Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/1-6_T1UR8RxQNCrO4uIs7DkXrQDQ.roa
File: 1-6_T1UR8RxQNCrO4uIs7DkXrQDQ.roa (raw, json)
Hash identifier: 9REY9ixrC0cn2b75D6q+Nm3sD55qb7ERu5o3EziHF5s=
Subject key identifier: FB:AF:D3:D5:44:7C:47:14:0D:0A:B3:B8:B8:8B:3B:0E:45:EB:40:34
Certificate issuer: /CN=1c7ad7754795ddd605f28838bb7cc359df7a266a
Certificate serial: 0199631104B49BFB33DA8F9D982E1819A781
Authority key identifier: 1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/1-6_T1UR8RxQNCrO4uIs7DkXrQDQ.roa
Signing time: Fri 19 Sep 2025 17:41:23 +0000
ROA not before: Fri 19 Sep 2025 17:41:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 54252
IP address blocks: 91.234.22.0/24 maxlen: 24
194.59.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:63:11:04:b4:9b:fb:33:da:8f:9d:98:2e:18:19:a7:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c7ad7754795ddd605f28838bb7cc359df7a266a
Validity
Not Before: Sep 19 17:41:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fbafd3d5447c47140d0ab3b8b88b3b0e45eb4034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ff:36:2c:6f:40:63:d2:66:15:f9:0f:14:99:
74:7a:a4:7e:de:c4:a1:2e:9e:9a:4f:f5:fc:9b:8c:
c6:32:81:ed:fa:04:92:28:41:f7:c6:6f:4c:db:11:
f4:3c:72:80:51:40:da:c5:39:7c:5b:51:19:53:79:
90:d0:06:12:58:5e:11:31:7f:6c:25:d3:1a:b8:6a:
ed:24:f2:6f:42:6d:1e:17:e2:73:2a:62:b6:b0:79:
76:d1:91:57:f0:a1:5f:3b:75:10:f7:6e:3d:64:6c:
c4:07:72:03:83:41:a4:93:1d:76:d5:33:c4:f8:cf:
21:bd:fa:89:c7:d0:41:e8:de:07:62:da:8d:67:8e:
ec:68:ba:27:05:f0:56:13:10:ca:82:fc:93:1e:8c:
45:3f:3a:6f:b3:36:82:aa:96:2e:ad:1c:1b:c2:56:
d4:4c:27:b5:97:90:ac:cf:e0:ac:ee:5f:ac:c1:96:
02:16:0d:32:33:49:6c:fe:7c:26:2d:22:b7:76:3f:
32:9a:08:0b:f9:63:49:dc:63:ea:86:31:55:bb:7b:
56:7f:e4:93:87:75:95:46:d6:50:68:74:7f:6b:00:
e4:cd:a6:f1:17:30:16:17:da:5a:e1:05:f8:3a:c1:
38:16:32:89:06:65:a5:0f:9b:c1:35:3a:bf:ff:27:
3b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:AF:D3:D5:44:7C:47:14:0D:0A:B3:B8:B8:8B:3B:0E:45:EB:40:34
X509v3 Authority Key Identifier:
keyid:1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/1-6_T1UR8RxQNCrO4uIs7DkXrQDQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.234.22.0/24
194.59.6.0/24
Signature Algorithm: sha256WithRSAEncryption
90:c7:ed:0f:c1:79:75:86:61:f0:d4:40:76:5b:4d:7e:f6:e9:
10:72:7e:c4:09:22:1d:d1:38:28:0b:be:a9:9e:50:77:1e:36:
5d:0b:30:37:b5:69:85:a7:d7:70:c3:60:e5:b6:68:ef:25:a5:
2d:e1:86:93:5e:94:fe:82:fc:41:fc:98:89:c5:04:40:41:b7:
40:b5:a3:e7:05:f4:16:6c:da:8f:75:6b:6f:aa:c5:3f:58:18:
60:9f:57:7b:35:72:98:51:0b:b1:19:a6:40:f6:4c:04:41:31:
68:cf:d5:36:a6:6b:45:7d:c4:5b:83:a0:85:64:c5:3e:47:6c:
3b:12:c9:b7:4d:22:ff:b9:c3:41:92:50:65:15:c6:3c:ae:fb:
11:d6:3c:3b:4a:ea:8f:2d:08:f7:3b:c5:71:9e:13:cf:14:78:
b9:a8:90:c7:ee:42:85:4f:07:e8:df:76:7a:b8:b0:c5:0c:64:
03:8c:cf:8d:eb:06:03:0e:9a:88:e0:d4:42:46:b0:b8:ac:ba:
51:ed:7c:6d:d8:e0:82:af:ea:e2:cc:72:b3:ef:c0:b4:d9:49:
79:cb:39:9a:1c:ba:06:b2:32:cf:f6:c0:7f:40:5b:3c:17:85:
26:a9:2d:2c:ae:7a:66:fb:ea:d8:09:da:34:2c:1c:0b:01:01:
e1:51:e2:08
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgISAZljEQS0m/sz2o+dmC4YGaeBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjN2FkNzc1NDc5NWRkZDYwNWYyODgzOGJiN2NjMzU5ZGY3
YTI2NmEwHhcNMjUwOTE5MTc0MTIzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYmFmZDNkNTQ0N2M0NzE0MGQwYWIzYjhiODhiM2IwZTQ1ZWI0MDM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsP82LG9AY9JmFfkPFJl0eqR+3sSh
Lp6aT/X8m4zGMoHt+gSSKEH3xm9M2xH0PHKAUUDaxTl8W1EZU3mQ0AYSWF4RMX9s
JdMauGrtJPJvQm0eF+JzKmK2sHl20ZFX8KFfO3UQ9249ZGzEB3IDg0Gkkx121TPE
+M8hvfqJx9BB6N4HYtqNZ47saLonBfBWExDKgvyTHoxFPzpvszaCqpYurRwbwlbU
TCe1l5Csz+Cs7l+swZYCFg0yM0ls/nwmLSK3dj8ymggL+WNJ3GPqhjFVu3tWf+ST
h3WVRtZQaHR/awDkzabxFzAWF9pa4QX4OsE4FjKJBmWlD5vBNTq//yc7WwIDAQAB
o4ICEDCCAgwwHQYDVR0OBBYEFPuv09VEfEcUDQqzuLiLOw5F60A0MB8GA1UdIwQY
MBaAFBx613VHld3WBfKIOLt8w1nfeiZqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEhyWGRVZVYzZFlGOG9nNHUzekRXZDk2Sm1vLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9jNWE5ZTMtNjcyMi00YjZhLWJlNTgt
YWRhNWMyMGUzZjdiLzEvMS02X1QxVVI4UnhRTkNyTzR1SXM3RGtYclFEUS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvYmEvYzVhOWUzLTY3MjItNGI2YS1iZTU4LWFkYTVjMjBlM2Y3
Yi8xL0hIclhkVWVWM2RZRjhvZzR1M3pEV2Q5Nkptby5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAFvqFgME
AMI7BjANBgkqhkiG9w0BAQsFAAOCAQEAkMftD8F5dYZh8NRAdltNfvbpEHJ+xAki
HdE4KAu+qZ5Qdx42XQswN7VphafXcMNg5bZo7yWlLeGGk16U/oL8QfyYicUEQEG3
QLWj5wX0Fmzaj3Vrb6rFP1gYYJ9XezVymFELsRmmQPZMBEExaM/VNqZrRX3EW4Og
hWTFPkdsOxLJt00i/7nDQZJQZRXGPK77EdY8O0rqjy0I9zvFcZ4TzxR4uaiQx+5C
hU8H6N92eriwxQxkA4zPjesGAw6aiODUQkawuKy6Ue18bdjggq/q4sxys+/AtNlJ
ecs5mhy6BrIyz/bAf0BbPBeFJqktLK56Zvvq2AnaNCwcCwEB4VHiCA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 01:55:25 2025 by rpki-client