Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/scCNEwcaaaHoSshPGrLC3BW1f7k.roa
File: scCNEwcaaaHoSshPGrLC3BW1f7k.roa (raw, json)
Hash identifier: SWEnWFbscaOx6jnYE4U+ji2rYdanDWUDzxuPTlsBqcQ=
Subject key identifier: B1:C0:8D:13:07:1A:69:A1:E8:4A:C8:4F:1A:B2:C2:DC:15:B5:7F:B9
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0198C15EFF67E1164A4AEFEA7CF0B391C801
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/scCNEwcaaaHoSshPGrLC3BW1f7k.roa
Signing time: Tue 19 Aug 2025 08:08:04 +0000
ROA not before: Tue 19 Aug 2025 08:08:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 37.252.26.0/24 maxlen: 24
79.99.76.0/24 maxlen: 24
82.152.10.0/24 maxlen: 24
82.152.92.0/24 maxlen: 24
82.152.102.0/24 maxlen: 24
82.153.41.0/24 maxlen: 24
82.153.86.0/24 maxlen: 24
82.153.220.0/24 maxlen: 24
82.153.255.0/24 maxlen: 24
89.213.127.0/24 maxlen: 24
89.213.129.0/24 maxlen: 24
89.213.132.0/24 maxlen: 24
89.213.155.0/24 maxlen: 24
89.213.162.0/24 maxlen: 24
89.213.167.0/24 maxlen: 24
89.213.181.0/24 maxlen: 24
89.213.191.0/24 maxlen: 24
89.213.212.0/24 maxlen: 24
89.213.224.0/24 maxlen: 24
109.176.20.0/24 maxlen: 24
213.130.135.0/24 maxlen: 24
213.210.11.0/24 maxlen: 24
213.210.41.0/24 maxlen: 24
217.144.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c1:5e:ff:67:e1:16:4a:4a:ef:ea:7c:f0:b3:91:c8:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Aug 19 08:08:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b1c08d13071a69a1e84ac84f1ab2c2dc15b57fb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ee:46:50:0a:eb:ff:f2:6c:5f:aa:2b:ab:9b:
ce:dc:59:c3:32:48:5c:d9:7f:05:86:f7:c9:4e:5a:
4e:66:6e:8f:50:e7:65:69:bc:49:00:ba:c3:1c:e8:
d3:03:28:27:85:a7:91:74:b8:1d:05:a4:e1:ac:03:
25:ed:3d:0b:7b:07:23:90:ed:a4:1f:fa:60:d3:23:
0c:2f:eb:22:eb:45:97:b9:b1:44:34:cf:14:03:70:
84:ca:fe:81:01:d0:9a:c1:5a:29:2c:24:8b:4e:63:
19:fe:c1:d9:55:f7:ba:85:76:c4:a8:de:0f:26:51:
81:1b:03:3a:e2:17:c8:4f:84:0b:29:97:61:b0:f8:
ce:f7:7b:f2:cb:64:ce:f9:8a:93:87:83:df:86:61:
56:7c:20:be:35:45:35:c3:06:45:2b:37:c2:67:ae:
f7:02:6c:04:6e:6d:db:44:18:8b:12:50:0f:7f:b3:
2f:4d:72:78:45:9e:6a:2a:a4:42:61:b0:b8:a3:2e:
00:cb:d2:85:2f:b7:dc:1a:70:5f:37:34:40:e7:64:
d6:df:53:6d:b1:d8:c2:23:8e:d1:4b:c4:68:03:68:
ce:fe:ce:78:bd:ee:ec:18:03:bf:f3:cc:92:99:7a:
ed:b3:39:13:be:4f:95:a9:56:87:b2:31:5d:ee:de:
10:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:C0:8D:13:07:1A:69:A1:E8:4A:C8:4F:1A:B2:C2:DC:15:B5:7F:B9
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/scCNEwcaaaHoSshPGrLC3BW1f7k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.252.26.0/24
79.99.76.0/24
82.152.10.0/24
82.152.92.0/24
82.152.102.0/24
82.153.41.0/24
82.153.86.0/24
