Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/6e909d-d325-48a1-9443-cc9a758c9916/1/I2jRnFFbsyX_NCbppyuykwqej0U.roa
File: I2jRnFFbsyX_NCbppyuykwqej0U.roa (raw, json)
Hash identifier: B02MgbLFeWjQmECze2lw8A+bHy0sSCgwfPb0qowSp+Q=
Subject key identifier: 23:68:D1:9C:51:5B:B3:25:FF:34:26:E9:A7:2B:B2:93:0A:9E:8F:45
Certificate issuer: /CN=ae7a9b1745a5a70c3bf7bcc2c2ee166460aff7a8
Certificate serial: 01992E56D266B0976D869E2DDF9EEAAED8E8
Authority key identifier: AE:7A:9B:17:45:A5:A7:0C:3B:F7:BC:C2:C2:EE:16:64:60:AF:F7:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rnqbF0Wlpww797zCwu4WZGCv96g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/6e909d-d325-48a1-9443-cc9a758c9916/1/I2jRnFFbsyX_NCbppyuykwqej0U.roa
Signing time: Tue 09 Sep 2025 11:57:45 +0000
ROA not before: Tue 09 Sep 2025 11:57:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204385
IP address blocks: 31.202.15.0/24 maxlen: 24
185.147.99.0/24 maxlen: 24
2a00:1210:fffc::/48 maxlen: 48
2a00:1210:fffe::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/6e909d-d325-48a1-9443-cc9a758c9916/1/rnqbF0Wlpww797zCwu4WZGCv96g.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/6e909d-d325-48a1-9443-cc9a758c9916/1/rnqbF0Wlpww797zCwu4WZGCv96g.mft
rsync://rpki.ripe.net/repository/DEFAULT/rnqbF0Wlpww797zCwu4WZGCv96g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2e:56:d2:66:b0:97:6d:86:9e:2d:df:9e:ea:ae:d8:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae7a9b1745a5a70c3bf7bcc2c2ee166460aff7a8
Validity
Not Before: Sep 9 11:57:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2368d19c515bb325ff3426e9a72bb2930a9e8f45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d8:59:25:17:0f:3e:f6:29:48:1d:b5:c3:01:
88:fb:26:b8:d7:18:07:2c:33:d7:dd:5f:4b:af:c1:
f7:ed:1b:37:2b:48:b5:1f:c4:ee:c0:4b:53:11:55:
2e:93:01:de:f4:97:ea:a1:52:79:78:59:98:e3:99:
b9:52:15:34:38:ff:06:44:d5:86:d4:a4:ca:44:62:
5d:17:c8:88:3a:9d:cb:3d:0b:01:5e:bc:e1:0a:14:
fe:77:25:a2:3c:0f:30:6a:8f:13:74:cc:e8:d5:02:
a7:3c:38:bf:0d:d8:1a:64:a6:0f:41:b3:7b:a0:f9:
0b:8f:34:ba:ef:71:46:b3:0a:af:01:43:ac:11:3b:
11:54:d5:70:af:35:89:fa:81:81:61:27:c8:48:6d:
ec:c8:6f:ef:c8:a1:a8:b4:ff:b3:60:d5:8d:2c:21:
ca:d5:01:c1:5e:c6:c9:3f:d4:6c:bc:01:be:25:b4:
0f:38:1f:70:26:40:d1:a2:a1:61:a3:a2:ed:e6:0c:
88:e0:a0:99:c0:06:73:b9:9b:d8:91:64:02:04:8b:
a1:07:d8:86:a2:ea:f0:e1:9a:65:86:dd:5c:a4:72:
15:4b:22:c7:62:c4:b7:80:1d:f8:62:c1:db:ba:d2:
03:f9:59:ab:65:80:58:cf:e4:7c:94:a3:52:aa:03:
bc:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:68:D1:9C:51:5B:B3:25:FF:34:26:E9:A7:2B:B2:93:0A:9E:8F:45
X509v3 Authority Key Identifier:
keyid:AE:7A:9B:17:45:A5:A7:0C:3B:F7:BC:C2:C2:EE:16:64:60:AF:F7:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rnqbF0Wlpww797zCwu4WZGCv96g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/6e909d-d325-48a1-9443-cc9a758c9916/1/I2jRnFFbsyX_NCbppyuykwqej0U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/6e909d-d325-48a1-9443-cc9a758c9916/1/rnqbF0Wlpww797zCwu4WZGCv96g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.202.15.0/24
