Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/c212CzmbObAcrMgTCfkBLkXMin8.roa
File: c212CzmbObAcrMgTCfkBLkXMin8.roa (raw, json)
Hash identifier: ciAznSQzQUmFlccmgG1WLelO9lpjKyJTL5WEen4RKFM=
Subject key identifier: 73:6D:76:0B:39:9B:39:B0:1C:AC:C8:13:09:F9:01:2E:45:CC:8A:7F
Certificate issuer: /CN=9da140e8028e6d537600e0888a9af5a971c5db46
Certificate serial: 0199576B05D548B5987589DEE67D1DDB68FF
Authority key identifier: 9D:A1:40:E8:02:8E:6D:53:76:00:E0:88:8A:9A:F5:A9:71:C5:DB:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/c212CzmbObAcrMgTCfkBLkXMin8.roa
Signing time: Wed 17 Sep 2025 11:24:15 +0000
ROA not before: Wed 17 Sep 2025 11:24:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29240
IP address blocks: 192.103.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:57:6b:05:d5:48:b5:98:75:89:de:e6:7d:1d:db:68:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9da140e8028e6d537600e0888a9af5a971c5db46
Validity
Not Before: Sep 17 11:24:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=736d760b399b39b01cacc81309f9012e45cc8a7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b1:9c:6b:ad:eb:44:cf:6f:67:99:2d:9a:7f:
24:54:a5:01:02:54:00:ce:c5:51:4b:34:3a:bf:19:
e2:2c:4a:0c:7b:c8:98:a6:da:aa:1e:cc:ee:72:ff:
5d:02:32:5c:99:71:54:bf:d0:b5:fc:7f:a9:b2:9f:
31:76:08:50:05:64:78:2c:a4:38:9d:b3:80:01:f5:
54:24:d3:bc:18:d1:75:f0:d1:47:df:ea:ef:39:2a:
18:e2:94:d3:e6:be:e5:f1:4b:76:1a:b4:19:b0:a5:
2c:5f:39:e6:50:4c:e3:c8:f0:1e:b7:d1:83:35:4f:
8a:55:33:99:32:38:58:6c:52:02:a6:50:7a:2f:cd:
a8:94:00:45:0a:72:7b:28:29:0a:a9:4f:6a:46:a1:
12:3f:56:40:25:b5:0a:77:a1:6e:11:b5:3d:c8:30:
37:00:8e:a5:a6:e3:6c:30:21:c9:9b:78:0c:44:92:
47:46:93:2e:4a:21:e1:f0:53:f1:16:23:cb:d9:8d:
a6:b9:7d:73:77:24:65:f6:e3:db:43:f1:ee:d6:d5:
ad:ef:d6:a7:3c:4f:a3:8b:40:d6:05:9a:8d:65:0a:
7b:5a:c6:ac:2a:72:e4:f7:8e:37:42:ad:86:13:d3:
9b:a0:38:49:df:db:58:b8:f9:23:e1:0c:f6:69:35:
04:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:6D:76:0B:39:9B:39:B0:1C:AC:C8:13:09:F9:01:2E:45:CC:8A:7F
X509v3 Authority Key Identifier:
keyid:9D:A1:40:E8:02:8E:6D:53:76:00:E0:88:8A:9A:F5:A9:71:C5:DB:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/c212CzmbObAcrMgTCfkBLkXMin8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.103.85.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:81:dd:90:1d:5a:85:40:4b:17:c1:60:c7:84:0b:9a:bd:b3:
3d:af:ab:9a:00:5c:72:23:41:41:02:0e:20:48:67:fd:5d:c9:
2a:6b:fa:7d:cb:ec:90:4b:da:77:88:d6:a9:51:65:be:f5:36:
28:5b:e4:97:56:dc:13:50:81:29:f7:fe:2d:a2:a1:e9:91:ad:
70:77:c5:d0:38:c7:40:b6:ec:3b:32:18:af:e0:c0:f6:12:02:
70:ce:a9:f4:dc:4a:db:65:b5:45:54:80:c8:c8:b8:1e:f6:e4:
2f:2a:d9:b7:cf:52:72:2f:e6:96:42:c5:8b:f8:2d:63:8f:9d:
29:bf:38:6b:49:19:fd:21:ff:f0:b8:da:8b:a4:ea:17:e0:5e:
41:14:4d:70:de:1b:a2:31:c9:aa:d0:e2:95:31:51:d4:4f:0e:
0e:fa:09:02:a8:00:26:b4:05:8d:eb:1f:e3:50:11:53:1e:cf:
22:11:ba:b7:b4:ea:09:2b:ce:f6:d2:94:92:c9:1f:95:73:00:
3e:68:d1:14:0e:94:c5:7a:8e:8a:c6:63:15:77:32:04:f0:80:
cd:d0:f8:6e:5f:4c:b1:a0:e7:73:d8:b1:7d:9c:bc:9f:4d:ee:
58:f8:6c:79:e7:2e:d6:f8:9b:e5:c7:1a:7f:15:25:5d:53:3d:
dd:cb:0d:29
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZlXawXVSLWYdYne5n0d22j/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkYTE0MGU4MDI4ZTZkNTM3NjAwZTA4ODhhOWFmNWE5NzFj
NWRiNDYwHhcNMjUwOTE3MTEyNDE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MzZkNzYwYjM5OWIzOWIwMWNhY2M4MTMwOWY5MDEyZTQ1Y2M4YTdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7Gca63rRM9vZ5ktmn8kVKUBAlQA
zsVRSzQ6vxniLEoMe8iYptqqHszucv9dAjJcmXFUv9C1/H+psp8xdghQBWR4LKQ4
nbOAAfVUJNO8GNF18NFH3+rvOSoY4pTT5r7l8Ut2GrQZsKUsXznmUEzjyPAet9GD
NU+KVTOZMjhYbFICplB6L82olABFCnJ7KCkKqU9qRqESP1ZAJbUKd6FuEbU9yDA3
AI6lpuNsMCHJm3gMRJJHRpMuSiHh8FPxFiPL2Y2muX1zdyRl9uPbQ/Hu1tWt79an
PE+ji0DWBZqNZQp7WsasKnLk9443Qq2GE9OboDhJ39tYuPkj4Qz2aTUE7QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHNtdgs5mzmwHKzIEwn5AS5FzIp/MB8GA1UdIwQY
MBaAFJ2hQOgCjm1TdgDgiIqa9alxxdtGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmFGQTZBS09iVk4yQU9DSWlwcjFxWEhGMjBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8xMjY3NTUtZWVkZC00MGIxLTk1ZTgt
YTRjYThiOWMyMDViLzEvYzIxMkN6bWJPYkFjck1nVENma0JMa1hNaW44LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC8xMjY3NTUtZWVkZC00MGIxLTk1ZTgtYTRjYThiOWMyMDVi
LzEvbmFGQTZBS09iVk4yQU9DSWlwcjFxWEhGMjBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwGdVMA0G
CSqGSIb3DQEBCwUAA4IBAQA+gd2QHVqFQEsXwWDHhAuavbM9r6uaAFxyI0FBAg4g
SGf9Xckqa/p9y+yQS9p3iNapUWW+9TYoW+SXVtwTUIEp9/4toqHpka1wd8XQOMdA
tuw7Mhiv4MD2EgJwzqn03ErbZbVFVIDIyLge9uQvKtm3z1JyL+aWQsWL+C1jj50p
vzhrSRn9If/wuNqLpOoX4F5BFE1w3huiMcmq0OKVMVHUTw4O+gkCqAAmtAWN6x/j
UBFTHs8iEbq3tOoJK8720pSSyR+VcwA+aNEUDpTFeo6KxmMVdzIE8IDN0PhuX0yx
oOdz2LF9nLyfTe5Y+Gx55y7W+Jvlxxp/FSVdUz3dyw0p
-----END CERTIFICATE-----
Generated at Mon Oct 20 06:50:56 2025 by rpki-client