Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/8d6759-506f-4f0a-bc36-5047cb327d9e/1/g1q1X1vaFeQn5xUDKlEZZNnkMq4.roa
File: g1q1X1vaFeQn5xUDKlEZZNnkMq4.roa (raw, json)
Hash identifier: BhX3ai6MXXM39hpgWifIF0fPiVBPvolxXocXWL46aJA=
Subject key identifier: 83:5A:B5:5F:5B:DA:15:E4:27:E7:15:03:2A:51:19:64:D9:E4:32:AE
Certificate issuer: /CN=e35607a494200ff1f3d599e25fc013f38640cd46
Certificate serial: 0199E36A9937A06B8BF1585711D5E395E127
Authority key identifier: E3:56:07:A4:94:20:0F:F1:F3:D5:99:E2:5F:C0:13:F3:86:40:CD:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/41YHpJQgD_Hz1ZniX8AT84ZAzUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/8d6759-506f-4f0a-bc36-5047cb327d9e/1/g1q1X1vaFeQn5xUDKlEZZNnkMq4.roa
Signing time: Tue 14 Oct 2025 15:50:38 +0000
ROA not before: Tue 14 Oct 2025 15:50:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215261
IP address blocks: 94.156.37.0/24 maxlen: 24
2001:67c:fac::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/8d6759-506f-4f0a-bc36-5047cb327d9e/1/41YHpJQgD_Hz1ZniX8AT84ZAzUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/8d6759-506f-4f0a-bc36-5047cb327d9e/1/41YHpJQgD_Hz1ZniX8AT84ZAzUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/41YHpJQgD_Hz1ZniX8AT84ZAzUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e3:6a:99:37:a0:6b:8b:f1:58:57:11:d5:e3:95:e1:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e35607a494200ff1f3d599e25fc013f38640cd46
Validity
Not Before: Oct 14 15:50:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=835ab55f5bda15e427e715032a511964d9e432ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4e:72:af:68:a0:6a:2e:63:c8:9e:c1:18:ef:
dc:9f:fd:95:0d:ee:b5:cd:e8:7b:ce:c5:a2:54:36:
dc:d2:27:0a:b5:74:b1:f2:15:e9:46:ff:93:dc:ff:
5b:2b:08:2c:41:01:20:85:53:5e:fe:9c:19:02:13:
a9:d7:7c:f2:8c:1b:40:25:cf:df:df:58:95:37:5e:
51:e2:6d:d0:0a:b2:af:22:77:dd:38:a3:74:0a:a5:
e4:a2:de:b2:9f:5f:49:4d:7b:c6:68:0b:86:fb:81:
9b:5b:89:0c:ff:fa:8e:00:f7:d0:06:ff:60:bf:a4:
0b:d3:c2:aa:56:71:e8:63:39:93:54:0d:11:3d:a6:
12:b7:0e:70:b6:96:8b:cf:31:ec:d3:e6:83:65:43:
0d:aa:5f:ba:bc:4d:ff:bf:ef:da:96:81:86:ee:a9:
60:37:6c:e7:a4:26:9d:ef:db:51:c2:ae:e1:e9:7d:
ba:4b:0c:f8:d7:8f:fe:b0:3c:3c:9a:21:29:43:c2:
c7:1c:e3:1d:83:ef:c3:91:02:63:62:77:04:19:8d:
8d:c0:10:c6:e5:1b:bc:a5:a7:8e:d5:06:48:47:88:
98:b6:e3:84:c2:51:8c:46:3a:f9:bd:15:f2:da:08:
f9:52:ab:09:e5:07:5b:61:5f:1d:47:bb:71:28:5e:
0c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:5A:B5:5F:5B:DA:15:E4:27:E7:15:03:2A:51:19:64:D9:E4:32:AE
X509v3 Authority Key Identifier:
keyid:E3:56:07:A4:94:20:0F:F1:F3:D5:99:E2:5F:C0:13:F3:86:40:CD:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/41YHpJQgD_Hz1ZniX8AT84ZAzUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8d6759-506f-4f0a-bc36-5047cb327d9e/1/g1q1X1vaFeQn5xUDKlEZZNnkMq4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8d6759-506f-4f0a-bc36-5047cb327d9e/1/41YHpJQgD_Hz1ZniX8AT84ZAzUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.156.37.0/24
