Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/2S-Sn25s5-7yr1LTWr41QKc6g-c.roa
File: 2S-Sn25s5-7yr1LTWr41QKc6g-c.roa (raw, json)
Hash identifier: 7+X8Ys0nIuji7kMiSITIRKqKC3IkyTnAnrnOsNk0IK0=
Subject key identifier: D9:2F:92:9F:6E:6C:E7:EE:F2:AF:52:D3:5A:BE:35:40:A7:3A:83:E7
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 019A43774D05EE7A5D42DD19AD7F70CB6B87
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/2S-Sn25s5-7yr1LTWr41QKc6g-c.roa
Signing time: Sun 02 Nov 2025 07:28:03 +0000
ROA not before: Sun 02 Nov 2025 07:28:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203163
IP address blocks: 193.233.155.0/24 maxlen: 24
193.233.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:43:77:4d:05:ee:7a:5d:42:dd:19:ad:7f:70:cb:6b:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Nov 2 07:28:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d92f929f6e6ce7eef2af52d35abe3540a73a83e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:30:b8:f6:42:51:3d:4b:52:69:1a:2e:34:9e:
16:ec:93:99:04:8c:1d:e2:89:43:17:5f:b9:06:ed:
f2:45:2e:71:cf:19:00:5b:01:9e:26:be:ae:3f:5b:
37:c8:f3:75:f4:ce:e0:6a:a6:d1:8e:ef:cd:49:e1:
7c:ce:89:8c:d5:4b:95:7c:1b:9c:3e:77:02:90:38:
6f:ec:69:a9:0f:75:42:df:d2:5e:97:5a:f8:c5:ac:
c7:e0:34:0a:4f:7f:74:8f:11:9c:f6:95:f5:30:9a:
6b:c2:04:fa:09:ae:ed:d1:eb:02:0b:88:c7:47:f3:
7f:5c:9a:00:22:3f:b8:bc:e1:ff:d2:0b:82:c7:7e:
ca:ff:ae:70:69:00:bd:bf:3d:35:60:b9:80:75:a0:
95:55:37:c0:10:ff:01:48:44:07:0e:63:c6:19:3b:
e3:c8:1c:83:5a:44:fd:e8:90:df:d3:ea:b4:37:d5:
e0:03:cd:cd:f4:45:d6:77:0e:39:fe:9f:46:b5:19:
79:9f:72:cb:a3:e7:df:87:a8:4e:76:94:03:45:55:
fa:b0:fc:9e:01:d0:c9:38:98:7a:bf:cc:0c:0c:70:
fd:87:72:9d:cd:77:e2:97:4f:58:11:da:a8:70:ca:
3f:d8:09:c3:26:07:af:fd:9b:7d:a5:3f:0f:72:63:
c1:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:2F:92:9F:6E:6C:E7:EE:F2:AF:52:D3:5A:BE:35:40:A7:3A:83:E7
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/2S-Sn25s5-7yr1LTWr41QKc6g-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.155.0-193.233.156.255
Signature Algorithm: sha256WithRSAEncryption
6f:d3:72:66:eb:bd:f0:9b:31:5c:ba:b6:e5:36:2a:cc:ef:2d:
fb:14:ec:2e:f8:b6:37:a0:a2:63:3f:03:7c:a6:5d:9f:71:49:
7a:aa:82:c0:c2:16:30:0f:e8:65:a0:13:8b:63:51:9d:a1:af:
b9:20:60:41:ad:31:94:67:f4:15:33:56:ee:88:55:94:34:99:
fe:a8:ea:c6:5e:90:aa:b3:ab:c5:21:66:27:fa:70:87:fb:4d:
e3:25:f7:78:90:c0:d5:31:21:0b:ec:15:fb:69:b4:31:2e:18:
63:8c:c9:ed:bc:7c:6d:80:ca:4e:c0:dd:fb:d1:57:f0:f5:76:
b9:9c:40:52:14:94:06:a9:1a:b9:3e:1c:2c:96:de:9e:7a:8d:
7d:39:79:13:56:26:96:b5:08:d8:0a:0c:5a:2f:34:38:c1:ef:
f7:5b:fa:3e:b4:ac:97:ac:58:4a:a9:e0:84:0e:65:a5:b9:d2:
fa:39:e7:b9:15:e1:6e:25:17:ae:e8:61:43:06:05:de:55:cf:
54:37:65:29:26:2a:71:cf:a7:7e:03:0d:49:46:fc:34:62:19:
28:a6:72:eb:2c:49:0f:78:29:10:51:57:35:af:8a:ac:04:e7:
17:dc:3d:02:07:9a:2a:64:f1:30:d5:ac:f4:a7:bf:62:a7:2e:
0c:28:98:33
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZpDd00F7npdQt0ZrX9wy2uHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ZDY0OGJkYmE5NjU0NjFiMWU4YzExYjlkZDQzNmM2MTM4
Mjg3M2MwHhcNMjUxMTAyMDcyODAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOTJmOTI5ZjZlNmNlN2VlZjJhZjUyZDM1YWJlMzU0MGE3M2E4M2U3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszC49kJRPUtSaRouNJ4W7JOZBIwd
4olDF1+5Bu3yRS5xzxkAWwGeJr6uP1s3yPN19M7gaqbRju/NSeF8zomM1UuVfBuc
PncCkDhv7GmpD3VC39Jel1r4xazH4DQKT390jxGc9pX1MJprwgT6Ca7t0esCC4jH
R/N/XJoAIj+4vOH/0guCx37K/65waQC9vz01YLmAdaCVVTfAEP8BSEQHDmPGGTvj
yByDWkT96JDf0+q0N9XgA83N9EXWdw45/p9GtRl5n3LLo+ffh6hOdpQDRVX6sPye
AdDJOJh6v8wMDHD9h3KdzXfil09YEdqocMo/2AnDJgev/Zt9pT8PcmPBuQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFNkvkp9ubOfu8q9S01q+NUCnOoPnMB8GA1UdIwQY
MBaAFIbWSL26llRhsejBG53UNsYTgoc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmIt
NGRlYzRkYWZlZTQ5LzEvMlMtU24yNXM1LTd5cjFMVFdyNDFRS2M2Zy1jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmItNGRlYzRkYWZlZTQ5
LzEvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADB6ZsD
BADB6ZwwDQYJKoZIhvcNAQELBQADggEBAG/TcmbrvfCbMVy6tuU2KszvLfsU7C74
tjegomM/A3ymXZ9xSXqqgsDCFjAP6GWgE4tjUZ2hr7kgYEGtMZRn9BUzVu6IVZQ0
mf6o6sZekKqzq8UhZif6cIf7TeMl93iQwNUxIQvsFftptDEuGGOMye28fG2Ayk7A
3fvRV/D1drmcQFIUlAapGrk+HCyW3p56jX05eRNWJpa1CNgKDFovNDjB7/db+j60
rJesWEqp4IQOZaW50vo557kV4W4lF67oYUMGBd5Vz1Q3ZSkmKnHPp34DDUlG/DRi
GSimcussSQ94KRBRVzWviqwE5xfcPQIHmipk8TDVrPSnv2KnLgwomDM=
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:36:13 2025 by rpki-client