Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/O6HR6_Zj_J8JouXxKJzEpG_J9iY.roa
File: O6HR6_Zj_J8JouXxKJzEpG_J9iY.roa (raw, json)
Hash identifier: zkyPGN71itUBurBDFCf1AgW9vMBDOWpYZJYvI+GyxrU=
Subject key identifier: 3B:A1:D1:EB:F6:63:FC:9F:09:A2:E5:F1:28:9C:C4:A4:6F:C9:F6:26
Certificate issuer: /CN=18a84a8e475f6606e7a12f92b330d63d8f880be0
Certificate serial: 019A4E384BA6F1F710C7648B7133BAFA63DE
Authority key identifier: 18:A8:4A:8E:47:5F:66:06:E7:A1:2F:92:B3:30:D6:3D:8F:88:0B:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GKhKjkdfZgbnoS-SszDWPY-IC-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/O6HR6_Zj_J8JouXxKJzEpG_J9iY.roa
Signing time: Tue 04 Nov 2025 09:35:03 +0000
ROA not before: Tue 04 Nov 2025 09:35:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209854
IP address blocks: 185.208.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/GKhKjkdfZgbnoS-SszDWPY-IC-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:38:4b:a6:f1:f7:10:c7:64:8b:71:33:ba:fa:63:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18a84a8e475f6606e7a12f92b330d63d8f880be0
Validity
Not Before: Nov 4 09:35:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3ba1d1ebf663fc9f09a2e5f1289cc4a46fc9f626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:82:97:83:45:f2:a0:79:a8:e3:73:1d:ab:1d:
ec:fc:c4:07:7e:ca:3d:82:ac:5e:15:4d:bf:12:bc:
b1:3f:03:f9:40:07:0a:1d:e5:87:d9:8c:03:2a:e5:
40:76:7c:46:c0:c2:96:c6:ec:b5:da:d6:40:26:74:
e6:c6:25:00:37:c6:23:59:77:75:8e:09:44:0b:2c:
6d:25:78:b7:46:d8:b9:79:81:d7:81:20:72:19:f3:
74:bb:90:10:20:8e:89:d5:c7:ff:f0:a2:9f:ab:89:
a7:46:38:cd:a3:b8:85:2a:cb:55:35:4a:09:41:b5:
19:e1:86:df:42:d8:ef:d2:34:c0:42:32:90:1d:5f:
d4:3a:3f:e7:06:59:ac:2a:63:82:fe:e7:41:5b:2e:
21:f9:49:3a:73:65:46:53:56:48:61:15:8e:36:8a:
38:46:71:e8:b9:4f:55:72:12:3d:a7:be:3c:60:b8:
b4:1a:d3:c1:fd:83:42:1a:b1:3d:e6:92:71:7d:bd:
c5:74:c2:b1:72:d4:72:b2:99:30:96:09:47:65:77:
a6:43:db:fe:29:52:7d:e3:a6:df:af:ee:c3:24:ad:
e8:04:37:7c:20:67:93:62:ce:c7:21:67:c7:22:93:
80:c4:e2:00:a7:13:7a:ab:50:99:5d:80:ee:bc:19:
8d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:A1:D1:EB:F6:63:FC:9F:09:A2:E5:F1:28:9C:C4:A4:6F:C9:F6:26
X509v3 Authority Key Identifier:
keyid:18:A8:4A:8E:47:5F:66:06:E7:A1:2F:92:B3:30:D6:3D:8F:88:0B:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GKhKjkdfZgbnoS-SszDWPY-IC-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/O6HR6_Zj_J8JouXxKJzEpG_J9iY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.208.10.0/24
Signature Algorithm: sha256WithRSAEncryption
