Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/6v_KjX_8rYwrIkEwlegUhUvqa6E.roa
File: 6v_KjX_8rYwrIkEwlegUhUvqa6E.roa (raw, json)
Hash identifier: HbBvuAuEwaykQV/i3cAyWZbQCm+S576wJTXNwFBdFYo=
Subject key identifier: EA:FF:CA:8D:7F:FC:AD:8C:2B:22:41:30:95:E8:14:85:4B:EA:6B:A1
Certificate issuer: /CN=380dd9e7355c72c751fff4f175dace7daa7b9cbf
Certificate serial: 019A394F33931C06B2BFCC81C23664FE60FC
Authority key identifier: 38:0D:D9:E7:35:5C:72:C7:51:FF:F4:F1:75:DA:CE:7D:AA:7B:9C:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OA3Z5zVccsdR__TxddrOfap7nL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/6v_KjX_8rYwrIkEwlegUhUvqa6E.roa
Signing time: Fri 31 Oct 2025 08:08:03 +0000
ROA not before: Fri 31 Oct 2025 08:08:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30943
IP address blocks: 185.67.167.0/24 maxlen: 24
217.112.32.0/20 maxlen: 20
217.112.32.0/23 maxlen: 23
217.112.34.0/23 maxlen: 23
217.112.35.0/24 maxlen: 24
217.112.40.0/23 maxlen: 23
217.112.44.0/24 maxlen: 24
217.112.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OA3Z5zVccsdR__TxddrOfap7nL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 05:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:39:4f:33:93:1c:06:b2:bf:cc:81:c2:36:64:fe:60:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=380dd9e7355c72c751fff4f175dace7daa7b9cbf
Validity
Not Before: Oct 31 08:08:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eaffca8d7ffcad8c2b22413095e814854bea6ba1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a9:3f:c2:b8:36:f3:c6:ec:71:48:f6:32:67:
de:f9:dc:3d:c1:ee:dd:e9:be:f6:b9:30:60:91:e6:
e2:ca:e8:ab:0f:78:ee:0d:af:6c:2c:89:d7:6a:a9:
46:9e:0c:eb:42:a1:c1:93:4a:50:bd:45:91:ea:dc:
a8:64:6a:27:fe:ff:c9:c7:55:91:10:31:02:cd:fb:
d4:3d:cb:9d:9b:a5:9c:e6:ff:a5:39:eb:27:3a:f5:
bb:e0:ba:5b:0b:0c:77:6f:f2:8f:53:00:fb:b8:48:
4c:2f:65:00:2c:83:3c:72:18:ea:a6:6c:8e:15:c9:
b3:32:e6:15:8a:70:c8:b5:92:42:0b:9e:1a:c4:b8:
c6:94:b3:3f:70:66:70:f0:52:6a:9a:4c:97:ca:33:
97:52:84:ed:d0:d4:b2:c8:c3:b3:5b:45:a0:9f:29:
6e:7a:63:4a:22:36:d5:62:4c:95:c2:e4:08:d8:25:
c9:1f:24:1f:fa:46:c5:00:df:22:de:61:db:73:b3:
a2:68:4c:6e:f0:d9:e1:6e:9b:9a:03:48:17:5b:7b:
e2:61:f6:08:5d:9e:07:06:12:90:d9:8b:32:8b:16:
9e:4e:e3:72:0b:71:9f:ec:18:2a:2a:65:64:b2:a1:
92:32:61:66:0a:9d:0b:73:cd:a3:14:b2:cd:8e:14:
4d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:FF:CA:8D:7F:FC:AD:8C:2B:22:41:30:95:E8:14:85:4B:EA:6B:A1
X509v3 Authority Key Identifier:
keyid:38:0D:D9:E7:35:5C:72:C7:51:FF:F4:F1:75:DA:CE:7D:AA:7B:9C:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OA3Z5zVccsdR__TxddrOfap7nL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/6v_KjX_8rYwrIkEwlegUhUvqa6E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.67.167.0/24
