Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/PWstWVfgXd0FBCLhPluLGZLf6rc.roa
File: PWstWVfgXd0FBCLhPluLGZLf6rc.roa (raw, json)
Hash identifier: oXnjpFNe3NRmFDf1bLM/NlUVFk+7MlWobMfnnlBEEtw=
Subject key identifier: 3D:6B:2D:59:57:E0:5D:DD:05:04:22:E1:3E:5B:8B:19:92:DF:EA:B7
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01987A6C3C3D6114FFAC061D439DF0C189DF
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/PWstWVfgXd0FBCLhPluLGZLf6rc.roa
Signing time: Tue 05 Aug 2025 13:29:30 +0000
ROA not before: Tue 05 Aug 2025 13:29:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60117
IP address blocks: 37.202.209.0/24 maxlen: 24
151.240.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 09:25:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:6c:3c:3d:61:14:ff:ac:06:1d:43:9d:f0:c1:89:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 5 13:29:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3d6b2d5957e05ddd050422e13e5b8b1992dfeab7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:9d:af:3a:37:d0:90:da:4f:6d:8d:b7:12:90:
27:5f:2e:b7:dc:77:60:bf:4b:ee:7d:06:aa:0d:0b:
a7:0a:54:81:cf:66:7c:f3:15:00:74:11:8c:96:13:
dc:e5:07:1f:01:e9:86:87:ae:ef:30:de:ad:d8:46:
ca:54:b3:d5:5e:e8:69:c2:6d:e9:9d:dd:74:09:41:
8c:a0:fb:74:31:4f:15:67:a3:87:3b:8f:1c:37:c9:
72:e7:20:fe:7d:c5:01:b5:90:6a:ca:cd:2e:85:3c:
e3:ff:48:22:b8:35:a8:2c:d7:e2:65:7d:e6:07:b1:
1c:fc:f9:da:69:2c:1f:cc:68:d3:87:79:be:ca:8c:
e4:b4:7c:54:23:1c:f9:c4:68:64:7d:20:75:52:49:
17:d4:48:0d:39:8e:ec:2a:f8:d3:7b:10:3c:f7:4d:
af:ec:6d:52:79:ab:7b:b1:fd:76:cc:e2:e4:06:21:
4f:5f:17:80:e0:f4:83:e5:e5:79:8d:ee:d8:17:d5:
4a:01:bc:33:37:1b:55:0d:4a:35:29:d8:88:54:8b:
73:b4:d2:bb:5b:dd:99:e9:1e:66:f6:67:5b:fb:b8:
35:0a:89:77:3e:06:52:42:61:13:05:bf:03:78:b5:
d9:d7:d0:44:22:24:62:e3:87:1c:42:6b:85:6a:b3:
ca:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:6B:2D:59:57:E0:5D:DD:05:04:22:E1:3E:5B:8B:19:92:DF:EA:B7
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/PWstWVfgXd0FBCLhPluLGZLf6rc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.209.0/24
151.240.99.0/24
Signature Algorithm: sha256WithRSAEncryption
46:3a:c1:e8:dc:44:0c:9e:d2:c6:0a:0d:6f:0a:03:c7:c5:cb:
96:9e:73:25:13:f1:d8:6a:81:f4:f2:6d:5c:a5:92:30:73:46:
d5:cf:fd:bb:a5:10:1d:63:be:fe:2d:6b:6c:17:9e:93:95:dd:
c5:af:b1:d7:97:84:3d:2d:92:c6:6c:b9:0d:17:fc:dc:4e:7c:
86:de:e5:74:eb:0f:f5:ab:d4:6a:4e:6f:44:30:29:c5:f1:d0:
6c:75:4b:60:08:17:bd:e4:5e:8b:82:51:0c:7f:81:74:bc:11:
f5:da:9a:40:85:9f:67:70:f1:b4:10:bb:7f:52:d8:34:45:53:
1e:f5:41:c4:1e:bd:e0:5a:62:f6:c2:90:56:a0:b7:63:69:42:
1a:75:1b:2c:ca:ea:d6:d7:4a:95:f8:5f:ec:1f:d2:ce:70:26:
bd:1d:90:43:7b:c8:1f:37:5d:07:1d:57:91:d8:10:de:52:b0:
25:78:32:47:26:5e:b8:b6:20:71:93:d1:15:e6:85:94:c9:c9:
af:b7:1a:54:0f:f7:73:b9:1f:ac:52:07:2d:d7:0a:f0:19:b2:
aa:ca:b1:b0:51:11:6c:86:9f:7b:10:48:ad:6b:cd:69:5d:4d:
e2:ae:df:cd:0b:5c:48:20:f5:ce:6f:3d:c4:9e:ff:47:0f:7f:
2d:b9:05:03
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZh6bDw9YRT/rAYdQ53wwYnfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwODA1MTMyOTMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZDZiMmQ1OTU3ZTA1ZGRkMDUwNDIyZTEzZTViOGIxOTkyZGZlYWI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5J2vOjfQkNpPbY23EpAnXy633Hdg
v0vufQaqDQunClSBz2Z88xUAdBGMlhPc5QcfAemGh67vMN6t2EbKVLPVXuhpwm3p
nd10CUGMoPt0MU8VZ6OHO48cN8ly5yD+fcUBtZBqys0uhTzj/0giuDWoLNfiZX3m
B7Ec/PnaaSwfzGjTh3m+yozktHxUIxz5xGhkfSB1UkkX1EgNOY7sKvjTexA8902v
7G1Seat7sf12zOLkBiFPXxeA4PSD5eV5je7YF9VKAbwzNxtVDUo1KdiIVItztNK7
W92Z6R5m9mdb+7g1Col3PgZSQmETBb8DeLXZ19BEIiRi44ccQmuFarPKOQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFD1rLVlX4F3dBQQi4T5bixmS3+q3MB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvUFdzdFdWZmdYZDBGQkNMaFBsdUxHWkxmNnJjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAJcrRAwQA
l/BjMA0GCSqGSIb3DQEBCwUAA4IBAQBGOsHo3EQMntLGCg1vCgPHxcuWnnMlE/HY
aoH08m1cpZIwc0bVz/27pRAdY77+LWtsF56Tld3Fr7HXl4Q9LZLGbLkNF/zcTnyG
3uV06w/1q9RqTm9EMCnF8dBsdUtgCBe95F6LglEMf4F0vBH12ppAhZ9ncPG0ELt/
Utg0RVMe9UHEHr3gWmL2wpBWoLdjaUIadRssyurW10qV+F/sH9LOcCa9HZBDe8gf
N10HHVeR2BDeUrAleDJHJl64tiBxk9EV5oWUycmvtxpUD/dzuR+sUgct1wrwGbKq
yrGwURFshp97EEita81pXU3irt/NC1xIIPXObz3Env9HD38tuQUD
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:16:30 2025 by rpki-client