Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/schVxcLi_65lH1A2TemMS4xoeKI.roa
File: schVxcLi_65lH1A2TemMS4xoeKI.roa (raw, json)
Hash identifier: G26ZU92J67QU7tCHqdeTryKRkasRzJr5JoJepYvpSa0=
Subject key identifier: B1:C8:55:C5:C2:E2:FF:AE:65:1F:50:36:4D:E9:8C:4B:8C:68:78:A2
Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Certificate serial: 0199C3CE421026E7FCF405C0841814B60DFF
Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/schVxcLi_65lH1A2TemMS4xoeKI.roa
Signing time: Wed 08 Oct 2025 12:31:38 +0000
ROA not before: Wed 08 Oct 2025 12:31:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 63199
IP address blocks: 95.173.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c3:ce:42:10:26:e7:fc:f4:05:c0:84:18:14:b6:0d:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Validity
Not Before: Oct 8 12:31:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b1c855c5c2e2ffae651f50364de98c4b8c6878a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b7:b9:0a:27:32:d7:d5:a1:e2:f4:9d:6b:66:
14:28:51:12:c1:df:e2:e2:dc:28:4c:08:2f:d5:d5:
1f:bc:c8:c5:87:42:33:a7:9c:d6:49:de:b6:bc:54:
74:2f:6f:9e:89:07:39:5a:cd:77:f4:c3:4a:dd:27:
89:cf:cc:c5:b2:5b:8a:96:aa:64:5e:50:4a:1d:46:
d5:74:2d:1c:b3:52:5f:97:6b:d3:ef:64:97:e8:68:
87:5c:3f:e4:a2:74:8f:6d:28:28:75:8d:ab:d8:27:
23:21:31:a4:b8:68:9e:7c:c2:3d:04:02:c7:4d:40:
88:b3:76:e6:b7:19:71:46:c4:a9:ec:4a:e3:0d:5a:
e1:3d:02:3c:1a:bb:b5:7a:4e:66:ee:60:b4:a2:32:
59:5e:71:ec:d5:8a:a2:e8:54:f7:b1:ef:06:d0:e5:
b9:c5:97:a7:ff:c3:52:cc:7a:3d:fd:a2:0a:7a:09:
05:65:26:12:b2:f1:e1:ca:49:a2:52:c6:21:1a:e9:
5b:60:96:c6:77:e1:f5:c4:13:52:a1:c7:34:05:c2:
0e:c6:bc:b9:05:f2:be:e0:7a:81:2d:6e:7b:9c:5b:
d5:d5:0a:23:6d:18:5f:42:8e:2d:d9:0d:6f:f3:46:
e9:36:8a:10:15:f0:45:81:e7:15:ca:c7:b9:87:21:
08:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:C8:55:C5:C2:E2:FF:AE:65:1F:50:36:4D:E9:8C:4B:8C:68:78:A2
X509v3 Authority Key Identifier:
keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/schVxcLi_65lH1A2TemMS4xoeKI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.173.54.0/24
Signature Algorithm: sha256WithRSAEncryption
87:1f:66:bf:42:0c:cc:04:38:9c:61:26:20:2e:e9:f0:8c:67:
a8:03:d0:15:de:29:6d:76:0e:f7:19:8b:be:15:37:9f:40:f7:
99:06:13:59:ad:0b:7e:d1:a8:40:03:ad:19:6d:e5:a7:b2:f2:
a5:7f:0f:4c:93:8d:38:0d:3e:88:f5:91:5e:f8:1f:79:bd:b9:
24:76:21:07:fc:02:1e:f1:0c:a4:00:4a:6c:f9:05:5d:c9:d3:
16:1b:99:a6:95:88:09:5f:8f:38:b8:72:bb:ec:f0:e6:02:4f:
88:40:21:03:03:39:c1:e4:f8:e8:c7:40:71:62:cd:59:ae:48:
28:81:a9:39:93:2f:73:52:5a:dd:f4:51:ac:be:ba:27:73:04:
c0:50:58:8a:a1:50:67:4c:f1:b5:7d:02:1f:e1:b1:3d:d2:b1:
8b:ae:9d:b6:e3:0e:d4:de:8e:f3:30:d7:86:8e:a3:d1:a3:fe:
9f:89:b0:91:71:7b:d4:a2:57:cc:f4:ce:61:6c:f8:f1:63:8f:
1c:3d:44:5a:99:14:e9:95:65:fe:94:0a:ea:60:62:37:5f:88:
c7:2c:b4:a8:ba:16:ab:8b:26:92:1c:93:de:d6:53:2d:3e:49:
13:e4:f8:1d:38:41:46:dc:42:e9:ed:64:12:5b:bb:e1:a4:d0:
11:f9:fd:8a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZnDzkIQJuf89AXAhBgUtg3/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjYxNzU4Y2UzMzA2MjI0NzBhMzlhZThkNmVmNGEyMDQ0
ZjgzYzQwHhcNMjUxMDA4MTIzMTM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMWM4NTVjNWMyZTJmZmFlNjUxZjUwMzY0ZGU5OGM0YjhjNjg3OGEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA07e5Cicy19Wh4vSda2YUKFESwd/i
4twoTAgv1dUfvMjFh0Izp5zWSd62vFR0L2+eiQc5Ws139MNK3SeJz8zFsluKlqpk
XlBKHUbVdC0cs1Jfl2vT72SX6GiHXD/konSPbSgodY2r2CcjITGkuGiefMI9BALH
TUCIs3bmtxlxRsSp7ErjDVrhPQI8Gru1ek5m7mC0ojJZXnHs1Yqi6FT3se8G0OW5
xZen/8NSzHo9/aIKegkFZSYSsvHhykmiUsYhGulbYJbGd+H1xBNSocc0BcIOxry5
BfK+4HqBLW57nFvV1QojbRhfQo4t2Q1v80bpNooQFfBFgecVyse5hyEIOQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLHIVcXC4v+uZR9QNk3pjEuMaHiiMB8GA1UdIwQY
MBaAFGBmF1jOMwYiRwo5ro1u9KIET4PEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9lZGQxMjgtNmQ2ZS00OWUzLWI3N2Ut
MWY4NzQ2OTQ1NDgzLzEvc2NoVnhjTGlfNjVsSDFBMlRlbU1TNHhvZUtJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9lZGQxMjgtNmQ2ZS00OWUzLWI3N2UtMWY4NzQ2OTQ1NDgz
LzEvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX602MA0G
CSqGSIb3DQEBCwUAA4IBAQCHH2a/QgzMBDicYSYgLunwjGeoA9AV3iltdg73GYu+
FTefQPeZBhNZrQt+0ahAA60ZbeWnsvKlfw9Mk404DT6I9ZFe+B95vbkkdiEH/AIe
8QykAEps+QVdydMWG5mmlYgJX484uHK77PDmAk+IQCEDAznB5Pjox0BxYs1Zrkgo
gak5ky9zUlrd9FGsvroncwTAUFiKoVBnTPG1fQIf4bE90rGLrp224w7U3o7zMNeG
jqPRo/6fibCRcXvUolfM9M5hbPjxY48cPURamRTplWX+lArqYGI3X4jHLLSouhar
iyaSHJPe1lMtPkkT5PgdOEFG3ELp7WQSW7vhpNAR+f2K
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:37:06 2025 by rpki-client