217.112.32.0/20
Signature Algorithm: sha256WithRSAEncryption
8f:d5:9a:21:46:7a:41:75:4b:53:e0:73:5e:d7:5e:75:8d:99:
71:51:58:f0:f1:43:d9:38:66:97:d3:c9:f6:58:55:84:8a:dd:
9d:2f:e9:a9:2a:04:ca:a1:22:ba:e9:f2:07:d7:9f:3c:45:c8:
54:3e:e8:3c:d5:3a:c1:e6:e3:33:25:cb:79:0f:f6:de:25:4e:
a2:e5:2a:98:5f:d0:ee:90:a5:01:51:07:d3:b0:0e:f9:60:3a:
bb:fe:aa:1b:b9:c0:52:2d:54:34:08:eb:91:15:be:ae:93:7e:
b9:c7:d9:ec:be:4b:66:41:6f:7a:b9:a9:9d:2f:a8:50:a5:4b:
05:75:67:33:01:91:4e:b6:b3:bd:9b:f6:c7:44:7a:6c:fb:98:
8b:c4:b1:d7:19:61:43:1e:98:13:17:4f:61:bf:d0:ff:91:1b:
2c:8e:9f:2c:f4:81:7e:c0:5e:f5:bb:85:30:75:c2:d7:53:51:
10:8e:50:b2:5d:7d:03:95:2b:ee:2b:34:43:81:8d:97:d7:28:
57:4f:f9:11:87:ce:4c:b1:dd:be:56:a6:33:fd:0e:59:4f:bb:
d2:b4:23:34:47:b6:d7:13:01:25:16:8c:ff:66:ad:4c:1b:7a:
9b:a1:1d:dd:02:5d:e3:02:57:ff:90:ca:48:bd:d7:78:bf:d8:
73:7b:bc:ea
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZo5TzOTHAayv8yBwjZk/mD8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4MGRkOWU3MzU1YzcyYzc1MWZmZjRmMTc1ZGFjZTdkYWE3
YjljYmYwHhcNMjUxMDMxMDgwODAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYWZmY2E4ZDdmZmNhZDhjMmIyMjQxMzA5NWU4MTQ4NTRiZWE2YmExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6k/wrg288bscUj2Mmfe+dw9we7d
6b72uTBgkebiyuirD3juDa9sLInXaqlGngzrQqHBk0pQvUWR6tyoZGon/v/Jx1WR
EDECzfvUPcudm6Wc5v+lOesnOvW74LpbCwx3b/KPUwD7uEhML2UALIM8chjqpmyO
FcmzMuYVinDItZJCC54axLjGlLM/cGZw8FJqmkyXyjOXUoTt0NSyyMOzW0Wgnylu
emNKIjbVYkyVwuQI2CXJHyQf+kbFAN8i3mHbc7OiaExu8NnhbpuaA0gXW3viYfYI
XZ4HBhKQ2YsyixaeTuNyC3Gf7BgqKmVksqGSMmFmCp0Lc82jFLLNjhRNhwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFOr/yo1//K2MKyJBMJXoFIVL6muhMB8GA1UdIwQY
MBaAFDgN2ec1XHLHUf/08XXazn2qe5y/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0EzWjV6VmNjc2RSX19UeGRkck9mYXA3bkw4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9iN2ZlYTItYTMyZC00YTVlLTk5ODIt
NTRiNGNhNTBkMjQ4LzEvNnZfS2pYXzhyWXdySWtFd2xlZ1VoVXZxYTZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9iN2ZlYTItYTMyZC00YTVlLTk5ODItNTRiNGNhNTBkMjQ4
LzEvT0EzWjV6VmNjc2RSX19UeGRkck9mYXA3bkw4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuUOnAwQE
2XAgMA0GCSqGSIb3DQEBCwUAA4IBAQCP1ZohRnpBdUtT4HNe1151jZlxUVjw8UPZ
OGaX08n2WFWEit2dL+mpKgTKoSK66fIH1588RchUPug81TrB5uMzJct5D/beJU6i
5SqYX9DukKUBUQfTsA75YDq7/qobucBSLVQ0COuRFb6uk365x9nsvktmQW96uamd
L6hQpUsFdWczAZFOtrO9m/bHRHps+5iLxLHXGWFDHpgTF09hv9D/kRssjp8s9IF+
wF71u4UwdcLXU1EQjlCyXX0DlSvuKzRDgY2X1yhXT/kRh85Msd2+VqYz/Q5ZT7vS
tCM0R7bXEwElFoz/Zq1MG3qboR3dAl3jAlf/kMpIvdd4v9hze7zq
-----END CERTIFICATE-----
Generated at Wed Nov 5 15:28:50 2025 by rpki-client