Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/1-A_irtWwfr7YbN9N57Y3W8ENeUY.roa
File: 1-A_irtWwfr7YbN9N57Y3W8ENeUY.roa (raw, json)
Hash identifier: Pj4tBJ5c5Ic2RFVavExezSrK0oZePPimYoJBCQFnu8o=
Subject key identifier: F8:0F:E2:AE:D5:B0:7E:BE:D8:6C:DF:4D:E7:B6:37:5B:C1:0D:79:46
Certificate issuer: /CN=f685dc3c14464b8c40817525d9a254b4ed3a8a3a
Certificate serial: 019A25A3CE173B851E747BD03276D1180EDC
Authority key identifier: F6:85:DC:3C:14:46:4B:8C:40:81:75:25:D9:A2:54:B4:ED:3A:8A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9oXcPBRGS4xAgXUl2aJUtO06ijo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/1-A_irtWwfr7YbN9N57Y3W8ENeUY.roa
Signing time: Mon 27 Oct 2025 12:28:03 +0000
ROA not before: Mon 27 Oct 2025 12:28:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202892
IP address blocks: 185.9.140.0/22 maxlen: 22
185.9.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/9oXcPBRGS4xAgXUl2aJUtO06ijo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/9oXcPBRGS4xAgXUl2aJUtO06ijo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9oXcPBRGS4xAgXUl2aJUtO06ijo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:a3:ce:17:3b:85:1e:74:7b:d0:32:76:d1:18:0e:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f685dc3c14464b8c40817525d9a254b4ed3a8a3a
Validity
Not Before: Oct 27 12:28:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f80fe2aed5b07ebed86cdf4de7b6375bc10d7946
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e3:da:e3:03:9e:f8:ac:df:9e:84:37:7a:fe:
ce:d7:27:65:df:0f:a5:5e:73:d9:95:87:01:4b:ad:
d7:3c:75:d3:45:49:37:26:3b:b1:e1:e1:94:65:1f:
90:e5:fa:8f:9a:e0:de:9a:17:de:e0:c2:cf:9c:36:
90:8b:7d:fc:a0:88:f3:1d:4e:03:49:d8:25:8a:2d:
94:11:11:fc:db:4a:16:1c:08:e5:c4:24:fb:1a:ff:
89:64:ea:f7:0a:8e:a8:9e:aa:b4:a3:3c:4a:a2:18:
cd:9c:80:0a:10:0f:23:87:05:63:12:c9:b7:e8:3e:
2a:57:97:e2:87:9b:22:5e:0c:87:fb:59:94:2d:9d:
5b:0d:0b:d7:0e:b7:1f:6b:43:89:5e:fa:bb:0a:ec:
1e:6e:ba:ff:b4:64:ac:bf:cb:0d:bb:7c:e8:c7:6e:
02:98:ff:eb:a0:e8:ce:6f:60:39:5f:f1:2d:4e:0d:
b2:50:ce:39:20:16:77:e6:36:c9:c0:e4:06:0b:ea:
39:26:63:a5:ab:2e:79:47:8a:f9:e5:9f:d8:6f:ca:
a2:01:39:89:cf:fa:97:12:fc:cc:8b:5c:ac:71:d6:
49:f1:da:d4:3b:f7:48:63:57:85:9b:ba:10:6a:cc:
20:88:fc:10:0d:f9:58:f7:a8:b9:38:f0:07:19:04:
6a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:0F:E2:AE:D5:B0:7E:BE:D8:6C:DF:4D:E7:B6:37:5B:C1:0D:79:46
X509v3 Authority Key Identifier:
keyid:F6:85:DC:3C:14:46:4B:8C:40:81:75:25:D9:A2:54:B4:ED:3A:8A:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9oXcPBRGS4xAgXUl2aJUtO06ijo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/1-A_irtWwfr7YbN9N57Y3W8ENeUY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/9oXcPBRGS4xAgXUl2aJUtO06ijo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.9.140.0/22
