Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/d-rcyBh3x14DWt8BVItVhYUTglU.roa
File: d-rcyBh3x14DWt8BVItVhYUTglU.roa (raw, json)
Hash identifier: BxFvCRSBNVXYwKz1w18WGBJdtnFiBFx2s6gn0dZvkxI=
Subject key identifier: 77:EA:DC:C8:18:77:C7:5E:03:5A:DF:01:54:8B:55:85:85:13:82:55
Certificate issuer: /CN=962bd76a5cac283ece0a0f8eab2c97021401fb89
Certificate serial: 019934D4F4979095E8AA6918BACB47D67BB1
Authority key identifier: 96:2B:D7:6A:5C:AC:28:3E:CE:0A:0F:8E:AB:2C:97:02:14:01:FB:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/d-rcyBh3x14DWt8BVItVhYUTglU.roa
Signing time: Wed 10 Sep 2025 18:13:15 +0000
ROA not before: Wed 10 Sep 2025 18:13:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12844
IP address blocks: 85.203.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:34:d4:f4:97:90:95:e8:aa:69:18:ba:cb:47:d6:7b:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=962bd76a5cac283ece0a0f8eab2c97021401fb89
Validity
Not Before: Sep 10 18:13:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=77eadcc81877c75e035adf01548b558585138255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:53:ff:7c:b0:df:e8:78:c3:6c:c6:8a:20:b9:
a2:a4:74:7d:fa:34:48:b5:d4:40:91:2f:cc:5a:a4:
40:a4:fc:37:78:0a:3a:a3:09:e2:30:ac:da:10:cc:
a2:40:ee:a7:52:ce:34:88:30:64:65:dd:e4:da:40:
ba:38:83:25:fd:87:05:ba:e4:45:e8:5a:95:69:b8:
07:8b:81:49:2f:44:61:50:86:79:72:83:6f:d4:c6:
66:39:1c:b4:7d:a4:e2:65:be:a8:b5:de:a5:65:c9:
ae:90:80:0e:18:04:4a:46:c8:76:55:b3:64:7a:a1:
7c:d2:be:d2:c3:d0:1d:72:c6:be:6e:d0:de:ec:56:
55:84:67:13:24:66:8d:e8:f9:e7:a8:18:ff:cd:e1:
88:9d:a9:89:ab:ef:9a:10:96:ca:d3:a7:46:9b:c1:
22:ee:f6:71:84:18:b1:f1:4d:0b:a7:cb:d4:9e:d2:
e4:13:88:d0:57:55:60:4e:28:74:3f:fb:65:0a:56:
83:53:0a:33:e1:bf:3d:29:2b:84:3a:84:5d:26:06:
ed:51:81:89:4d:23:6e:4a:4b:1a:90:35:a6:af:ea:
19:91:61:0d:68:02:2f:2d:c1:46:66:f9:e8:8d:eb:
2e:c1:1b:93:75:32:96:0c:c2:51:23:dd:26:9c:0f:
05:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:EA:DC:C8:18:77:C7:5E:03:5A:DF:01:54:8B:55:85:85:13:82:55
X509v3 Authority Key Identifier:
keyid:96:2B:D7:6A:5C:AC:28:3E:CE:0A:0F:8E:AB:2C:97:02:14:01:FB:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/d-rcyBh3x14DWt8BVItVhYUTglU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.203.32.0/24
Signature Algorithm: sha256WithRSAEncryption
41:bf:87:df:8a:8c:e7:4b:15:8d:4d:bc:c9:d7:70:40:e2:88:
70:ad:c8:cd:97:64:33:eb:f7:fd:a0:9d:33:0b:74:35:c2:8f:
