Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/zi7h7UJYxNeBfgAfyuuPI1OuoNk.roa
File: zi7h7UJYxNeBfgAfyuuPI1OuoNk.roa (raw, json)
Hash identifier: FGz1x4BgJx0vMr4BEPiY/HKABSWRvFlGzY+wA/fT1Qs=
Subject key identifier: CE:2E:E1:ED:42:58:C4:D7:81:7E:00:1F:CA:EB:8F:23:53:AE:A0:D9
Certificate issuer: /CN=25bbed0bff7ffeab67f302b411a00701854a6c30
Certificate serial: 019A4DA2240D45DEDB2C653206860F43496C
Authority key identifier: 25:BB:ED:0B:FF:7F:FE:AB:67:F3:02:B4:11:A0:07:01:85:4A:6C:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JbvtC_9__qtn8wK0EaAHAYVKbDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/zi7h7UJYxNeBfgAfyuuPI1OuoNk.roa
Signing time: Tue 04 Nov 2025 06:51:02 +0000
ROA not before: Tue 04 Nov 2025 06:51:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43641
IP address blocks: 185.189.246.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JbvtC_9__qtn8wK0EaAHAYVKbDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:a2:24:0d:45:de:db:2c:65:32:06:86:0f:43:49:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25bbed0bff7ffeab67f302b411a00701854a6c30
Validity
Not Before: Nov 4 06:51:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ce2ee1ed4258c4d7817e001fcaeb8f2353aea0d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d8:ae:3a:ee:43:18:91:2d:12:31:82:d2:bb:
63:47:40:84:5b:5e:30:1b:db:cc:66:0b:a0:65:02:
73:a9:d2:d8:8c:63:b0:fa:d3:2e:f3:b0:f7:10:dd:
a4:c3:3c:a1:fc:f3:2b:f0:de:84:7a:f3:e7:f7:4f:
b7:e8:32:ef:ca:5c:7f:51:90:b6:27:86:e9:a1:6f:
48:62:90:04:e0:af:e4:32:58:1d:13:4c:e3:24:38:
02:4e:9a:39:f1:f0:8b:80:8a:b7:4e:7e:b4:1a:19:
c6:5f:2d:b1:be:b2:74:dc:83:ce:2f:0b:f2:a6:4a:
40:58:a0:9e:b4:48:b8:33:d4:a4:73:0b:c7:43:a3:
8a:05:1a:46:c3:6d:23:38:33:b0:87:75:27:fe:2f:
c4:59:17:37:58:0b:f1:7d:e9:4c:d3:b6:57:f1:6c:
f1:0f:24:d4:40:1e:4f:f5:a5:bd:05:8f:31:8c:df:
06:e5:e2:3c:cd:07:1b:f5:9d:a0:dd:30:3a:5e:48:
db:cf:7f:d3:ae:14:de:e0:8f:ff:95:ce:72:9d:46:
fe:a8:18:90:55:3c:f7:f0:3e:15:71:75:fa:a7:61:
c3:6a:6f:eb:0a:5c:78:2b:f5:a8:8b:cf:ca:2d:d0:
d4:fd:fa:03:04:ea:64:58:9e:3e:f7:4f:e2:e8:2a:
b9:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:2E:E1:ED:42:58:C4:D7:81:7E:00:1F:CA:EB:8F:23:53:AE:A0:D9
X509v3 Authority Key Identifier:
keyid:25:BB:ED:0B:FF:7F:FE:AB:67:F3:02:B4:11:A0:07:01:85:4A:6C:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JbvtC_9__qtn8wK0EaAHAYVKbDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/zi7h7UJYxNeBfgAfyuuPI1OuoNk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.189.246.0/23
Signature Algorithm: sha256WithRSAEncryption
