Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/uH80Eiiaft3lL2JNSBJK4vprMmE.roa
File: uH80Eiiaft3lL2JNSBJK4vprMmE.roa (raw, json)
Hash identifier: vDDRb77ZSje6Mi35F5Bp/wnrEb7HYmMVlt3kX82ZuxQ=
Subject key identifier: B8:7F:34:12:28:9A:7E:DD:E5:2F:62:4D:48:12:4A:E2:FA:6B:32:61
Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Certificate serial: 0199F131889FC3A53199FA13149A9F479FB1
Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/uH80Eiiaft3lL2JNSBJK4vprMmE.roa
Signing time: Fri 17 Oct 2025 08:02:59 +0000
ROA not before: Fri 17 Oct 2025 08:02:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205886
IP address blocks: 93.88.158.0/24 maxlen: 24
95.155.148.0/24 maxlen: 24
95.155.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 08:54:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:f1:31:88:9f:c3:a5:31:99:fa:13:14:9a:9f:47:9f:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Validity
Not Before: Oct 17 08:02:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b87f3412289a7edde52f624d48124ae2fa6b3261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f6:b1:5f:cb:74:46:cb:c0:c3:f9:3d:2f:00:
50:34:af:29:b4:4a:90:e1:66:39:50:a6:e3:8f:e7:
b7:ed:8a:82:85:16:7f:72:62:84:b1:39:9d:60:83:
ac:3b:e8:bf:cf:0f:d3:6b:26:ad:d0:ac:73:96:ee:
ef:62:fc:2f:3b:1a:f0:67:19:32:23:a6:a4:6a:25:
1c:22:90:ba:13:64:b9:75:fa:eb:e7:96:b7:f3:e2:
10:d3:58:f0:0f:97:6f:b8:a6:ed:2b:c6:0f:6e:13:
74:3d:ba:a2:2d:90:b4:5b:f1:e6:fe:ed:3c:a1:7d:
4e:f4:6b:da:c5:39:ed:23:00:7e:75:54:de:3d:1e:
ea:ff:cd:59:ce:7f:50:b8:5f:78:e1:08:e3:a3:43:
48:64:9d:ad:3e:4f:65:6c:1c:08:8e:ec:4a:4e:87:
b9:12:21:37:a9:b4:53:42:83:a3:12:d2:ac:86:6f:
d8:33:b6:9d:bf:c0:cd:aa:6d:4a:5b:27:2d:04:4f:
d6:3b:12:23:34:93:df:4c:df:9b:ee:92:ae:dc:ae:
36:5b:81:a4:d0:fe:a2:c1:ad:e4:ed:ed:5a:8a:96:
13:1d:fa:07:cb:03:87:67:48:32:6b:a8:ef:0b:4c:
77:57:cd:08:4e:a5:d9:e8:de:a5:0d:5e:4d:cd:d5:
b3:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:7F:34:12:28:9A:7E:DD:E5:2F:62:4D:48:12:4A:E2:FA:6B:32:61
X509v3 Authority Key Identifier:
keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/uH80Eiiaft3lL2JNSBJK4vprMmE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.88.158.0/24
95.155.148.0/24
95.155.151.0/24
Signature Algorithm: sha256WithRSAEncryption
18:2b:44:12:ca:a1:d8:e8:40:eb:51:54:5a:fc:aa:bc:10:1e:
