzWngSYS1xH0PhZchm+
eYUUwW8AhX51oQ1tC9fM/48Z/vay/prTUY6xUlL8itxfNnffN97kw7eg6QIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFAytFLN21T72MAMsTQNKvTCaI8p0MB8GA1UdIwQY
MBaAFGaNL2TDN0Ze042l98xFhN+H1KdEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWm8wdlpNTTNSbDdUamFYM3pFV0UzNGZVcDBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS84MjhiMGYtODBlOC00MjdiLTk3MWQt
MzhiYmNmYWVlNmNlLzEvREswVXMzYlZQdll3QXl4TkEwcTlNSm9qeW5RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS84MjhiMGYtODBlOC00MjdiLTk3MWQtMzhiYmNmYWVlNmNl
LzEvWm8wdlpNTTNSbDdUamFYM3pFV0UzNGZVcDBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCuTfoAwQD
vF8AAwQDwRxgMA0GCSqGSIb3DQEBCwUAA4IBAQCcW+FxHeyxWppVfS6u9SJ+kASf
+4IvMs/CfT3zDXVQ32ActVFo/q0NySAuKMtxBr6kiXQsbKpTyU8oYI6AghfhqKnm
zxkcRzrtiU6fLYs0tBb/IKoov4sEgJ6FDE+lxP7Ucmvo7UAoJcwSGPPvOfmv/Xzr
gCOgyfCuhzO80O8n7T/FnGBtcWp9VbdV11iCQN1+xtvT0OcVaOGgYye9u9NQ7f6V
A1vqEZjj/rNDxvDZ8JvjEIInG2zTc4ZmqkcavhV33OQ4NH2pnEKHqKa4NL6pc9GB
GCHu4UJy8KkowOLZJFFidqVJ9OrePt/ymZI1KUzm7dNeg6FZiRL0HuTDft8Z
-----END CERTIFICATE-----
Generated at Mon Oct 20 16:22:41 2025 by rpki-client