Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/gxtC8l8oaWA1zjOrZ9ktdsPQQVU.roa
File: gxtC8l8oaWA1zjOrZ9ktdsPQQVU.roa (raw, json)
Hash identifier: vd/vsDbZHQEzR4RjmLN3O01yjktlXhyMf/QsrpGLKZc=
Subject key identifier: 83:1B:42:F2:5F:28:69:60:35:CE:33:AB:67:D9:2D:76:C3:D0:41:55
Certificate issuer: /CN=99ce569a14c2db3772f23187ce68e6541ec0048e
Certificate serial: 01999525BE511FA43765366CCABA074AA1B4
Authority key identifier: 99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/gxtC8l8oaWA1zjOrZ9ktdsPQQVU.roa
Signing time: Mon 29 Sep 2025 11:05:02 +0000
ROA not before: Mon 29 Sep 2025 11:05:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210539
IP address blocks: 185.162.90.0/24 maxlen: 24
185.165.154.0/24 maxlen: 24
185.170.128.0/24 maxlen: 24
185.170.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:95:25:be:51:1f:a4:37:65:36:6c:ca:ba:07:4a:a1:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99ce569a14c2db3772f23187ce68e6541ec0048e
Validity
Not Before: Sep 29 11:05:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=831b42f25f28696035ce33ab67d92d76c3d04155
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:11:c6:29:07:6c:07:ce:8c:c9:99:71:79:20:
e0:08:74:c2:4b:06:f0:3e:8f:af:86:e6:ed:e6:f9:
5e:f1:6e:07:b3:32:0b:38:a6:b7:83:b2:f2:b3:55:
6c:25:2a:41:68:88:c1:17:8f:92:ec:f5:ba:94:7d:
82:9c:33:b3:19:e3:e7:04:10:46:b2:bf:26:97:c0:
9a:8d:ca:db:c5:c9:a1:5d:f2:b1:3a:77:9a:3a:bd:
a5:8c:2e:94:7f:ac:07:16:20:65:8c:86:be:bb:f4:
1e:c0:01:db:c3:59:53:8f:0f:59:15:3b:f4:4a:68:
a8:c4:df:94:2d:dc:f8:06:43:b2:fb:47:21:9f:80:
93:ff:08:12:c4:ea:f2:29:36:df:eb:6c:58:78:2f:
12:76:7d:40:f3:e6:1e:01:87:5f:c2:61:06:c3:ce:
82:22:b3:1e:07:af:d3:d7:0d:c9:dd:f7:fb:2f:ed:
4d:ad:9f:d7:06:bd:f8:43:e3:e4:35:9a:cb:e8:d2:
a4:ca:df:24:24:e6:11:5f:38:5d:bc:f4:ad:a0:09:
a5:43:94:5f:0b:66:fc:48:7e:ab:29:0f:9d:78:b7:
cc:5a:73:99:16:bc:cd:b0:9b:fd:4d:b9:8d:bc:49:
79:66:89:72:ef:15:4b:b7:bd:d0:99:ef:47:af:e1:
af:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:1B:42:F2:5F:28:69:60:35:CE:33:AB:67:D9:2D:76:C3:D0:41:55
X509v3 Authority Key Identifier:
keyid:99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/gxtC8l8oaWA1zjOrZ9ktdsPQQVU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.162.90.0/24
185.165.154.0/24
185.170.128.0/24
185.170.130.0/24
Signature Algorithm: sha256WithRSAEncryption
78:e3:30:ab:62:8e:3c:9e:23:e6:10:ba:7a:be:7e:98:16:1e:
c1:56:8b:90:d7:78:cc:b6:a7:01:43:86:97:9c:39:f6:54:75:
