Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/3391ce-a795-401f-839d-a4d0d10c9016/1/_6M7OFdfKNj70ch9yaeejGfETQc.roa
File: _6M7OFdfKNj70ch9yaeejGfETQc.roa (raw, json)
Hash identifier: zDHeyswKrEctPTqzGZks7RkAedK9Eb/kBe4tAXFfwiI=
Subject key identifier: FF:A3:3B:38:57:5F:28:D8:FB:D1:C8:7D:C9:A7:9E:8C:67:C4:4D:07
Certificate issuer: /CN=7b732b6e5710ba8289cff4bb226b75bc4b07819f
Certificate serial: 019906ECA5D15999568588C85119279DBD5B
Authority key identifier: 7B:73:2B:6E:57:10:BA:82:89:CF:F4:BB:22:6B:75:BC:4B:07:81:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e3MrblcQuoKJz_S7Imt1vEsHgZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/3391ce-a795-401f-839d-a4d0d10c9016/1/_6M7OFdfKNj70ch9yaeejGfETQc.roa
Signing time: Mon 01 Sep 2025 20:16:36 +0000
ROA not before: Mon 01 Sep 2025 20:16:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208273
IP address blocks: 93.115.60.0/24 maxlen: 24
93.115.61.0/24 maxlen: 24
2a05:840:50::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/3391ce-a795-401f-839d-a4d0d10c9016/1/e3MrblcQuoKJz_S7Imt1vEsHgZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/3391ce-a795-401f-839d-a4d0d10c9016/1/e3MrblcQuoKJz_S7Imt1vEsHgZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/e3MrblcQuoKJz_S7Imt1vEsHgZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:06:ec:a5:d1:59:99:56:85:88:c8:51:19:27:9d:bd:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b732b6e5710ba8289cff4bb226b75bc4b07819f
Validity
Not Before: Sep 1 20:16:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ffa33b38575f28d8fbd1c87dc9a79e8c67c44d07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0f:91:36:be:db:6c:81:79:dd:92:38:ea:22:
bf:3f:20:b3:79:d7:60:27:11:de:f8:8c:c2:bb:61:
4d:41:d5:05:d1:d7:c1:b9:8d:7a:f4:e9:c8:df:f0:
64:0f:e4:5c:02:4e:74:84:b3:59:05:0e:ce:f5:f4:
42:4a:15:ac:5d:be:86:df:c8:de:8c:ff:6b:76:2c:
c7:3a:62:95:6b:7b:5a:97:13:d3:00:db:c9:38:fb:
20:8b:96:50:39:96:d9:50:1e:7a:04:3b:61:86:8f:
24:19:6d:04:f5:a1:24:80:43:d3:18:75:88:d8:6f:
b4:fb:ab:89:76:2e:87:50:10:d0:13:db:35:8f:c2:
93:4c:8f:5f:93:c7:1a:a2:35:a1:7b:a9:20:a6:7a:
c0:61:44:7c:ab:85:8d:80:34:a7:98:b3:0d:56:99:
92:5c:57:0d:2d:f3:b1:07:fb:4f:d1:03:05:b9:64:
f6:67:10:bb:18:35:73:e1:d8:95:d7:f2:62:45:2d:
bc:d0:d4:6f:52:25:f5:74:0c:fa:33:13:9e:75:90:
54:05:30:8d:f5:94:8c:19:b1:a2:0a:8a:69:c9:f5:
fe:a0:56:64:6e:de:19:40:65:c9:e0:a9:ad:bd:ad:
2f:d4:3c:0b:b7:c0:fa:18:75:c8:96:0e:bb:f5:4e:
11:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:A3:3B:38:57:5F:28:D8:FB:D1:C8:7D:C9:A7:9E:8C:67:C4:4D:07
X509v3 Authority Key Identifier:
keyid:7B:73:2B:6E:57:10:BA:82:89:CF:F4:BB:22:6B:75:BC:4B:07:81:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3MrblcQuoKJz_S7Imt1vEsHgZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/3391ce-a795-401f-839d-a4d0d10c9016/1/_6M7OFdfKNj70ch9yaeejGfETQc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/3391ce-a795-401f-839d-a4d0d10c9016/1/e3MrblcQuoKJz_S7Imt1vEsHgZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.115.60.0/23
