Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/uTGLgPD6QvOCsekDnlHL4ncaOpM.roa
File: uTGLgPD6QvOCsekDnlHL4ncaOpM.roa (raw, json)
Hash identifier: amUxlnkzcEAg12/Le7UVBWilU/CN2faVU7QTKwaX4yQ=
Subject key identifier: B9:31:8B:80:F0:FA:42:F3:82:B1:E9:03:9E:51:CB:E2:77:1A:3A:93
Certificate issuer: /CN=a13042d137fbb03beba6421f33a8525b52a88f7a
Certificate serial: 019A4A9F445C81DB4D32FBE218B80620380A
Authority key identifier: A1:30:42:D1:37:FB:B0:3B:EB:A6:42:1F:33:A8:52:5B:52:A8:8F:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/uTGLgPD6QvOCsekDnlHL4ncaOpM.roa
Signing time: Mon 03 Nov 2025 16:49:03 +0000
ROA not before: Mon 03 Nov 2025 16:49:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198249
IP address blocks: 91.199.98.0/24 maxlen: 24
91.234.160.0/24 maxlen: 24
185.17.68.0/22 maxlen: 24
185.169.84.0/22 maxlen: 24
185.221.40.0/24 maxlen: 24
185.221.41.0/24 maxlen: 24
185.221.42.0/24 maxlen: 24
185.221.43.0/24 maxlen: 24
195.234.43.0/24 maxlen: 24
2001:67c:690::/48 maxlen: 48
2a04:500::/29 maxlen: 29
2a09:f00:a::/48 maxlen: 48
2a09:f00:b::/48 maxlen: 48
2a09:f00:c::/48 maxlen: 48
2a09:f00:ff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4a:9f:44:5c:81:db:4d:32:fb:e2:18:b8:06:20:38:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a13042d137fbb03beba6421f33a8525b52a88f7a
Validity
Not Before: Nov 3 16:49:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b9318b80f0fa42f382b1e9039e51cbe2771a3a93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c6:bd:65:fd:c7:89:b9:18:cc:b7:a2:04:26:
05:6c:a2:92:55:11:35:b9:3e:47:96:48:f4:da:fb:
eb:46:26:51:18:d0:27:97:22:a3:50:95:08:15:68:
a8:7b:b7:99:62:e0:d4:a3:9f:cb:c5:9f:12:a2:0a:
6e:71:5c:91:53:f1:b1:88:48:b7:3e:58:f1:8d:7f:
ad:33:9b:e0:8a:83:bf:ef:ad:21:b1:d8:77:66:58:
21:04:58:11:71:60:b1:3d:1d:48:31:18:f1:0e:50:
80:ec:99:1d:2d:46:37:85:6b:1b:ce:f6:8d:75:d3:
14:18:68:e4:7c:b3:a6:1b:33:43:88:32:d3:d9:a9:
87:ce:a8:6f:43:c9:be:83:d8:02:bd:28:a7:b7:df:
cb:31:ea:a7:f2:98:0a:7f:59:26:ff:10:26:88:34:
76:ab:29:dd:c4:56:0a:b4:21:b5:64:9e:98:56:6e:
e3:53:01:15:8f:a5:f6:83:0f:4f:8e:7f:c3:c1:10:
de:7a:f7:1e:c6:27:7c:eb:0d:10:15:80:66:0b:8f:
c0:d8:58:d6:1f:5e:60:93:26:c5:58:a6:7e:87:10:
5e:2e:6f:36:c2:e0:92:25:23:2f:4a:b1:fd:00:de:
b4:cd:cf:9c:71:7d:77:5f:98:10:2f:3d:68:63:4c:
ae:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:31:8B:80:F0:FA:42:F3:82:B1:E9:03:9E:51:CB:E2:77:1A:3A:93
X509v3 Authority Key Identifier:
keyid:A1:30:42:D1:37:FB:B0:3B:EB:A6:42:1F:33:A8:52:5B:52:A8:8F:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/uTGLgPD6QvOCsekDnlHL4ncaOpM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.98.0/24
91.234.160.0/24
185.17.68.0/22
185.169.84.0/22
185.221.40.0/22
195.234.43.0/24
IPv6:
2001:67c:690::/48
2a04:500::/29
