Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PgXMG8FaZpxTebVAvxAY726rXYo.roa
File: PgXMG8FaZpxTebVAvxAY726rXYo.roa (raw, json)
Hash identifier: 0wMgMYt4/MzkYX6F4wrOytGIq0eHNaO4ZEism8vXpl0=
Subject key identifier: 3E:05:CC:1B:C1:5A:66:9C:53:79:B5:40:BF:10:18:EF:6E:AB:5D:8A
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01988EB6DB85E99292A61CE770DF1EAD695B
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PgXMG8FaZpxTebVAvxAY726rXYo.roa
Signing time: Sat 09 Aug 2025 12:03:24 +0000
ROA not before: Sat 09 Aug 2025 12:03:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197477
IP address blocks: 5.231.97.0/24 maxlen: 24
77.90.10.0/24 maxlen: 24
77.90.11.0/24 maxlen: 24
77.90.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 23:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:b6:db:85:e9:92:92:a6:1c:e7:70:df:1e:ad:69:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Aug 9 12:03:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3e05cc1bc15a669c5379b540bf1018ef6eab5d8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3e:b1:ca:3c:46:ee:5d:d9:b3:4e:7d:5b:7b:
5b:03:d5:cd:0f:34:73:e0:0f:7c:1a:5a:0c:55:a1:
ba:e5:85:c6:e9:28:3e:d5:fd:a5:6d:9c:de:29:5f:
3c:b0:b6:7e:b7:55:b8:22:d5:aa:66:96:d7:bf:22:
f1:bf:24:6e:23:fb:b4:a2:73:d5:8c:4a:50:b0:4a:
26:c1:fc:00:e0:00:17:70:a8:bc:2b:f8:4a:da:59:
6e:3b:0e:a7:80:d4:d0:ad:04:f7:48:ef:43:b7:2f:
38:77:8c:83:78:4f:57:6a:bb:77:a7:c1:23:74:93:
ed:9d:e4:8e:92:b3:17:3f:d3:75:c0:81:ee:20:de:
93:e6:c9:51:36:0d:31:7e:38:4c:14:4c:60:a8:c6:
12:02:0d:39:37:09:43:7e:03:c9:89:d6:27:ca:0e:
8f:fb:32:19:5a:05:c5:35:fa:83:e3:a8:29:b8:70:
b3:c0:c3:d8:99:61:0b:59:c5:b8:1d:8c:95:cf:4a:
da:b1:95:af:c7:4d:ca:9e:4e:64:a2:0f:a0:d6:9c:
60:94:4e:0a:61:63:d9:73:ca:ee:c7:22:08:f1:09:
52:da:5f:45:75:a0:eb:d1:ab:c6:00:29:fc:fe:70:
c8:68:87:e7:2f:0c:fb:44:68:b6:25:0c:7d:f5:a8:
13:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:05:CC:1B:C1:5A:66:9C:53:79:B5:40:BF:10:18:EF:6E:AB:5D:8A
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PgXMG8FaZpxTebVAvxAY726rXYo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.97.0/24
77.90.10.0/23
77.90.50.0/24
Signature Algorithm: sha256WithRSAEncryption
92:2a:e6:fa:1a:46:2b:95:75:d3:7a:c7:da:05:af:73:6d:8d:
79:18:e7:b4:14:61:9b:4f:51:c1:dc:2a:ad:8c:7d:4a:47:1a:
5f:96:4b:db:1e:06:5a:c4:06:4c:fc:18:2e:68:67:cc:91:d8:
d3:b0:1e:06:bf:e0:ba:d0:79:ed:2a:fc:92:a6:87:b5:5c:52:
79:22:08:f7:72:fb:9c:60:83:0a:77:e5:d4:92:e6:c1:d4:21:
10:a7:12:b0:cb:a9:4e:02:8f:1b:e2:d8:b5:59:1d:4f:29:dd:
0d:f1:cf:32:54:50:e1:c4:5c:37:46:76:3f:2e:0a:71:47:e0:
34:b9:5a:e2:57:1a:e2:2f:14:4e:0b:68:75:d0:78:62:69:79:
84:87:97:ed:d7:c0:3c:f0:71:b2:fa:d2:78:2c:9c:27:1e:64:
b2:c8:fc:9d:8c:75:d5:48:6d:fc:a3:db:fe:d5:19:12:8f:f8:
17:21:fa:61:58:49:a5:0d:6e:b6:1e:90:85:f6:7b:ba:2d:28:
4d:08:69:fc:21:52:e8:91:3b:4a:90:a3:63:1b:df:7f:a1:a8:
25:10:b5:f7:b6:45:0c:56:08:c9:0c:d5:af:19:5b:02:46:97:
61:48:07:3d:98:24:5a:b6:66:12:b2:77:69:f0:0d:00:3f:c9:
d7:11:5b:a4
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZiOttuF6ZKSphzncN8erWlbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjUwODA5MTIwMzI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZTA1Y2MxYmMxNWE2NjljNTM3OWI1NDBiZjEwMThlZjZlYWI1ZDhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtz6xyjxG7l3Zs059W3tbA9XNDzRz
4A98GloMVaG65YXG6Sg+1f2lbZzeKV88sLZ+t1W4ItWqZpbXvyLxvyRuI/u0onPV
jEpQsEomwfwA4AAXcKi8K/hK2lluOw6ngNTQrQT3SO9Dty84d4yDeE9Xart3p8Ej
dJPtneSOkrMXP9N1wIHuIN6T5slRNg0xfjhMFExgqMYSAg05NwlDfgPJidYnyg6P
+zIZWgXFNfqD46gpuHCzwMPYmWELWcW4HYyVz0rasZWvx03Knk5kog+g1pxglE4K
YWPZc8ruxyII8QlS2l9FdaDr0avGACn8/nDIaIfnLwz7RGi2JQx99agTBQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFD4FzBvBWmacU3m1QL8QGO9uq12KMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvUGdYTUc4RmFacHhUZWJWQXZ4QVk3MjZyWFlvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQABedhAwQB
TVoKAwQATVoyMA0GCSqGSIb3DQEBCwUAA4IBAQCSKub6GkYrlXXTesfaBa9zbY15
GOe0FGGbT1HB3CqtjH1KRxpflkvbHgZaxAZM/BguaGfMkdjTsB4Gv+C60HntKvyS
poe1XFJ5Igj3cvucYIMKd+XUkubB1CEQpxKwy6lOAo8b4ti1WR1PKd0N8c8yVFDh
xFw3RnY/LgpxR+A0uVriVxriLxROC2h10HhiaXmEh5ft18A88HGy+tJ4LJwnHmSy
yPydjHXVSG38o9v+1RkSj/gXIfphWEmlDW62HpCF9nu6LShNCGn8IVLokTtKkKNj
G99/oaglELX3tkUMVgjJDNWvGVsCRpdhSAc9mCRatmYSsndp8A0AP8nXEVuk
-----END CERTIFICATE-----
Generated at Sun Aug 24 07:37:49 2025 by rpki-client