Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/ku41SyyQTNw1FC7ORt-eYxegkSQ.roa
File: ku41SyyQTNw1FC7ORt-eYxegkSQ.roa (raw, json)
Hash identifier: DiL2bTawOC4tigs2Wby8RstVWBoX7oIefg517dHHx1U=
Subject key identifier: 92:EE:35:4B:2C:90:4C:DC:35:14:2E:CE:46:DF:9E:63:17:A0:91:24
Certificate issuer: /CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Certificate serial: 019A36C61829C21E8AC07A0F3D657703806A
Authority key identifier: FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/ku41SyyQTNw1FC7ORt-eYxegkSQ.roa
Signing time: Thu 30 Oct 2025 20:19:03 +0000
ROA not before: Thu 30 Oct 2025 20:19:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214366
IP address blocks: 109.122.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:36:c6:18:29:c2:1e:8a:c0:7a:0f:3d:65:77:03:80:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Validity
Not Before: Oct 30 20:19:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=92ee354b2c904cdc35142ece46df9e6317a09124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:64:2e:05:56:c9:80:89:ea:63:f3:8b:a0:c8:
ec:33:b4:df:47:ea:a1:98:29:a1:a6:58:6f:7e:2b:
f1:72:d0:d8:d6:e2:15:02:46:82:cb:ad:3e:5c:53:
d3:cc:f5:b3:33:83:c3:7f:09:1c:c0:af:6e:0e:8c:
3d:51:c0:48:93:a2:ab:9c:30:a2:4f:dc:9f:14:36:
18:58:4c:4d:36:bf:dc:23:85:f9:e2:13:0f:88:f7:
96:77:bc:c0:a3:ea:0d:59:3c:82:2f:a5:67:01:69:
be:e4:ed:59:74:2b:32:f9:70:ce:26:01:c5:c8:bf:
08:4a:e5:03:31:04:55:d7:27:e7:8c:99:33:d4:d9:
db:d3:b4:e4:30:34:29:7b:14:81:a7:64:a6:18:30:
0c:05:bb:9c:61:68:c2:d1:7b:5c:24:ee:9c:08:4f:
3b:7c:27:bc:a3:2d:bc:03:50:15:67:d0:36:e3:cf:
63:ac:63:54:69:eb:ca:7b:63:b8:36:2b:c9:0b:49:
22:84:17:67:94:8a:f2:f9:b8:3a:03:62:91:2c:51:
19:39:04:cd:e2:3c:d4:1d:26:20:a9:71:61:a6:98:
1a:22:d0:62:56:ba:7b:55:4e:db:d4:dd:ab:d7:21:
18:d0:12:42:4c:5b:9b:4c:53:38:fe:fa:0d:e8:66:
c8:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:EE:35:4B:2C:90:4C:DC:35:14:2E:CE:46:DF:9E:63:17:A0:91:24
X509v3 Authority Key Identifier:
keyid:FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/ku41SyyQTNw1FC7ORt-eYxegkSQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.4.0/24
Signature Algorithm: sha256WithRSAEncryption
54:d1:67:10:44:d6:75:5b:13:e1:93:15:48:0e:ee:13:cb:cc:
4a:ca:05:ca:38:b4:f8:3c:53:d0:58:a5:a0:a0:b5:af:96:fb:
2d:25:b8:9d:59:9b:12:d7:fe:3e:ef:3e:8c:56:d2:4c:bc:90:
2a:82:2d:44:0a:63:cb:a0:da:86:d4:5a:d5:fe:83:18:d4:41:
bb:44:27:00:8f:54:27:03:ca:a7:45:87:b6:75:39:b7:34:8e:
d6:2c:2d:e6:d8:89:81:c9:b7:1d:be:af:93:91:ff:7f:61:af:
21:eb:42:d8:66:59:0f:4e:80:f2:5d:d6:30:43:6e:2d:07:88:
0d:4f:f0:30:d6:18:1a:fb:ad:d8:d8:e9:59:0a:97:53:bf:ab:
57:89:f6:47:c0:13:df:a6:9c:1c:2a:7b:41:ff:ef:f0:dd:56:
63:5e:a4:bf:bd:84:94:36:9e:dd:d1:e2:ec:76:8c:93:16:0b:
d6:1b:e5:b7:df:c7:c2:1c:7c:ad:9f:85:77:46:30:27:1d:fc:
b9:db:84:0f:54:88:4a:7c:55:1c:a5:c7:28:21:35:8d:ac:ed:
f0:47:71:30:96:51:82:cb:7b:06:02:67:fa:71:72:fb:0f:b4:
35:4a:12:92:a8:f3:33:ab:62:87:10:ef:9d:eb:c8:7d:4e:1b:
a0:c4:88:94
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZo2xhgpwh6KwHoPPWV3A4BqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmYTNlNTUxNDFjMWExZjlmMmUyODgxMWVkN2U3N2ZhZDM3
OGE1NzkwHhcNMjUxMDMwMjAxOTAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MmVlMzU0YjJjOTA0Y2RjMzUxNDJlY2U0NmRmOWU2MzE3YTA5MTI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmQuBVbJgInqY/OLoMjsM7TfR+qh
mCmhplhvfivxctDY1uIVAkaCy60+XFPTzPWzM4PDfwkcwK9uDow9UcBIk6KrnDCi
T9yfFDYYWExNNr/cI4X54hMPiPeWd7zAo+oNWTyCL6VnAWm+5O1ZdCsy+XDOJgHF
yL8ISuUDMQRV1yfnjJkz1Nnb07TkMDQpexSBp2SmGDAMBbucYWjC0XtcJO6cCE87
fCe8oy28A1AVZ9A2489jrGNUaevKe2O4NivJC0kihBdnlIry+bg6A2KRLFEZOQTN
4jzUHSYgqXFhppgaItBiVrp7VU7b1N2r1yEY0BJCTFubTFM4/voN6GbIIQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJLuNUsskEzcNRQuzkbfnmMXoJEkMB8GA1UdIwQY
MBaAFP+j5VFBwaH58uKIEe1+d/rTeKV5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzZQbFVVSEJvZm55NG9nUjdYNTMtdE40cFhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9iMjYzYTItMGY2Zi00ZjVkLWFmOWUt
YTM5YWMyNTM5ZmM1LzEva3U0MVN5eVFUTncxRkM3T1J0LWVZeGVna1NRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9iMjYzYTItMGY2Zi00ZjVkLWFmOWUtYTM5YWMyNTM5ZmM1
LzEvXzZQbFVVSEJvZm55NG9nUjdYNTMtdE40cFhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbXoEMA0G
CSqGSIb3DQEBCwUAA4IBAQBU0WcQRNZ1WxPhkxVIDu4Ty8xKygXKOLT4PFPQWKWg
oLWvlvstJbidWZsS1/4+7z6MVtJMvJAqgi1ECmPLoNqG1FrV/oMY1EG7RCcAj1Qn
A8qnRYe2dTm3NI7WLC3m2ImBybcdvq+Tkf9/Ya8h60LYZlkPToDyXdYwQ24tB4gN
T/Aw1hga+63Y2OlZCpdTv6tXifZHwBPfppwcKntB/+/w3VZjXqS/vYSUNp7d0eLs
doyTFgvWG+W338fCHHytn4V3RjAnHfy524QPVIhKfFUcpccoITWNrO3wR3EwllGC
y3sGAmf6cXL7D7Q1ShKSqPMzq2KHEO+d68h9ThugxIiU
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:24:45 2025 by rpki-client