Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/_hNjOcARC5ny-TPLISrm1ofTPfM.roa
File: _hNjOcARC5ny-TPLISrm1ofTPfM.roa (raw, json)
Hash identifier: USSWK8fGx8ZYhYqn9tdxp5t4H5mEj6fREHx4NuHsuIs=
Subject key identifier: FE:13:63:39:C0:11:0B:99:F2:F9:33:CB:21:2A:E6:D6:87:D3:3D:F3
Certificate issuer: /CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444
Certificate serial: 01987A8131DF9EE864BAEF56F3D419EDAC49
Authority key identifier: 0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/_hNjOcARC5ny-TPLISrm1ofTPfM.roa
Signing time: Tue 05 Aug 2025 13:52:23 +0000
ROA not before: Tue 05 Aug 2025 13:52:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9009
IP address blocks: 92.63.226.0/24 maxlen: 24
114.129.8.0/24 maxlen: 24
148.222.184.0/24 maxlen: 24
2a02:c6c1:4::/48 maxlen: 48
2a02:c6c1:5::/48 maxlen: 48
2a02:c6c1:6::/48 maxlen: 48
2a02:c6c1:7::/48 maxlen: 48
2a02:c6c1:8::/48 maxlen: 48
2a02:c6c1:9::/48 maxlen: 48
2a02:c6c1:a::/48 maxlen: 48
2a02:c6c1:b::/48 maxlen: 48
2a02:c6c1:143::/48 maxlen: 48
2a0c:6742::/48 maxlen: 48
2a0e:a7c1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:81:31:df:9e:e8:64:ba:ef:56:f3:d4:19:ed:ac:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444
Validity
Not Before: Aug 5 13:52:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fe136339c0110b99f2f933cb212ae6d687d33df3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4a:2a:7e:b8:f5:4b:4a:5d:50:a6:95:15:ea:
1a:a2:a2:84:a0:56:e7:1e:46:36:a9:ff:01:f2:08:
b3:c3:5c:17:b8:69:4a:a0:22:ea:9e:6e:91:92:ab:
12:f4:8d:b2:7b:7b:e7:3f:44:ec:54:e3:bb:69:7a:
42:f6:0f:b2:e9:d7:15:5b:9c:a1:85:ca:b7:a2:ef:
50:76:2f:56:20:f5:63:a2:dd:0b:cf:c0:78:ea:95:
6e:cd:17:a7:4f:13:24:2e:20:e6:1b:85:53:b3:ef:
59:3e:53:c8:55:8b:9a:34:8d:2a:55:b6:09:df:82:
d0:b1:8d:45:13:40:cb:24:73:ac:5e:55:3c:fe:24:
30:6f:98:e2:c0:62:7f:55:8d:17:68:cc:ea:32:98:
46:08:00:ba:e9:d5:ad:ec:34:9e:56:89:dc:1f:e7:
12:48:6d:bb:ab:f7:e2:04:9d:1f:89:f0:6f:78:e2:
39:db:d0:63:5f:ff:4a:15:83:02:e7:2c:d2:6b:e0:
92:85:63:6e:c5:cd:ac:2e:ee:b3:98:f1:24:0d:db:
8f:00:06:8e:37:95:82:70:6b:ce:b6:69:68:85:2f:
a9:86:3a:63:d2:92:4f:9a:4e:67:8e:10:36:f9:38:
17:04:11:e4:c7:c9:b1:6b:18:c3:70:83:2d:28:d2:
14:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:13:63:39:C0:11:0B:99:F2:F9:33:CB:21:2A:E6:D6:87:D3:3D:F3
X509v3 Authority Key Identifier:
keyid:0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/_hNjOcARC5ny-TPLISrm1ofTPfM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.63.226.0/24
114.129.8.0/24
148.222.184.0/24
IPv6:
2a02:c6c1:4::-2a02:c6c1:b:ffff:ffff:ffff:ffff:ffff
2a02:c6c1:143::/48
2a0c:6742::/48
2a0e:a7c1::/48
