Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/rZ3f2ghlIlMmEeLut9WQeMpv_SI.roa
File: rZ3f2ghlIlMmEeLut9WQeMpv_SI.roa (raw, json)
Hash identifier: /O3dwETcjlHRpfy4ApMsXsWCRk5nnssK+ipGTgIqiqA=
Subject key identifier: AD:9D:DF:DA:08:65:22:53:26:11:E2:EE:B7:D5:90:78:CA:6F:FD:22
Certificate issuer: /CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce
Certificate serial: 0199D4856E0F8351EF61C0EA0DE5649E475F
Authority key identifier: D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/rZ3f2ghlIlMmEeLut9WQeMpv_SI.roa
Signing time: Sat 11 Oct 2025 18:25:38 +0000
ROA not before: Sat 11 Oct 2025 18:25:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 55285
IP address blocks: 185.244.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:d4:85:6e:0f:83:51:ef:61:c0:ea:0d:e5:64:9e:47:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce
Validity
Not Before: Oct 11 18:25:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ad9ddfda086522532611e2eeb7d59078ca6ffd22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:64:e6:0e:a9:fb:c3:ac:5c:64:81:68:2d:e7:
3e:d5:00:13:ed:d6:8c:34:db:93:49:4b:ec:e1:2a:
1b:e4:85:b4:f2:61:e5:4f:52:14:7a:c3:6a:27:f0:
af:65:be:d9:e9:8c:74:c9:74:73:fb:2b:2e:23:a9:
d3:1c:a3:e4:59:04:8f:36:42:3f:4e:41:90:4a:16:
1d:14:7b:83:22:8f:3e:6e:6f:a3:ce:d3:d3:d2:c1:
46:2a:66:ae:77:4e:9d:3a:1d:2c:7a:e0:7c:f8:65:
4d:c4:94:70:bc:8e:fc:72:f9:b1:ab:bf:2e:62:56:
ab:e5:bb:48:b7:6f:18:c0:56:48:4e:29:11:16:56:
bb:13:2f:60:71:57:c2:58:c0:bb:df:21:0f:aa:09:
8f:56:3c:92:4e:f9:99:71:2f:bf:72:20:bc:18:1f:
42:65:d0:60:8d:6a:aa:88:c3:64:5b:3d:13:46:66:
51:66:4b:64:28:68:58:aa:69:fe:13:a0:2b:f0:8a:
d5:67:18:8d:d0:9c:d7:7d:b2:ad:f5:5a:4f:7f:ed:
6a:45:e5:8e:8e:b5:2d:24:62:4d:69:da:08:66:a8:
d0:17:f7:71:53:5f:fc:aa:9d:5e:97:fb:c7:bf:35:
85:ce:23:b4:58:ff:42:bc:94:0e:53:fd:6a:cd:f2:
0f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:9D:DF:DA:08:65:22:53:26:11:E2:EE:B7:D5:90:78:CA:6F:FD:22
X509v3 Authority Key Identifier:
keyid:D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/rZ3f2ghlIlMmEeLut9WQeMpv_SI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.244.1.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:0d:0d:c1:a6:6a:58:36:22:20:90:78:1d:64:f6:14:d5:06:
c4:dd:52:aa:60:f1:f0:d3:c4:31:17:af:9b:1c:a4:e2:bc:04:
28:27:c0:8a:10:0d:36:7d:04:1a:74:b0:07:02:15:f9:36:ed:
a8:64:1b:38:28:24:72:1d:cd:6a:28:80:62:5b:fa:52:74:a9:
13:88:47:64:8b:f8:1f:a6:4c:3b:13:f0:c0:94:b7:2b:12:56:
64:bb:dc:b0:a5:f4:0a:5d:f9:8f:1c:2d:9d:f2:57:d5:78:b1:
13:0a:50:bb:aa:17:43:e9:8c:4a:12:e5:36:a5:13:5f:bf:e4:
29:7a:75:e2:8c:84:2f:f4:9d:7a:55:54:62:9f:21:1a:e3:60:
ac:49:1d:f4:c4:fe:c2:19:d1:f6:0d:7a:d1:75:d5:8a:11:16:
ba:cd:28:ba:b9:a2:38:58:a4:e5:88:26:ca:fe:1c:93:5a:d6:
99:30:8f:3e:d4:b9:9e:0f:bc:78:61:de:81:70:74:67:b8:ee:
d7:71:93:ed:5d:fb:20:ff:5d:2e:06:fc:cc:28:ea:03:f7:d1:
f0:9a:2f:a7:81:06:e2:26:66:a9:8a:ae:20:e7:9c:f3:64:f5:
72:59:d8:f0:33:c3:56:b0:f7:c2:67:ff:cf:a0:ee:f7:41:78:
09:d7:1c:ca
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZnUhW4Pg1HvYcDqDeVknkdfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2YWEzZmJjNzhlMzEyMjkxNTdjNzhiNmQyM2E2NWViMmUz
NTNkY2UwHhcNMjUxMDExMTgyNTM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZDlkZGZkYTA4NjUyMjUzMjYxMWUyZWViN2Q1OTA3OGNhNmZmZDIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWTmDqn7w6xcZIFoLec+1QAT7daM
NNuTSUvs4Sob5IW08mHlT1IUesNqJ/CvZb7Z6Yx0yXRz+ysuI6nTHKPkWQSPNkI/
TkGQShYdFHuDIo8+bm+jztPT0sFGKmaud06dOh0seuB8+GVNxJRwvI78cvmxq78u
Ylar5btIt28YwFZITikRFla7Ey9gcVfCWMC73yEPqgmPVjySTvmZcS+/ciC8GB9C
ZdBgjWqqiMNkWz0TRmZRZktkKGhYqmn+E6Ar8IrVZxiN0JzXfbKt9VpPf+1qReWO
jrUtJGJNadoIZqjQF/dxU1/8qp1el/vHvzWFziO0WP9CvJQOU/1qzfIP8wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFK2d39oIZSJTJhHi7rfVkHjKb/0iMB8GA1UdIwQY
MBaAFNaqP7x44xIpFXx4ttI6ZesuNT3OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXFvX3ZIampFaWtWZkhpMjBqcGw2eTQxUGM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC82Y2Y4YmUtMjUzZC00NmQ1LWFiN2Mt
ODI3NmM4YWFjNTBlLzEvclozZjJnaGxJbE1tRWVMdXQ5V1FlTXB2X1NJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC82Y2Y4YmUtMjUzZC00NmQ1LWFiN2MtODI3NmM4YWFjNTBl
LzEvMXFvX3ZIampFaWtWZkhpMjBqcGw2eTQxUGM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAufQBMA0G
CSqGSIb3DQEBCwUAA4IBAQDJDQ3BpmpYNiIgkHgdZPYU1QbE3VKqYPHw08QxF6+b
HKTivAQoJ8CKEA02fQQadLAHAhX5Nu2oZBs4KCRyHc1qKIBiW/pSdKkTiEdki/gf
pkw7E/DAlLcrElZku9ywpfQKXfmPHC2d8lfVeLETClC7qhdD6YxKEuU2pRNfv+Qp
enXijIQv9J16VVRinyEa42CsSR30xP7CGdH2DXrRddWKERa6zSi6uaI4WKTliCbK
/hyTWtaZMI8+1LmeD7x4Yd6BcHRnuO7XcZPtXfsg/10uBvzMKOoD99Hwmi+ngQbi
Jmapiq4g55zzZPVyWdjwM8NWsPfCZ//PoO73QXgJ1xzK
-----END CERTIFICATE-----
Generated at Mon Oct 20 00:04:46 2025 by rpki-client