Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/q7yUYgKNwlJwGaxxmAY0Av3EY7c.roa
File: q7yUYgKNwlJwGaxxmAY0Av3EY7c.roa (raw, json)
Hash identifier: 7SV6VBC3wzK9tk9wLGPbM/LrgC6p69G2HteXq2ZOj+A=
Subject key identifier: AB:BC:94:62:02:8D:C2:52:70:19:AC:71:98:06:34:02:FD:C4:63:B7
Certificate issuer: /CN=5954b6183e459748c89ee5431b8f31de692ae3b7
Certificate serial: 019927ACDC8388A7A4F4A56317BC383656F3
Authority key identifier: 59:54:B6:18:3E:45:97:48:C8:9E:E5:43:1B:8F:31:DE:69:2A:E3:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/q7yUYgKNwlJwGaxxmAY0Av3EY7c.roa
Signing time: Mon 08 Sep 2025 04:54:23 +0000
ROA not before: Mon 08 Sep 2025 04:54:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 395793
IP address blocks: 212.11.8.0/24 maxlen: 24
212.11.44.0/24 maxlen: 24
212.11.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.mft
rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:27:ac:dc:83:88:a7:a4:f4:a5:63:17:bc:38:36:56:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5954b6183e459748c89ee5431b8f31de692ae3b7
Validity
Not Before: Sep 8 04:54:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=abbc9462028dc2527019ac7198063402fdc463b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:35:3e:7a:5c:0a:34:d7:74:b7:21:c1:49:34:
d5:bb:77:3a:7b:40:1f:99:f5:06:ff:44:a5:92:05:
a5:bc:a6:c9:67:39:84:32:b8:79:10:81:64:b7:9b:
59:8b:d0:89:d2:aa:5e:f7:5b:cb:21:1f:88:bd:05:
86:77:7c:27:27:18:ba:6e:0c:d1:fd:8e:04:94:4b:
36:3c:fc:3b:21:76:f4:d5:94:73:3c:a7:a1:b3:e1:
8b:dc:6f:e8:f4:d2:8e:7b:43:73:c8:4c:f8:e8:82:
75:dd:82:9d:2d:77:4b:ed:80:58:01:72:4a:6c:d9:
c0:56:4b:69:f2:f5:30:84:76:4a:5d:89:50:f5:7b:
ff:6e:fe:ad:e7:2d:68:3d:23:df:03:e7:00:a5:c6:
48:c1:16:98:0b:7c:17:53:9d:47:4a:6d:0f:74:67:
c0:68:1e:51:a3:f4:06:2a:f5:3c:76:6c:50:23:da:
bf:f7:9e:da:4b:69:e6:3d:98:ac:29:a5:8b:51:b0:
bd:e9:8b:80:79:00:83:e9:2a:c9:ce:a1:ca:cb:3d:
70:b6:00:7b:9a:a5:47:56:74:c5:14:42:1b:b0:39:
94:95:bf:0b:d9:53:16:20:82:ea:2a:43:66:cc:5a:
f7:1c:01:ea:c0:1f:50:3e:dd:6b:40:be:72:48:94:
be:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:BC:94:62:02:8D:C2:52:70:19:AC:71:98:06:34:02:FD:C4:63:B7
X509v3 Authority Key Identifier:
keyid:59:54:B6:18:3E:45:97:48:C8:9E:E5:43:1B:8F:31:DE:69:2A:E3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/q7yUYgKNwlJwGaxxmAY0Av3EY7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.11.8.0/24
212.11.44.0/24
212.11.55.0/24
Signature Algorithm: sha256WithRSAEncryption
09:bf:ad:df:47:55:46:9c:20:78:e7:17:b6:2c:ee:e4:c9:c4:
18:41:57:97:ee:aa:bf:eb:18:48:bd:85:e3:b4:aa:f1:1a:49:
01:91:bc:69:d9:38:4c:45:c9:77:c1:5f:11:73:0a:27:5f:34:
a8:d2:04:29:27:92:4c:bd:5f:b7:6b:1c:0e:2e:40:16:58:ff:
41:bd:d4:1d:81:23:8f:03:d1:71:2f:79:ed:b9:51:66:ad:6d:
5b:a5:16:e5:52:e5:b2:69:48:21:60:c8:5c:d3:ec:1b:1c:01:
67:8f:d3:30:aa:b9:ac:f9:5f:93:47:25:55:ff:c5:9f:da:0c:
c1:b4:b6:1b:60:5d:28:e7:fe:4c:19:bd:41:f3:ff:f0:fa:f8:
44:b1:18:3e:47:23:8f:1d:55:18:4f:13:f2:b6:bc:81:91:13:
f4:90:d9:60:b9:a1:10:43:5d:ca:43:c1:b5:85:c6:bd:a7:d7:
39:f2:b7:ed:52:9f:39:bc:15:1b:d9:84:79:5c:19:7a:b1:db:
f0:bc:b6:e4:67:12:2e:de:6e:90:c4:7e:b8:ee:a5:3f:5b:73:
76:93:76:c8:ab:99:a0:0a:b9:94:70:f0:a8:bf:6f:9a:87:a3:
28:c8:53:54:ff:f9:f0:d6:6b:ea:a5:18:c0:b1:37:45:bf:24:
08:f2:17:10
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZknrNyDiKek9KVjF7w4NlbzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5NTRiNjE4M2U0NTk3NDhjODllZTU0MzFiOGYzMWRlNjky
YWUzYjcwHhcNMjUwOTA4MDQ1NDIzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYmJjOTQ2MjAyOGRjMjUyNzAxOWFjNzE5ODA2MzQwMmZkYzQ2M2I3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTU+elwKNNd0tyHBSTTVu3c6e0Af
mfUG/0SlkgWlvKbJZzmEMrh5EIFkt5tZi9CJ0qpe91vLIR+IvQWGd3wnJxi6bgzR
/Y4ElEs2PPw7IXb01ZRzPKehs+GL3G/o9NKOe0NzyEz46IJ13YKdLXdL7YBYAXJK
bNnAVktp8vUwhHZKXYlQ9Xv/bv6t5y1oPSPfA+cApcZIwRaYC3wXU51HSm0PdGfA
aB5Ro/QGKvU8dmxQI9q/957aS2nmPZisKaWLUbC96YuAeQCD6SrJzqHKyz1wtgB7
mqVHVnTFFEIbsDmUlb8L2VMWIILqKkNmzFr3HAHqwB9QPt1rQL5ySJS+aQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFKu8lGICjcJScBmscZgGNAL9xGO3MB8GA1UdIwQY
MBaAFFlUthg+RZdIyJ7lQxuPMd5pKuO3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1ZTMkdENUZsMGpJbnVWREc0OHgzbWtxNDdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83ZGU2NWMtOTBmNS00ZGVmLWI4NzMt
ZDJhZGVlZDc1NWQ4LzEvcTd5VVlnS053bEp3R2F4eG1BWTBBdjNFWTdjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi83ZGU2NWMtOTBmNS00ZGVmLWI4NzMtZDJhZGVlZDc1NWQ4
LzEvV1ZTMkdENUZsMGpJbnVWREc0OHgzbWtxNDdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQA1AsIAwQA
1AssAwQA1As3MA0GCSqGSIb3DQEBCwUAA4IBAQAJv63fR1VGnCB45xe2LO7kycQY
QVeX7qq/6xhIvYXjtKrxGkkBkbxp2ThMRcl3wV8RcwonXzSo0gQpJ5JMvV+3axwO
LkAWWP9BvdQdgSOPA9FxL3ntuVFmrW1bpRblUuWyaUghYMhc0+wbHAFnj9Mwqrms
+V+TRyVV/8Wf2gzBtLYbYF0o5/5MGb1B8//w+vhEsRg+RyOPHVUYTxPytryBkRP0
kNlguaEQQ13KQ8G1hca9p9c58rftUp85vBUb2YR5XBl6sdvwvLbkZxIu3m6QxH64
7qU/W3N2k3bIq5mgCrmUcPCov2+ah6MoyFNU//nw1mvqpRjAsTdFvyQI8hcQ
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:22:51 2025 by rpki-client