Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/pgWVJE258Q-5PqgpMd9DN9w5050.roa
File: pgWVJE258Q-5PqgpMd9DN9w5050.roa (raw, json)
Hash identifier: 25teV6CHRSqUDyhbxL2OJN9memf5XTYybANVZDkJBpw=
Subject key identifier: A6:05:95:24:4D:B9:F1:0F:B9:3E:A8:29:31:DF:43:37:DC:39:D3:9D
Certificate issuer: /CN=b35002ba088d5bd09c1553dced5b0bf3907ff736
Certificate serial: 0198CBC1AD36A88E101E2FC0E8E68F470CD3
Authority key identifier: B3:50:02:BA:08:8D:5B:D0:9C:15:53:DC:ED:5B:0B:F3:90:7F:F7:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s1ACugiNW9CcFVPc7VsL85B_9zY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/pgWVJE258Q-5PqgpMd9DN9w5050.roa
Signing time: Thu 21 Aug 2025 08:32:04 +0000
ROA not before: Thu 21 Aug 2025 08:32:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199152
IP address blocks: 91.239.23.0/24 maxlen: 24
94.247.137.0/24 maxlen: 24
146.19.84.0/24 maxlen: 24
176.116.0.0/24 maxlen: 24
2a0a:2e82::/36 maxlen: 36
2a0a:2e83::/36 maxlen: 36
2a0a:2e84::/36 maxlen: 36
2a0a:2e85::/36 maxlen: 36
2a0a:2e86::/32 maxlen: 32
2a0a:2e86:1000::/36 maxlen: 36
2a0a:2e86:2000::/36 maxlen: 36
2a0a:2e86:3000::/36 maxlen: 36
2a0a:2e86:4000::/36 maxlen: 36
2a0a:2e86:5000::/36 maxlen: 36
2a0a:2e86:6000::/36 maxlen: 36
2a0a:2e86:7000::/36 maxlen: 36
2a0a:2e86:8000::/36 maxlen: 36
2a0a:2e86:9000::/36 maxlen: 36
2a0a:2e86:a000::/36 maxlen: 36
2a0a:2e86:b000::/36 maxlen: 36
2a11:7e41::/48 maxlen: 48
2a11:7e41:1::/48 maxlen: 48
2a11:7e41:2::/48 maxlen: 48
2a11:7e41:3::/48 maxlen: 48
2a11:7e42::/36 maxlen: 36
2a11:7e43::/36 maxlen: 36
2a11:8480::/32 maxlen: 32
2a11:8482::/36 maxlen: 36
2a11:8483::/36 maxlen: 36
2a11:df42::/36 maxlen: 36
2a11:df43::/36 maxlen: 36
2a12:6703::/36 maxlen: 36
2a12:6704::/36 maxlen: 36
2a12:6705::/32 maxlen: 32
2a12:6706::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/s1ACugiNW9CcFVPc7VsL85B_9zY.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/s1ACugiNW9CcFVPc7VsL85B_9zY.mft
rsync://rpki.ripe.net/repository/DEFAULT/s1ACugiNW9CcFVPc7VsL85B_9zY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:cb:c1:ad:36:a8:8e:10:1e:2f:c0:e8:e6:8f:47:0c:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b35002ba088d5bd09c1553dced5b0bf3907ff736
Validity
Not Before: Aug 21 08:32:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a60595244db9f10fb93ea82931df4337dc39d39d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ab:cc:b0:77:85:8f:64:c3:bc:f9:5e:1c:5a:
2a:ec:d2:69:da:30:cd:f5:d0:61:c6:67:ba:0d:35:
d7:99:e9:cd:93:65:c0:fc:90:ec:a1:f8:a6:c8:7a:
37:e4:46:82:56:83:97:eb:49:2e:67:e7:99:c5:9a:
fe:6b:cd:d4:73:7e:55:39:b4:0d:a0:36:6c:37:47:
69:76:9e:1c:15:fc:44:15:ca:44:9f:81:be:87:1d:
04:b5:c6:38:85:ca:06:41:79:0e:c2:cc:84:c6:6d:
e9:e9:e3:fc:67:4d:dc:d2:08:d9:4a:0f:e4:63:31:
6b:68:99:d7:81:4d:47:ca:9b:f2:f3:e2:17:8e:57:
0d:6f:e2:b1:7e:f9:03:fd:b0:9f:9f:ac:4f:c5:fa:
37:26:98:dc:60:1b:05:3c:13:d7:98:0c:df:4c:0b:
a4:b5:d8:a7:e3:95:15:f8:6f:3d:6f:be:45:54:1c:
85:eb:41:21:d6:a0:1f:5e:7a:6f:20:55:6a:10:3e:
55:42:39:68:12:e1:ea:88:d7:20:eb:7f:c7:3a:33:
d2:d4:0b:ff:3a:c5:f7:91:c6:75:93:03:b9:25:98:
2e:b8:54:3a:89:cf:92:5c:57:14:63:f6:db:9a:8c:
24:10:ff:b9:dd:ce:b3:42:27:1d:f6:0e:9d:86:63:
58:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:05:95:24:4D:B9:F1:0F:B9:3E:A8:29:31:DF:43:37:DC:39:D3:9D
X509v3 Authority Key Identifier:
