Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/AEz9Tgu1zII_nKT-9tGQ6yfU13k.roa
File: AEz9Tgu1zII_nKT-9tGQ6yfU13k.roa (raw, json)
Hash identifier: ZgadG9GTvUuTlOhaOCAbEpl/6f+jvUONpnCDnXUURy0=
Subject key identifier: 00:4C:FD:4E:0B:B5:CC:82:3F:9C:A4:FE:F6:D1:90:EB:27:D4:D7:79
Certificate issuer: /CN=c7b623bbc54e9846748cd77b2b8b343827e5aeaa
Certificate serial: 0199CE25F4C6EA1E7D5E960DAE7609B2563E
Authority key identifier: C7:B6:23:BB:C5:4E:98:46:74:8C:D7:7B:2B:8B:34:38:27:E5:AE:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x7Yju8VOmEZ0jNd7K4s0OCflrqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/AEz9Tgu1zII_nKT-9tGQ6yfU13k.roa
Signing time: Fri 10 Oct 2025 12:43:37 +0000
ROA not before: Fri 10 Oct 2025 12:43:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 64267
IP address blocks: 185.233.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/x7Yju8VOmEZ0jNd7K4s0OCflrqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/x7Yju8VOmEZ0jNd7K4s0OCflrqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/x7Yju8VOmEZ0jNd7K4s0OCflrqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ce:25:f4:c6:ea:1e:7d:5e:96:0d:ae:76:09:b2:56:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7b623bbc54e9846748cd77b2b8b343827e5aeaa
Validity
Not Before: Oct 10 12:43:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=004cfd4e0bb5cc823f9ca4fef6d190eb27d4d779
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3f:72:2e:13:ec:3b:ca:51:3d:e7:a6:48:7c:
5a:2d:6c:db:7e:23:99:02:25:c8:b5:9b:87:1a:8a:
1d:3b:52:47:81:0d:46:6a:ac:5c:0e:e4:80:5e:a9:
9c:0a:f6:d7:50:c6:98:9d:8c:ef:48:ad:a3:76:bd:
02:5b:bb:d0:2c:9d:78:eb:00:cb:6f:bc:5f:76:98:
b7:cf:4a:91:93:09:b4:d4:55:a4:15:bf:76:e1:0c:
f8:82:a0:79:dd:e1:39:b7:11:ea:cb:87:1a:33:bf:
d5:b0:02:7b:e9:6b:24:d3:a6:8c:23:70:2e:a6:6b:
11:a6:f2:61:b0:01:dd:73:95:04:e3:42:b1:68:f5:
c8:30:2a:51:a2:7f:4b:57:9f:f3:d4:a2:38:4a:5b:
a4:3d:cc:00:1d:b3:a7:6b:cc:7b:3a:f5:34:a9:0e:
9c:26:c6:d0:8f:02:56:20:cd:8a:b0:fe:11:ac:08:
78:32:3a:34:45:4b:a5:2c:ba:6f:cf:58:ec:98:64:
85:9c:2e:16:ea:0a:0e:0e:da:3b:d0:fe:26:ba:6a:
3c:4d:f6:96:c1:fb:8a:ca:1a:1e:99:6a:4f:61:d1:
40:ff:75:81:62:60:d0:a4:06:55:4f:2e:4d:18:09:
e8:85:e7:15:4c:ae:27:31:bc:98:d7:53:fe:09:de:
21:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:4C:FD:4E:0B:B5:CC:82:3F:9C:A4:FE:F6:D1:90:EB:27:D4:D7:79
X509v3 Authority Key Identifier:
keyid:C7:B6:23:BB:C5:4E:98:46:74:8C:D7:7B:2B:8B:34:38:27:E5:AE:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x7Yju8VOmEZ0jNd7K4s0OCflrqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/AEz9Tgu1zII_nKT-9tGQ6yfU13k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/x7Yju8VOmEZ0jNd7K4s0OCflrqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.233.165.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:b7:c6:af:67:bb:9c:a3:97:64:85:a7:51:2b:49:e1:59:f1:
86:44:56:13:48:bf:bb:55:41:20:f0:ff:00:70:13:4b:fc:c5:
87:20:c6:5c:51:49:93:58:13:bd:e8:a9:aa:55:de:46:0c:ce:
ec:8d:6b:24:4d:20:f1:f4:05:3a:01:a9:a3:41:45:47:d5:0f:
73:3b:7a:65:ec:e1:ab:5c:95:d3:f9:d7:26:80:1f:d6:0a:6b:
af:07:dc:f5:58:14:17:1b:4d:d9:4c:66:80:77:3d:5f:75:2c:
92:c2:d0:3b:10:81:18:ff:d1:01:33:5d:4b:81:f0:bd:62:70:
cb:0f:16:42:ab:91:db:26:89:fd:ca:9c:5c:c0:73:1f:f4:d3:
a2:ef:ca:67:b4:41:f3:2f:c3:0f:8d:e2:ed:54:d2:f8:66:14:
36:b2:92:a1:59:dc:c9:61:27:d0:9f:2a:42:fa:2b:52:71:d0:
72:c2:fa:26:f1:44:ec:e2:fd:5e:1f:53:fa:e7:14:ee:83:91:
de:8c:56:0b:f2:e8:2c:a2:2c:a0:a5:d7:3e:ea:fb:01:93:31:
c7:3c:b6:49:7d:a5:a5:17:ee:26:c3:93:85:07:59:17:c0:51:
d3:22:c8:44:e4:72:73:5f:5e:bc:9a:f3:b5:b5:ad:fe:62:44:
20:36:cd:8b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZnOJfTG6h59XpYNrnYJslY+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3YjYyM2JiYzU0ZTk4NDY3NDhjZDc3YjJiOGIzNDM4Mjdl
NWFlYWEwHhcNMjUxMDEwMTI0MzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMDRjZmQ0ZTBiYjVjYzgyM2Y5Y2E0ZmVmNmQxOTBlYjI3ZDRkNzc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxz9yLhPsO8pRPeemSHxaLWzbfiOZ
AiXItZuHGoodO1JHgQ1GaqxcDuSAXqmcCvbXUMaYnYzvSK2jdr0CW7vQLJ146wDL
b7xfdpi3z0qRkwm01FWkFb924Qz4gqB53eE5txHqy4caM7/VsAJ76Wsk06aMI3Au
pmsRpvJhsAHdc5UE40KxaPXIMCpRon9LV5/z1KI4SlukPcwAHbOna8x7OvU0qQ6c
JsbQjwJWIM2KsP4RrAh4Mjo0RUulLLpvz1jsmGSFnC4W6goODto70P4mumo8TfaW
wfuKyhoemWpPYdFA/3WBYmDQpAZVTy5NGAnohecVTK4nMbyY11P+Cd4hUQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFABM/U4LtcyCP5yk/vbRkOsn1Nd5MB8GA1UdIwQY
MBaAFMe2I7vFTphGdIzXeyuLNDgn5a6qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDdZanU4Vk9tRVowak5kN0s0czBPQ2ZscnFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9lZDg3OWItZTNjNC00YjdhLWJkMGMt
MzRlNGUwNjc5MzMzLzEvQUV6OVRndTF6SUlfbktULTl0R1E2eWZVMTNrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi9lZDg3OWItZTNjNC00YjdhLWJkMGMtMzRlNGUwNjc5MzMz
LzEveDdZanU4Vk9tRVowak5kN0s0czBPQ2ZscnFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuemlMA0G
CSqGSIb3DQEBCwUAA4IBAQAPt8avZ7uco5dkhadRK0nhWfGGRFYTSL+7VUEg8P8A
cBNL/MWHIMZcUUmTWBO96KmqVd5GDM7sjWskTSDx9AU6AamjQUVH1Q9zO3pl7OGr
XJXT+dcmgB/WCmuvB9z1WBQXG03ZTGaAdz1fdSySwtA7EIEY/9EBM11LgfC9YnDL
DxZCq5HbJon9ypxcwHMf9NOi78pntEHzL8MPjeLtVNL4ZhQ2spKhWdzJYSfQnypC
+itScdBywvom8UTs4v1eH1P65xTug5HejFYL8ugsoiygpdc+6vsBkzHHPLZJfaWl
F+4mw5OFB1kXwFHTIshE5HJzX168mvO1ta3+YkQgNs2L
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:57:26 2025 by rpki-client