Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8f076d-f0e9-42b4-ad5f-7312063ffa7f/1/G_qyBKK6ClXdG1bs8Wh_ckDLkeI.roa
File: G_qyBKK6ClXdG1bs8Wh_ckDLkeI.roa (raw, json)
Hash identifier: 05zKtGqeHJmsZPaIinYmSC+r/nrmG7SF+AMON4UTZOQ=
Subject key identifier: 1B:FA:B2:04:A2:BA:0A:55:DD:1B:56:EC:F1:68:7F:72:40:CB:91:E2
Certificate issuer: /CN=6342600bf1cc9216ae6fe169a1e9d5418ad93a22
Certificate serial: 0199710F79E7008A004A91DDFA3527C87265
Authority key identifier: 63:42:60:0B:F1:CC:92:16:AE:6F:E1:69:A1:E9:D5:41:8A:D9:3A:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0JgC_HMkhaub-FpoenVQYrZOiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/8f076d-f0e9-42b4-ad5f-7312063ffa7f/1/G_qyBKK6ClXdG1bs8Wh_ckDLkeI.roa
Signing time: Mon 22 Sep 2025 10:54:23 +0000
ROA not before: Mon 22 Sep 2025 10:54:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215810
IP address blocks: 46.173.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/8f076d-f0e9-42b4-ad5f-7312063ffa7f/1/Y0JgC_HMkhaub-FpoenVQYrZOiI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/8f076d-f0e9-42b4-ad5f-7312063ffa7f/1/Y0JgC_HMkhaub-FpoenVQYrZOiI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y0JgC_HMkhaub-FpoenVQYrZOiI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 03:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:71:0f:79:e7:00:8a:00:4a:91:dd:fa:35:27:c8:72:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6342600bf1cc9216ae6fe169a1e9d5418ad93a22
Validity
Not Before: Sep 22 10:54:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1bfab204a2ba0a55dd1b56ecf1687f7240cb91e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:08:5d:88:a2:0d:a4:f6:c0:83:d0:28:43:5c:
d3:72:fd:63:3c:1a:94:bd:b0:1f:2b:80:da:6a:ce:
35:ea:ce:32:90:d7:18:fa:a3:cb:f9:6a:ba:ee:55:
29:52:e9:36:95:47:84:0a:30:ac:59:0c:b0:2c:31:
b2:fd:de:13:09:c3:82:2c:9e:4b:74:e9:43:3c:e3:
10:ec:6c:0f:e2:37:54:f2:4f:fe:c3:0d:e0:fb:89:
19:2c:10:54:c4:86:7d:f1:b1:20:cd:d4:51:38:80:
68:9b:af:6f:3e:ca:fa:b1:62:8b:dd:89:45:0f:2c:
3e:71:b5:c8:c8:a6:0f:49:eb:e3:0a:38:c9:68:53:
41:ca:c7:40:3d:37:3e:89:a8:4b:83:70:8e:e6:a9:
ce:ec:34:8c:fc:ab:7d:fd:bb:1d:e4:fe:17:53:38:
0a:08:c5:2e:58:20:d4:57:07:23:92:fd:d5:e5:4f:
86:62:30:c3:7a:00:90:94:a7:b2:d7:7f:dc:3f:34:
32:34:5a:1e:44:bc:40:8e:30:88:9d:ea:fc:bf:a1:
96:e8:ed:e1:2e:72:40:79:e0:11:54:8e:04:3d:1e:
be:27:e3:24:8f:6c:0b:47:d1:05:de:63:cd:15:4a:
4a:41:c1:af:ed:a8:ad:18:c5:63:6d:84:21:9c:aa:
75:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:FA:B2:04:A2:BA:0A:55:DD:1B:56:EC:F1:68:7F:72:40:CB:91:E2
X509v3 Authority Key Identifier:
keyid:63:42:60:0B:F1:CC:92:16:AE:6F:E1:69:A1:E9:D5:41:8A:D9:3A:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0JgC_HMkhaub-FpoenVQYrZOiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8f076d-f0e9-42b4-ad5f-7312063ffa7f/1/G_qyBKK6ClXdG1bs8Wh_ckDLkeI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8f076d-f0e9-42b4-ad5f-7312063ffa7f/1/Y0JgC_HMkhaub-FpoenVQYrZOiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.173.21.0/24
Signature Algorithm: sha256WithRSAEncryption
12:a4:f6:dd:2a:a0:1b:96:81:72:dc:10:3f:19:f2:d4:0b:b2:
8b:2f:2e:ea:a7:5b:d6:5f:ab:66:83:d1:1d:1a:2f:2d:ef:3d:
26:e8:24:32:03:1e:1c:7f:56:3b:c7:92:cc:86:37:63:3c:f8:
e5:a7:b3:86:f9:e3:97:60:0a:6f:b4:24:4c:f0:fc:ee:d6:cf:
28:73:e1:c7:97:cf:6a:4b:b6:9f:d6:8f:4e:59:cf:57:80:a5:
f0:76:0e:df:7b:06:07:c1:95:9c:09:19:dc:84:54:28:9d:af:
c6:0c:7e:97:6f:ff:1d:fd:1d:5d:2d:05:4a:40:c8:1f:05:1d:
c2:2f:08:55:89:0c:c0:67:df:15:0b:ca:31:69:22:68:95:86:
89:9f:fa:ec:21:65:71:3d:d7:d3:a7:fc:f1:6d:ed:d5:32:11:
21:4b:51:f3:1d:df:f5:39:1d:fb:01:e1:0d:8c:b4:31:52:1d:
a4:9d:1e:28:be:73:ec:d8:ee:00:4c:ad:84:8a:66:e1:dc:1f:
ea:f0:13:d5:d5:88:4a:19:37:3a:db:b9:7c:5f:38:82:7b:53:
39:17:96:3e:d6:31:3b:61:d3:46:e2:d9:ca:81:ab:62:fb:5f:
75:0b:73:2d:bb:72:ab:71:bd:03:e1:41:a0:7c:12:83:ea:0e:
fe:c8:69:2b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZlxD3nnAIoASpHd+jUnyHJlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzNDI2MDBiZjFjYzkyMTZhZTZmZTE2OWExZTlkNTQxOGFk
OTNhMjIwHhcNMjUwOTIyMTA1NDIzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYmZhYjIwNGEyYmEwYTU1ZGQxYjU2ZWNmMTY4N2Y3MjQwY2I5MWUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3QhdiKINpPbAg9AoQ1zTcv1jPBqU
vbAfK4Daas416s4ykNcY+qPL+Wq67lUpUuk2lUeECjCsWQywLDGy/d4TCcOCLJ5L
dOlDPOMQ7GwP4jdU8k/+ww3g+4kZLBBUxIZ98bEgzdRROIBom69vPsr6sWKL3YlF
Dyw+cbXIyKYPSevjCjjJaFNBysdAPTc+iahLg3CO5qnO7DSM/Kt9/bsd5P4XUzgK
CMUuWCDUVwcjkv3V5U+GYjDDegCQlKey13/cPzQyNFoeRLxAjjCIner8v6GW6O3h
LnJAeeARVI4EPR6+J+Mkj2wLR9EF3mPNFUpKQcGv7aitGMVjbYQhnKp10wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBv6sgSiugpV3RtW7PFof3JAy5HiMB8GA1UdIwQY
MBaAFGNCYAvxzJIWrm/haaHp1UGK2ToiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTBKZ0NfSE1raGF1Yi1GcG9lblZRWXJaT2lJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC84ZjA3NmQtZjBlOS00MmI0LWFkNWYt
NzMxMjA2M2ZmYTdmLzEvR19xeUJLSzZDbFhkRzFiczhXaF9ja0RMa2VJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC84ZjA3NmQtZjBlOS00MmI0LWFkNWYtNzMxMjA2M2ZmYTdm
LzEvWTBKZ0NfSE1raGF1Yi1GcG9lblZRWXJaT2lJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALq0VMA0G
CSqGSIb3DQEBCwUAA4IBAQASpPbdKqAbloFy3BA/GfLUC7KLLy7qp1vWX6tmg9Ed
Gi8t7z0m6CQyAx4cf1Y7x5LMhjdjPPjlp7OG+eOXYApvtCRM8Pzu1s8oc+HHl89q
S7af1o9OWc9XgKXwdg7fewYHwZWcCRnchFQona/GDH6Xb/8d/R1dLQVKQMgfBR3C
LwhViQzAZ98VC8oxaSJolYaJn/rsIWVxPdfTp/zxbe3VMhEhS1HzHd/1OR37AeEN
jLQxUh2knR4ovnPs2O4ATK2Eimbh3B/q8BPV1YhKGTc627l8XziCe1M5F5Y+1jE7
YdNG4tnKgati+191C3Mtu3Krcb0D4UGgfBKD6g7+yGkr
-----END CERTIFICATE-----
Generated at Mon Oct 20 11:54:08 2025 by rpki-client