Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/8UvLZFAKqJpCEGRDA7MQZYKB1FA.roa
File: 8UvLZFAKqJpCEGRDA7MQZYKB1FA.roa (raw, json)
Hash identifier: 5khISlq6bPf+kIeClZYuIkWnj2m5z+5Ni6D2mjecYjc=
Subject key identifier: F1:4B:CB:64:50:0A:A8:9A:42:10:64:43:03:B3:10:65:82:81:D4:50
Certificate issuer: /CN=64fa66fb84a781a0584fd0d1c2df39bda4760519
Certificate serial: 019A34854EE0C9C4278F2C6F7963083FBE65
Authority key identifier: 64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/8UvLZFAKqJpCEGRDA7MQZYKB1FA.roa
Signing time: Thu 30 Oct 2025 09:49:03 +0000
ROA not before: Thu 30 Oct 2025 09:49:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 395793
IP address blocks: 94.176.165.0/24 maxlen: 24
188.215.68.0/24 maxlen: 24
188.215.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:34:85:4e:e0:c9:c4:27:8f:2c:6f:79:63:08:3f:be:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64fa66fb84a781a0584fd0d1c2df39bda4760519
Validity
Not Before: Oct 30 09:49:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f14bcb64500aa89a4210644303b310658281d450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:fb:24:a6:6c:aa:88:bd:17:81:f0:7b:b1:48:
73:40:0d:5d:49:9e:ce:e3:1f:73:0d:a6:73:90:64:
15:bb:45:79:83:24:e5:80:90:c6:b0:77:8e:77:da:
b8:88:73:00:79:45:c7:27:fc:67:e6:b1:6c:48:89:
89:c5:ad:88:fd:f9:22:39:d0:6d:d4:08:d6:16:13:
36:31:18:7d:a9:9e:92:70:ea:d5:28:63:8c:fc:c1:
76:b8:20:2a:11:c7:5e:67:be:d0:57:3d:26:a1:14:
fe:05:c1:5f:d1:30:97:83:d5:6b:f7:10:75:de:a7:
0b:ec:a5:41:7a:08:c6:b2:6e:fa:59:ff:14:17:12:
83:6f:ad:88:2e:c8:02:e0:09:b4:d3:fc:22:62:62:
57:00:32:17:0a:68:10:f1:2e:ff:a0:bb:58:02:a9:
2a:0c:ca:0b:5a:ad:5c:58:9e:eb:04:d3:27:be:59:
88:fa:22:69:9b:33:70:d6:0a:0d:ab:03:48:5c:7a:
d8:d4:e8:c5:0e:bc:71:24:d9:0a:3f:22:2c:3b:cd:
53:aa:cb:55:ac:c4:08:61:37:cb:54:a8:d6:a1:65:
23:76:a8:4f:da:dc:d3:9c:59:0b:3b:bf:8d:67:85:
9d:39:90:cb:65:86:1e:a9:d0:ba:e2:ac:42:8b:2a:
df:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:4B:CB:64:50:0A:A8:9A:42:10:64:43:03:B3:10:65:82:81:D4:50
X509v3 Authority Key Identifier:
keyid:64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/8UvLZFAKqJpCEGRDA7MQZYKB1FA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.176.165.0/24
188.215.68.0/23
Signature Algorithm: sha256WithRSAEncryption
65:5e:c6:59:bc:90:be:b6:6b:c1:13:39:57:4b:de:e9:f1:1b:
50:2d:a9:52:a5:5c:4a:90:95:c4:06:99:53:a8:a8:1f:37:00:
