Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/rjAOeGQCTQyMZoRG4Z022m8KN8o.roa
File: rjAOeGQCTQyMZoRG4Z022m8KN8o.roa (raw, json)
Hash identifier: 35P0Nm9Y4NVT17MO0LbHCMl2O9jDGjPVXc264sSYKEY=
Subject key identifier: AE:30:0E:78:64:02:4D:0C:8C:66:84:46:E1:9D:36:DA:6F:0A:37:CA
Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Certificate serial: 0199BFD42F6925BB0638120D30D204D401A1
Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/rjAOeGQCTQyMZoRG4Z022m8KN8o.roa
Signing time: Tue 07 Oct 2025 17:59:38 +0000
ROA not before: Tue 07 Oct 2025 17:59:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25198
IP address blocks: 95.173.57.0/24 maxlen: 24
95.173.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:bf:d4:2f:69:25:bb:06:38:12:0d:30:d2:04:d4:01:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Validity
Not Before: Oct 7 17:59:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ae300e7864024d0c8c668446e19d36da6f0a37ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:90:99:9a:88:3d:ae:57:48:f2:9e:78:22:1f:
ae:4a:a5:ba:5e:1d:68:1f:f9:8b:87:69:79:19:7a:
3c:cd:d9:5b:d7:a0:6e:30:f1:30:4c:6e:02:9b:f9:
2c:d5:54:51:25:e0:8b:73:d2:35:f8:1c:89:7d:82:
99:c7:a8:27:28:87:2f:45:ca:fd:95:ae:07:c0:b6:
91:a4:f3:1d:30:81:f3:52:0c:9e:c3:fb:09:22:b3:
5b:97:7c:32:8d:da:86:79:ea:28:7a:7d:2c:bc:b6:
1d:34:7b:52:e1:e6:28:52:ba:09:cc:2d:81:28:fc:
ee:c6:3a:54:25:58:14:08:08:d3:aa:72:9f:45:dc:
e9:f2:a4:05:b0:61:9f:ad:c1:f3:9c:70:43:98:2a:
e4:47:b1:a9:46:ef:fb:32:24:6d:ff:51:7c:d6:95:
bd:73:b5:ff:0f:a4:8f:e5:bf:2e:4a:45:ab:e0:0b:
f5:54:87:8c:94:28:26:aa:6a:a9:aa:4b:ad:8c:d0:
a3:54:ae:dc:76:42:45:fa:05:eb:a1:f9:33:ec:37:
c0:2d:c0:4a:66:bc:54:ad:90:50:fa:d7:75:4c:f9:
c4:95:90:cd:2c:01:f0:66:e1:cd:eb:ee:76:71:ad:
ab:cf:41:ef:36:5a:3f:10:15:88:12:fc:1c:75:5f:
69:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:30:0E:78:64:02:4D:0C:8C:66:84:46:E1:9D:36:DA:6F:0A:37:CA
X509v3 Authority Key Identifier:
keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/rjAOeGQCTQyMZoRG4Z022m8KN8o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.173.57.0/24
95.173.60.0/24
Signature Algorithm: sha256WithRSAEncryption
29:09:6a:c2:70:ce:ad:16:b8:de:b7:5a:24:82:ce:d8:25:1c:
7a:24:6b:76:a9:d5:0d:19:7e:14:a0:b7:9d:5f:98:22:c7:99:
10:d9:35:62:68:16:aa:31:1d:f7:ac:40:c3:2b:af:d1:81:23:
9b:f5:8f:da:f3:1e:17:06:f1:4f:59:34:42:30:2f:20:8b:df:
2f:04:a4:b4:65:c4:11:e2:08:e7:f7:ea:47:68:b0:bd:03:ef:
7f:9c:73:dc:c1:dd:5c:ba:f2:66:7e:20:b1:57:5a:be:f3:d5:
fc:f7:3d:f7:de:a3:f5:45:ed:bf:89:18:b0:17:65:37:63:d9:
0c:01:49:e7:c1:0b:25:8d:3b:ca:dc:99:24:2b:8b:0a:fb:a9:
a5:2f:2e:c4:ad:d8:37:df:72:6c:3c:c3:bd:3d:15:8f:e6:a3:
a6:07:34:e0:ea:ef:f4:48:16:5d:59:e4:8e:c4:7c:aa:36:44:
6c:36:2b:9c:4f:5b:b5:a8:ed:0d:21:3d:25:5e:f9:62:06:2a:
58:5b:56:55:0f:3b:ff:2a:3a:5a:9c:3d:a3:79:b1:15:77:10:
a9:f5:15:ed:f9:3f:35:91:37:68:3d:f0:da:49:80:c0:e0:43:
89:c5:ed:77:f8:95:89:d9:f4:95:70:21:39:eb:c8:04:21:26:
18:07:f5:d3
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZm/1C9pJbsGOBINMNIE1AGhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjYxNzU4Y2UzMzA2MjI0NzBhMzlhZThkNmVmNGEyMDQ0
ZjgzYzQwHhcNMjUxMDA3MTc1OTM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZTMwMGU3ODY0MDI0ZDBjOGM2Njg0NDZlMTlkMzZkYTZmMGEzN2NhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZCZmog9rldI8p54Ih+uSqW6Xh1o
H/mLh2l5GXo8zdlb16BuMPEwTG4Cm/ks1VRRJeCLc9I1+ByJfYKZx6gnKIcvRcr9
la4HwLaRpPMdMIHzUgyew/sJIrNbl3wyjdqGeeooen0svLYdNHtS4eYoUroJzC2B
KPzuxjpUJVgUCAjTqnKfRdzp8qQFsGGfrcHznHBDmCrkR7GpRu/7MiRt/1F81pW9
c7X/D6SP5b8uSkWr4Av1VIeMlCgmqmqpqkutjNCjVK7cdkJF+gXrofkz7DfALcBK
ZrxUrZBQ+td1TPnElZDNLAHwZuHN6+52ca2rz0HvNlo/EBWIEvwcdV9pkwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFK4wDnhkAk0MjGaERuGdNtpvCjfKMB8GA1UdIwQY
MBaAFGBmF1jOMwYiRwo5ro1u9KIET4PEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9lZGQxMjgtNmQ2ZS00OWUzLWI3N2Ut
MWY4NzQ2OTQ1NDgzLzEvcmpBT2VHUUNUUXlNWm9SRzRaMDIybThLTjhvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9lZGQxMjgtNmQ2ZS00OWUzLWI3N2UtMWY4NzQ2OTQ1NDgz
LzEvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAX605AwQA
X608MA0GCSqGSIb3DQEBCwUAA4IBAQApCWrCcM6tFrjet1okgs7YJRx6JGt2qdUN
GX4UoLedX5gix5kQ2TViaBaqMR33rEDDK6/RgSOb9Y/a8x4XBvFPWTRCMC8gi98v
BKS0ZcQR4gjn9+pHaLC9A+9/nHPcwd1cuvJmfiCxV1q+89X89z333qP1Re2/iRiw
F2U3Y9kMAUnnwQsljTvK3JkkK4sK+6mlLy7Erdg333JsPMO9PRWP5qOmBzTg6u/0
SBZdWeSOxHyqNkRsNiucT1u1qO0NIT0lXvliBipYW1ZVDzv/KjpanD2jebEVdxCp
9RXt+T81kTdoPfDaSYDA4EOJxe13+JWJ2fSVcCE568gEISYYB/XT
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:36:46 2025 by rpki-client