ed:f7:2c:d4:fd:46:6a:d4:75:64:7d:ed:c1:8f:1b:5e:9e:6a:
c7:19:1c:2c:30:67:38:2c:d9:4c:86:00:90:d6:e5:1f:41:93:
91:90:5d:42:dc:d4:96:57:83:58:31:28:dc:b8:fe:ab:40:f8:
65:39:11:c8:39:ba:18:ca:ff:87:81:e5:e7:50:f7:ad:43:3d:
44:e4:b5:27:85:bc:d5:b7:8e:6d:8d:c5:ce:19:70:97:d2:03:
0e:34:2b:5d:8e:96:5b:6c:b1:cd:76:4e:8c:5a:b9:8f:f2:18:
e3:e7:37:8f:3e:8a:87:d9:9d:1f:c0:4a:2d:97:4e:83:0e:5d:
24:47:2d:6c:c0:e6:53:df:e5:e5:fc:33:04:c4:33:6d:1e:fe:
2a:eb:26:98:1e:a1:92:66:4a:27:b8:ca:5a:df:b2:a0:8b:e7:
f6:5f:bc:f3:f3:11:4f:0b:60:7d:a1:90:df:ac:6b:92:32:ae:
5d:af:98:f7:12:0a:12:ea:3a:10:fa:c2:26:c9:2c:dc:83:43:
ba:47:02:4e:f2:f2:17:97:10:e9:02:7d:e2:86:b7:77:7c:b9:
43:b1:88:3f
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZmVJb5RH6Q3ZTZsyroHSqG0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5Y2U1NjlhMTRjMmRiMzc3MmYyMzE4N2NlNjhlNjU0MWVj
MDA0OGUwHhcNMjUwOTI5MTEwNTAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MzFiNDJmMjVmMjg2OTYwMzVjZTMzYWI2N2Q5MmQ3NmMzZDA0MTU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRHGKQdsB86MyZlxeSDgCHTCSwbw
Po+vhubt5vle8W4HszILOKa3g7Lys1VsJSpBaIjBF4+S7PW6lH2CnDOzGePnBBBG
sr8ml8CajcrbxcmhXfKxOneaOr2ljC6Uf6wHFiBljIa+u/QewAHbw1lTjw9ZFTv0
SmioxN+ULdz4BkOy+0chn4CT/wgSxOryKTbf62xYeC8Sdn1A8+YeAYdfwmEGw86C
IrMeB6/T1w3J3ff7L+1NrZ/XBr34Q+PkNZrL6NKkyt8kJOYRXzhdvPStoAmlQ5Rf
C2b8SH6rKQ+deLfMWnOZFrzNsJv9TbmNvEl5Zoly7xVLt73Qme9Hr+GvhQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFIMbQvJfKGlgNc4zq2fZLXbD0EFVMB8GA1UdIwQY
MBaAFJnOVpoUwts3cvIxh85o5lQewASOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWM1V21oVEMyemR5OGpHSHptam1WQjdBQkk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9jYzZlOTktNmU1Zi00MDFiLTkxMmQt
MTA5NTU0NGM2YzUwLzEvZ3h0QzhsOG9hV0ExempPclo5a3Rkc1BRUVZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi9jYzZlOTktNmU1Zi00MDFiLTkxMmQtMTA5NTU0NGM2YzUw
LzEvbWM1V21oVEMyemR5OGpHSHptam1WQjdBQkk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAuaJaAwQA
uaWaAwQAuaqAAwQAuaqCMA0GCSqGSIb3DQEBCwUAA4IBAQB44zCrYo48niPmELp6
vn6YFh7BVouQ13jMtqcBQ4aXnDn2VHXt9yzU/UZq1HVkfe3BjxtenmrHGRwsMGc4
LNlMhgCQ1uUfQZORkF1C3NSWV4NYMSjcuP6rQPhlORHIOboYyv+HgeXnUPetQz1E
5LUnhbzVt45tjcXOGXCX0gMONCtdjpZbbLHNdk6MWrmP8hjj5zePPoqH2Z0fwEot
l06DDl0kRy1swOZT3+Xl/DMExDNtHv4q6yaYHqGSZkonuMpa37Kgi+f2X7zz8xFP
C2B9oZDfrGuSMq5dr5j3EgoS6joQ+sImySzcg0O6RwJO8vIXlxDpAn3ihrd3fLlD
sYg/
-----END CERTIFICATE-----
Generated at Mon Oct 20 09:58:46 2025 by rpki-client