Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/acNdVuk6ITh4m8uwT80MumrqxPk.roa
File: acNdVuk6ITh4m8uwT80MumrqxPk.roa (raw, json)
Hash identifier: nzRW3KhmquoVA7t+6VtAP59T4qi0luvP/c5ZxKzmy+Q=
Subject key identifier: 69:C3:5D:56:E9:3A:21:38:78:9B:CB:B0:4F:CD:0C:BA:6A:EA:C4:F9
Certificate issuer: /CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Certificate serial: 01983BC2E5174692C0CE5C800F4921F8F997
Authority key identifier: FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/acNdVuk6ITh4m8uwT80MumrqxPk.roa
Signing time: Thu 24 Jul 2025 09:28:05 +0000
ROA not before: Thu 24 Jul 2025 09:28:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 109.122.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3b:c2:e5:17:46:92:c0:ce:5c:80:0f:49:21:f8:f9:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Validity
Not Before: Jul 24 09:28:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69c35d56e93a2138789bcbb04fcd0cba6aeac4f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b9:de:08:19:6a:ad:83:cf:c6:17:0d:2e:fb:
a0:5a:70:b5:7a:4e:cc:cb:1b:fd:88:80:1e:cb:b9:
f5:27:c1:04:ac:2f:ca:b1:05:70:f3:7c:ca:03:a8:
c8:80:22:3c:b3:bd:11:91:8b:70:79:7a:89:e5:80:
d3:31:2b:2b:1c:42:28:4a:dc:53:fb:a9:f4:98:52:
f9:1c:7c:fd:d7:9f:d3:09:95:7b:30:22:7b:ef:f4:
33:ba:bf:66:f3:39:c2:03:d6:c0:4e:ef:32:6c:9e:
36:ed:fc:26:74:77:ba:f7:a3:73:68:a1:3e:52:f0:
01:84:56:e6:02:49:cf:78:ae:27:f7:ae:68:c9:58:
bb:97:30:e8:d0:6e:73:1a:e0:d1:29:10:c2:1a:23:
e7:f7:15:7e:8c:f5:c1:db:dc:35:14:61:c3:57:ac:
9c:d3:f9:f4:30:80:50:5c:ff:04:8d:a1:db:f9:87:
24:94:b7:4d:b2:df:75:3b:ca:ad:51:55:63:18:01:
ff:c8:fb:75:7a:51:74:1b:fb:ce:18:b3:c3:4f:06:
94:cc:52:6e:3b:40:74:ec:7e:45:82:17:f4:9d:98:
4c:2b:98:7f:55:3e:93:53:d1:8a:38:b6:41:ed:d4:
76:4d:be:38:cb:77:4d:29:bd:4f:99:95:3e:e6:c3:
56:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:C3:5D:56:E9:3A:21:38:78:9B:CB:B0:4F:CD:0C:BA:6A:EA:C4:F9
X509v3 Authority Key Identifier:
keyid:FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/acNdVuk6ITh4m8uwT80MumrqxPk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.31.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:85:21:15:63:a8:5a:ef:15:b0:7c:af:f1:8a:7a:da:25:1e:
8c:79:a6:ef:df:87:62:7a:41:09:44:7d:fb:df:b7:ce:b5:7b:
17:36:93:84:6f:b4:26:c9:3f:5c:29:7c:d3:28:d2:56:62:16:
6c:6a:18:e4:a3:dc:24:2c:3f:c0:12:20:9a:b0:78:21:a2:4d:
99:9c:2e:32:13:30:1d:83:21:e2:ee:9b:ba:d5:d6:f2:fd:cc:
78:94:bf:13:ab:7d:77:0b:96:31:d5:57:75:5c:df:47:ca:e1:
84:94:25:df:c8:67:76:09:c7:82:c1:50:10:c1:70:6a:2a:70:
a9:22:0b:d7:e7:d5:c0:2d:d0:5b:5b:3c:c3:97:df:ee:5e:ef:
d6:c0:e7:cc:35:9c:ba:3b:c1:07:97:43:4d:7c:b6:17:e4:01:
39:8f:73:53:6b:a9:4a:7e:7e:37:3c:ef:05:3f:33:a3:db:47:
84:7f:8b:44:25:00:99:f6:71:6b:61:97:d0:c1:02:18:f2:1c:
d5:d8:e3:e8:fe:4d:10:f7:ac:52:13:fd:3e:cd:85:25:ae:03:
8b:7b:85:3f:ca:1c:96:99:a4:f3:44:b8:7d:79:5c:5f:78:eb:
b2:91:1f:ce:e1:1e:93:19:87:d6:fa:9e:a0:27:36:b9:8a:8e:
56:cd:0c:95
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZg7wuUXRpLAzlyAD0kh+PmXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmYTNlNTUxNDFjMWExZjlmMmUyODgxMWVkN2U3N2ZhZDM3
OGE1NzkwHhcNMjUwNzI0MDkyODA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OWMzNWQ1NmU5M2EyMTM4Nzg5YmNiYjA0ZmNkMGNiYTZhZWFjNGY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrneCBlqrYPPxhcNLvugWnC1ek7M
yxv9iIAey7n1J8EErC/KsQVw83zKA6jIgCI8s70RkYtweXqJ5YDTMSsrHEIoStxT
+6n0mFL5HHz915/TCZV7MCJ77/Qzur9m8znCA9bATu8ybJ427fwmdHe696NzaKE+
UvABhFbmAknPeK4n965oyVi7lzDo0G5zGuDRKRDCGiPn9xV+jPXB29w1FGHDV6yc
0/n0MIBQXP8EjaHb+YcklLdNst91O8qtUVVjGAH/yPt1elF0G/vOGLPDTwaUzFJu
O0B07H5Fghf0nZhMK5h/VT6TU9GKOLZB7dR2Tb44y3dNKb1PmZU+5sNW7wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGnDXVbpOiE4eJvLsE/NDLpq6sT5MB8GA1UdIwQY
MBaAFP+j5VFBwaH58uKIEe1+d/rTeKV5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzZQbFVVSEJvZm55NG9nUjdYNTMtdE40cFhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9iMjYzYTItMGY2Zi00ZjVkLWFmOWUt
YTM5YWMyNTM5ZmM1LzEvYWNOZFZ1azZJVGg0bTh1d1Q4ME11bXJxeFBrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9iMjYzYTItMGY2Zi00ZjVkLWFmOWUtYTM5YWMyNTM5ZmM1
LzEvXzZQbFVVSEJvZm55NG9nUjdYNTMtdE40cFhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbXofMA0G
CSqGSIb3DQEBCwUAA4IBAQCkhSEVY6ha7xWwfK/xinraJR6Meabv34diekEJRH37
37fOtXsXNpOEb7QmyT9cKXzTKNJWYhZsahjko9wkLD/AEiCasHghok2ZnC4yEzAd
gyHi7pu61dby/cx4lL8Tq313C5Yx1Vd1XN9HyuGElCXfyGd2CceCwVAQwXBqKnCp
IgvX59XALdBbWzzDl9/uXu/WwOfMNZy6O8EHl0NNfLYX5AE5j3NTa6lKfn43PO8F
PzOj20eEf4tEJQCZ9nFrYZfQwQIY8hzV2OPo/k0Q96xSE/0+zYUlrgOLe4U/yhyW
maTzRLh9eVxfeOuykR/O4R6TGYfW+p6gJza5io5WzQyV
-----END CERTIFICATE-----
Generated at Tue Aug 5 20:12:27 2025 by rpki-client