62:f2:51:2b:c4:ef:fb:8f:3a:a5:72:da:88:19:c4:b8:3e:93:
10:bd:34:c4:70:d5:d3:05:ef:5f:6e:38:a6:f7:1a:a7:83:8d:
80:a1:f0:f0:12:68:5f:8a:9f:03:28:c5:0a:7d:6d:f8:8e:d9:
84:87:a9:dc:d1:58:c2:eb:76:24:46:56:50:4f:00:44:3b:1c:
fb:d1:f9:e9:b5:5c:9e:03:d1:2d:81:7e:6c:0a:e8:65:2b:04:
6e:68:ba:b0:ad:c3:ef:87:1a:4c:a8:81:e6:e5:16:56:86:e1:
55:ec:c5:4f:cc:aa:70:94:49:49:52:b4:d1:68:0d:36:d1:f0:
72:eb:c6:b4:87:8c:b9:dd:17:7a:9f:59:b7:d2:0a:f7:90:e1:
34:7c:6a:55:fc:d1:2a:93:02:73:e1:e4:de:ec:b8:fd:54:9e:
06:2f:24:fa:03:ad:af:8c:93:26:a6:e4:5d:35:c5:13:60:65:
8e:1f:cc:5e:e4:8f:3c:76:d1:05:5a:08:77:25:b4:13:26:41:
a9:9c:23:11:13:26:12:52:b5:d3:4f:81:38:91:34:64:e1:85:
e3:64:21:4e
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZo0hU7gycQnjyxveWMIP75lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0ZmE2NmZiODRhNzgxYTA1ODRmZDBkMWMyZGYzOWJkYTQ3
NjA1MTkwHhcNMjUxMDMwMDk0OTAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMTRiY2I2NDUwMGFhODlhNDIxMDY0NDMwM2IzMTA2NTgyODFkNDUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPskpmyqiL0XgfB7sUhzQA1dSZ7O
4x9zDaZzkGQVu0V5gyTlgJDGsHeOd9q4iHMAeUXHJ/xn5rFsSImJxa2I/fkiOdBt
1AjWFhM2MRh9qZ6ScOrVKGOM/MF2uCAqEcdeZ77QVz0moRT+BcFf0TCXg9Vr9xB1
3qcL7KVBegjGsm76Wf8UFxKDb62ILsgC4Am00/wiYmJXADIXCmgQ8S7/oLtYAqkq
DMoLWq1cWJ7rBNMnvlmI+iJpmzNw1goNqwNIXHrY1OjFDrxxJNkKPyIsO81TqstV
rMQIYTfLVKjWoWUjdqhP2tzTnFkLO7+NZ4WdOZDLZYYeqdC64qxCiyrf0QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFPFLy2RQCqiaQhBkQwOzEGWCgdRQMB8GA1UdIwQY
MBaAFGT6ZvuEp4GgWE/Q0cLfOb2kdgUZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlBwbS00U25nYUJZVDlEUnd0ODV2YVIyQlJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi82NjNiNGQtYjgwZS00OTQ2LTg0YzQt
NzQwOGViOGJjNTg2LzEvOFV2TFpGQUtxSnBDRUdSREE3TVFaWUtCMUZBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi82NjNiNGQtYjgwZS00OTQ2LTg0YzQtNzQwOGViOGJjNTg2
LzEvWlBwbS00U25nYUJZVDlEUnd0ODV2YVIyQlJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXrClAwQB
vNdEMA0GCSqGSIb3DQEBCwUAA4IBAQBlXsZZvJC+tmvBEzlXS97p8RtQLalSpVxK
kJXEBplTqKgfNwBi8lErxO/7jzqlctqIGcS4PpMQvTTEcNXTBe9fbjim9xqng42A
ofDwEmhfip8DKMUKfW34jtmEh6nc0VjC63YkRlZQTwBEOxz70fnptVyeA9EtgX5s
CuhlKwRuaLqwrcPvhxpMqIHm5RZWhuFV7MVPzKpwlElJUrTRaA020fBy68a0h4y5
3Rd6n1m30gr3kOE0fGpV/NEqkwJz4eTe7Lj9VJ4GLyT6A62vjJMmpuRdNcUTYGWO
H8xe5I88dtEFWgh3JbQTJkGpnCMREyYSUrXTT4E4kTRk4YXjZCFO
-----END CERTIFICATE-----
Generated at Tue Nov 4 23:22:25 2025 by rpki-client