Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/Is71eUc7Q0aGa38UvjoD1fxVCa0.roa
File: Is71eUc7Q0aGa38UvjoD1fxVCa0.roa (raw, json)
Hash identifier: o3QoJnjZZqmX4CC/3QVDf3vqO7q6XpT3vRmbQX4Rx/I=
Subject key identifier: 22:CE:F5:79:47:3B:43:46:86:6B:7F:14:BE:3A:03:D5:FC:55:09:AD
Certificate issuer: /CN=f685dc3c14464b8c40817525d9a254b4ed3a8a3a
Certificate serial: 019A25466AAA4DDECC32E210A596F4FABCDA
Authority key identifier: F6:85:DC:3C:14:46:4B:8C:40:81:75:25:D9:A2:54:B4:ED:3A:8A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9oXcPBRGS4xAgXUl2aJUtO06ijo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/Is71eUc7Q0aGa38UvjoD1fxVCa0.roa
Signing time: Mon 27 Oct 2025 10:46:03 +0000
ROA not before: Mon 27 Oct 2025 10:46:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8075
IP address blocks: 185.9.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/9oXcPBRGS4xAgXUl2aJUtO06ijo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/9oXcPBRGS4xAgXUl2aJUtO06ijo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9oXcPBRGS4xAgXUl2aJUtO06ijo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:46:6a:aa:4d:de:cc:32:e2:10:a5:96:f4:fa:bc:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f685dc3c14464b8c40817525d9a254b4ed3a8a3a
Validity
Not Before: Oct 27 10:46:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=22cef579473b4346866b7f14be3a03d5fc5509ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:e2:86:f6:af:30:cd:35:38:31:ba:a0:dc:65:
dd:99:a6:15:ab:3d:24:42:00:08:51:75:4b:4e:e0:
e3:95:a9:32:f8:0d:8f:86:d2:49:70:cb:9b:48:03:
90:56:c5:cd:90:55:c1:92:54:86:53:77:b9:6b:90:
9c:b7:eb:8e:c4:23:95:87:16:6c:38:e6:77:c0:50:
5b:45:1a:bc:c4:a9:93:f8:70:6c:f5:84:8a:ed:0b:
b6:64:61:80:33:2d:48:a6:47:48:0e:fb:57:98:5c:
73:2d:d2:2a:87:c9:3f:49:a9:46:eb:4d:cc:b3:87:
62:3b:88:6f:b1:0d:9e:5f:0b:39:33:a9:aa:4f:92:
27:04:3b:df:39:ae:e5:a6:5d:f8:72:93:b1:b4:f6:
2e:fb:b5:09:49:ed:2b:06:3e:55:86:ff:9b:00:d9:
cc:54:10:0c:74:ad:d5:61:93:07:df:06:77:8c:07:
a5:72:85:66:bb:46:a1:60:71:74:75:22:39:81:24:
33:bf:fd:2c:c3:e4:ea:3a:e6:17:5e:2d:44:0b:d2:
b6:ce:f2:6f:25:fd:63:cf:e5:55:70:80:d9:d1:20:
b8:69:41:95:2d:05:b5:a7:16:e4:f5:f6:01:99:09:
29:95:76:ba:43:54:4c:c3:04:0f:c6:c1:41:bf:bf:
47:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:CE:F5:79:47:3B:43:46:86:6B:7F:14:BE:3A:03:D5:FC:55:09:AD
X509v3 Authority Key Identifier:
keyid:F6:85:DC:3C:14:46:4B:8C:40:81:75:25:D9:A2:54:B4:ED:3A:8A:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9oXcPBRGS4xAgXUl2aJUtO06ijo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/Is71eUc7Q0aGa38UvjoD1fxVCa0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/9oXcPBRGS4xAgXUl2aJUtO06ijo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.9.141.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:de:d3:4d:9a:76:ea:13:41:8c:56:84:10:5e:ec:49:34:e8:
