Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/229303-fd3e-4b3b-814d-06806a0bd181/1/3mhUHTDwirkASDro6wKMo1llreY.roa
File: 3mhUHTDwirkASDro6wKMo1llreY.roa (raw, json)
Hash identifier: QT1aX+pCloLwOlM8acjw8SNDGfs+bhgEOJUGdyQm/5A=
Subject key identifier: DE:68:54:1D:30:F0:8A:B9:00:48:3A:E8:EB:02:8C:A3:59:65:AD:E6
Certificate issuer: /CN=93a9f90830fe226c908eaddb67b5b9096c5e91bc
Certificate serial: 01990EA0B0FD57C2593B83C3E675C36508D9
Authority key identifier: 93:A9:F9:08:30:FE:22:6C:90:8E:AD:DB:67:B5:B9:09:6C:5E:91:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k6n5CDD-ImyQjq3bZ7W5CWxekbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/229303-fd3e-4b3b-814d-06806a0bd181/1/3mhUHTDwirkASDro6wKMo1llreY.roa
Signing time: Wed 03 Sep 2025 08:10:36 +0000
ROA not before: Wed 03 Sep 2025 08:10:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207439
IP address blocks: 91.234.47.0/24 maxlen: 24
185.49.175.0/24 maxlen: 24
2001:67c:29bc::/48 maxlen: 48
2a0c:800::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/229303-fd3e-4b3b-814d-06806a0bd181/1/k6n5CDD-ImyQjq3bZ7W5CWxekbw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/229303-fd3e-4b3b-814d-06806a0bd181/1/k6n5CDD-ImyQjq3bZ7W5CWxekbw.mft
rsync://rpki.ripe.net/repository/DEFAULT/k6n5CDD-ImyQjq3bZ7W5CWxekbw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:0e:a0:b0:fd:57:c2:59:3b:83:c3:e6:75:c3:65:08:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93a9f90830fe226c908eaddb67b5b9096c5e91bc
Validity
Not Before: Sep 3 08:10:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=de68541d30f08ab900483ae8eb028ca35965ade6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:5b:bc:af:2c:bc:cb:04:51:11:e1:5f:1c:94:
1c:c9:73:c4:4d:e7:ac:21:90:47:40:d7:38:c7:26:
fc:20:7b:db:aa:a7:f7:2e:df:e3:47:34:98:cb:c0:
42:a8:8a:64:f1:5b:a2:89:b8:4c:41:b0:76:04:4b:
40:e3:3e:9c:8f:aa:8b:ee:6b:7a:2e:58:35:fd:b2:
36:ca:e0:8a:25:fd:88:7d:cd:ea:d1:f5:d3:ab:e6:
38:e7:cf:90:6e:13:f5:fe:22:7d:e4:1c:ad:d0:63:
db:1f:28:8f:66:fd:60:35:07:b0:1e:84:89:5c:69:
d0:89:55:6a:e8:43:07:9a:fe:c2:34:b2:d0:aa:7f:
e5:73:d8:ff:40:2e:94:67:3d:a3:87:a1:ed:8a:54:
82:57:2c:57:b3:30:9c:e9:a7:09:df:73:e4:2b:e9:
64:b0:94:f1:6c:27:e7:1a:8f:03:86:fb:ba:ce:b6:
e6:1e:7e:01:b9:65:34:88:89:66:8d:bd:77:29:16:
f9:b1:7d:d8:98:0d:dd:32:5e:8a:79:25:27:fa:26:
e8:23:5a:8f:b0:6c:3b:2f:d4:dc:c2:15:c6:d2:3b:
1e:34:13:76:f6:4b:44:65:60:a4:83:9c:6e:71:33:
f4:14:9e:88:8a:f8:e6:d3:3f:df:1f:ec:df:fc:72:
fd:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:68:54:1D:30:F0:8A:B9:00:48:3A:E8:EB:02:8C:A3:59:65:AD:E6
X509v3 Authority Key Identifier:
keyid:93:A9:F9:08:30:FE:22:6C:90:8E:AD:DB:67:B5:B9:09:6C:5E:91:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k6n5CDD-ImyQjq3bZ7W5CWxekbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/229303-fd3e-4b3b-814d-06806a0bd181/1/3mhUHTDwirkASDro6wKMo1llreY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/229303-fd3e-4b3b-814d-06806a0bd181/1/k6n5CDD-ImyQjq3bZ7W5CWxekbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.234.47.0/24