Signature Algorithm: sha256WithRSAEncryption
51:76:a8:ee:aa:a3:72:72:b1:b7:0e:5f:b0:2c:95:c1:5f:0d:
ce:f1:21:42:fe:97:f4:e7:07:86:21:44:de:fe:44:02:1a:dc:
d0:0f:fa:9c:10:eb:86:b6:e9:4d:48:0f:13:f2:3e:17:75:60:
ae:00:a8:bd:9b:53:52:33:f6:d5:18:66:74:62:5e:51:f6:6f:
e3:b9:18:47:1e:3c:a9:5c:16:4c:51:b3:2c:c1:e9:e2:3b:b6:
cc:6f:ee:3a:c2:92:7e:39:40:35:ae:ce:2f:fa:5c:29:2d:a6:
e8:7e:0b:52:85:33:5d:cc:0f:71:7c:5b:dd:73:73:dc:ad:d9:
7a:39:06:7f:d8:c6:3c:c9:15:41:1e:78:ac:a8:2b:01:04:55:
19:21:c8:26:22:c6:d6:94:bd:82:0e:83:0e:d1:9b:0a:1b:40:
d3:c6:3a:98:ce:04:7e:0f:b6:85:c8:f2:5e:ca:bf:3a:02:9f:
cd:4a:0b:bd:e9:1b:b0:aa:9c:6e:96:63:6f:1f:6f:9d:aa:52:
d9:59:87:93:54:a8:89:88:87:e1:35:e0:b3:fe:e5:6c:24:49:
63:64:ea:72:ab:66:ff:61:dd:76:8c:55:fd:7e:9c:04:ad:14:
42:dc:47:0a:57:53:b9:14:d9:11:2d:c7:44:0c:fc:39:29:ef:
be:63:64:21
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZolo84XO4UedHvQMnbRGA7cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2ODVkYzNjMTQ0NjRiOGM0MDgxNzUyNWQ5YTI1NGI0ZWQz
YThhM2EwHhcNMjUxMDI3MTIyODAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmODBmZTJhZWQ1YjA3ZWJlZDg2Y2RmNGRlN2I2Mzc1YmMxMGQ3OTQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOPa4wOe+KzfnoQ3ev7O1ydl3w+l
XnPZlYcBS63XPHXTRUk3Jjux4eGUZR+Q5fqPmuDemhfe4MLPnDaQi338oIjzHU4D
Sdglii2UERH820oWHAjlxCT7Gv+JZOr3Co6onqq0ozxKohjNnIAKEA8jhwVjEsm3
6D4qV5fih5siXgyH+1mULZ1bDQvXDrcfa0OJXvq7Cuwebrr/tGSsv8sNu3zox24C
mP/roOjOb2A5X/EtTg2yUM45IBZ35jbJwOQGC+o5JmOlqy55R4r55Z/Yb8qiATmJ
z/qXEvzMi1yscdZJ8drUO/dIY1eFm7oQaswgiPwQDflY96i5OPAHGQRqmQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPgP4q7VsH6+2GzfTee2N1vBDXlGMB8GA1UdIwQY
MBaAFPaF3DwURkuMQIF1JdmiVLTtOoo6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOW9YY1BCUkdTNHhBZ1hVbDJhSlV0TzA2aWpvLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS8yMDQyNzUtYTM2OC00MzFiLThmZjYt
ZWI2N2Y4ZTYzMmI4LzEvMS1BX2lydFd3ZnI3WWJOOU41N1kzVzhFTmVVWS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNmUvMjA0Mjc1LWEzNjgtNDMxYi04ZmY2LWViNjdmOGU2MzJi
OC8xLzlvWGNQQlJHUzR4QWdYVWwyYUpVdE8wNmlqby5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArkJjDAN
BgkqhkiG9w0BAQsFAAOCAQEAUXao7qqjcnKxtw5fsCyVwV8NzvEhQv6X9OcHhiFE
3v5EAhrc0A/6nBDrhrbpTUgPE/I+F3VgrgCovZtTUjP21RhmdGJeUfZv47kYRx48
qVwWTFGzLMHp4ju2zG/uOsKSfjlANa7OL/pcKS2m6H4LUoUzXcwPcXxb3XNz3K3Z
ejkGf9jGPMkVQR54rKgrAQRVGSHIJiLG1pS9gg6DDtGbChtA08Y6mM4Efg+2hcjy
Xsq/OgKfzUoLvekbsKqcbpZjbx9vnapS2VmHk1SoiYiH4TXgs/7lbCRJY2Tqcqtm
/2HddoxV/X6cBK0UQtxHCldTuRTZES3HRAz8OSnvvmNkIQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 21:11:47 2025 by rpki-client