57:d7:f3:bd:86:ed:10:7f:30:91:c1:e8:20:68:52:d4:68:17:
0f:29:cc:f1:90:28:0e:be:2f:ba:85:39:bc:dd:cb:8a:87:37:
e7:81:08:a7:a7:1e:bc:93:cd:82:32:34:9b:4f:b6:61:ce:27:
cc:a7:30:ba:42:6e:45:03:70:5e:d6:4a:d3:97:f1:b2:2a:7c:
f4:0a:3b:ae:27:27:e8:84:1d:db:87:be:73:7a:7d:37:5d:29:
e1:72:7a:3b:31:a7:9b:e6:dc:2a:9d:ef:d3:0a:75:36:90:98:
e3:e6:0b:a7:47:30:ce:16:1b:7a:0d:30:6b:a3:77:b4:de:f3:
e0:8f:ff:11:4d:86:06:3b:40:73:2e:d2:7a:53:72:a1:b2:03:
27:a7:1c:e3:2e:05:86:fb:ae:c2:b1:e2:58:57:5b:8d:f7:a3:
79:66:32:36:ee:9a:c7:5e:5e:37:a0:90:e3:8a:55:8a:62:1e:
d5:e1:18:55:a9:f2:41:d0:12:fb:a6:1c:3a:4e:9e:6e:cb:6e:
12:6c:b2:6b:bc:8d:8f:5c:dd:18:a7:7a:10:f0:d5:3e:a7:ea:
14:f7:53:cd:68:36:cf:3c:0f:df:a4:0c:3f:46:cf:0e:2a:56:
53:fa:3f:00:65:19:46:b8:4e:83:06:34:1d:96:c0:8a:c7:51:
b0:40:ab:a4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZpOOEum8fcQx2SLcTO6+mPeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4YTg0YThlNDc1ZjY2MDZlN2ExMmY5MmIzMzBkNjNkOGY4
ODBiZTAwHhcNMjUxMTA0MDkzNTAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYmExZDFlYmY2NjNmYzlmMDlhMmU1ZjEyODljYzRhNDZmYzlmNjI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnoKXg0XyoHmo43Mdqx3s/MQHfso9
gqxeFU2/EryxPwP5QAcKHeWH2YwDKuVAdnxGwMKWxuy12tZAJnTmxiUAN8YjWXd1
jglECyxtJXi3Rti5eYHXgSByGfN0u5AQII6J1cf/8KKfq4mnRjjNo7iFKstVNUoJ
QbUZ4YbfQtjv0jTAQjKQHV/UOj/nBlmsKmOC/udBWy4h+Uk6c2VGU1ZIYRWONoo4
RnHouU9VchI9p748YLi0GtPB/YNCGrE95pJxfb3FdMKxctRyspkwlglHZXemQ9v+
KVJ946bfr+7DJK3oBDd8IGeTYs7HIWfHIpOAxOIApxN6q1CZXYDuvBmNeQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDuh0ev2Y/yfCaLl8SicxKRvyfYmMB8GA1UdIwQY
MBaAFBioSo5HX2YG56EvkrMw1j2PiAvgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0toS2prZGZaZ2Jub1MtU3N6RFdQWS1JQy1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC84OTJhMjctZmRiNi00Mjg1LTgyOWEt
ODdmNWI2NDc5ZDFlLzEvTzZIUjZfWmpfSjhKb3VYeEtKekVwR19KOWlZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC84OTJhMjctZmRiNi00Mjg1LTgyOWEtODdmNWI2NDc5ZDFl
LzEvR0toS2prZGZaZ2Jub1MtU3N6RFdQWS1JQy1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudAKMA0G
CSqGSIb3DQEBCwUAA4IBAQBX1/O9hu0QfzCRweggaFLUaBcPKczxkCgOvi+6hTm8
3cuKhzfngQinpx68k82CMjSbT7ZhzifMpzC6Qm5FA3Be1krTl/GyKnz0CjuuJyfo
hB3bh75zen03XSnhcno7Maeb5twqne/TCnU2kJjj5gunRzDOFht6DTBro3e03vPg
j/8RTYYGO0BzLtJ6U3KhsgMnpxzjLgWG+67CseJYV1uN96N5ZjI27prHXl43oJDj
ilWKYh7V4RhVqfJB0BL7phw6Tp5uy24SbLJrvI2PXN0Yp3oQ8NU+p+oU91PNaDbP
PA/fpAw/Rs8OKlZT+j8AZRlGuE6DBjQdlsCKx1GwQKuk
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:46:44 2025 by rpki-client