Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/q_uZIr1AugwwMrJ--u_HjmzrDz8.roa
File: q_uZIr1AugwwMrJ--u_HjmzrDz8.roa (raw, json)
Hash identifier: NxIFP1vErFK0TqjTEbK1tWCOvacy6r3H0WAVkfikOwo=
Subject key identifier: AB:FB:99:22:BD:40:BA:0C:30:32:B2:7E:FA:EF:C7:8E:6C:EB:0F:3F
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019A4A9F452B977B6DBE03F9A319B8F21C5D
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/q_uZIr1AugwwMrJ--u_HjmzrDz8.roa
Signing time: Mon 03 Nov 2025 16:49:03 +0000
ROA not before: Mon 03 Nov 2025 16:49:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215828
IP address blocks: 77.90.25.0/24 maxlen: 24
94.249.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4a:9f:45:2b:97:7b:6d:be:03:f9:a3:19:b8:f2:1c:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Nov 3 16:49:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=abfb9922bd40ba0c3032b27efaefc78e6ceb0f3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:01:e9:98:ff:47:03:d5:9f:83:28:02:31:10:
7a:32:73:3e:bd:9f:1f:c5:7c:b8:b7:93:cb:c5:6f:
61:04:5f:89:81:eb:ef:59:0f:50:71:bc:aa:11:fe:
11:ed:b6:84:b6:99:91:ac:bd:37:de:7e:b6:f0:f0:
ae:ce:e2:82:98:c5:c4:2c:e2:b6:c3:58:31:df:46:
26:bc:b9:3c:71:30:66:fe:3d:ed:79:ce:3d:63:af:
1b:af:25:30:61:f5:f5:e1:5b:71:ff:0c:24:2f:8e:
b5:15:f2:4c:4c:43:1b:6f:da:92:de:69:1a:ad:7f:
be:ea:bf:2e:1f:2c:aa:9e:ce:9b:e8:40:43:9d:0e:
35:d0:38:41:73:51:00:19:51:06:2d:32:93:cc:7d:
96:76:b4:f5:42:58:69:9f:91:7b:54:05:96:89:fe:
b1:ef:73:30:58:85:16:eb:a1:6a:70:00:ac:98:2a:
aa:7c:31:07:47:d3:5e:f8:5a:62:a5:71:05:eb:5a:
61:34:05:9b:22:c7:0d:36:ea:f6:19:24:5d:1e:3e:
3d:25:d4:3a:52:8f:af:99:4b:a1:a9:b9:90:42:62:
07:e6:be:52:fd:36:67:2e:f2:0f:e0:07:a1:65:61:
58:19:87:b8:e2:29:dd:3e:2b:2b:ab:d3:54:12:90:
74:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:FB:99:22:BD:40:BA:0C:30:32:B2:7E:FA:EF:C7:8E:6C:EB:0F:3F
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/q_uZIr1AugwwMrJ--u_HjmzrDz8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.25.0/24
94.249.138.0/24
Signature Algorithm: sha256WithRSAEncryption
03:09:32:0a:20:de:6c:50:f1:d0:15:74:f9:7a:68:25:d7:bc:
4c:7f:f1:9a:8b:2d:1a:5b:bc:e9:4a:2d:3f:9a:b3:1d:41:c4:
03:97:81:40:3e:4d:1c:82:af:d6:98:f5:1c:c1:2b:f0:37:1d:
53:fc:f6:b7:09:9d:24:5b:58:90:77:2d:e7:d8:04:02:24:50:
96:75:2e:1d:66:a4:8b:a9:9e:ba:51:ee:df:7f:86:02:d0:73:
8a:8b:81:48:e5:bb:a0:0f:d4:ea:9d:9c:8b:8c:c0:d6:a8:95:
d8:90:91:69:91:3f:7c:ea:f7:35:9e:35:f2:db:4f:22:bb:2d:
72:6f:a9:0f:95:e5:8e:fb:99:3a:78:df:0d:5c:e3:cc:58:f8:
b0:81:e5:94:4e:e5:f3:4d:a0:17:0a:23:da:df:f9:ad:78:ec:
66:90:2d:8c:79:c6:d7:2f:30:5b:69:46:10:e0:70:65:6d:ed:
54:44:ad:71:e1:07:e4:db:e0:8c:23:35:73:e1:45:bc:a1:ba:
d6:37:8e:f8:f5:cd:ca:27:84:e9:ba:b7:e0:7a:50:d3:5b:59:
13:78:4f:05:e9:f4:8e:fc:42:f1:04:98:f0:0b:07:a0:7c:55:
c0:68:e6:12:22:65:d0:5f:22:b3:d1:54:d2:e5:ce:4e:fc:70:
63:e9:0b:a0
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZpKn0Url3ttvgP5oxm48hxdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjUxMTAzMTY0OTAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYmZiOTkyMmJkNDBiYTBjMzAzMmIyN2VmYWVmYzc4ZTZjZWIwZjNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwHpmP9HA9WfgygCMRB6MnM+vZ8f
xXy4t5PLxW9hBF+JgevvWQ9QcbyqEf4R7baEtpmRrL033n628PCuzuKCmMXELOK2
w1gx30YmvLk8cTBm/j3tec49Y68bryUwYfX14Vtx/wwkL461FfJMTEMbb9qS3mka
rX++6r8uHyyqns6b6EBDnQ410DhBc1EAGVEGLTKTzH2WdrT1Qlhpn5F7VAWWif6x
73MwWIUW66FqcACsmCqqfDEHR9Ne+FpipXEF61phNAWbIscNNur2GSRdHj49JdQ6
Uo+vmUuhqbmQQmIH5r5S/TZnLvIP4AehZWFYGYe44indPisrq9NUEpB0hQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFKv7mSK9QLoMMDKyfvrvx45s6w8/MB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvcV91WklyMUF1Z3d3TXJKLS11X0hqbXpyRHo4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATVoZAwQA
XvmKMA0GCSqGSIb3DQEBCwUAA4IBAQADCTIKIN5sUPHQFXT5emgl17xMf/Gaiy0a
W7zpSi0/mrMdQcQDl4FAPk0cgq/WmPUcwSvwNx1T/Pa3CZ0kW1iQdy3n2AQCJFCW
dS4dZqSLqZ66Ue7ff4YC0HOKi4FI5bugD9TqnZyLjMDWqJXYkJFpkT986vc1njXy
208iuy1yb6kPleWO+5k6eN8NXOPMWPiwgeWUTuXzTaAXCiPa3/mteOxmkC2MecbX
LzBbaUYQ4HBlbe1URK1x4Qfk2+CMIzVz4UW8obrWN4749c3KJ4TpurfgelDTW1kT
eE8F6fSO/ELxBJjwCwegfFXAaOYSImXQXyKz0VTS5c5O/HBj6Qug
-----END CERTIFICATE-----
Generated at Wed Nov 5 00:34:56 2025 by rpki-client