dc:68:20:72:e5:cb:05:6a:ae:f8:e0:a1:1c:24:32:28:b8:4d:
7d:f9:5a:72:f6:dc:20:4b:34:1f:ca:54:0e:2d:79:1c:7b:39:
19:87:90:fe:3d:34:90:62:70:af:97:7f:72:ea:c6:34:73:b6:
20:22:96:8c:9e:b3:eb:d8:a4:e7:ee:3d:b7:6f:1e:bf:30:21:
8f:7d:52:93:69:57:a1:61:0c:23:21:3f:a0:6a:5f:10:9c:9c:
d1:c8:c9:38:5f:17:9e:ed:2d:95:88:83:24:68:78:29:02:c1:
ba:ef:cd:1f:97:3d:13:b7:33:9d:56:6c:c3:ab:25:a7:6b:18:
9c:cc:f8:b5:0d:83:6d:1e:da:6b:b3:de:3f:37:61:e2:ca:00:
85:3e:6b:a0:5c:27:77:86:30:41:64:c0:0d:05:24:56:bf:bb:
8b:e2:cd:db:0e:53:cd:bd:78:7c:13:8d:8c:ed:2f:62:6f:cb:
55:e0:4c:f7:e8:b9:a8:35:f1:e3:21:01:9f:72:8d:0f:77:47:
c5:52:93:32:ea:1e:dc:57:f9:8d:a3:1c:b1:a0:1d:9a:13:fb:
17:f5:4a:6b:2a:eb:5f:21:26:e8:3c:e9:d6:67:41:e6:f1:1c:
f1:34:5e:63
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZnxMYifw6UxmfoTFJqfR5+xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2YTI0OWEwZWFjZDhhYmNiZWEwZDgyZWY3MTAxNmQzODZl
OGVmOTQwHhcNMjUxMDE3MDgwMjU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiODdmMzQxMjI4OWE3ZWRkZTUyZjYyNGQ0ODEyNGFlMmZhNmIzMjYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkfaxX8t0RsvAw/k9LwBQNK8ptEqQ
4WY5UKbjj+e37YqChRZ/cmKEsTmdYIOsO+i/zw/Tayat0Kxzlu7vYvwvOxrwZxky
I6akaiUcIpC6E2S5dfrr55a38+IQ01jwD5dvuKbtK8YPbhN0PbqiLZC0W/Hm/u08
oX1O9GvaxTntIwB+dVTePR7q/81Zzn9QuF944Qjjo0NIZJ2tPk9lbBwIjuxKToe5
EiE3qbRTQoOjEtKshm/YM7adv8DNqm1KWyctBE/WOxIjNJPfTN+b7pKu3K42W4Gk
0P6iwa3k7e1aipYTHfoHywOHZ0gya6jvC0x3V80ITqXZ6N6lDV5NzdWz/QIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFLh/NBIomn7d5S9iTUgSSuL6azJhMB8GA1UdIwQY
MBaAFMaiSaDqzYq8vqDYLvcQFtOG6O+UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8zMGYxODYtOTBlMi00Y2E2LTkxN2Ut
MjEwNTdkMjI4ZDA1LzEvdUg4MEVpaWFmdDNsTDJKTlNCSks0dnByTW1FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC8zMGYxODYtOTBlMi00Y2E2LTkxN2UtMjEwNTdkMjI4ZDA1
LzEveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAXVieAwQA
X5uUAwQAX5uXMA0GCSqGSIb3DQEBCwUAA4IBAQAYK0QSyqHY6EDrUVRa/Kq8EB7c
aCBy5csFaq744KEcJDIouE19+Vpy9twgSzQfylQOLXkcezkZh5D+PTSQYnCvl39y
6sY0c7YgIpaMnrPr2KTn7j23bx6/MCGPfVKTaVehYQwjIT+gal8QnJzRyMk4Xxee
7S2ViIMkaHgpAsG6780flz0TtzOdVmzDqyWnaxiczPi1DYNtHtprs94/N2HiygCF
PmugXCd3hjBBZMANBSRWv7uL4s3bDlPNvXh8E42M7S9ib8tV4Ez36LmoNfHjIQGf
co0Pd0fFUpMy6h7cV/mNoxyxoB2aE/sX9UprKutfISboPOnWZ0Hm8RzxNF5j
-----END CERTIFICATE-----
Generated at Mon Oct 20 15:35:51 2025 by rpki-client