185.147.99.0/24
IPv6:
2a00:1210:fffc::/48
2a00:1210:fffe::/48
Signature Algorithm: sha256WithRSAEncryption
ce:13:fa:ff:1d:34:2c:57:55:c9:22:f4:5b:ab:46:79:c8:4f:
d4:9f:c9:81:de:2f:3f:11:a0:f1:d4:89:e1:b1:17:0b:fc:c5:
b5:42:4f:69:b4:28:3d:bb:6e:9b:0e:4c:12:60:9f:dc:3d:08:
9b:9f:01:ac:cd:33:cf:ac:5a:f3:8e:98:df:04:95:f8:7e:6e:
1d:9a:98:ef:f2:ee:04:07:a5:89:e5:37:63:a8:3e:d3:85:86:
c1:78:18:1c:42:ae:c3:3b:7d:d8:70:9c:b1:3c:8c:3f:41:bb:
d9:4a:82:eb:d9:42:d6:e0:9a:c1:7d:3e:d6:5d:9f:fd:ce:9b:
26:53:1e:ed:b4:0a:96:37:98:d6:f6:0c:17:9d:9d:10:40:51:
dd:38:93:f9:fa:1d:42:0d:88:65:0a:20:3f:59:b8:cc:cb:b7:
3a:b3:ab:7f:3d:67:76:74:aa:c2:65:df:ea:77:d3:50:39:de:
06:93:0b:27:7d:81:4c:9a:48:1e:41:6f:ce:00:f7:f0:08:d8:
ab:ac:b8:4b:13:52:3a:52:16:62:59:ab:a0:31:b4:39:5b:96:
97:f5:bb:71:8f:ca:41:c4:1b:06:f3:7f:8f:e7:7e:e8:54:18:
e9:a7:76:a4:23:ff:c7:c8:8b:11:0a:6c:ac:b0:8c:62:03:64:
fc:38:9b:a7
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAZkuVtJmsJdthp4t357qrtjoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlN2E5YjE3NDVhNWE3MGMzYmY3YmNjMmMyZWUxNjY0NjBh
ZmY3YTgwHhcNMjUwOTA5MTE1NzQ1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMzY4ZDE5YzUxNWJiMzI1ZmYzNDI2ZTlhNzJiYjI5MzBhOWU4ZjQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9hZJRcPPvYpSB21wwGI+ya41xgH
LDPX3V9Lr8H37Rs3K0i1H8TuwEtTEVUukwHe9JfqoVJ5eFmY45m5UhU0OP8GRNWG
1KTKRGJdF8iIOp3LPQsBXrzhChT+dyWiPA8wao8TdMzo1QKnPDi/DdgaZKYPQbN7
oPkLjzS673FGswqvAUOsETsRVNVwrzWJ+oGBYSfISG3syG/vyKGotP+zYNWNLCHK
1QHBXsbJP9RsvAG+JbQPOB9wJkDRoqFho6Lt5gyI4KCZwAZzuZvYkWQCBIuhB9iG
ourw4Zplht1cpHIVSyLHYsS3gB34YsHbutID+VmrZYBYz+R8lKNSqgO8IwIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFCNo0ZxRW7Ml/zQm6acrspMKno9FMB8GA1UdIwQY
MBaAFK56mxdFpacMO/e8wsLuFmRgr/eoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcm5xYkYwV2xwd3c3OTd6Q3d1NFdaR0N2OTZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy82ZTkwOWQtZDMyNS00OGExLTk0NDMt
Y2M5YTc1OGM5OTE2LzEvSTJqUm5GRmJzeVhfTkNicHB5dXlrd3FlajBVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy82ZTkwOWQtZDMyNS00OGExLTk0NDMtY2M5YTc1OGM5OTE2
LzEvcm5xYkYwV2xwd3c3OTd6Q3d1NFdaR0N2OTZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjASBAIAATAMAwQAH8oPAwQA
uZNjMBgEAgACMBIDBwAqABIQ//wDBwAqABIQ//4wDQYJKoZIhvcNAQELBQADggEB
AM4T+v8dNCxXVcki9FurRnnIT9SfyYHeLz8RoPHUieGxFwv8xbVCT2m0KD27bpsO
TBJgn9w9CJufAazNM8+sWvOOmN8Elfh+bh2amO/y7gQHpYnlN2OoPtOFhsF4GBxC
rsM7fdhwnLE8jD9Bu9lKguvZQtbgmsF9PtZdn/3OmyZTHu20CpY3mNb2DBednRBA
Ud04k/n6HUINiGUKID9ZuMzLtzqzq389Z3Z0qsJl3+p301A53gaTCyd9gUyaSB5B
b84A9/AI2KusuEsTUjpSFmJZq6AxtDlblpf1u3GPykHEGwbzf4/nfuhUGOmndqQj
/8fIixEKbKywjGIDZPw4m6c=
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:57:45 2025 by rpki-client