Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/gA8AYbCwcFJfHyhTWrHCSel_7z4.roa
File: gA8AYbCwcFJfHyhTWrHCSel_7z4.roa (raw, json)
Hash identifier: DRfyCzFOVemyTrr7A1FKb5ojCB7lbj59iDLvIoFfDN4=
Subject key identifier: 80:0F:00:61:B0:B0:70:52:5F:1F:28:53:5A:B1:C2:49:E9:7F:EF:3E
Certificate issuer: /CN=810af00225106b2096e9b21d9ac2f2040688dea2
Certificate serial: 019A26565406926C6D6F52046F626056DC72
Authority key identifier: 81:0A:F0:02:25:10:6B:20:96:E9:B2:1D:9A:C2:F2:04:06:88:DE:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQrwAiUQayCW6bIdmsLyBAaI3qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/gA8AYbCwcFJfHyhTWrHCSel_7z4.roa
Signing time: Mon 27 Oct 2025 15:43:03 +0000
ROA not before: Mon 27 Oct 2025 15:43:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198890
IP address blocks: 87.120.100.0/22 maxlen: 22
93.187.110.0/24 maxlen: 24
185.161.184.0/23 maxlen: 23
2a13:1540::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/gQrwAiUQayCW6bIdmsLyBAaI3qI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/gQrwAiUQayCW6bIdmsLyBAaI3qI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gQrwAiUQayCW6bIdmsLyBAaI3qI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 12:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:26:56:54:06:92:6c:6d:6f:52:04:6f:62:60:56:dc:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=810af00225106b2096e9b21d9ac2f2040688dea2
Validity
Not Before: Oct 27 15:43:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=800f0061b0b070525f1f28535ab1c249e97fef3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b3:39:b0:b9:7b:20:49:dd:1b:9d:27:4a:52:
d2:fd:78:2b:77:42:37:e9:ed:9b:29:e7:82:ef:ee:
98:84:1f:48:ea:a3:bd:d8:4a:6f:12:69:b4:48:f0:
69:71:c8:c3:85:13:92:75:d9:1f:e6:90:de:91:95:
76:14:a9:86:f2:36:86:12:d9:9d:6c:84:dc:96:0d:
0b:3a:f9:00:61:8a:c5:ba:5a:f1:56:fa:93:80:1a:
3e:78:77:08:f3:70:46:7e:77:80:97:83:c9:53:54:
bb:a3:37:4e:c6:69:87:7b:ff:6e:18:55:f6:56:13:
72:c2:5a:6e:c7:e9:c8:2a:76:c5:f3:71:3f:b9:cc:
97:1a:2e:ec:95:f1:b7:26:58:fe:9a:46:2e:36:90:
ba:b4:e9:8a:b3:10:d7:7f:18:91:c0:89:a1:18:27:
d4:46:41:b9:6e:06:fb:4c:6e:32:16:a8:ea:cb:0f:
03:fb:db:2d:3a:c1:21:c2:c3:45:71:8f:11:24:8d:
84:30:24:20:e6:2d:c7:e0:9c:a2:bd:d9:01:b6:07:
27:b8:e3:91:a2:bd:72:74:bd:fa:c9:5d:d6:40:91:
b4:90:5b:3c:13:89:09:b3:49:eb:64:49:ae:95:c8:
e5:2d:d9:ca:36:41:87:87:76:34:98:96:ef:4a:2d:
53:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:0F:00:61:B0:B0:70:52:5F:1F:28:53:5A:B1:C2:49:E9:7F:EF:3E
X509v3 Authority Key Identifier:
keyid:81:0A:F0:02:25:10:6B:20:96:E9:B2:1D:9A:C2:F2:04:06:88:DE:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQrwAiUQayCW6bIdmsLyBAaI3qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/gA8AYbCwcFJfHyhTWrHCSel_7z4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/gQrwAiUQayCW6bIdmsLyBAaI3qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.100.0/22
