Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/2m1N1n8a6sBF2PUXhuGsuoiReZg.roa
File: 2m1N1n8a6sBF2PUXhuGsuoiReZg.roa (raw, json)
Hash identifier: 3Dbmnt0dYpxDOuq/MDalzY9XQCZQAKi7zCoPTN73rDE=
Subject key identifier: DA:6D:4D:D6:7F:1A:EA:C0:45:D8:F5:17:86:E1:AC:BA:88:91:79:98
Certificate issuer: /CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4
Certificate serial: 019A4A333D36D8C40D1672A3A2201F78C9CD
Authority key identifier: 35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/2m1N1n8a6sBF2PUXhuGsuoiReZg.roa
Signing time: Mon 03 Nov 2025 14:51:03 +0000
ROA not before: Mon 03 Nov 2025 14:51:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197177
IP address blocks: 94.240.20.0/24 maxlen: 24
94.240.21.0/24 maxlen: 24
94.240.38.0/24 maxlen: 24
94.240.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 02:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4a:33:3d:36:d8:c4:0d:16:72:a3:a2:20:1f:78:c9:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4
Validity
Not Before: Nov 3 14:51:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=da6d4dd67f1aeac045d8f51786e1acba88917998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ba:79:a3:25:7e:ae:0d:4a:40:26:94:66:5e:
b5:2f:2e:1b:85:a1:eb:d2:d4:1c:b7:a5:3b:c4:3c:
95:cc:6a:45:dd:cd:ea:79:cc:f2:7c:c9:d0:bb:02:
7a:f2:32:02:3b:84:9c:03:2c:ae:d7:62:2b:ed:9a:
4b:65:57:9b:b6:58:bb:9b:33:d4:d5:f3:f6:48:8b:
4f:11:91:f1:6c:59:05:38:9c:c6:4d:e3:5a:6a:0d:
ff:b3:55:a5:08:79:22:e3:67:1a:8e:f0:8c:0b:79:
27:4d:80:d3:8f:c7:87:23:59:6f:d4:06:72:87:5c:
5b:a8:67:ef:ca:13:65:ad:ad:51:53:d9:71:aa:d6:
b4:96:f5:bb:da:b0:2e:6d:e2:17:68:a6:2c:87:09:
d1:93:a6:a4:41:9a:70:fa:ce:d4:31:2c:14:10:6d:
52:ad:6c:67:86:85:ef:79:3f:ab:fd:bb:fc:3a:d0:
79:f9:6a:06:76:ec:52:4c:f2:cd:1d:a4:c7:2d:97:
fd:23:de:ad:3b:dc:21:46:1f:d2:dc:91:b7:b2:9f:
e4:f4:3f:05:33:fa:6f:61:ff:4e:99:4c:1c:6f:26:
5d:c8:74:95:da:68:e9:6e:7e:15:b0:19:96:70:ef:
70:b9:14:5a:5e:9b:94:d5:e9:26:82:50:59:5f:fe:
9f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:6D:4D:D6:7F:1A:EA:C0:45:D8:F5:17:86:E1:AC:BA:88:91:79:98
X509v3 Authority Key Identifier:
keyid:35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/2m1N1n8a6sBF2PUXhuGsuoiReZg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.240.20.0/23
94.240.38.0/23
Signature Algorithm: sha256WithRSAEncryption
07:29:ff:f9:76:f0:d7:3d:b4:eb:b3:bb:d5:ca:a4:07:35:1f:
98:09:d6:ca:7f:6e:8a:c6:fe:15:60:a2:04:25:04:2f:36:11:
cd:41:60:61:7a:c3:ff:5b:b4:cf:f7:39:ae:d7:a1:1b:d7:61:
03:76:5b:ef:a5:33:3d:bc:87:bb:ef:b0:fd:2f:d7:23:39:a2:
88:96:1d:fe:8c:2b:42:72:58:7e:a3:92:21:0a:c2:a2:80:bd:
d1:cb:b6:66:ef:8a:05:dc:50:07:21:10:74:01:bf:fd:96:3b:
f0:47:d1:45:cc:92:55:cf:cf:95:eb:d5:78:98:fe:9a:4a:fd:
c6:f4:2a:7c:76:47:b8:21:d8:1e:ec:68:06:80:7e:0f:56:f4:
88:1c:66:91:bc:d4:db:73:00:55:e6:f1:68:a4:e0:cb:8e:dd:
dc:9a:5b:df:aa:3c:48:a0:5f:9b:fc:65:87:ab:73:3b:15:69:
63:ba:89:74:92:df:80:44:ac:1c:5b:56:b7:4d:8f:2d:59:9a:
7e:70:59:79:f5:db:e7:72:9b:69:23:2c:21:b7:db:11:cf:a1:
c1:90:2a:44:a6:bd:1b:01:03:cd:cc:b7:62:70:d6:9b:3f:68:
dc:f8:3b:2e:4e:b9:d3:e4:61:61:9d:d2:87:5e:02:c4:66:8d:
07:22:0b:ee
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZpKMz022MQNFnKjoiAfeMnNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1MWEyZmQ2ZjVlNWFmODdkNWNlYTA5NTA2NmZiY2MzZDNl
NTQ2YTQwHhcNMjUxMTAzMTQ1MTAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYTZkNGRkNjdmMWFlYWMwNDVkOGY1MTc4NmUxYWNiYTg4OTE3OTk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7p5oyV+rg1KQCaUZl61Ly4bhaHr
0tQct6U7xDyVzGpF3c3qeczyfMnQuwJ68jICO4ScAyyu12Ir7ZpLZVebtli7mzPU
1fP2SItPEZHxbFkFOJzGTeNaag3/s1WlCHki42cajvCMC3knTYDTj8eHI1lv1AZy
h1xbqGfvyhNlra1RU9lxqta0lvW72rAubeIXaKYshwnRk6akQZpw+s7UMSwUEG1S
rWxnhoXveT+r/bv8OtB5+WoGduxSTPLNHaTHLZf9I96tO9whRh/S3JG3sp/k9D8F
M/pvYf9OmUwcbyZdyHSV2mjpbn4VsBmWcO9wuRRaXpuU1ekmglBZX/6faQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFNptTdZ/GurARdj1F4bhrLqIkXmYMB8GA1UdIwQY
MBaAFDUaL9b15a+H1c6glQZvvMPT5UakMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9jZGRkZDUtODE3YS00MTEzLThiODIt
MjMwNDllNGQyZjEyLzEvMm0xTjFuOGE2c0JGMlBVWGh1R3N1b2lSZVpnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9jZGRkZDUtODE3YS00MTEzLThiODItMjMwNDllNGQyZjEy
LzEvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBXvAUAwQB
XvAmMA0GCSqGSIb3DQEBCwUAA4IBAQAHKf/5dvDXPbTrs7vVyqQHNR+YCdbKf26K
xv4VYKIEJQQvNhHNQWBhesP/W7TP9zmu16Eb12EDdlvvpTM9vIe777D9L9cjOaKI
lh3+jCtCclh+o5IhCsKigL3Ry7Zm74oF3FAHIRB0Ab/9ljvwR9FFzJJVz8+V69V4
mP6aSv3G9Cp8dke4Idge7GgGgH4PVvSIHGaRvNTbcwBV5vFopODLjt3cmlvfqjxI
oF+b/GWHq3M7FWljuol0kt+ARKwcW1a3TY8tWZp+cFl59dvncptpIywht9sRz6HB
kCpEpr0bAQPNzLdicNabP2jc+DsuTrnT5GFhndKHXgLEZo0HIgvu
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:32:12 2025 by rpki-client