IPv6:
2a05:840:50::/48
Signature Algorithm: sha256WithRSAEncryption
99:ed:3f:e8:1c:e5:96:88:8e:11:21:87:0c:6d:cf:8a:d0:4f:
2b:23:52:27:46:4c:2f:cc:3b:84:41:8e:31:b2:61:1d:0d:ac:
de:5f:62:4e:7e:80:0e:8f:3d:52:77:6e:43:43:51:e1:b6:76:
d1:e9:d9:92:39:c8:77:1d:02:9c:2d:43:c7:4f:3b:83:bd:7e:
e2:56:65:97:d9:a0:2a:e9:bd:03:cf:38:2b:8b:42:d7:59:11:
36:e9:21:d8:03:bc:78:dd:0b:ce:c0:d9:a3:4d:86:33:89:5a:
5e:ed:f1:d2:f8:62:24:ff:b6:3d:75:8c:fc:61:d8:9a:08:7f:
db:8a:88:16:58:a7:6e:ba:08:72:03:59:b9:ec:6f:07:6d:ca:
05:1a:0e:ee:6e:40:73:6a:dd:e0:7f:f6:99:5a:86:d1:8e:c8:
5d:0d:75:5a:a6:ca:29:4e:9c:64:5f:57:de:ef:aa:b7:5a:01:
bf:f7:4e:4c:34:0f:6c:d7:f1:bd:51:4c:51:d7:b4:38:35:61:
c7:04:8a:e1:cb:15:e6:47:b9:9a:0e:f8:0d:b7:7a:ba:ea:42:
6c:f9:45:a3:92:f2:d3:1e:e6:8e:b7:78:a2:0c:f4:ed:5d:bf:
f2:cb:f3:1f:bf:8c:78:c7:2b:81:92:88:f8:72:3e:7d:f8:0a:
2d:e3:f5:56
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZkG7KXRWZlWhYjIURknnb1bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiNzMyYjZlNTcxMGJhODI4OWNmZjRiYjIyNmI3NWJjNGIw
NzgxOWYwHhcNMjUwOTAxMjAxNjM2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZmEzM2IzODU3NWYyOGQ4ZmJkMWM4N2RjOWE3OWU4YzY3YzQ0ZDA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQ+RNr7bbIF53ZI46iK/PyCzeddg
JxHe+IzCu2FNQdUF0dfBuY169OnI3/BkD+RcAk50hLNZBQ7O9fRCShWsXb6G38je
jP9rdizHOmKVa3talxPTANvJOPsgi5ZQOZbZUB56BDthho8kGW0E9aEkgEPTGHWI
2G+0+6uJdi6HUBDQE9s1j8KTTI9fk8caojWhe6kgpnrAYUR8q4WNgDSnmLMNVpmS
XFcNLfOxB/tP0QMFuWT2ZxC7GDVz4diV1/JiRS280NRvUiX1dAz6MxOedZBUBTCN
9ZSMGbGiCoppyfX+oFZkbt4ZQGXJ4Kmtva0v1DwLt8D6GHXIlg679U4RLwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFP+jOzhXXyjY+9HIfcmnnoxnxE0HMB8GA1UdIwQY
MBaAFHtzK25XELqCic/0uyJrdbxLB4GfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTNNcmJsY1F1b0tKel9TN0ltdDF2RXNIZ1o4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8zMzkxY2UtYTc5NS00MDFmLTgzOWQt
YTRkMGQxMGM5MDE2LzEvXzZNN09GZGZLTmo3MGNoOXlhZWVqR2ZFVFFjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC8zMzkxY2UtYTc5NS00MDFmLTgzOWQtYTRkMGQxMGM5MDE2
LzEvZTNNcmJsY1F1b0tKel9TN0ltdDF2RXNIZ1o4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBXXM8MA8E
AgACMAkDBwAqBQhAAFAwDQYJKoZIhvcNAQELBQADggEBAJntP+gc5ZaIjhEhhwxt
z4rQTysjUidGTC/MO4RBjjGyYR0NrN5fYk5+gA6PPVJ3bkNDUeG2dtHp2ZI5yHcd
ApwtQ8dPO4O9fuJWZZfZoCrpvQPPOCuLQtdZETbpIdgDvHjdC87A2aNNhjOJWl7t
8dL4YiT/tj11jPxh2JoIf9uKiBZYp266CHIDWbnsbwdtygUaDu5uQHNq3eB/9pla
htGOyF0NdVqmyilOnGRfV97vqrdaAb/3Tkw0D2zX8b1RTFHXtDg1YccEiuHLFeZH
uZoO+A23errqQmz5RaOS8tMe5o63eKIM9O1dv/LL8x+/jHjHK4GSiPhyPn34Ci3j
9VY=
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:23:09 2025 by rpki-client