Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/F_MAkVYxg9sMiP5DEGVHwbfzSfQ.roa
File: F_MAkVYxg9sMiP5DEGVHwbfzSfQ.roa (raw, json)
Hash identifier: iU2Rw86scVC9KCfvNVqgxn5Cd8K9bQngyGzzAmh4vQU=
Subject key identifier: 17:F3:00:91:56:31:83:DB:0C:88:FE:43:10:65:47:C1:B7:F3:49:F4
Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Certificate serial: 019A14CD87EC9C269A676DC5BFDAB53ED905
Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/F_MAkVYxg9sMiP5DEGVHwbfzSfQ.roa
Signing time: Fri 24 Oct 2025 06:00:05 +0000
ROA not before: Fri 24 Oct 2025 06:00:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205182
IP address blocks: 88.223.240.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:14:cd:87:ec:9c:26:9a:67:6d:c5:bf:da:b5:3e:d9:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Validity
Not Before: Oct 24 06:00:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=17f30091563183db0c88fe43106547c1b7f349f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8d:e1:83:dd:bd:c4:8a:7a:08:46:50:16:6a:
73:59:b5:5a:53:ca:09:fc:9b:07:3e:cf:df:a6:4e:
69:80:a7:21:d6:6f:49:6d:9e:05:fd:17:65:8a:dc:
be:c2:6d:6d:b4:b5:6e:85:47:ab:e3:18:51:91:0a:
a5:57:b7:13:9e:2d:05:69:df:63:75:62:65:6a:08:
d3:6b:0d:c3:ac:19:b8:37:a8:15:e5:af:01:50:ee:
37:c5:46:ac:21:76:46:d7:7e:7e:47:04:2c:eb:95:
6a:68:fc:b1:f3:64:e4:bd:67:7a:23:d1:b8:c5:e9:
27:89:c0:0c:1f:b3:8f:bb:8e:10:91:19:06:58:b7:
9d:b3:80:ae:63:6c:f7:a2:94:15:e5:66:db:a9:fa:
44:3b:ed:5f:ea:43:25:76:15:69:08:06:2e:c8:58:
a2:b3:c8:4b:9a:9a:51:1d:4c:4e:82:d2:b5:72:46:
fe:c9:d7:e3:99:f1:60:7c:c8:79:fe:fe:78:73:f1:
be:46:68:0f:2a:aa:c5:6e:1f:f3:c8:a6:bd:3a:e3:
27:9b:b8:ad:7d:56:8e:04:f8:ee:84:5d:71:0b:d6:
71:ae:cc:12:94:3c:5e:11:7a:dc:50:a3:2a:25:98:
a1:cc:b2:9a:5a:a7:6d:70:12:08:de:41:1e:cd:2b:
87:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:F3:00:91:56:31:83:DB:0C:88:FE:43:10:65:47:C1:B7:F3:49:F4
X509v3 Authority Key Identifier:
keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/F_MAkVYxg9sMiP5DEGVHwbfzSfQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.223.240.0/22
Signature Algorithm: sha256WithRSAEncryption
12:03:ce:e2:7e:32:a5:54:48:dd:68:82:e8:aa:cc:b3:98:58:
a1:3d:7d:71:99:3b:fe:15:56:bf:86:21:8e:60:c3:73:78:f3:
71:c6:c4:b4:f0:3b:74:ac:d0:20:af:65:ac:e9:b1:b3:d1:b7:
38:62:8c:9d:e9:ed:be:82:e5:a1:d2:15:1e:38:4c:71:af:03:
c5:68:36:37:59:47:45:e9:9b:83:99:6a:98:f2:0b:20:f7:67:
ba:b5:21:c9:2d:d8:51:12:03:7f:a3:bc:76:a4:27:c1:1d:88:
86:94:56:b4:70:03:24:ee:f8:f0:8b:d5:b0:dd:e4:e6:59:ec:
48:16:81:92:c5:a9:00:95:60:f3:2c:15:c2:e0:a5:51:4d:78:
6c:d8:d9:47:88:fb:ad:4b:16:af:69:3a:4e:60:44:5b:99:c0:
e1:5c:95:2d:78:01:02:bd:ad:b5:7d:98:1a:75:4c:5b:66:55:
e9:4c:46:59:7a:af:88:75:e3:13:eb:a9:01:83:2f:71:b3:a2:
a3:55:7a:7a:42:f8:1e:36:53:73:8d:59:cc:8e:2a:c5:db:bb:
a6:2f:7a:b4:4c:51:10:9d:65:e8:f3:c1:07:a0:65:0f:ea:36:
ae:cd:ca:fd:77:20:24:cb:73:73:ca:a7:bb:8f:c7:a0:b0:36:
80:35:4b:fa
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZoUzYfsnCaaZ23Fv9q1PtkFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjYxNzU4Y2UzMzA2MjI0NzBhMzlhZThkNmVmNGEyMDQ0
ZjgzYzQwHhcNMjUxMDI0MDYwMDA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxN2YzMDA5MTU2MzE4M2RiMGM4OGZlNDMxMDY1NDdjMWI3ZjM0OWY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx43hg929xIp6CEZQFmpzWbVaU8oJ
/JsHPs/fpk5pgKch1m9JbZ4F/Rdlity+wm1ttLVuhUer4xhRkQqlV7cTni0Fad9j
dWJlagjTaw3DrBm4N6gV5a8BUO43xUasIXZG135+RwQs65VqaPyx82TkvWd6I9G4
xeknicAMH7OPu44QkRkGWLeds4CuY2z3opQV5WbbqfpEO+1f6kMldhVpCAYuyFii
s8hLmppRHUxOgtK1ckb+ydfjmfFgfMh5/v54c/G+RmgPKqrFbh/zyKa9OuMnm7it
fVaOBPjuhF1xC9ZxrswSlDxeEXrcUKMqJZihzLKaWqdtcBII3kEezSuHIQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBfzAJFWMYPbDIj+QxBlR8G380n0MB8GA1UdIwQY
MBaAFGBmF1jOMwYiRwo5ro1u9KIET4PEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9lZGQxMjgtNmQ2ZS00OWUzLWI3N2Ut
MWY4NzQ2OTQ1NDgzLzEvRl9NQWtWWXhnOXNNaVA1REVHVkh3YmZ6U2ZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9lZGQxMjgtNmQ2ZS00OWUzLWI3N2UtMWY4NzQ2OTQ1NDgz
LzEvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCWN/wMA0G
CSqGSIb3DQEBCwUAA4IBAQASA87ifjKlVEjdaILoqsyzmFihPX1xmTv+FVa/hiGO
YMNzePNxxsS08Dt0rNAgr2Ws6bGz0bc4Yoyd6e2+guWh0hUeOExxrwPFaDY3WUdF
6ZuDmWqY8gsg92e6tSHJLdhREgN/o7x2pCfBHYiGlFa0cAMk7vjwi9Ww3eTmWexI
FoGSxakAlWDzLBXC4KVRTXhs2NlHiPutSxavaTpOYERbmcDhXJUteAECva21fZga
dUxbZlXpTEZZeq+IdeMT66kBgy9xs6KjVXp6QvgeNlNzjVnMjirF27umL3q0TFEQ
nWXo88EHoGUP6jauzcr9dyAky3Nzyqe7j8egsDaANUv6
-----END CERTIFICATE-----
Generated at Wed Nov 5 03:21:51 2025 by rpki-client