93.187.110.0/24
185.161.184.0/23
IPv6:
2a13:1540::/48
Signature Algorithm: sha256WithRSAEncryption
28:24:40:a6:42:f2:b0:ba:c8:37:31:1e:61:0a:11:05:b2:fe:
fc:17:eb:bc:88:e2:c7:22:97:be:ff:25:01:f5:bf:89:22:18:
9f:50:6f:b8:70:67:99:fb:34:ea:ec:1a:97:4c:8c:45:9b:dc:
02:0d:85:11:26:57:a9:bb:3f:93:4c:84:49:26:e6:3a:a5:6b:
24:ba:e6:83:cb:36:51:45:f8:fc:19:9b:21:93:da:6e:a1:8c:
f2:3b:d6:df:62:9f:06:a8:25:50:ed:66:76:53:11:98:ee:2d:
95:e9:d7:d8:f0:72:2f:db:ba:aa:44:34:96:54:1e:4b:56:bd:
39:ad:fa:55:3f:8d:e5:fe:bf:e1:4a:be:60:f4:b1:46:1d:cb:
cc:3b:3c:3b:1a:7f:08:9b:8f:aa:10:7d:53:39:19:25:e8:23:
32:c4:a0:ef:d9:35:61:88:d2:b9:0d:23:a2:26:8a:ca:c6:3e:
ec:3b:73:f4:62:5f:24:eb:46:df:63:b4:0d:d2:96:50:9e:04:
68:32:9d:db:fd:2e:eb:ab:36:05:6d:53:b5:c7:a6:e6:4d:79:
d3:30:db:cf:0f:4d:af:a5:4e:d1:04:9d:f0:99:49:74:07:68:
26:6f:f2:28:fe:23:6b:85:98:ee:b9:59:76:4d:22:00:f8:a3:
0e:40:19:c9
-----BEGIN CERTIFICATE-----
MIIFGjCCBAKgAwIBAgISAZomVlQGkmxtb1IEb2JgVtxyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxMGFmMDAyMjUxMDZiMjA5NmU5YjIxZDlhYzJmMjA0MDY4
OGRlYTIwHhcNMjUxMDI3MTU0MzAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MDBmMDA2MWIwYjA3MDUyNWYxZjI4NTM1YWIxYzI0OWU5N2ZlZjNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7M5sLl7IEndG50nSlLS/Xgrd0I3
6e2bKeeC7+6YhB9I6qO92EpvEmm0SPBpccjDhROSddkf5pDekZV2FKmG8jaGEtmd
bITclg0LOvkAYYrFulrxVvqTgBo+eHcI83BGfneAl4PJU1S7ozdOxmmHe/9uGFX2
VhNywlpux+nIKnbF83E/ucyXGi7slfG3Jlj+mkYuNpC6tOmKsxDXfxiRwImhGCfU
RkG5bgb7TG4yFqjqyw8D+9stOsEhwsNFcY8RJI2EMCQg5i3H4JyivdkBtgcnuOOR
or1ydL36yV3WQJG0kFs8E4kJs0nrZEmulcjlLdnKNkGHh3Y0mJbvSi1TxQIDAQAB
o4ICJjCCAiIwHQYDVR0OBBYEFIAPAGGwsHBSXx8oU1qxwknpf+8+MB8GA1UdIwQY
MBaAFIEK8AIlEGsglumyHZrC8gQGiN6iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1Fyd0FpVVFheUNXNmJJZG1zTHlCQWFJM3FJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC80NDJhOWItOWVkNy00OTNkLTgzZjMt
M2NhNDg4ZGVlZTg5LzEvZ0E4QVliQ3djRkpmSHloVFdySENTZWxfN3o0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC80NDJhOWItOWVkNy00OTNkLTgzZjMtM2NhNDg4ZGVlZTg5
LzEvZ1Fyd0FpVVFheUNXNmJJZG1zTHlCQWFJM3FJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAYBAIAATASAwQCV3hkAwQA
XbtuAwQBuaG4MA8EAgACMAkDBwAqExVAAAAwDQYJKoZIhvcNAQELBQADggEBACgk
QKZC8rC6yDcxHmEKEQWy/vwX67yI4scil77/JQH1v4kiGJ9Qb7hwZ5n7NOrsGpdM
jEWb3AINhREmV6m7P5NMhEkm5jqlayS65oPLNlFF+PwZmyGT2m6hjPI71t9inwao
JVDtZnZTEZjuLZXp19jwci/buqpENJZUHktWvTmt+lU/jeX+v+FKvmD0sUYdy8w7
PDsafwibj6oQfVM5GSXoIzLEoO/ZNWGI0rkNI6ImisrGPuw7c/RiXyTrRt9jtA3S
llCeBGgyndv9LuurNgVtU7XHpuZNedMw288PTa+lTtEEnfCZSXQHaCZv8ij+I2uF
mO65WXZNIgD4ow5AGck=
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:29:35 2025 by rpki-client