keyid:B3:50:02:BA:08:8D:5B:D0:9C:15:53:DC:ED:5B:0B:F3:90:7F:F7:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s1ACugiNW9CcFVPc7VsL85B_9zY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/pgWVJE258Q-5PqgpMd9DN9w5050.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/s1ACugiNW9CcFVPc7VsL85B_9zY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.23.0/24
94.247.137.0/24
146.19.84.0/24
176.116.0.0/24
IPv6:
2a0a:2e82::/36
2a0a:2e83::/36
2a0a:2e84::/36
2a0a:2e85::/36
2a0a:2e86::/32
2a11:7e41::/46
2a11:7e42::/36
2a11:7e43::/36
2a11:8480::/32
2a11:8482::/36
2a11:8483::/36
2a11:df42::/36
2a11:df43::/36
2a12:6703::/36
2a12:6704::/36
2a12:6705::-2a12:6706:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
7b:ef:ce:f3:36:7b:78:c5:e5:cf:60:a4:9c:13:45:ed:f6:9e:
c2:c8:c8:e5:be:5b:d4:6e:4d:3d:9e:bf:0d:10:a7:7d:ce:b8:
b8:84:19:ef:73:0d:b3:85:0c:72:42:01:cd:8d:1a:c2:c9:00:
ac:02:31:70:ff:20:1b:91:39:0d:8c:d4:76:50:a2:c9:91:17:
fa:6f:dc:14:b8:85:08:8f:a7:dc:53:c1:04:8a:3a:18:c1:0b:
d9:e5:1d:7a:7d:21:e3:f1:97:3c:35:72:8f:e8:c3:56:51:4e:
c2:85:7e:bf:b4:f2:cb:c3:90:c2:85:58:59:3c:51:3c:03:06:
b5:43:d7:5a:b8:a4:5c:ae:bc:28:23:8b:fb:0e:5e:9b:1f:4b:
01:08:43:50:53:0e:7f:45:04:41:53:25:fd:03:01:77:d9:6f:
af:08:be:6e:28:06:8d:0d:b7:73:0a:00:f1:83:f7:ab:03:41:
a5:5f:d7:31:31:63:34:63:80:a8:f5:10:d5:66:40:ca:ed:1c:
a4:5a:0c:e0:48:55:74:3c:a0:5d:4b:90:4b:b1:7a:68:f4:26:
1b:25:3c:da:68:ec:b8:cc:20:2f:ae:17:9b:00:df:e3:5e:e9:
78:32:0c:b6:17:c0:81:df:d5:e6:d7:62:43:99:f6:1f:b6:6d:
c5:b5:91:8b
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZjLwa02qI4QHi/A6OaPRwzTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzNTAwMmJhMDg4ZDViZDA5YzE1NTNkY2VkNWIwYmYzOTA3
ZmY3MzYwHhcNMjUwODIxMDgzMjA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNjA1OTUyNDRkYjlmMTBmYjkzZWE4MjkzMWRmNDMzN2RjMzlkMzlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvavMsHeFj2TDvPleHFoq7NJp2jDN
9dBhxme6DTXXmenNk2XA/JDsofimyHo35EaCVoOX60kuZ+eZxZr+a83Uc35VObQN
oDZsN0dpdp4cFfxEFcpEn4G+hx0EtcY4hcoGQXkOwsyExm3p6eP8Z03c0gjZSg/k
YzFraJnXgU1Hypvy8+IXjlcNb+KxfvkD/bCfn6xPxfo3JpjcYBsFPBPXmAzfTAuk
tdin45UV+G89b75FVByF60Eh1qAfXnpvIFVqED5VQjloEuHqiNcg63/HOjPS1Av/
OsX3kcZ1kwO5JZguuFQ6ic+SXFcUY/bbmowkEP+53c6zQicd9g6dhmNYjwIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFKYFlSRNufEPuT6oKTHfQzfcOdOdMB8GA1UdIwQY
MBaAFLNQAroIjVvQnBVT3O1bC/OQf/c2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczFBQ3VnaU5XOUNjRlZQYzdWc0w4NUJfOXpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9mZTRiMDYtZmMyZS00YmNiLTg3N2Ut
YWYxZWYxZDdhZmI4LzEvcGdXVkpFMjU4US01UHFncE1kOUROOXc1MDUwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS9mZTRiMDYtZmMyZS00YmNiLTg3N2UtYWYxZWYxZDdhZmI4
LzEvczFBQ3VnaU5XOUNjRlZQYzdWc0w4NUJfOXpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHEBggrBgEFBQcBBwEB/wSBtDCBsTAeBAIAATAYAwQAW+8X
AwQAXveJAwQAkhNUAwQAsHQAMIGOBAIAAjCBhwMGBCoKLoIAAwYEKgougwADBgQq
Ci6EAAMGBCoKLoUAAwUAKgouhgMHAioRfkEAAAMGBCoRfkIAAwYEKhF+QwADBQAq
EYSAAwYEKhGEggADBgQqEYSDAAMGBCoR30IAAwYEKhHfQwADBgQqEmcDAAMGBCoS
ZwQAMA4DBQAqEmcFAwUAKhJnBjANBgkqhkiG9w0BAQsFAAOCAQEAe+/O8zZ7eMXl
z2CknBNF7faewsjI5b5b1G5NPZ6/DRCnfc64uIQZ73MNs4UMckIBzY0awskArAIx
cP8gG5E5DYzUdlCiyZEX+m/cFLiFCI+n3FPBBIo6GMEL2eUden0h4/GXPDVyj+jD
VlFOwoV+v7Tyy8OQwoVYWTxRPAMGtUPXWrikXK68KCOL+w5emx9LAQhDUFMOf0UE
QVMl/QMBd9lvrwi+bigGjQ23cwoA8YP3qwNBpV/XMTFjNGOAqPUQ1WZAyu0cpFoM
4EhVdDygXUuQS7F6aPQmGyU82mjsuMwgL64XmwDf417peDIMthfAgd/V5tdiQ5n2
H7ZtxbWRiw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 19:54:04 2025 by rpki-client