Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/yV6fiEspLXOEx7U1Asa7uW-HDiw.roa
File: yV6fiEspLXOEx7U1Asa7uW-HDiw.roa (raw, json)
Hash identifier: RlXdlJwRE38rpzhsxwT5lygoPGRsWFRdfhjDcsqFbQE=
Subject key identifier: C9:5E:9F:88:4B:29:2D:73:84:C7:B5:35:02:C6:BB:B9:6F:87:0E:2C
Certificate issuer: /CN=9fe94d2eedcd824ac1de74ade36c1f9d69d496ca
Certificate serial: 0198F0AA70AAEFF1DABA1EFFFF7645D2ACA3
Authority key identifier: 9F:E9:4D:2E:ED:CD:82:4A:C1:DE:74:AD:E3:6C:1F:9D:69:D4:96:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n-lNLu3NgkrB3nSt42wfnWnUlso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/yV6fiEspLXOEx7U1Asa7uW-HDiw.roa
Signing time: Thu 28 Aug 2025 12:32:38 +0000
ROA not before: Thu 28 Aug 2025 12:32:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58006
IP address blocks: 176.122.206.0/24 maxlen: 24
176.122.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/n-lNLu3NgkrB3nSt42wfnWnUlso.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/n-lNLu3NgkrB3nSt42wfnWnUlso.mft
rsync://rpki.ripe.net/repository/DEFAULT/n-lNLu3NgkrB3nSt42wfnWnUlso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:f0:aa:70:aa:ef:f1:da:ba:1e:ff:ff:76:45:d2:ac:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fe94d2eedcd824ac1de74ade36c1f9d69d496ca
Validity
Not Before: Aug 28 12:32:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c95e9f884b292d7384c7b53502c6bbb96f870e2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:48:cd:22:a7:88:fc:e3:72:c4:7d:60:32:9b:
5d:91:5f:6d:f3:ee:b1:17:96:ac:2b:84:17:ee:a1:
c0:cc:fe:0a:eb:1f:16:2c:57:8b:b5:d3:69:1b:c1:
6e:53:83:5c:a5:97:04:5c:92:74:ed:e4:a2:5e:8b:
51:4f:f6:e5:f9:7e:e7:61:cb:f6:53:20:c7:84:b4:
9e:3b:30:86:95:88:94:24:8b:5b:ae:3d:73:4d:da:
e6:a2:ef:75:60:2b:83:11:25:42:2e:cb:be:99:2c:
31:51:74:6f:3c:1b:af:8e:58:e0:9b:8b:dc:1a:01:
34:a3:23:e0:19:d4:d8:b9:4a:a5:49:39:03:cf:df:
98:3a:e8:88:31:25:f4:6c:2c:63:69:74:a5:ca:1c:
36:23:56:46:76:d3:55:cb:9f:e1:57:89:f3:e1:87:
dc:39:e9:da:0c:0f:a8:ea:fe:ba:9c:b3:bd:e3:66:
9e:93:43:5d:46:b2:02:ff:f8:b9:38:04:73:6b:f7:
7a:18:b4:ac:fc:62:df:13:88:c0:ee:89:7a:d1:83:
91:b5:e6:3d:3c:b0:6c:76:6c:00:ac:8f:0f:2d:50:
04:33:e1:db:92:37:49:b3:63:ba:f0:a9:b4:7c:97:
57:46:75:04:9c:66:d3:51:51:d8:6d:40:39:a4:e2:
84:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:5E:9F:88:4B:29:2D:73:84:C7:B5:35:02:C6:BB:B9:6F:87:0E:2C
X509v3 Authority Key Identifier:
keyid:9F:E9:4D:2E:ED:CD:82:4A:C1:DE:74:AD:E3:6C:1F:9D:69:D4:96:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n-lNLu3NgkrB3nSt42wfnWnUlso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/yV6fiEspLXOEx7U1Asa7uW-HDiw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/n-lNLu3NgkrB3nSt42wfnWnUlso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.122.206.0/23
