Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/osbMxLFUiQiTnTr_4QmWGy3iNho.roa
File: osbMxLFUiQiTnTr_4QmWGy3iNho.roa (raw, json)
Hash identifier: dzodY+MgrkVveS6XROtDJCkyw0YCV/QqlOHcEX6YfxY=
Subject key identifier: A2:C6:CC:C4:B1:54:89:08:93:9D:3A:FF:E1:09:96:1B:2D:E2:36:1A
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 0199F13706B9D8606A39F7ADB5683BF36B50
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/osbMxLFUiQiTnTr_4QmWGy3iNho.roa
Signing time: Fri 17 Oct 2025 08:08:59 +0000
ROA not before: Fri 17 Oct 2025 08:08:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213530
IP address blocks: 88.220.55.0/24 maxlen: 24
195.136.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft
rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 08:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:f1:37:06:b9:d8:60:6a:39:f7:ad:b5:68:3b:f3:6b:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Oct 17 08:08:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a2c6ccc4b1548908939d3affe109961b2de2361a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a7:e9:b5:1a:e2:f0:d4:e3:ef:58:76:73:c4:
28:55:1e:fb:fa:d9:a1:08:44:6d:3f:5b:50:c6:c5:
d1:ae:8f:bf:39:86:21:76:d2:59:5d:d1:e6:bd:06:
5c:73:f1:4c:c1:87:96:14:2e:d1:14:78:1f:f2:ec:
c5:eb:7c:29:88:1b:b9:53:99:e1:99:0d:e4:d8:df:
fd:5f:f6:a4:48:94:26:8b:ab:d2:9c:f7:40:1f:27:
e6:e4:5e:90:0e:79:8a:ec:1a:a1:b4:be:32:0c:a5:
23:a5:72:61:f7:88:86:57:da:5c:88:0b:14:29:d8:
bc:99:27:d0:ee:d6:07:04:fe:63:ef:ab:11:91:ce:
74:af:77:06:0c:9b:57:94:d4:78:3a:0f:6a:93:1f:
6d:67:30:04:15:54:60:b7:93:23:a8:09:8d:57:dc:
72:05:ad:bd:dd:69:8b:ec:18:d3:a0:57:41:e4:ca:
47:ab:93:2b:19:fc:06:a2:6f:35:86:3b:31:bf:f5:
c0:e6:ac:b7:a2:bf:eb:61:0e:de:eb:9b:be:d0:08:
22:d6:42:43:94:3a:93:02:fd:c3:cc:56:d1:3b:54:
35:f4:a1:97:f4:db:57:cd:f2:5c:3d:51:e9:c1:1b:
9d:b8:fa:60:19:ba:43:46:ec:c6:53:19:96:bd:e0:
f2:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:C6:CC:C4:B1:54:89:08:93:9D:3A:FF:E1:09:96:1B:2D:E2:36:1A
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/osbMxLFUiQiTnTr_4QmWGy3iNho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.220.55.0/24
195.136.123.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:97:de:8e:55:ce:02:17:ce:33:a1:14:00:ed:0d:23:e0:e9:
08:92:ab:32:c6:e8:53:da:d5:f2:5e:49:17:b5:33:0a:90:2d:
25:44:8a:a6:6d:82:a4:38:87:0e:09:c7:2c:20:40:52:62:f8:
14:52:ed:54:bc:c0:b3:f3:58:5c:64:d2:83:5f:87:1e:ec:4f:
bc:2d:f6:be:53:98:69:17:b4:a1:a5:6f:58:dd:8b:62:3a:40:
3c:0e:05:55:c8:61:65:69:70:98:7b:b2:24:5b:a1:c3:57:c6:
a7:fc:61:8e:75:b7:b7:83:63:ea:0f:2f:17:66:98:53:61:6c:
38:94:4a:68:32:60:75:23:50:b2:21:59:c6:83:29:79:bb:e8:
b8:66:f2:53:ad:8b:28:49:3b:63:8f:5a:14:20:b1:93:ec:eb:
4d:fc:28:5d:35:8b:5e:73:e3:ba:3a:9f:27:2a:8c:9a:42:a9:
c8:79:43:9c:05:a9:95:65:79:ff:0f:c5:f3:89:89:25:dd:fc:
9f:33:20:c2:4f:3d:06:d1:0e:e8:68:bb:b6:40:d4:cc:8f:b1:
75:90:31:b0:4a:d2:8e:fa:82:19:77:cf:25:97:97:cc:09:ff:
5e:b2:5a:0c:4e:de:46:4e:53:93:c6:dc:f4:19:f3:87:aa:30:
a5:81:c7:97
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZnxNwa52GBqOfettWg782tQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0NjgzNGU2ODg5MGYzOTg2YTFiMDQ1N2NlMGY1NGFlMDNj
MmQ3NmIwHhcNMjUxMDE3MDgwODU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMmM2Y2NjNGIxNTQ4OTA4OTM5ZDNhZmZlMTA5OTYxYjJkZTIzNjFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqfptRri8NTj71h2c8QoVR77+tmh
CERtP1tQxsXRro+/OYYhdtJZXdHmvQZcc/FMwYeWFC7RFHgf8uzF63wpiBu5U5nh
mQ3k2N/9X/akSJQmi6vSnPdAHyfm5F6QDnmK7BqhtL4yDKUjpXJh94iGV9pciAsU
Kdi8mSfQ7tYHBP5j76sRkc50r3cGDJtXlNR4Og9qkx9tZzAEFVRgt5MjqAmNV9xy
Ba293WmL7BjToFdB5MpHq5MrGfwGom81hjsxv/XA5qy3or/rYQ7e65u+0Agi1kJD
lDqTAv3DzFbRO1Q19KGX9NtXzfJcPVHpwRuduPpgGbpDRuzGUxmWveDynwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFKLGzMSxVIkIk506/+EJlhst4jYaMB8GA1UdIwQY
MBaAFFRoNOaIkPOYahsEV84PVK4DwtdrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQt
NTI3NjZiMjRiYWE0LzEvb3NiTXhMRlVpUWlUblRyXzRRbVdHeTNpTmhvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQtNTI3NjZiMjRiYWE0
LzEvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWNw3AwQA
w4h7MA0GCSqGSIb3DQEBCwUAA4IBAQC9l96OVc4CF84zoRQA7Q0j4OkIkqsyxuhT
2tXyXkkXtTMKkC0lRIqmbYKkOIcOCccsIEBSYvgUUu1UvMCz81hcZNKDX4ce7E+8
Lfa+U5hpF7ShpW9Y3YtiOkA8DgVVyGFlaXCYe7IkW6HDV8an/GGOdbe3g2PqDy8X
ZphTYWw4lEpoMmB1I1CyIVnGgyl5u+i4ZvJTrYsoSTtjj1oUILGT7OtN/ChdNYte
c+O6Op8nKoyaQqnIeUOcBamVZXn/D8XziYkl3fyfMyDCTz0G0Q7oaLu2QNTMj7F1
kDGwStKO+oIZd88ll5fMCf9esloMTt5GTlOTxtz0GfOHqjClgceX
-----END CERTIFICATE-----
Generated at Mon Oct 20 13:02:04 2025 by rpki-client