2a09:f00:a::-2a09:f00:c:ffff:ffff:ffff:ffff:ffff
2a09:f00:ff::/48
Signature Algorithm: sha256WithRSAEncryption
2c:b9:07:79:5a:74:32:c0:ef:22:53:9e:a5:52:b0:11:db:27:
9c:01:3a:29:0e:b4:e6:c0:87:a5:f6:40:82:73:08:28:f1:aa:
b5:0e:af:1b:4c:5d:be:d0:88:c7:b6:2c:a2:5e:6a:f4:1c:24:
54:3b:48:3d:e8:72:96:9c:a6:c8:f0:b5:fe:a8:c4:74:c5:00:
2d:97:56:31:ac:ff:be:56:94:41:16:3f:23:1b:42:28:e6:17:
94:a9:aa:e7:df:48:ea:8b:97:8e:02:62:e3:fe:4f:3a:0b:2d:
77:b8:80:3e:b7:e9:b5:dc:d1:fd:a3:ca:29:f0:9e:a9:a0:df:
9d:17:7d:04:45:d0:e1:ea:d8:fe:44:61:8a:3e:1e:9e:88:c6:
99:a9:c2:fd:2a:64:78:e7:bd:67:6a:20:94:fd:b1:59:5f:c2:
38:09:48:3c:94:fb:5e:5c:ee:b3:07:d1:e8:22:1b:08:ea:af:
d1:bf:ba:aa:fe:2c:88:93:4c:b1:c4:03:85:fc:e8:79:4f:0d:
04:93:f3:90:d0:61:37:97:4f:d6:26:ba:a7:83:9c:47:59:bf:
f1:fa:24:1d:b4:4e:d1:08:1e:5a:fd:0b:98:96:2d:b5:e7:c5:
4c:7c:de:a4:bc:e3:bf:0f:98:bd:4c:e4:4b:1a:ca:48:75:1d:
07:d9:a1:78
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgISAZpKn0RcgdtNMvviGLgGIDgKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExMzA0MmQxMzdmYmIwM2JlYmE2NDIxZjMzYTg1MjViNTJh
ODhmN2EwHhcNMjUxMTAzMTY0OTAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOTMxOGI4MGYwZmE0MmYzODJiMWU5MDM5ZTUxY2JlMjc3MWEzYTkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnca9Zf3HibkYzLeiBCYFbKKSVRE1
uT5Hlkj02vvrRiZRGNAnlyKjUJUIFWioe7eZYuDUo5/LxZ8SogpucVyRU/GxiEi3
PljxjX+tM5vgioO/760hsdh3ZlghBFgRcWCxPR1IMRjxDlCA7JkdLUY3hWsbzvaN
ddMUGGjkfLOmGzNDiDLT2amHzqhvQ8m+g9gCvSint9/LMeqn8pgKf1km/xAmiDR2
qyndxFYKtCG1ZJ6YVm7jUwEVj6X2gw9Pjn/DwRDeevcexid86w0QFYBmC4/A2FjW
H15gkybFWKZ+hxBeLm82wuCSJSMvSrH9AN60zc+ccX13X5gQLz1oY0yu+wIDAQAB
o4ICXDCCAlgwHQYDVR0OBBYEFLkxi4Dw+kLzgrHpA55Ry+J3GjqTMB8GA1UdIwQY
MBaAFKEwQtE3+7A766ZCHzOoUltSqI96MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1RCQzBUZjdzRHZycGtJZk02aFNXMUtvajNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9hZjQ0MDctZjk4ZS00OTk0LTlmOWUt
ZjZiNmMwNDkxNmExLzEvdVRHTGdQRDZRdk9Dc2VrRG5sSEw0bmNhT3BNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy9hZjQ0MDctZjk4ZS00OTk0LTlmOWUtZjZiNmMwNDkxNmEx
LzEvb1RCQzBUZjdzRHZycGtJZk02aFNXMUtvajNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHIGCCsGAQUFBwEHAQH/BGMwYTAqBAIAATAkAwQAW8diAwQA
W+qgAwQCuRFEAwQCualUAwQCud0oAwQAw+orMDMEAgACMC0DBwAgAQZ8BpADBQMq
BAUAMBIDBwEqCQ8AAAoDBwAqCQ8AAAwDBwAqCQ8AAP8wDQYJKoZIhvcNAQELBQAD
ggEBACy5B3ladDLA7yJTnqVSsBHbJ5wBOikOtObAh6X2QIJzCCjxqrUOrxtMXb7Q
iMe2LKJeavQcJFQ7SD3ocpacpsjwtf6oxHTFAC2XVjGs/75WlEEWPyMbQijmF5Sp
quffSOqLl44CYuP+TzoLLXe4gD636bXc0f2jyinwnqmg350XfQRF0OHq2P5EYYo+
Hp6Ixpmpwv0qZHjnvWdqIJT9sVlfwjgJSDyU+15c7rMH0egiGwjqr9G/uqr+LIiT
TLHEA4X86HlPDQST85DQYTeXT9YmuqeDnEdZv/H6JB20TtEIHlr9C5iWLbXnxUx8
3qS8478PmL1M5Esaykh1HQfZoXg=
-----END CERTIFICATE-----
Generated at Wed Nov 5 01:45:21 2025 by rpki-client