Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/1PsVRfIiPVKY4ABPWs2nohy1K7o.roa
File: 1PsVRfIiPVKY4ABPWs2nohy1K7o.roa (raw, json)
Hash identifier: 88rVHfdMbj5v8kA496lVtNpxvgUPEFaY8NhwRRj8/+8=
Subject key identifier: D4:FB:15:45:F2:22:3D:52:98:E0:00:4F:5A:CD:A7:A2:1C:B5:2B:BA
Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial: 0199ABDB503A069BDCD356D74C015C637D2D
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/1PsVRfIiPVKY4ABPWs2nohy1K7o.roa
Signing time: Fri 03 Oct 2025 20:55:00 +0000
ROA not before: Fri 03 Oct 2025 20:55:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206621
IP address blocks: 141.105.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft
rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 07:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ab:db:50:3a:06:9b:dc:d3:56:d7:4c:01:5c:63:7d:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Validity
Not Before: Oct 3 20:55:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d4fb1545f2223d5298e0004f5acda7a21cb52bba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b3:06:01:4b:d1:0d:ba:bb:01:89:7c:c0:58:
23:14:2b:65:fa:85:9a:9e:fb:50:9b:5c:03:bd:d6:
8b:e7:bb:0c:a3:54:d4:51:04:91:61:b7:a7:cd:5d:
fc:5d:d2:1e:00:00:84:b6:fa:b3:03:a1:18:8b:63:
ad:59:79:88:d4:f4:18:34:2b:50:51:13:ea:4a:a9:
f0:85:6a:86:21:c3:bb:58:e7:a6:77:93:65:49:f0:
5d:c1:eb:b8:07:be:31:f6:d9:bb:2e:00:3a:9b:b4:
cb:4c:af:c0:87:a0:5f:e8:41:2f:0c:f7:10:f2:e5:
9b:a9:32:71:52:69:2c:52:bc:b7:b2:c4:3a:16:ec:
04:49:1b:5b:8c:9b:43:cf:53:9d:29:3f:7c:f6:bb:
07:43:d8:ab:5e:79:2e:e9:57:e7:aa:c2:01:89:88:
18:97:5e:2b:31:67:84:52:4b:c1:0c:04:03:bc:6b:
88:af:9f:4c:ee:76:07:7d:52:98:87:cc:43:20:6d:
cd:5c:66:b3:0c:e2:14:65:e3:c4:31:d1:25:c4:f4:
4f:62:10:70:f2:c8:90:c9:6b:9d:08:ef:01:3d:ad:
6b:03:13:fa:31:4d:7b:67:fc:ee:09:21:6f:b1:b0:
aa:6c:1b:20:cb:f3:8f:84:54:13:15:32:4f:72:f6:
14:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:FB:15:45:F2:22:3D:52:98:E0:00:4F:5A:CD:A7:A2:1C:B5:2B:BA
X509v3 Authority Key Identifier:
keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/1PsVRfIiPVKY4ABPWs2nohy1K7o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.105.133.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:8f:5e:47:fa:04:20:9b:1f:a7:f6:21:75:2b:ce:72:8a:78:
75:35:50:c8:85:19:68:92:35:6e:dd:4b:91:08:98:16:6e:0c:
71:7c:27:40:54:b0:b7:1a:ff:59:10:39:e2:96:ba:aa:59:dc:
5b:d9:f6:bd:38:e0:05:71:8e:88:99:33:e1:fc:45:fc:4d:51:
2e:ed:a2:65:7b:b1:99:e1:7d:68:4f:eb:3a:ed:c8:2f:b1:10:
b5:61:b4:d4:37:dd:fa:b9:a7:6b:27:7f:b1:cd:38:2f:86:55:
d6:8c:39:9e:65:7f:42:33:c7:37:89:29:d4:f5:43:02:81:ba:
e4:bc:da:8e:e5:b0:03:27:c7:0d:14:a1:10:94:d4:8d:9d:d6:
9a:08:42:08:fb:42:4a:ab:a2:83:c3:a5:18:33:54:52:9c:7f:
0e:74:b1:4e:40:6b:6a:32:23:16:d3:4b:b2:b9:78:c1:b0:15:
15:8a:ed:29:51:f9:28:c0:97:7e:45:02:d9:00:b4:c6:c7:69:
4b:0b:ca:ec:ab:40:cb:31:79:96:76:df:d3:a7:07:60:0f:bb:
28:b9:45:da:55:f7:76:71:f5:08:fe:b6:ef:00:37:8a:f6:1d:
7d:52:91:28:d7:eb:d5:fd:8f:59:6c:27:0f:0c:a2:7d:be:90:
48:55:62:14
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZmr21A6Bpvc01bXTAFcY30tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyYTE1Y2M4ODY1OWY1NzhjYzE1OWM1MmIzYTdlOWVjNTgx
OWZiMjAwHhcNMjUxMDAzMjA1NTAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNGZiMTU0NWYyMjIzZDUyOThlMDAwNGY1YWNkYTdhMjFjYjUyYmJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyrMGAUvRDbq7AYl8wFgjFCtl+oWa
nvtQm1wDvdaL57sMo1TUUQSRYbenzV38XdIeAACEtvqzA6EYi2OtWXmI1PQYNCtQ
URPqSqnwhWqGIcO7WOemd5NlSfBdweu4B74x9tm7LgA6m7TLTK/Ah6Bf6EEvDPcQ
8uWbqTJxUmksUry3ssQ6FuwESRtbjJtDz1OdKT989rsHQ9irXnku6VfnqsIBiYgY
l14rMWeEUkvBDAQDvGuIr59M7nYHfVKYh8xDIG3NXGazDOIUZePEMdElxPRPYhBw
8siQyWudCO8BPa1rAxP6MU17Z/zuCSFvsbCqbBsgy/OPhFQTFTJPcvYUywIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNT7FUXyIj1SmOAAT1rNp6IctSu6MB8GA1UdIwQY
MBaAFGKhXMiGWfV4zBWcUrOn6exYGfsgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXFGY3lJWlo5WGpNRlp4U3M2ZnA3RmdaLXlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8yMTE3YmMtMWY5ZS00NTkwLWE1NTAt
NDI2OWI1NmJmN2Q0LzEvMVBzVlJmSWlQVktZNEFCUFdzMm5vaHkxSzdvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi8yMTE3YmMtMWY5ZS00NTkwLWE1NTAtNDI2OWI1NmJmN2Q0
LzEvWXFGY3lJWlo5WGpNRlp4U3M2ZnA3RmdaLXlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjWmFMA0G
CSqGSIb3DQEBCwUAA4IBAQCLj15H+gQgmx+n9iF1K85yinh1NVDIhRlokjVu3UuR
CJgWbgxxfCdAVLC3Gv9ZEDnilrqqWdxb2fa9OOAFcY6ImTPh/EX8TVEu7aJle7GZ
4X1oT+s67cgvsRC1YbTUN936uadrJ3+xzTgvhlXWjDmeZX9CM8c3iSnU9UMCgbrk
vNqO5bADJ8cNFKEQlNSNndaaCEII+0JKq6KDw6UYM1RSnH8OdLFOQGtqMiMW00uy
uXjBsBUViu0pUfkowJd+RQLZALTGx2lLC8rsq0DLMXmWdt/TpwdgD7souUXaVfd2
cfUI/rbvADeK9h19UpEo1+vV/Y9ZbCcPDKJ9vpBIVWIU
-----END CERTIFICATE-----
Generated at Mon Oct 20 14:26:59 2025 by rpki-client