Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/3621kVLU1VT9Fici-tNYNAxF4xw.roa
File: 3621kVLU1VT9Fici-tNYNAxF4xw.roa (raw, json)
Hash identifier: YevhNJP6n8UEvSB9W3Cp2mhJAKV1d9oeisrAeVxiMSA=
Subject key identifier: DF:AD:B5:91:52:D4:D5:54:FD:16:27:22:FA:D3:58:34:0C:45:E3:1C
Certificate issuer: /CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Certificate serial: 0199D195C81EB9C442200D819413F4A53B84
Authority key identifier: BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/3621kVLU1VT9Fici-tNYNAxF4xw.roa
Signing time: Sat 11 Oct 2025 04:44:38 +0000
ROA not before: Sat 11 Oct 2025 04:44:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205886
IP address blocks: 194.246.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:d1:95:c8:1e:b9:c4:42:20:0d:81:94:13:f4:a5:3b:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Validity
Not Before: Oct 11 04:44:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dfadb59152d4d554fd162722fad358340c45e31c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5a:f4:7f:d6:d3:ce:f4:04:dc:d2:19:39:67:
dd:f7:77:45:ad:6e:21:bb:d7:6a:48:d9:af:4f:cb:
61:dc:89:09:75:a5:64:15:b3:5e:bc:ba:4f:a4:ef:
3a:b2:d5:af:5a:7e:ef:7b:4d:47:77:5d:ad:fa:1f:
a4:4b:ac:3e:a1:f2:87:c8:6a:a6:cc:89:ab:6c:6c:
a9:c2:bb:db:3d:32:7d:91:e5:fb:bd:72:68:2d:d3:
4e:94:c4:75:70:ce:db:c5:cc:fb:27:b3:10:11:77:
e8:f6:f6:8f:a9:e3:f8:d5:e7:dc:a6:f2:d4:89:31:
7d:74:90:f0:38:bd:3e:28:16:79:95:0b:61:8f:21:
3a:77:b6:63:22:71:64:42:d8:eb:fd:ee:42:e3:81:
b5:f6:17:86:89:d3:6a:19:a2:1e:56:ac:d2:d5:2e:
b2:d5:0c:e8:40:9c:f6:4c:6e:e8:34:fc:c8:0c:d4:
ad:35:9d:68:a0:08:5e:df:57:1e:89:74:d7:d7:bc:
f6:50:96:5a:e7:69:3b:32:8e:b9:f4:24:54:40:8d:
fb:67:f3:7d:9d:ab:7c:68:08:88:c4:3f:2a:24:9f:
a1:8a:bd:5b:cb:75:4c:2a:12:3c:d9:99:ce:73:74:
25:d1:55:f0:a5:8d:e0:41:45:af:58:02:af:51:8f:
69:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:AD:B5:91:52:D4:D5:54:FD:16:27:22:FA:D3:58:34:0C:45:E3:1C
X509v3 Authority Key Identifier:
keyid:BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/3621kVLU1VT9Fici-tNYNAxF4xw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.246.36.0/24
Signature Algorithm: sha256WithRSAEncryption
80:d3:9c:eb:63:cd:55:5e:15:dd:c8:d3:fe:d8:67:51:d4:90:
b3:34:87:58:b2:b2:4f:67:ce:f7:30:cf:03:e9:a4:48:48:80:
58:d2:1b:69:5e:86:f5:b9:3e:f6:7d:60:7f:3a:77:ba:2f:04:
4f:e7:95:8e:00:09:80:49:f1:db:5d:54:d9:0b:db:3e:5d:f9:
b1:44:62:76:91:d9:0f:af:01:d6:1c:45:0c:95:89:57:c3:24:
0a:37:42:c1:56:34:be:87:89:7e:32:9d:b6:33:c3:06:59:b0:
39:9f:4b:50:ee:a8:a2:ac:a2:c3:88:af:aa:f3:23:b2:f8:e4:
0e:fd:15:bc:e8:2e:57:a1:a0:1a:5d:87:a2:c5:a7:20:da:38:
50:30:55:15:fe:1e:a9:12:2a:3f:74:62:57:dd:7a:2b:f5:2c:
8d:86:b2:80:53:1c:cf:0c:52:53:19:fb:49:01:84:ac:75:4c:
f4:18:6f:14:a4:e9:7f:14:7f:34:85:99:ff:18:37:01:71:b7:
7b:23:ee:2f:c3:fb:44:e7:9e:c4:58:88:64:2f:37:eb:24:28:
b4:e9:7f:01:6a:4d:74:bd:08:65:de:c5:3b:0f:18:96:7e:1d:
fa:2a:29:70:3d:d4:e1:e8:0d:f3:e1:63:87:c0:75:8f:0e:6f:
0a:ab:a6:11
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZnRlcgeucRCIA2BlBP0pTuEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhNGQwZTY5YWI3NjlmNjViYjJiMTU1YmRmYTgzYTcxODZl
ZWFjNDQwHhcNMjUxMDExMDQ0NDM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZmFkYjU5MTUyZDRkNTU0ZmQxNjI3MjJmYWQzNTgzNDBjNDVlMzFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFr0f9bTzvQE3NIZOWfd93dFrW4h
u9dqSNmvT8th3IkJdaVkFbNevLpPpO86stWvWn7ve01Hd12t+h+kS6w+ofKHyGqm
zImrbGypwrvbPTJ9keX7vXJoLdNOlMR1cM7bxcz7J7MQEXfo9vaPqeP41efcpvLU
iTF9dJDwOL0+KBZ5lQthjyE6d7ZjInFkQtjr/e5C44G19heGidNqGaIeVqzS1S6y
1QzoQJz2TG7oNPzIDNStNZ1ooAhe31ceiXTX17z2UJZa52k7Mo659CRUQI37Z/N9
nat8aAiIxD8qJJ+hir1by3VMKhI82ZnOc3Ql0VXwpY3gQUWvWAKvUY9powIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFN+ttZFS1NVU/RYnIvrTWDQMReMcMB8GA1UdIwQY
MBaAFLpNDmmrdp9luysVW9+oOnGG7qxEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWswT2FhdDJuMlc3S3hWYjM2ZzZjWWJ1ckVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8zZDZkNmMtZjU4ZC00MmU2LWI2ODgt
OGVmZjNmZDNjNDhhLzEvMzYyMWtWTFUxVlQ5RmljaS10TllOQXhGNHh3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC8zZDZkNmMtZjU4ZC00MmU2LWI2ODgtOGVmZjNmZDNjNDhh
LzEvdWswT2FhdDJuMlc3S3hWYjM2ZzZjWWJ1ckVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwvYkMA0G
CSqGSIb3DQEBCwUAA4IBAQCA05zrY81VXhXdyNP+2GdR1JCzNIdYsrJPZ873MM8D
6aRISIBY0htpXob1uT72fWB/One6LwRP55WOAAmASfHbXVTZC9s+XfmxRGJ2kdkP
rwHWHEUMlYlXwyQKN0LBVjS+h4l+Mp22M8MGWbA5n0tQ7qiirKLDiK+q8yOy+OQO
/RW86C5XoaAaXYeixacg2jhQMFUV/h6pEio/dGJX3Xor9SyNhrKAUxzPDFJTGftJ
AYSsdUz0GG8UpOl/FH80hZn/GDcBcbd7I+4vw/tE557EWIhkLzfrJCi06X8Bak10
vQhl3sU7DxiWfh36KilwPdTh6A3z4WOHwHWPDm8Kq6YR
-----END CERTIFICATE-----
Generated at Mon Oct 20 03:43:05 2025 by rpki-client