Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/RtHkP-4X6GrdGY0Ecddd3cljxcQ.roa
File: RtHkP-4X6GrdGY0Ecddd3cljxcQ.roa (raw, json)
Hash identifier: /AMzjIRRQUrv05fdR0VBULmRmtgRLevzgCVoJq0r5II=
Subject key identifier: 46:D1:E4:3F:EE:17:E8:6A:DD:19:8D:04:71:D7:5D:DD:C9:63:C5:C4
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 01995A59C24D9E166A94B9D40734A2208862
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/RtHkP-4X6GrdGY0Ecddd3cljxcQ.roa
Signing time: Thu 18 Sep 2025 01:04:15 +0000
ROA not before: Thu 18 Sep 2025 01:04:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56619
IP address blocks: 79.98.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:5a:59:c2:4d:9e:16:6a:94:b9:d4:07:34:a2:20:88:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Sep 18 01:04:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=46d1e43fee17e86add198d0471d75dddc963c5c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ee:b5:66:2b:7f:e4:93:b8:8d:3c:36:d4:1a:
8b:86:76:32:e7:3d:98:76:71:06:a0:54:5a:2c:d4:
21:53:38:f4:a2:aa:3b:39:8f:99:55:20:78:ec:d0:
24:30:3e:c0:9d:39:7d:b7:fe:3c:f8:81:a8:45:95:
e0:eb:56:0a:29:bc:e4:77:0e:c1:a9:a0:4c:91:35:
72:ee:96:28:c6:3d:61:84:cf:aa:9a:39:8c:74:60:
ff:7b:61:46:9f:1b:2b:ad:51:ce:7d:60:c0:ef:c3:
97:7b:91:29:4d:2d:4f:68:17:b9:db:2f:b0:0c:13:
85:f2:ae:da:03:d1:26:77:bd:4e:7e:a6:61:1b:ba:
88:99:95:d5:85:28:66:64:6a:0e:0a:d2:fa:23:e0:
93:81:2d:b2:bd:9b:68:87:22:7c:b1:89:33:eb:25:
ba:95:9b:7f:6b:c6:fc:18:88:7d:70:5b:ef:c2:31:
d4:f1:0e:bc:b5:d0:cc:47:0f:9f:7b:9e:81:49:71:
cc:55:0b:8c:c2:28:e9:24:43:fc:a0:61:b7:48:b9:
2a:b5:73:e6:92:9a:72:e5:5b:7e:9e:76:e1:67:1c:
57:23:9d:1f:64:9a:39:37:37:99:b5:97:93:84:3b:
66:55:c7:dc:b1:09:24:b3:be:40:3b:75:60:1b:ed:
58:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:D1:E4:3F:EE:17:E8:6A:DD:19:8D:04:71:D7:5D:DD:C9:63:C5:C4
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/RtHkP-4X6GrdGY0Ecddd3cljxcQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.98.249.0/24
Signature Algorithm: sha256WithRSAEncryption
03:51:40:46:1d:e6:d5:0f:b8:ef:b0:27:60:fa:04:70:6b:5a:
d2:6b:9e:c4:ed:a0:5d:09:a3:80:17:9f:5c:5b:27:43:89:d8:
49:6b:87:3d:e5:03:ec:27:d9:49:4a:3e:61:76:09:d6:54:d1:
5f:e7:01:a4:91:65:21:86:b2:3a:13:f6:d7:b5:24:eb:69:49:
5f:97:b5:f4:bf:1e:5e:d9:72:60:98:5b:65:38:8e:4b:10:43:
9f:df:08:b2:3a:96:6b:ab:6d:00:a6:48:e5:e9:93:20:dd:5a:
91:25:c7:83:d5:a8:16:b1:c9:d7:bc:59:fb:46:d3:18:73:84:
c0:ed:6c:59:a1:29:65:b0:3a:6e:37:fd:4b:70:15:d4:96:0f:
ec:ec:e2:4e:bb:07:57:43:e0:f9:a4:1a:33:04:e7:09:bf:3e:
16:1b:a2:76:14:38:5b:2a:a5:b5:4a:f0:3c:1b:d6:16:1d:f7:
93:43:5f:b9:47:a0:b5:46:aa:25:d6:56:08:12:f6:1b:c5:01:
dc:1f:d6:18:ec:3b:8d:01:fc:9c:5d:65:1e:e5:b3:e7:52:dc:
60:6f:cc:b4:0e:93:1c:08:6e:51:22:47:26:b2:ba:e3:02:68:
f2:d3:66:9d:c7:34:5f:08:7f:2d:e4:5f:cc:98:c6:7e:11:99:
09:e1:9c:b8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZlaWcJNnhZqlLnUBzSiIIhiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlZTUzMWI5YWMyOTkwZDY5YThhNWMzMDIzZTcyZTZkODQx
ZTZjMDkwHhcNMjUwOTE4MDEwNDE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NmQxZTQzZmVlMTdlODZhZGQxOThkMDQ3MWQ3NWRkZGM5NjNjNWM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmu61Zit/5JO4jTw21BqLhnYy5z2Y
dnEGoFRaLNQhUzj0oqo7OY+ZVSB47NAkMD7AnTl9t/48+IGoRZXg61YKKbzkdw7B
qaBMkTVy7pYoxj1hhM+qmjmMdGD/e2FGnxsrrVHOfWDA78OXe5EpTS1PaBe52y+w
DBOF8q7aA9Emd71OfqZhG7qImZXVhShmZGoOCtL6I+CTgS2yvZtohyJ8sYkz6yW6
lZt/a8b8GIh9cFvvwjHU8Q68tdDMRw+fe56BSXHMVQuMwijpJEP8oGG3SLkqtXPm
kppy5Vt+nnbhZxxXI50fZJo5NzeZtZeThDtmVcfcsQkks75AO3VgG+1Y/wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEbR5D/uF+hq3RmNBHHXXd3JY8XEMB8GA1UdIwQY
MBaAFF7lMbmsKZDWmopcMCPnLm2EHmwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQt
NWE4NmMyNzU3YzFlLzEvUnRIa1AtNFg2R3JkR1kwRWNkZGQzY2xqeGNRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQtNWE4NmMyNzU3YzFl
LzEvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAT2L5MA0G
CSqGSIb3DQEBCwUAA4IBAQADUUBGHebVD7jvsCdg+gRwa1rSa57E7aBdCaOAF59c
WydDidhJa4c95QPsJ9lJSj5hdgnWVNFf5wGkkWUhhrI6E/bXtSTraUlfl7X0vx5e
2XJgmFtlOI5LEEOf3wiyOpZrq20Apkjl6ZMg3VqRJceD1agWscnXvFn7RtMYc4TA
7WxZoSllsDpuN/1LcBXUlg/s7OJOuwdXQ+D5pBozBOcJvz4WG6J2FDhbKqW1SvA8
G9YWHfeTQ1+5R6C1Rqol1lYIEvYbxQHcH9YY7DuNAfycXWUe5bPnUtxgb8y0DpMc
CG5RIkcmsrrjAmjy02adxzRfCH8t5F/MmMZ+EZkJ4Zy4
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:46:51 2025 by rpki-client