58:9e:10:70:fd:04:35:f8:07:6d:55:d1:63:a1:8e:fc:52:a3:
b0:9e:c7:b9:da:2f:e1:01:50:a7:83:84:68:6e:59:db:5e:60:
a2:a5:28:9f:4f:ee:df:3d:41:9b:2d:3a:7a:e0:c3:5e:eb:83:
64:26:d5:b9:7b:57:85:a7:5a:f5:0b:07:a4:28:cd:f8:11:b0:
fb:8f:89:11:e7:3a:8d:78:74:7b:96:97:29:67:f5:2a:eb:25:
27:85:2d:15:72:9f:2a:54:9a:8f:35:e0:9c:b3:c0:b6:d6:a9:
d4:82:4e:45:54:c4:7c:05:54:c5:f0:23:16:dd:37:83:fe:b3:
5b:fb:f6:98:a0:33:32:15:99:69:b5:cd:c0:72:f0:39:1e:c4:
c3:23:b3:a6:f2:41:e6:42:a2:0c:7e:ae:04:13:50:02:65:cf:
f0:bf:6e:9e:20:bf:0f:7d:0f:00:95:38:49:a3:ef:7b:a6:55:
bd:05:81:7e:95:76:82:a3:d9:83:86:0f:b4:77:00:f9:80:76:
bd:ff:9b:07:63:5c:ce:c8:a4:e1:0e:66:22:78:4d:2f:95:73:
c5:39:42:91
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZk01PSXkJXoqmkYustH1nuxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2MmJkNzZhNWNhYzI4M2VjZTBhMGY4ZWFiMmM5NzAyMTQw
MWZiODkwHhcNMjUwOTEwMTgxMzE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3N2VhZGNjODE4NzdjNzVlMDM1YWRmMDE1NDhiNTU4NTg1MTM4MjU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1P/fLDf6HjDbMaKILmipHR9+jRI
tdRAkS/MWqRApPw3eAo6owniMKzaEMyiQO6nUs40iDBkZd3k2kC6OIMl/YcFuuRF
6FqVabgHi4FJL0RhUIZ5coNv1MZmORy0faTiZb6otd6lZcmukIAOGARKRsh2VbNk
eqF80r7Sw9Adcsa+btDe7FZVhGcTJGaN6PnnqBj/zeGInamJq++aEJbK06dGm8Ei
7vZxhBix8U0Lp8vUntLkE4jQV1VgTih0P/tlClaDUwoz4b89KSuEOoRdJgbtUYGJ
TSNuSksakDWmr+oZkWENaAIvLcFGZvnojesuwRuTdTKWDMJRI90mnA8FzwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHfq3MgYd8deA1rfAVSLVYWFE4JVMB8GA1UdIwQY
MBaAFJYr12pcrCg+zgoPjqsslwIUAfuJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGl2WGFseXNLRDdPQ2ctT3F5eVhBaFFCLTRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8wNDY0NjAtMTAyYy00OTMwLTg0MmMt
NmFiMTExNTVmNmZiLzEvZC1yY3lCaDN4MTREV3Q4QlZJdFZoWVVUZ2xVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC8wNDY0NjAtMTAyYy00OTMwLTg0MmMtNmFiMTExNTVmNmZi
LzEvbGl2WGFseXNLRDdPQ2ctT3F5eVhBaFFCLTRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVcsgMA0G
CSqGSIb3DQEBCwUAA4IBAQBBv4ffioznSxWNTbzJ13BA4ohwrcjNl2Qz6/f9oJ0z
C3Q1wo9YnhBw/QQ1+AdtVdFjoY78UqOwnse52i/hAVCng4RoblnbXmCipSifT+7f
PUGbLTp64MNe64NkJtW5e1eFp1r1CwekKM34EbD7j4kR5zqNeHR7lpcpZ/Uq6yUn
hS0Vcp8qVJqPNeCcs8C21qnUgk5FVMR8BVTF8CMW3TeD/rNb+/aYoDMyFZlptc3A
cvA5HsTDI7Om8kHmQqIMfq4EE1ACZc/wv26eIL8PfQ8AlThJo+97plW9BYF+lXaC
o9mDhg+0dwD5gHa9/5sHY1zOyKThDmYieE0vlXPFOUKR
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:36:30 2025 by rpki-client