Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/50HOfDq4SZhogdts0dPqVM4XTCw.roa
File: 50HOfDq4SZhogdts0dPqVM4XTCw.roa (raw, json)
Hash identifier: gq9zrZ+BK3Nboc7ESH3T2C8md6IL3SSl/lnd4DTZjZM=
Subject key identifier: E7:41:CE:7C:3A:B8:49:98:68:81:DB:6C:D1:D3:EA:54:CE:17:4C:2C
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 019947FEF43A9D9A6065424A40E661A0A084
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/50HOfDq4SZhogdts0dPqVM4XTCw.roa
Signing time: Sun 14 Sep 2025 11:31:54 +0000
ROA not before: Sun 14 Sep 2025 11:31:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213541
IP address blocks: 31.40.194.0/24 maxlen: 24
45.154.120.0/22 maxlen: 24
77.83.48.0/24 maxlen: 24
77.83.49.0/24 maxlen: 24
86.62.53.0/24 maxlen: 24
86.62.54.0/24 maxlen: 24
88.218.81.0/24 maxlen: 24
88.218.82.0/23 maxlen: 24
91.132.126.0/24 maxlen: 24
91.132.127.0/24 maxlen: 24
91.245.238.0/24 maxlen: 24
93.177.92.0/24 maxlen: 24
93.177.93.0/24 maxlen: 24
95.214.244.0/22 maxlen: 24
185.155.100.0/24 maxlen: 24
193.31.124.0/23 maxlen: 24
193.160.74.0/24 maxlen: 24
193.160.75.0/24 maxlen: 24
194.53.188.0/22 maxlen: 24
194.124.41.0/24 maxlen: 24
213.109.188.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 12:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:47:fe:f4:3a:9d:9a:60:65:42:4a:40:e6:61:a0:a0:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Sep 14 11:31:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e741ce7c3ab849986881db6cd1d3ea54ce174c2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:9b:6c:f3:38:f2:8a:fb:0a:25:b6:23:8b:fa:
77:67:80:79:4f:29:a4:25:dc:88:68:b7:78:3c:9e:
a5:f0:2e:c8:2b:b3:c4:b7:10:a2:cd:81:1f:75:c4:
cd:fb:16:af:f6:74:ce:9b:c1:52:71:9d:bd:fe:d8:
5f:23:8b:4b:08:01:61:3f:b8:72:39:8e:75:ea:2a:
65:7a:67:07:78:28:ce:f5:17:5c:e4:ae:8f:31:56:
67:14:0f:f6:89:95:f7:31:64:c1:a5:41:51:bb:af:
b3:07:07:82:9e:5c:36:12:66:9f:4e:85:13:e3:b5:
8d:28:f5:81:6c:cb:da:71:f8:0b:fe:a4:64:ec:32:
43:d4:8f:dd:54:ce:1b:60:f9:a1:9a:75:7a:6b:f6:
5a:42:cd:c1:43:24:56:c0:5c:1f:94:04:a7:ad:06:
27:4a:2e:d7:ab:aa:b1:f1:60:1d:ef:48:50:78:7d:
db:84:80:33:7d:78:20:a8:2f:19:b8:c5:4e:63:b7:
28:cc:8b:5b:5a:79:e8:88:22:f2:1f:ed:08:b9:96:
31:c0:40:01:07:82:07:e6:86:7f:af:5e:ed:2c:87:
59:61:46:f5:6b:f7:89:ab:1f:2a:d8:b8:2d:4f:79:
b9:23:eb:a7:16:4e:d4:b5:44:c4:13:49:41:f2:03:
66:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:41:CE:7C:3A:B8:49:98:68:81:DB:6C:D1:D3:EA:54:CE:17:4C:2C
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/50HOfDq4SZhogdts0dPqVM4XTCw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.194.0/24
45.154.120.0/22
77.83.48.0/23
86.62.53.0-86.62.54.255
88.218.81.0-88.218.83.255
91.132.126.0/23
91.245.238.0/24
93.177.92.0/23