Signature Algorithm: sha256WithRSAEncryption
6c:78:d0:2d:80:01:42:4b:e0:46:a0:f6:9c:85:1b:7c:c3:2f:
35:b3:b4:09:6b:ed:7d:09:46:b2:60:68:c2:d5:1c:3a:c8:43:
32:24:af:b9:8a:bb:d4:7a:7e:8a:e7:08:45:39:c7:b0:4e:76:
8d:64:9c:0c:fb:6b:59:3e:64:54:81:fc:3f:ee:01:e7:09:12:
da:e4:00:5c:73:9e:1b:73:dd:9e:47:8d:e7:29:c3:4d:5b:4c:
d5:c7:8e:a0:55:97:c1:d0:8b:9a:34:ba:5a:bb:33:95:34:19:
fb:a9:03:ff:62:42:b3:19:80:2d:ba:d5:04:62:1a:49:62:26:
34:29:88:78:ea:6c:0a:98:0b:2a:75:cb:93:b8:b4:be:ab:63:
0d:ff:56:f5:07:5c:83:1d:bf:2a:c9:bb:dc:0d:db:1e:90:10:
82:74:c4:8a:81:f0:a4:4b:cb:46:3f:41:fc:7f:d8:25:ed:51:
33:a0:32:cc:b4:c9:de:5e:25:ff:fb:64:25:d8:b9:9a:13:ef:
26:37:56:f5:0f:93:51:c2:ab:25:0d:56:3c:97:4a:be:10:15:
8d:49:b2:9d:ca:27:e9:b1:4f:ec:cb:a6:88:af:73:ea:a8:3b:
6c:a2:57:97:78:14:e4:cd:c6:01:07:50:a8:a2:48:4a:75:f4:
f9:60:08:16
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgISAZh6gTHfnuhkuu9W89QZ7axJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlZjVjYjJmNTkwZDA0MTY1NGY0ZGZkYjYwYTI4ZjlhMTU0
NGY0NDQwHhcNMjUwODA1MTM1MjIzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZTEzNjMzOWMwMTEwYjk5ZjJmOTMzY2IyMTJhZTZkNjg3ZDMzZGYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyEoqfrj1S0pdUKaVFeoaoqKEoFbn
HkY2qf8B8gizw1wXuGlKoCLqnm6RkqsS9I2ye3vnP0TsVOO7aXpC9g+y6dcVW5yh
hcq3ou9Qdi9WIPVjot0Lz8B46pVuzRenTxMkLiDmG4VTs+9ZPlPIVYuaNI0qVbYJ
34LQsY1FE0DLJHOsXlU8/iQwb5jiwGJ/VY0XaMzqMphGCAC66dWt7DSeVoncH+cS
SG27q/fiBJ0fifBveOI529BjX/9KFYMC5yzSa+CShWNuxc2sLu6zmPEkDduPAAaO
N5WCcGvOtmlohS+phjpj0pJPmk5njhA2+TgXBBHkx8mxaxjDcIMtKNIUlQIDAQAB
o4ICTDCCAkgwHQYDVR0OBBYEFP4TYznAEQuZ8vkzyyEq5taH0z3zMB8GA1UdIwQY
MBaAFA71yy9ZDQQWVPTf22Cij5oVRPREMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHZYTEwxa05CQlpVOU5fYllLS1BtaFZFOUVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8yMjZmMDQtZjdkYi00OTFhLWJhZmIt
ZWU0MzVkM2NkNTg1LzEvX2hOak9jQVJDNW55LVRQTElTcm0xb2ZUUGZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny8yMjZmMDQtZjdkYi00OTFhLWJhZmItZWU0MzVkM2NkNTg1
LzEvRHZYTEwxa05CQlpVOU5fYllLS1BtaFZFOUVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGIGCCsGAQUFBwEHAQH/BFMwUTAYBAIAATASAwQAXD/iAwQA
coEIAwQAlN64MDUEAgACMC8wEgMHAioCxsEABAMHAioCxsEACAMHACoCxsEBQwMH
ACoMZ0IAAAMHACoOp8EAADANBgkqhkiG9w0BAQsFAAOCAQEAbHjQLYABQkvgRqD2
nIUbfMMvNbO0CWvtfQlGsmBowtUcOshDMiSvuYq71Hp+iucIRTnHsE52jWScDPtr
WT5kVIH8P+4B5wkS2uQAXHOeG3PdnkeN5ynDTVtM1ceOoFWXwdCLmjS6WrszlTQZ
+6kD/2JCsxmALbrVBGIaSWImNCmIeOpsCpgLKnXLk7i0vqtjDf9W9Qdcgx2/Ksm7
3A3bHpAQgnTEioHwpEvLRj9B/H/YJe1RM6AyzLTJ3l4l//tkJdi5mhPvJjdW9Q+T
UcKrJQ1WPJdKvhAVjUmyncon6bFP7MumiK9z6qg7bKJXl3gU5M3GAQdQqKJISnX0
+WAIFg==
-----END CERTIFICATE-----
Generated at Thu Aug 7 07:18:43 2025 by rpki-client