185.49.175.0/24
IPv6:
2001:67c:29bc::/48
2a0c:800::/29
Signature Algorithm: sha256WithRSAEncryption
ac:35:d3:cc:49:c5:81:18:04:0c:a7:6e:33:e0:98:9e:ac:cd:
00:20:09:7a:fb:b5:98:51:9a:f2:63:49:03:96:84:cd:17:44:
3d:24:ba:cf:28:48:d2:e7:28:12:0e:ab:69:89:20:1d:17:5a:
3e:f6:50:62:24:79:fe:53:b7:49:c6:2b:61:68:59:53:26:52:
e2:bc:2c:99:0e:4a:ca:da:47:8e:58:8a:1a:44:ab:71:21:c9:
5d:1e:b7:24:50:fc:11:cc:69:99:9e:da:f1:ce:f7:09:ec:ef:
01:0b:5b:35:e4:a6:1e:e4:b0:7b:7f:95:95:f9:6f:64:36:ac:
ee:73:e6:28:3c:69:7f:ea:60:8a:c7:50:5d:ad:76:cc:28:41:
62:a2:b9:e5:4e:94:f0:fe:35:9c:98:3a:ba:7e:34:b7:34:dd:
bd:e7:53:80:1f:23:20:41:fe:8c:1e:78:ce:96:ff:ab:39:cc:
92:87:8f:7f:ef:ae:65:6b:32:08:38:8d:bc:d9:7e:6a:91:22:
2d:c1:59:06:37:3b:ff:3f:fc:15:7d:f1:82:fd:90:9d:42:59:
b0:0a:93:bb:d8:b9:35:16:3f:38:7f:95:24:cd:e4:8e:f1:0e:
81:3f:fb:59:c0:fe:96:a1:a5:e3:fc:56:65:15:cd:b0:a8:6f:
cb:d6:04:b2
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAZkOoLD9V8JZO4PD5nXDZQjZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzYTlmOTA4MzBmZTIyNmM5MDhlYWRkYjY3YjViOTA5NmM1
ZTkxYmMwHhcNMjUwOTAzMDgxMDM2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZTY4NTQxZDMwZjA4YWI5MDA0ODNhZThlYjAyOGNhMzU5NjVhZGU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllu8ryy8ywRREeFfHJQcyXPETees
IZBHQNc4xyb8IHvbqqf3Lt/jRzSYy8BCqIpk8VuiibhMQbB2BEtA4z6cj6qL7mt6
Llg1/bI2yuCKJf2Ifc3q0fXTq+Y458+QbhP1/iJ95Byt0GPbHyiPZv1gNQewHoSJ
XGnQiVVq6EMHmv7CNLLQqn/lc9j/QC6UZz2jh6HtilSCVyxXszCc6acJ33PkK+lk
sJTxbCfnGo8Dhvu6zrbmHn4BuWU0iIlmjb13KRb5sX3YmA3dMl6KeSUn+iboI1qP
sGw7L9TcwhXG0jseNBN29ktEZWCkg5xucTP0FJ6Iivjm0z/fH+zf/HL9YwIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFN5oVB0w8Iq5AEg66OsCjKNZZa3mMB8GA1UdIwQY
MBaAFJOp+Qgw/iJskI6t22e1uQlsXpG8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazZuNUNERC1JbXlRanEzYlo3VzVDV3hla2J3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi8yMjkzMDMtZmQzZS00YjNiLTgxNGQt
MDY4MDZhMGJkMTgxLzEvM21oVUhURHdpcmtBU0RybzZ3S01vMWxscmVZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi8yMjkzMDMtZmQzZS00YjNiLTgxNGQtMDY4MDZhMGJkMTgx
LzEvazZuNUNERC1JbXlRanEzYlo3VzVDV3hla2J3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDASBAIAATAMAwQAW+ovAwQA
uTGvMBYEAgACMBADBwAgAQZ8KbwDBQMqDAgAMA0GCSqGSIb3DQEBCwUAA4IBAQCs
NdPMScWBGAQMp24z4JierM0AIAl6+7WYUZryY0kDloTNF0Q9JLrPKEjS5ygSDqtp
iSAdF1o+9lBiJHn+U7dJxithaFlTJlLivCyZDkrK2keOWIoaRKtxIcldHrckUPwR
zGmZntrxzvcJ7O8BC1s15KYe5LB7f5WV+W9kNqzuc+YoPGl/6mCKx1BdrXbMKEFi
ornlTpTw/jWcmDq6fjS3NN2951OAHyMgQf6MHnjOlv+rOcySh49/765lazIIOI28
2X5qkSItwVkGNzv/P/wVffGC/ZCdQlmwCpO72Lk1Fj84f5UkzeSO8Q6BP/tZwP6W
oaXj/FZlFc2wqG/L1gSy
-----END CERTIFICATE-----
Generated at Mon Oct 20 01:55:29 2025 by rpki-client