95.214.244.0/22
185.155.100.0/24
193.31.124.0/23
193.160.74.0/23
194.53.188.0/22
194.124.41.0/24
213.109.188.0/22
Signature Algorithm: sha256WithRSAEncryption
07:fe:8e:09:5e:a4:dc:50:d9:2e:8f:43:62:22:1e:db:15:d5:
86:f6:d7:45:4a:35:e5:83:eb:89:a2:c3:d0:a8:40:03:b1:4c:
35:a6:f4:b7:f2:b3:99:f8:e0:bc:40:b4:14:09:09:c5:c6:e9:
3a:77:ed:77:cf:6a:65:f9:8a:3c:e8:2b:d8:08:71:cf:4e:ad:
6a:c7:b1:92:79:59:ad:f4:95:03:42:86:3d:f1:9a:93:97:78:
c3:93:d6:c1:3c:d4:c9:91:41:69:60:65:e5:4d:0a:17:d4:38:
d2:ec:3b:f8:74:41:71:cd:7d:61:57:83:11:76:f1:68:22:4e:
2a:9d:a5:e5:c7:16:6b:24:d9:e0:be:ac:32:73:b7:ac:b1:f7:
d4:d7:a8:f9:3a:6c:da:6c:77:51:33:83:85:0d:fc:7d:04:5a:
df:f9:34:c7:4b:69:fe:10:07:80:f5:38:9d:c8:27:4a:f5:f0:
ac:2e:c1:e0:b9:03:c4:82:47:c0:e9:4e:d1:cf:cd:16:31:99:
59:28:03:b6:d9:57:c2:50:42:63:0d:f3:cf:a4:d5:dc:ce:f4:
80:24:5c:8e:fb:ce:8c:a3:6b:cc:a5:0a:ab:79:e9:f4:e1:97:
9b:ea:a9:df:67:19:0c:47:60:2f:a9:10:7e:bf:0c:4b:c0:0e:
d9:f6:57:e5
-----BEGIN CERTIFICATE-----
MIIFYjCCBEqgAwIBAgISAZlH/vQ6nZpgZUJKQOZhoKCEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyYzJiODM0ZmJjOTFhZjBlYzZiMWQzNGZkNjQwNTRkMjI2
OWExZmQwHhcNMjUwOTE0MTEzMTU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNzQxY2U3YzNhYjg0OTk4Njg4MWRiNmNkMWQzZWE1NGNlMTc0YzJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6pts8zjyivsKJbYji/p3Z4B5Tymk
JdyIaLd4PJ6l8C7IK7PEtxCizYEfdcTN+xav9nTOm8FScZ29/thfI4tLCAFhP7hy
OY516iplemcHeCjO9Rdc5K6PMVZnFA/2iZX3MWTBpUFRu6+zBweCnlw2EmafToUT
47WNKPWBbMvacfgL/qRk7DJD1I/dVM4bYPmhmnV6a/ZaQs3BQyRWwFwflASnrQYn
Si7Xq6qx8WAd70hQeH3bhIAzfXggqC8ZuMVOY7cozItbWnnoiCLyH+0IuZYxwEAB
B4IH5oZ/r17tLIdZYUb1a/eJqx8q2LgtT3m5I+unFk7UtUTEE0lB8gNm9QIDAQAB
o4ICbjCCAmowHQYDVR0OBBYEFOdBznw6uEmYaIHbbNHT6lTOF0wsMB8GA1UdIwQY
MBaAFOLCuDT7yRrw7GsdNP1kBU0iaaH9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8zZjI0OWItZTgzNi00MWI0LTlhM2Et
OTk0ODA2ZjA4MWYwLzEvNTBIT2ZEcTRTWmhvZ2R0czBkUHFWTTRYVEN3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC8zZjI0OWItZTgzNi00MWI0LTlhM2EtOTk0ODA2ZjA4MWYw
LzEvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGDBggrBgEFBQcBBwEB/wR0MHIwcAQCAAEwagMEAB8owgME
Ai2aeAMEAU1TMDAMAwQAVj41AwQAVj42MAwDBABY2lEDBAJY2lADBAFbhH4DBABb
9e4DBAFdsVwDBAJf1vQDBAC5m2QDBAHBH3wDBAHBoEoDBALCNbwDBADCfCkDBALV
bbwwDQYJKoZIhvcNAQELBQADggEBAAf+jglepNxQ2S6PQ2IiHtsV1Yb210VKNeWD
64miw9CoQAOxTDWm9Lfys5n44LxAtBQJCcXG6Tp37XfPamX5ijzoK9gIcc9OrWrH
sZJ5Wa30lQNChj3xmpOXeMOT1sE81MmRQWlgZeVNChfUONLsO/h0QXHNfWFXgxF2
8WgiTiqdpeXHFmsk2eC+rDJzt6yx99TXqPk6bNpsd1Ezg4UN/H0EWt/5NMdLaf4Q
B4D1OJ3IJ0r18KwuweC5A8SCR8DpTtHPzRYxmVkoA7bZV8JQQmMN88+k1dzO9IAk
XI77zoyja8ylCqt56fThl5vqqd9nGQxHYC+pEH6/DEvADtn2V+U=
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:22:07 2025 by rpki-client