IPv6:
2001:67c:fac::/48
Signature Algorithm: sha256WithRSAEncryption
23:94:45:54:ba:61:02:8f:63:38:20:ce:e0:ab:ff:f2:c2:10:
2b:5f:cd:11:ad:5e:5c:6d:b7:83:05:01:b8:be:8d:ce:89:63:
0e:d5:95:98:dc:0d:65:20:16:66:dc:e7:c9:8e:f6:60:41:9b:
89:04:c1:d4:86:18:85:2f:a8:60:8c:aa:f9:01:f8:fc:fa:5b:
07:88:eb:d7:1b:af:0c:15:9e:fb:33:b2:6e:a8:36:75:79:9e:
69:0d:46:1d:0e:2b:cb:cd:6e:20:6b:6c:da:81:de:a1:0d:43:
29:1a:44:93:3d:b9:e3:60:1c:2e:48:ea:bf:19:db:7f:a4:42:
4a:c3:65:96:83:a1:5a:48:7e:5b:ee:1b:9f:17:9b:18:09:16:
d6:2d:55:64:1c:cc:f1:37:02:66:d6:d8:17:4d:00:8b:c2:98:
f7:59:57:df:e2:66:b5:ab:07:cc:d4:c7:fd:0a:89:ff:0b:41:
4e:f3:2e:62:31:7b:45:13:ea:35:fc:97:d9:4c:5e:7a:30:0c:
c6:21:9f:f0:8a:fb:e1:cd:01:7f:a1:59:8a:56:93:05:90:49:
e7:1a:c6:63:8d:03:69:f3:f4:37:30:69:1a:93:e7:97:6a:1a:
87:e3:e4:55:0c:8b:e9:64:2d:26:03:b8:32:8c:4a:9b:32:56:
7a:15:82:6b
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZnjapk3oGuL8VhXEdXjleEnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzNTYwN2E0OTQyMDBmZjFmM2Q1OTllMjVmYzAxM2YzODY0
MGNkNDYwHhcNMjUxMDE0MTU1MDM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MzVhYjU1ZjViZGExNWU0MjdlNzE1MDMyYTUxMTk2NGQ5ZTQzMmFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo05yr2igai5jyJ7BGO/cn/2VDe61
zeh7zsWiVDbc0icKtXSx8hXpRv+T3P9bKwgsQQEghVNe/pwZAhOp13zyjBtAJc/f
31iVN15R4m3QCrKvInfdOKN0CqXkot6yn19JTXvGaAuG+4GbW4kM//qOAPfQBv9g
v6QL08KqVnHoYzmTVA0RPaYStw5wtpaLzzHs0+aDZUMNql+6vE3/v+/aloGG7qlg
N2znpCad79tRwq7h6X26Swz414/+sDw8miEpQ8LHHOMdg+/DkQJjYncEGY2NwBDG
5Ru8paeO1QZIR4iYtuOEwlGMRjr5vRXy2gj5UqsJ5QdbYV8dR7txKF4MqwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFINatV9b2hXkJ+cVAypRGWTZ5DKuMB8GA1UdIwQY
MBaAFONWB6SUIA/x89WZ4l/AE/OGQM1GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDFZSHBKUWdEX0h6MVpuaVg4QVQ4NFpBelVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy84ZDY3NTktNTA2Zi00ZjBhLWJjMzYt
NTA0N2NiMzI3ZDllLzEvZzFxMVgxdmFGZVFuNXhVREtsRVpaTm5rTXE0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy84ZDY3NTktNTA2Zi00ZjBhLWJjMzYtNTA0N2NiMzI3ZDll
LzEvNDFZSHBKUWdEX0h6MVpuaVg4QVQ4NFpBelVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAXpwlMA8E
AgACMAkDBwAgAQZ8D6wwDQYJKoZIhvcNAQELBQADggEBACOURVS6YQKPYzggzuCr
//LCECtfzRGtXlxtt4MFAbi+jc6JYw7VlZjcDWUgFmbc58mO9mBBm4kEwdSGGIUv
qGCMqvkB+Pz6WweI69cbrwwVnvszsm6oNnV5nmkNRh0OK8vNbiBrbNqB3qENQyka
RJM9ueNgHC5I6r8Z23+kQkrDZZaDoVpIflvuG58XmxgJFtYtVWQczPE3AmbW2BdN
AIvCmPdZV9/iZrWrB8zUx/0Kif8LQU7zLmIxe0UT6jX8l9lMXnowDMYhn/CK++HN
AX+hWYpWkwWQSecaxmONA2nz9DcwaRqT55dqGofj5FUMi+lkLSYDuDKMSpsyVnoV
gms=
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:35:54 2025 by rpki-client