82.153.220.0/24
82.153.255.0/24
89.213.127.0/24
89.213.129.0/24
89.213.132.0/24
89.213.155.0/24
89.213.162.0/24
89.213.167.0/24
89.213.181.0/24
89.213.191.0/24
89.213.212.0/24
89.213.224.0/24
109.176.20.0/24
213.130.135.0/24
213.210.11.0/24
213.210.41.0/24
217.144.153.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:0b:92:f5:0c:71:9f:e9:3d:1d:2b:8f:1d:d1:3e:41:ad:9c:
d7:61:8b:c9:d9:33:f1:24:cd:d3:a6:a7:38:b0:7d:4a:4d:fa:
46:09:d3:85:da:12:e0:78:20:f6:64:68:ef:1f:b5:b5:3a:5b:
29:d1:be:32:44:ae:74:2f:b9:d3:08:69:d5:ce:30:c0:5d:af:
34:97:64:23:1f:c2:96:24:c0:3d:4d:4c:3b:89:ec:10:3e:a7:
13:67:f4:52:be:da:e5:ed:7f:5a:84:4b:67:d5:10:a3:2e:17:
0e:e5:7c:39:db:d5:38:91:36:5d:3e:a4:33:bb:bb:29:22:f0:
c9:bc:9e:b5:f8:3e:c1:83:43:5a:59:a4:ab:4b:72:db:7b:3f:
68:8d:df:36:21:c2:a0:18:5b:55:a0:d2:ee:47:e5:e4:0c:cc:
06:2c:b8:66:4a:f6:71:eb:b0:ef:ce:11:fb:80:a1:9a:85:b9:
c4:0e:9b:d3:8b:ea:3a:31:a8:29:4d:42:63:13:1e:9c:e8:79:
19:bd:b3:c8:26:96:cc:ce:9a:92:9f:f3:08:ea:1a:3e:01:66:
7e:66:6b:83:6d:d8:3d:51:e9:d8:7e:35:7e:cc:5e:35:fc:52:
8e:fd:a0:89:e6:07:ba:2f:8b:40:a4:f3:05:a4:2f:82:aa:1b:
56:3f:35:8f
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgISAZjBXv9n4RZKSu/qfPCzkcgBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjUwODE5MDgwODA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMWMwOGQxMzA3MWE2OWExZTg0YWM4NGYxYWIyYzJkYzE1YjU3ZmI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3e5GUArr//JsX6orq5vO3FnDMkhc
2X8FhvfJTlpOZm6PUOdlabxJALrDHOjTAygnhaeRdLgdBaThrAMl7T0LewcjkO2k
H/pg0yMML+si60WXubFENM8UA3CEyv6BAdCawVopLCSLTmMZ/sHZVfe6hXbEqN4P
JlGBGwM64hfIT4QLKZdhsPjO93vyy2TO+YqTh4PfhmFWfCC+NUU1wwZFKzfCZ673
AmwEbm3bRBiLElAPf7MvTXJ4RZ5qKqRCYbC4oy4Ay9KFL7fcGnBfNzRA52TW31Nt
sdjCI47RS8RoA2jO/s54ve7sGAO/88ySmXrtszkTvk+VqVaHsjFd7t4QCQIDAQAB
o4ICmDCCApQwHQYDVR0OBBYEFLHAjRMHGmmh6ErITxqywtwVtX+5MB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvc2NDTkV3Y2FhYUhvU3NoUEdyTEMzQlcxZjdrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGtBggrBgEFBQcBBwEB/wSBnTCBmjCBlwQCAAEwgZADBAAl
/BoDBABPY0wDBABSmAoDBABSmFwDBABSmGYDBABSmSkDBABSmVYDBABSmdwDBABS
mf8DBABZ1X8DBABZ1YEDBABZ1YQDBABZ1ZsDBABZ1aIDBABZ1acDBABZ1bUDBABZ
1b8DBABZ1dQDBABZ1eADBABtsBQDBADVgocDBADV0gsDBADV0ikDBADZkJkwDQYJ
KoZIhvcNAQELBQADggEBAD8LkvUMcZ/pPR0rjx3RPkGtnNdhi8nZM/EkzdOmpziw
fUpN+kYJ04XaEuB4IPZkaO8ftbU6WynRvjJErnQvudMIadXOMMBdrzSXZCMfwpYk
wD1NTDuJ7BA+pxNn9FK+2uXtf1qES2fVEKMuFw7lfDnb1TiRNl0+pDO7uyki8Mm8
nrX4PsGDQ1pZpKtLctt7P2iN3zYhwqAYW1Wg0u5H5eQMzAYsuGZK9nHrsO/OEfuA
oZqFucQOm9OL6joxqClNQmMTHpzoeRm9s8gmlszOmpKf8wjqGj4BZn5ma4Nt2D1R
6dh+NX7MXjX8Uo79oInmB7ovi0Ck8wWkL4KqG1Y/NY8=
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:15:24 2025 by rpki-client