71:d9:cc:63:a2:2a:07:0b:d4:56:e4:13:42:60:4a:d4:61:74:
ae:f3:d9:b3:da:d8:92:b8:af:05:43:37:05:46:97:26:05:20:
16:eb:0b:6d:84:59:d3:d8:5d:68:46:44:e7:b0:2c:0a:e1:78:
af:be:96:2c:a3:f7:43:39:e6:3c:34:47:25:3a:31:e1:b8:a8:
5b:d8:da:06:51:32:ea:9f:69:3a:61:fe:ac:47:87:51:21:72:
02:f5:6d:ec:59:f5:eb:e9:97:49:94:a3:ec:fd:92:95:b8:73:
3d:1d:c2:4f:12:17:4f:ef:27:9e:1c:a2:e2:5f:0f:48:d7:7a:
2a:11:71:51:8e:5b:aa:a0:f7:08:ed:d9:01:5f:29:18:93:97:
3d:a3:db:ae:60:0f:7e:6c:34:6c:1e:14:41:ba:c8:ab:f3:e2:
d0:01:89:5f:a4:2f:12:ef:14:1e:1e:e6:94:75:7b:f6:07:a0:
00:d6:a9:16:8b:83:1d:69:5e:6a:a8:d3:7e:76:83:db:7d:2e:
86:29:21:5a:12:3f:b2:c1:64:b9:0a:56:25:e3:d0:b6:ff:87:
35:4d:61:96:99:42:45:30:09:b0:f6:3b:0c:63:f5:3b:08:c3:
1b:b8:68:43:93:4c:a7:6a:82:f4:91:17:44:9e:9d:bf:c2:0d:
d0:2d:a4:ed
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZpNoiQNRd7bLGUyBoYPQ0lsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1YmJlZDBiZmY3ZmZlYWI2N2YzMDJiNDExYTAwNzAxODU0
YTZjMzAwHhcNMjUxMTA0MDY1MTAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZTJlZTFlZDQyNThjNGQ3ODE3ZTAwMWZjYWViOGYyMzUzYWVhMGQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttiuOu5DGJEtEjGC0rtjR0CEW14w
G9vMZgugZQJzqdLYjGOw+tMu87D3EN2kwzyh/PMr8N6EevPn90+36DLvylx/UZC2
J4bpoW9IYpAE4K/kMlgdE0zjJDgCTpo58fCLgIq3Tn60GhnGXy2xvrJ03IPOLwvy
pkpAWKCetEi4M9SkcwvHQ6OKBRpGw20jODOwh3Un/i/EWRc3WAvxfelM07ZX8Wzx
DyTUQB5P9aW9BY8xjN8G5eI8zQcb9Z2g3TA6Xkjbz3/TrhTe4I//lc5ynUb+qBiQ
VTz38D4VcXX6p2HDam/rClx4K/Woi8/KLdDU/foDBOpkWJ4+90/i6Cq5EwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFM4u4e1CWMTXgX4AH8rrjyNTrqDZMB8GA1UdIwQY
MBaAFCW77Qv/f/6rZ/MCtBGgBwGFSmwwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmJ2dENfOV9fcXRuOHdLMEVhQUhBWVZLYkRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8zYjlhZmYtZjAwZC00MTg3LWFmOTQt
NTcxN2I0NTQ0MjM3LzEvemk3aDdVSll4TmVCZmdBZnl1dVBJMU91b05rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy8zYjlhZmYtZjAwZC00MTg3LWFmOTQtNTcxN2I0NTQ0MjM3
LzEvSmJ2dENfOV9fcXRuOHdLMEVhQUhBWVZLYkRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBub32MA0G
CSqGSIb3DQEBCwUAA4IBAQBx2cxjoioHC9RW5BNCYErUYXSu89mz2tiSuK8FQzcF
RpcmBSAW6wtthFnT2F1oRkTnsCwK4XivvpYso/dDOeY8NEclOjHhuKhb2NoGUTLq
n2k6Yf6sR4dRIXIC9W3sWfXr6ZdJlKPs/ZKVuHM9HcJPEhdP7yeeHKLiXw9I13oq
EXFRjluqoPcI7dkBXykYk5c9o9uuYA9+bDRsHhRBusir8+LQAYlfpC8S7xQeHuaU
dXv2B6AA1qkWi4MdaV5qqNN+doPbfS6GKSFaEj+ywWS5ClYl49C2/4c1TWGWmUJF
MAmw9jsMY/U7CMMbuGhDk0ynaoL0kRdEnp2/wg3QLaTt
-----END CERTIFICATE-----
Generated at Wed Nov 5 00:03:53 2025 by rpki-client