Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/c4c32c-322e-4ed7-8a29-45d542d5f55f/1/OUX94moMQdLE-KIzVRx3XsJZmbI.roa
File: OUX94moMQdLE-KIzVRx3XsJZmbI.roa (raw, json)
Hash identifier: eBHJvbJg/1l2nBKpp6brqkKJgQz9auD2iIyBk5EmRho=
Subject key identifier: 39:45:FD:E2:6A:0C:41:D2:C4:F8:A2:33:55:1C:77:5E:C2:59:99:B2
Certificate issuer: /CN=c8531ae2ce57c95f5a398930ea45503542801ba1
Certificate serial: 019A24AAC76F54A8A46E259BF868E1FA8142
Authority key identifier: C8:53:1A:E2:CE:57:C9:5F:5A:39:89:30:EA:45:50:35:42:80:1B:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yFMa4s5XyV9aOYkw6kVQNUKAG6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/c4c32c-322e-4ed7-8a29-45d542d5f55f/1/OUX94moMQdLE-KIzVRx3XsJZmbI.roa
Signing time: Mon 27 Oct 2025 07:56:03 +0000
ROA not before: Mon 27 Oct 2025 07:56:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31713
IP address blocks: 217.113.64.0/19 maxlen: 24
217.113.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/c4c32c-322e-4ed7-8a29-45d542d5f55f/1/yFMa4s5XyV9aOYkw6kVQNUKAG6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/c4c32c-322e-4ed7-8a29-45d542d5f55f/1/yFMa4s5XyV9aOYkw6kVQNUKAG6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/yFMa4s5XyV9aOYkw6kVQNUKAG6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:aa:c7:6f:54:a8:a4:6e:25:9b:f8:68:e1:fa:81:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8531ae2ce57c95f5a398930ea45503542801ba1
Validity
Not Before: Oct 27 07:56:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3945fde26a0c41d2c4f8a233551c775ec25999b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:81:c2:79:62:fb:ec:d6:80:d3:26:91:32:91:
5c:54:ed:3e:da:50:77:7e:fc:49:08:00:4b:dc:55:
4a:d0:5c:69:d7:10:51:72:39:07:04:d3:9d:2c:2a:
4c:d5:f0:13:11:c5:74:3d:7f:b4:8a:06:f1:84:60:
52:e1:81:dd:d8:3d:51:71:e7:4a:84:ec:b6:20:ba:
67:cb:24:64:3d:23:29:16:71:64:59:bf:a8:18:b3:
9c:45:0c:bf:42:5c:ac:a7:13:ae:56:f6:78:54:d4:
d7:6f:62:55:64:37:f0:25:ef:c1:14:d8:6f:38:4c:
8a:eb:e6:98:50:c0:de:86:ef:76:e0:4b:92:e1:3c:
49:b4:cb:eb:4c:b9:55:2e:82:a0:02:21:2b:56:f9:
82:cc:75:41:8e:c8:c2:5e:18:31:0b:b7:a8:b2:57:
03:29:cf:cc:0b:b2:e5:35:12:98:75:93:fb:59:19:
99:bf:15:5d:54:4d:e6:a3:63:9c:d6:4e:87:1f:af:
4c:c8:cd:fe:f7:64:5e:d0:73:f4:72:9b:d7:50:ec:
7f:db:e1:cf:88:a2:50:e6:2c:75:6a:bc:66:d8:47:
11:8c:83:95:37:f5:15:1e:71:99:54:ea:e2:77:5a:
f1:ad:9e:6f:5d:d2:87:64:14:9f:22:d0:b1:c3:26:
17:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:45:FD:E2:6A:0C:41:D2:C4:F8:A2:33:55:1C:77:5E:C2:59:99:B2
X509v3 Authority Key Identifier:
keyid:C8:53:1A:E2:CE:57:C9:5F:5A:39:89:30:EA:45:50:35:42:80:1B:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFMa4s5XyV9aOYkw6kVQNUKAG6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c4c32c-322e-4ed7-8a29-45d542d5f55f/1/OUX94moMQdLE-KIzVRx3XsJZmbI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c4c32c-322e-4ed7-8a29-45d542d5f55f/1/yFMa4s5XyV9aOYkw6kVQNUKAG6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.113.64.0/19