f9:86:92:59:ba:1b:b2:48:8d:65:b2:8f:a1:e3:7c:75:fc:af:
fd:b5:70:25:33:0a:c0:a5:e4:9f:a2:32:5a:8f:d7:30:5c:b9:
0b:d9:bf:b1:20:ac:25:c7:91:2d:1b:90:fe:bc:d9:6c:23:b1:
55:25:32:e5:56:51:e1:1e:8a:63:14:27:e9:36:c8:98:45:c8:
07:58:8a:dd:0b:2b:6a:f2:7d:4f:81:7c:3b:5e:90:87:b8:82:
27:dd:34:44:23:ca:39:6e:27:7b:c2:bf:74:1b:3f:28:3b:62:
de:3f:83:8b:aa:be:23:ee:e0:ce:3c:8a:2b:2b:2a:ee:c9:d1:
50:e3:02:cb:bf:31:71:58:5a:45:39:33:07:da:37:a7:3b:ae:
cc:c0:dc:f5:93:72:94:ad:1a:f0:af:5d:20:0b:0c:e0:5f:58:
1a:56:24:f1:d0:29:e2:0d:9e:9c:61:84:88:52:1a:19:60:28:
6a:1b:a8:8c:0a:04:73:43:f2:61:9e:8e:70:f1:84:72:19:e9:
e8:b1:b4:50:6e:14:62:5e:0a:24:c5:5b:10:ee:ae:a4:c1:84:
c1:b1:67:8a:0d:e1:78:6f:6d:e0:50:67:05:19:3a:63:b4:e4:
f7:4f:01:ad
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZolRmqqTd7MMuIQpZb0+rzaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2ODVkYzNjMTQ0NjRiOGM0MDgxNzUyNWQ5YTI1NGI0ZWQz
YThhM2EwHhcNMjUxMDI3MTA0NjAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMmNlZjU3OTQ3M2I0MzQ2ODY2YjdmMTRiZTNhMDNkNWZjNTUwOWFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8eKG9q8wzTU4Mbqg3GXdmaYVqz0k
QgAIUXVLTuDjlaky+A2PhtJJcMubSAOQVsXNkFXBklSGU3e5a5Cct+uOxCOVhxZs
OOZ3wFBbRRq8xKmT+HBs9YSK7Qu2ZGGAMy1IpkdIDvtXmFxzLdIqh8k/SalG603M
s4diO4hvsQ2eXws5M6mqT5InBDvfOa7lpl34cpOxtPYu+7UJSe0rBj5Vhv+bANnM
VBAMdK3VYZMH3wZ3jAelcoVmu0ahYHF0dSI5gSQzv/0sw+TqOuYXXi1EC9K2zvJv
Jf1jz+VVcIDZ0SC4aUGVLQW1pxbk9fYBmQkplXa6Q1RMwwQPxsFBv79HPwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCLO9XlHO0NGhmt/FL46A9X8VQmtMB8GA1UdIwQY
MBaAFPaF3DwURkuMQIF1JdmiVLTtOoo6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOW9YY1BCUkdTNHhBZ1hVbDJhSlV0TzA2aWpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS8yMDQyNzUtYTM2OC00MzFiLThmZjYt
ZWI2N2Y4ZTYzMmI4LzEvSXM3MWVVYzdRMGFHYTM4VXZqb0QxZnhWQ2EwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS8yMDQyNzUtYTM2OC00MzFiLThmZjYtZWI2N2Y4ZTYzMmI4
LzEvOW9YY1BCUkdTNHhBZ1hVbDJhSlV0TzA2aWpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuQmNMA0G
CSqGSIb3DQEBCwUAA4IBAQAe3tNNmnbqE0GMVoQQXuxJNOj5hpJZuhuySI1lso+h
43x1/K/9tXAlMwrApeSfojJaj9cwXLkL2b+xIKwlx5EtG5D+vNlsI7FVJTLlVlHh
HopjFCfpNsiYRcgHWIrdCytq8n1PgXw7XpCHuIIn3TREI8o5bid7wr90Gz8oO2Le
P4OLqr4j7uDOPIorKyruydFQ4wLLvzFxWFpFOTMH2jenO67MwNz1k3KUrRrwr10g
CwzgX1gaViTx0CniDZ6cYYSIUhoZYChqG6iMCgRzQ/Jhno5w8YRyGenosbRQbhRi
XgokxVsQ7q6kwYTBsWeKDeF4b23gUGcFGTpjtOT3TwGt
-----END CERTIFICATE-----
Generated at Wed Nov 5 16:52:29 2025 by rpki-client