Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/Pwb-T7CDIcPW5g6EIjv7rI1hOY4.roa
File: Pwb-T7CDIcPW5g6EIjv7rI1hOY4.roa (raw, json)
Hash identifier: +uQK2AEnqPBoHu/xep/tQLvYp/ULstsLl2Xj5X9veFc=
Subject key identifier: 3F:06:FE:4F:B0:83:21:C3:D6:E6:0E:84:22:3B:FB:AC:8D:61:39:8E
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 0199E195D92538F9B7521243384A2DA05FE9
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/Pwb-T7CDIcPW5g6EIjv7rI1hOY4.roa
Signing time: Tue 14 Oct 2025 07:18:38 +0000
ROA not before: Tue 14 Oct 2025 07:18:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57043
IP address blocks: 45.67.202.0/24 maxlen: 24
193.37.196.0/24 maxlen: 24
194.41.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e1:95:d9:25:38:f9:b7:52:12:43:38:4a:2d:a0:5f:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Oct 14 07:18:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3f06fe4fb08321c3d6e60e84223bfbac8d61398e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:08:5b:35:43:cc:27:bd:d1:48:85:43:ba:fe:
9c:09:1a:0f:55:d3:3a:af:14:0d:97:bc:27:60:f1:
8c:29:a9:be:0a:6f:a0:37:36:0b:d3:e8:22:69:41:
90:c3:18:5c:95:4c:98:9c:ac:4f:7c:a7:4b:97:1a:
e8:8b:8d:c6:ac:fb:0f:a1:1d:57:73:30:08:e0:f6:
c9:2c:e3:b9:62:5d:ee:df:d7:72:e4:55:fe:83:13:
b3:f1:7f:1f:a6:18:7c:db:d0:ac:47:3c:a2:5f:80:
ac:3a:98:3c:80:e3:1f:cf:02:07:14:47:2b:12:b0:
ca:f3:71:21:16:53:d9:2e:95:86:e6:c6:71:3c:8c:
e6:b0:45:76:78:b1:5c:ee:31:52:e0:a8:ca:6b:c4:
2e:04:1c:e7:b6:45:fe:af:a0:07:e1:4b:4b:99:fa:
09:d2:ab:98:df:fd:93:61:39:6c:3e:a1:d9:61:6d:
f8:7e:3a:92:b0:b5:7d:f2:e7:30:32:3b:1b:bf:6d:
55:ee:39:40:e4:24:aa:0e:b8:e9:99:7f:f0:98:e7:
ee:98:7a:c9:f1:36:b1:79:1c:3d:90:d8:87:eb:f9:
66:9c:b1:ae:dc:14:65:6f:4b:32:7c:00:a5:22:80:
3a:30:fc:d7:a0:f6:4e:22:49:38:ad:e2:1e:03:20:
07:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:06:FE:4F:B0:83:21:C3:D6:E6:0E:84:22:3B:FB:AC:8D:61:39:8E
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/Pwb-T7CDIcPW5g6EIjv7rI1hOY4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.202.0/24
193.37.196.0/24
194.41.113.0/24
Signature Algorithm: sha256WithRSAEncryption
64:d9:fe:a0:1a:94:59:0d:71:31:0c:62:08:93:39:1d:90:39:
f4:6a:b0:fe:8f:0b:04:02:f5:90:61:32:b3:4d:74:98:12:34:
16:f1:63:ff:01:30:31:13:37:70:81:e4:97:d8:1b:ab:6e:4a:
a3:af:58:9f:3f:57:44:7d:57:c7:c0:4c:0b:d5:b4:1b:b0:0d:
04:49:6f:1c:5c:c1:29:70:42:5e:55:72:dc:a4:26:94:8c:1f:
a2:c3:02:dd:a0:7d:71:23:3c:c2:3d:b1:2c:7c:59:e6:94:b1:
91:85:fa:9a:96:e4:e0:b6:df:cc:f1:89:09:bc:3d:a9:d8:43:
5f:00:70:3b:3c:92:a4:54:b6:0f:1d:5a:c3:89:ff:6f:3c:b2:
24:5e:27:10:e6:f6:2b:0b:80:18:11:d4:95:50:73:ce:ae:b7:
bf:79:11:c0:26:ad:19:90:d2:fa:79:f8:23:cf:0a:c6:84:f4:
e6:f1:23:81:64:d2:f3:69:68:4c:a5:dc:2a:b1:79:25:ba:4f:
57:41:e5:fc:f1:0a:ed:d4:ff:e2:78:94:2a:ca:b8:45:01:5a:
de:dc:17:21:e5:cb:30:d6:14:51:3d:11:dc:15:30:e0:9d:36:
41:e3:f8:71:7c:11:00:a0:b0:e9:29:ca:78:16:b3:70:21:e1:
e1:7a:a8:ef
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZnhldklOPm3UhJDOEotoF/pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNjc3ZDdjYjkyNzFjZTM2MTI1NmU5ODMzY2M3YjE0ZmQw
MjNlYmUwHhcNMjUxMDE0MDcxODM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZjA2ZmU0ZmIwODMyMWMzZDZlNjBlODQyMjNiZmJhYzhkNjEzOThlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwhbNUPMJ73RSIVDuv6cCRoPVdM6
rxQNl7wnYPGMKam+Cm+gNzYL0+giaUGQwxhclUyYnKxPfKdLlxroi43GrPsPoR1X
czAI4PbJLOO5Yl3u39dy5FX+gxOz8X8fphh829CsRzyiX4CsOpg8gOMfzwIHFEcr
ErDK83EhFlPZLpWG5sZxPIzmsEV2eLFc7jFS4KjKa8QuBBzntkX+r6AH4UtLmfoJ
0quY3/2TYTlsPqHZYW34fjqSsLV98ucwMjsbv21V7jlA5CSqDrjpmX/wmOfumHrJ
8TaxeRw9kNiH6/lmnLGu3BRlb0syfAClIoA6MPzXoPZOIkk4reIeAyAHxQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFD8G/k+wgyHD1uYOhCI7+6yNYTmOMB8GA1UdIwQY
MBaAFJNnfXy5JxzjYSVumDPMexT9Aj6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYt
OTlhY2I5OWNlNzU0LzEvUHdiLVQ3Q0RJY1BXNWc2RUlqdjdySTFoT1k0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYtOTlhY2I5OWNlNzU0
LzEvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALUPKAwQA
wSXEAwQAwilxMA0GCSqGSIb3DQEBCwUAA4IBAQBk2f6gGpRZDXExDGIIkzkdkDn0
arD+jwsEAvWQYTKzTXSYEjQW8WP/ATAxEzdwgeSX2Burbkqjr1ifP1dEfVfHwEwL
1bQbsA0ESW8cXMEpcEJeVXLcpCaUjB+iwwLdoH1xIzzCPbEsfFnmlLGRhfqaluTg
tt/M8YkJvD2p2ENfAHA7PJKkVLYPHVrDif9vPLIkXicQ5vYrC4AYEdSVUHPOrre/
eRHAJq0ZkNL6efgjzwrGhPTm8SOBZNLzaWhMpdwqsXkluk9XQeX88Qrt1P/ieJQq
yrhFAVre3Bch5csw1hRRPRHcFTDgnTZB4/hxfBEAoLDpKcp4FrNwIeHheqjv
-----END CERTIFICATE-----
Generated at Mon Oct 20 01:55:35 2025 by rpki-client