Signature Algorithm: sha256WithRSAEncryption
69:55:01:01:0b:b3:2c:14:93:83:62:de:b4:b7:61:95:20:69:
a5:84:11:74:54:ee:fb:ad:9a:de:5c:54:0a:21:c5:78:68:6a:
e8:06:74:c3:e4:83:ac:d4:e4:02:c0:67:ca:86:9c:7a:7e:69:
b3:a6:3c:63:65:be:bb:6f:6b:5f:42:c8:e9:09:7b:78:5b:57:
4a:d1:0a:9e:a3:f3:40:bf:ea:e8:3d:84:e9:15:c7:54:19:42:
c7:22:12:ee:ca:40:5c:22:5d:6f:88:34:47:03:3a:68:40:62:
f1:46:99:ba:04:c8:d7:b9:88:ad:e0:bf:51:aa:f9:dd:3d:93:
b4:de:dd:26:dd:3c:19:2f:de:87:09:e9:b2:7c:df:7b:d7:b8:
22:c6:26:2d:e7:97:73:fb:10:4f:48:48:b2:5b:77:cd:cd:51:
17:69:80:55:de:fd:71:d5:fc:e8:7b:36:04:79:5f:62:67:06:
a4:df:89:9c:74:87:07:c6:45:66:ca:42:3e:23:06:65:ae:41:
43:66:f3:04:a3:04:29:2d:b2:3f:17:ec:fa:0a:ac:a5:d2:93:
10:2e:c8:0b:62:c3:4b:8d:4a:fe:95:ed:00:82:60:ae:69:70:
f9:f0:9a:92:ab:d6:4a:30:3a:24:0a:f0:9a:b4:36:de:30:8c:
64:d0:79:82
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZokqsdvVKikbiWb+Gjh+oFCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4NTMxYWUyY2U1N2M5NWY1YTM5ODkzMGVhNDU1MDM1NDI4
MDFiYTEwHhcNMjUxMDI3MDc1NjAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOTQ1ZmRlMjZhMGM0MWQyYzRmOGEyMzM1NTFjNzc1ZWMyNTk5OWIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwoHCeWL77NaA0yaRMpFcVO0+2lB3
fvxJCABL3FVK0Fxp1xBRcjkHBNOdLCpM1fATEcV0PX+0igbxhGBS4YHd2D1RcedK
hOy2ILpnyyRkPSMpFnFkWb+oGLOcRQy/QlyspxOuVvZ4VNTXb2JVZDfwJe/BFNhv
OEyK6+aYUMDehu924EuS4TxJtMvrTLlVLoKgAiErVvmCzHVBjsjCXhgxC7eoslcD
Kc/MC7LlNRKYdZP7WRmZvxVdVE3mo2Oc1k6HH69MyM3+92Re0HP0cpvXUOx/2+HP
iKJQ5ix1arxm2EcRjIOVN/UVHnGZVOrid1rxrZ5vXdKHZBSfItCxwyYXfQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDlF/eJqDEHSxPiiM1Ucd17CWZmyMB8GA1UdIwQY
MBaAFMhTGuLOV8lfWjmJMOpFUDVCgBuhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUZNYTRzNVh5VjlhT1lrdzZrVlFOVUtBRzZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9jNGMzMmMtMzIyZS00ZWQ3LThhMjkt
NDVkNTQyZDVmNTVmLzEvT1VYOTRtb01RZExFLUtJelZSeDNYc0pabWJJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy9jNGMzMmMtMzIyZS00ZWQ3LThhMjktNDVkNTQyZDVmNTVm
LzEveUZNYTRzNVh5VjlhT1lrdzZrVlFOVUtBRzZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF2XFAMA0G
CSqGSIb3DQEBCwUAA4IBAQBpVQEBC7MsFJODYt60t2GVIGmlhBF0VO77rZreXFQK
IcV4aGroBnTD5IOs1OQCwGfKhpx6fmmzpjxjZb67b2tfQsjpCXt4W1dK0Qqeo/NA
v+roPYTpFcdUGULHIhLuykBcIl1viDRHAzpoQGLxRpm6BMjXuYit4L9RqvndPZO0
3t0m3TwZL96HCemyfN9717gixiYt55dz+xBPSEiyW3fNzVEXaYBV3v1x1fzoezYE
eV9iZwak34mcdIcHxkVmykI+IwZlrkFDZvMEowQpLbI/F+z6Cqyl0pMQLsgLYsNL
jUr+le0AgmCuaXD58JqSq9ZKMDokCvCatDbeMIxk0HmC
-----END CERTIFICATE-----
Generated at Wed Nov 5 20:43:05 2025 by rpki-client