Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/Kp0q-1nYEX5TMJALs27GehR5Nck.roa
File: Kp0q-1nYEX5TMJALs27GehR5Nck.roa (raw, json)
Hash identifier: Hgkind1XFuKmheJ5rqR5d9nmdQhOrVWXJnlm2R1OZ+E=
Subject key identifier: 2A:9D:2A:FB:59:D8:11:7E:53:30:90:0B:B3:6E:C6:7A:14:79:35:C9
Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial: 0199DE609FA87C5F6EDC0A703076C4A7B61A
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/Kp0q-1nYEX5TMJALs27GehR5Nck.roa
Signing time: Mon 13 Oct 2025 16:21:38 +0000
ROA not before: Mon 13 Oct 2025 16:21:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28917
IP address blocks: 194.190.2.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.mft
rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:de:60:9f:a8:7c:5f:6e:dc:0a:70:30:76:c4:a7:b6:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
Validity
Not Before: Oct 13 16:21:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2a9d2afb59d8117e5330900bb36ec67a147935c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8a:84:2d:f7:eb:a1:b4:ac:e3:15:96:96:96:
79:fe:81:9b:a3:45:82:91:5b:3a:c1:25:7c:04:1d:
b8:92:75:0c:24:51:89:b2:03:d4:26:ac:ef:23:aa:
4c:cb:e8:11:a1:6e:5f:98:52:99:26:d3:4b:ba:7e:
9e:64:96:28:b5:a5:2d:dd:f8:76:fa:6a:6b:25:5b:
01:b2:74:30:a0:ce:9d:4e:39:0e:e5:f9:94:8a:34:
18:2e:51:cd:bc:6b:78:e9:f1:9b:60:41:94:0d:7f:
80:c3:29:b8:f5:3b:40:83:79:b1:89:85:7c:19:19:
43:fb:f2:86:0e:07:c0:b3:eb:80:ff:2a:3f:3f:ac:
5d:c7:fa:49:47:6b:c9:9e:73:8d:83:bc:90:59:8d:
30:19:a6:a4:67:a0:40:26:41:35:53:e3:89:08:78:
6a:e0:0f:30:5b:9c:9b:b8:bd:ee:91:75:9d:39:cd:
66:08:0e:82:32:4f:61:f3:1c:a3:39:d0:06:b1:4a:
96:c5:b0:5d:ea:7c:be:53:ef:85:d8:38:4e:f5:26:
07:61:84:07:15:52:e1:c1:8d:58:67:5b:14:21:03:
4a:e3:b4:84:f3:48:07:0a:40:3b:61:94:92:f0:28:
12:f0:63:2a:9f:bb:fb:f7:af:49:d3:e9:66:2d:d9:
fd:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:9D:2A:FB:59:D8:11:7E:53:30:90:0B:B3:6E:C6:7A:14:79:35:C9
X509v3 Authority Key Identifier:
keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/Kp0q-1nYEX5TMJALs27GehR5Nck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.190.2.0/23
Signature Algorithm: sha256WithRSAEncryption
0e:d0:2b:06:42:6b:7b:d1:99:4a:df:eb:35:d9:58:e5:b4:d8:
9d:0c:22:8b:3f:3d:c9:92:dd:cb:c4:3b:f8:2a:8b:4a:df:7b:
d7:8b:c1:01:28:98:0e:37:96:7a:a8:a3:02:b8:53:1d:f8:d6:
64:bd:59:1f:d4:90:93:ba:e5:10:e3:1a:ee:1e:27:a0:c6:f7:
a4:47:40:6a:3a:75:aa:54:d8:0c:db:61:86:a8:50:17:82:1c:
25:5a:c5:39:95:c9:25:8a:b9:d5:ce:ec:69:d3:9a:58:5f:35:
6a:c9:cc:77:27:e9:0b:0c:6a:5a:01:85:6c:2f:80:37:df:ec:
45:2c:a7:bf:f0:19:21:03:f2:1e:3c:63:28:2f:ed:00:30:61:
80:eb:17:34:fe:e7:8d:8b:91:1d:db:72:d8:31:87:88:86:b1:
b3:00:bd:3a:e7:c0:43:f5:0d:0d:85:8e:e4:88:ee:00:97:05:
23:e0:a9:98:a3:5d:61:86:4c:df:a4:61:7b:b9:3d:3a:3d:0e:
ab:ce:89:01:79:39:74:7e:34:79:bb:1b:3e:64:33:a9:41:9c:
28:b6:0b:ea:4e:95:25:96:8e:c6:b1:03:b2:43:e9:8d:14:5a:
08:29:3a:03:e1:1d:45:5e:f5:d7:c0:36:8c:5a:40:b0:08:7f:
7a:f6:b3:a4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZneYJ+ofF9u3ApwMHbEp7YaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1M2EzYjVmNTE4MDgxNjhjMjEyYzA5NGEyYmFhZmYzOGUx
NjQ2NGEwHhcNMjUxMDEzMTYyMTM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYTlkMmFmYjU5ZDgxMTdlNTMzMDkwMGJiMzZlYzY3YTE0NzkzNWM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYqELffrobSs4xWWlpZ5/oGbo0WC
kVs6wSV8BB24knUMJFGJsgPUJqzvI6pMy+gRoW5fmFKZJtNLun6eZJYotaUt3fh2
+mprJVsBsnQwoM6dTjkO5fmUijQYLlHNvGt46fGbYEGUDX+Awym49TtAg3mxiYV8
GRlD+/KGDgfAs+uA/yo/P6xdx/pJR2vJnnONg7yQWY0wGaakZ6BAJkE1U+OJCHhq
4A8wW5ybuL3ukXWdOc1mCA6CMk9h8xyjOdAGsUqWxbBd6ny+U++F2DhO9SYHYYQH
FVLhwY1YZ1sUIQNK47SE80gHCkA7YZSS8CgS8GMqn7v7969J0+lmLdn9FQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCqdKvtZ2BF+UzCQC7NuxnoUeTXJMB8GA1UdIwQY
MBaAFCU6O19RgIFowhLAlKK6r/OOFkZKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlRvN1gxR0FnV2pDRXNDVW9ycXY4NDRXUmtvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS85NzQ3NGMtMWRjMi00NjJjLWFhZGQt
OWU5YTFlMDM3MzhlLzEvS3AwcS0xbllFWDVUTUpBTHMyN0dlaFI1TmNrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS85NzQ3NGMtMWRjMi00NjJjLWFhZGQtOWU5YTFlMDM3Mzhl
LzEvSlRvN1gxR0FnV2pDRXNDVW9ycXY4NDRXUmtvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwr4CMA0G
CSqGSIb3DQEBCwUAA4IBAQAO0CsGQmt70ZlK3+s12VjltNidDCKLPz3Jkt3LxDv4
KotK33vXi8EBKJgON5Z6qKMCuFMd+NZkvVkf1JCTuuUQ4xruHiegxvekR0BqOnWq
VNgM22GGqFAXghwlWsU5lcklirnVzuxp05pYXzVqycx3J+kLDGpaAYVsL4A33+xF
LKe/8BkhA/IePGMoL+0AMGGA6xc0/ueNi5Ed23LYMYeIhrGzAL0658BD9Q0NhY7k
iO4AlwUj4KmYo11hhkzfpGF7uT06PQ6rzokBeTl0fjR5uxs+ZDOpQZwotgvqTpUl
lo7GsQOyQ+mNFFoIKToD4R1FXvXXwDaMWkCwCH969rOk
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:15:02 2025 by rpki-client