Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/8Iq82OAVfdAmtA73eRoKV8Dt5yo.roa
File: 8Iq82OAVfdAmtA73eRoKV8Dt5yo.roa (raw, json)
Hash identifier: aujtRiFKGUSGs6JLSKvAIV7CEwLeuy59to5pukeZQ/Q=
Subject key identifier: F0:8A:BC:D8:E0:15:7D:D0:26:B4:0E:F7:79:1A:0A:57:C0:ED:E7:2A
Certificate issuer: /CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Certificate serial: 019A27C79CCD84130906ED83A750EA74E8A7
Authority key identifier: 09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/8Iq82OAVfdAmtA73eRoKV8Dt5yo.roa
Signing time: Mon 27 Oct 2025 22:26:24 +0000
ROA not before: Mon 27 Oct 2025 22:26:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203363
IP address blocks: 91.205.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:27:c7:9c:cd:84:13:09:06:ed:83:a7:50:ea:74:e8:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Validity
Not Before: Oct 27 22:26:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f08abcd8e0157dd026b40ef7791a0a57c0ede72a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b0:14:c2:69:66:a8:01:a5:52:0d:90:62:9c:
45:93:e7:c2:4e:31:6e:bb:35:52:d7:f2:36:97:63:
ad:f9:89:31:44:39:df:1e:c5:4d:ec:e8:ce:44:29:
1b:2f:1a:8c:32:7d:4d:e5:58:d5:bb:bf:f6:80:21:
8f:2a:6f:23:c5:59:b3:4d:6b:72:64:01:18:66:36:
30:0e:13:0d:eb:5e:75:ff:0a:05:ce:65:7b:5d:1d:
b5:a0:56:31:7b:4a:97:dd:63:5e:c7:27:2b:0e:6c:
f0:fe:20:81:8b:9c:3e:76:39:d3:05:c5:bc:c6:80:
f4:2b:62:c5:44:ea:db:f4:d8:d2:51:33:82:ab:81:
77:a6:1a:05:5b:8a:82:10:d3:35:37:c7:18:f2:43:
4f:23:b7:67:08:d2:c9:bb:07:4a:f0:fd:4c:ed:01:
94:3b:1a:d6:34:7b:32:e7:51:b7:f0:f2:5d:b4:02:
b2:e3:b9:06:d4:da:b0:35:dd:71:33:1f:ef:ae:fe:
4f:da:35:3e:0c:b5:17:05:cd:20:82:a1:fc:01:0d:
45:1a:ea:7c:bc:6f:e2:ae:ff:fd:4b:86:9b:4a:7d:
f0:65:d2:4c:35:b7:77:c4:32:e1:6f:96:02:9c:34:
7c:20:8b:5b:c6:27:4f:67:2a:48:c0:68:55:80:5d:
48:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:8A:BC:D8:E0:15:7D:D0:26:B4:0E:F7:79:1A:0A:57:C0:ED:E7:2A
X509v3 Authority Key Identifier:
keyid:09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/8Iq82OAVfdAmtA73eRoKV8Dt5yo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.205.158.0/24
Signature Algorithm: sha256WithRSAEncryption
25:c4:fc:7b:8d:90:f7:34:4d:20:5e:6f:f2:24:b4:7d:8a:fe:
b0:3c:88:58:30:3c:1d:12:1c:14:a4:3d:45:9a:07:58:2b:02:
f0:9c:a1:7e:f1:97:43:e3:3d:73:cf:0b:fd:22:39:0d:7d:a6:
48:5a:42:53:f7:b6:1e:65:3f:6d:1b:a2:23:b9:73:8b:43:29:
19:7d:63:62:c4:83:fd:66:64:81:54:44:ee:9b:81:a4:a7:77:
f1:e5:17:33:7c:a0:a7:4b:e2:48:43:c3:60:2e:fd:fd:f2:21:
59:e2:e5:9b:f1:c8:0e:df:26:87:a4:b8:0e:98:63:32:e1:df:
72:a3:a2:58:fa:c4:ac:d2:14:d6:8a:6e:81:d9:36:d3:09:80:
97:e7:3a:7a:e8:71:d3:5d:b3:9e:06:ae:29:ad:06:ca:40:05:
ce:c3:f7:22:14:c7:5c:86:0a:8d:f0:2f:65:d1:a6:fb:a5:3f:
2e:73:a2:65:f0:a1:10:70:07:d2:54:5d:7d:ec:a9:64:52:b4:
b9:ac:65:ae:4e:92:4d:15:3a:2b:d5:82:10:80:52:46:82:f3:
b3:4d:c2:77:6a:6b:74:4b:c1:a3:25:b8:35:29:e4:38:ea:fb:
8a:ea:5d:f2:89:f8:8e:a2:68:30:0b:0c:8c:97:a9:89:3e:cb:
43:eb:da:7c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZonx5zNhBMJBu2Dp1DqdOinMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MWVjN2NjZjBmYTc2MWVkOTliYzVhN2E5ZWMwZDBlZWIw
YmYwNTUwHhcNMjUxMDI3MjIyNjI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMDhhYmNkOGUwMTU3ZGQwMjZiNDBlZjc3OTFhMGE1N2MwZWRlNzJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrAUwmlmqAGlUg2QYpxFk+fCTjFu
uzVS1/I2l2Ot+YkxRDnfHsVN7OjORCkbLxqMMn1N5VjVu7/2gCGPKm8jxVmzTWty
ZAEYZjYwDhMN6151/woFzmV7XR21oFYxe0qX3WNexycrDmzw/iCBi5w+djnTBcW8
xoD0K2LFROrb9NjSUTOCq4F3phoFW4qCENM1N8cY8kNPI7dnCNLJuwdK8P1M7QGU
OxrWNHsy51G38PJdtAKy47kG1NqwNd1xMx/vrv5P2jU+DLUXBc0ggqH8AQ1FGup8
vG/irv/9S4abSn3wZdJMNbd3xDLhb5YCnDR8IItbxidPZypIwGhVgF1IMQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPCKvNjgFX3QJrQO93kaClfA7ecqMB8GA1UdIwQY
MBaAFAkex8zw+nYe2ZvFp6nsDQ7rC/BVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1I3SHpQRDZkaDdabThXbnFld05EdXNMOEZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9lNjQ3OGEtN2I3My00NzU4LWFkZGQt
NDVjZmM4NTdkZGRkLzEvOElxODJPQVZmZEFtdEE3M2VSb0tWOER0NXlvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS9lNjQ3OGEtN2I3My00NzU4LWFkZGQtNDVjZmM4NTdkZGRk
LzEvQ1I3SHpQRDZkaDdabThXbnFld05EdXNMOEZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW82eMA0G
CSqGSIb3DQEBCwUAA4IBAQAlxPx7jZD3NE0gXm/yJLR9iv6wPIhYMDwdEhwUpD1F
mgdYKwLwnKF+8ZdD4z1zzwv9IjkNfaZIWkJT97YeZT9tG6IjuXOLQykZfWNixIP9
ZmSBVETum4Gkp3fx5RczfKCnS+JIQ8NgLv398iFZ4uWb8cgO3yaHpLgOmGMy4d9y
o6JY+sSs0hTWim6B2TbTCYCX5zp66HHTXbOeBq4prQbKQAXOw/ciFMdchgqN8C9l
0ab7pT8uc6Jl8KEQcAfSVF197KlkUrS5rGWuTpJNFTor1YIQgFJGgvOzTcJ3amt0
S8GjJbg1KeQ46vuK6l3yifiOomgwCwyMl6mJPstD69p8
-----END CERTIFICATE-----
Generated at Wed Nov 5 00:49:16 2025 by rpki-client