Signature Algorithm: sha256WithRSAEncryption
14:0e:51:47:55:cc:4e:6e:65:94:82:b0:4f:5a:bb:44:32:7b:
07:ec:32:e3:24:df:53:0b:de:23:50:52:be:a1:47:3f:48:ff:
7b:3f:28:67:96:9a:8d:f3:0a:bc:0e:8c:fe:19:74:c7:a3:36:
ef:f4:84:4f:0f:5d:a9:68:66:95:63:45:2b:d8:ac:ca:50:c5:
94:2a:c2:7d:6c:59:56:40:4f:eb:21:db:f9:bf:e0:17:68:f2:
53:08:e8:99:70:3d:fe:2d:25:f3:60:fc:20:e5:e7:65:c2:8b:
e8:6e:d3:46:2f:2b:fd:02:14:04:eb:10:fc:b9:db:50:40:0a:
2e:45:9b:47:d6:cd:85:a7:0f:9f:9d:04:2c:54:81:3c:37:ea:
d4:f2:d2:32:49:6b:8f:29:ab:a8:e5:03:85:ca:2a:ef:c2:77:
18:07:36:1c:bb:cf:ce:67:65:4f:bb:fc:ef:7a:3d:33:ad:43:
81:b8:98:ff:42:c5:9f:26:f4:d7:8b:56:a3:ad:78:01:c2:d9:
23:2d:dd:4f:80:b0:cc:a6:d0:5f:9f:a7:ba:e9:68:47:42:d4:
f2:f9:67:3f:05:3b:d9:94:92:7c:dd:51:af:57:a3:00:08:2a:
b8:81:94:aa:28:43:52:b1:97:83:1b:85:52:79:f3:61:a9:39:
85:48:2a:60
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZjwqnCq7/Hauh7//3ZF0qyjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmZTk0ZDJlZWRjZDgyNGFjMWRlNzRhZGUzNmMxZjlkNjlk
NDk2Y2EwHhcNMjUwODI4MTIzMjM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOTVlOWY4ODRiMjkyZDczODRjN2I1MzUwMmM2YmJiOTZmODcwZTJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUjNIqeI/ONyxH1gMptdkV9t8+6x
F5asK4QX7qHAzP4K6x8WLFeLtdNpG8FuU4NcpZcEXJJ07eSiXotRT/bl+X7nYcv2
UyDHhLSeOzCGlYiUJItbrj1zTdrmou91YCuDESVCLsu+mSwxUXRvPBuvjljgm4vc
GgE0oyPgGdTYuUqlSTkDz9+YOuiIMSX0bCxjaXSlyhw2I1ZGdtNVy5/hV4nz4Yfc
OenaDA+o6v66nLO942aek0NdRrIC//i5OARza/d6GLSs/GLfE4jA7ol60YORteY9
PLBsdmwArI8PLVAEM+HbkjdJs2O68Km0fJdXRnUEnGbTUVHYbUA5pOKEwQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMlen4hLKS1zhMe1NQLGu7lvhw4sMB8GA1UdIwQY
MBaAFJ/pTS7tzYJKwd50reNsH51p1JbKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbi1sTkx1M05na3JCM25TdDQyd2ZuV25VbHNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82NjBlNTQtNWM4NS00ZDI1LThlNjEt
N2NhMTFkYzNhZTgyLzEveVY2ZmlFc3BMWE9FeDdVMUFzYTd1Vy1IRGl3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC82NjBlNTQtNWM4NS00ZDI1LThlNjEtN2NhMTFkYzNhZTgy
LzEvbi1sTkx1M05na3JCM25TdDQyd2ZuV25VbHNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBsHrOMA0G
CSqGSIb3DQEBCwUAA4IBAQAUDlFHVcxObmWUgrBPWrtEMnsH7DLjJN9TC94jUFK+
oUc/SP97PyhnlpqN8wq8Doz+GXTHozbv9IRPD12paGaVY0Ur2KzKUMWUKsJ9bFlW
QE/rIdv5v+AXaPJTCOiZcD3+LSXzYPwg5edlwovobtNGLyv9AhQE6xD8udtQQAou
RZtH1s2Fpw+fnQQsVIE8N+rU8tIySWuPKauo5QOFyirvwncYBzYcu8/OZ2VPu/zv
ej0zrUOBuJj/QsWfJvTXi1ajrXgBwtkjLd1PgLDMptBfn6e66WhHQtTy+Wc/BTvZ
lJJ83VGvV6MACCq4gZSqKENSsZeDG4VSefNhqTmFSCpg
-----END CERTIFICATE-----
Generated at Sun Oct 19 21:09:09 2025 by rpki-client