Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/PuHKeLRMJrkiCXJNxGhHBPFnVwg.roa
File: PuHKeLRMJrkiCXJNxGhHBPFnVwg.roa (raw, json)
Hash identifier: nCHOe9ZJjLQZxfDEYB6bXb9fwxwUmd8KIjQuB7ilPoI=
Subject key identifier: 3E:E1:CA:78:B4:4C:26:B9:22:09:72:4D:C4:68:47:04:F1:67:57:08
Certificate issuer: /CN=0a81fe9059f6820bc18ad5802f2f1fca77d254b7
Certificate serial: 019A0169723B39653E7D6581E4BD9F0E1308
Authority key identifier: 0A:81:FE:90:59:F6:82:0B:C1:8A:D5:80:2F:2F:1F:CA:77:D2:54:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/PuHKeLRMJrkiCXJNxGhHBPFnVwg.roa
Signing time: Mon 20 Oct 2025 11:37:58 +0000
ROA not before: Mon 20 Oct 2025 11:37:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60713
IP address blocks: 91.236.131.0/24 maxlen: 24
212.7.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:69:72:3b:39:65:3e:7d:65:81:e4:bd:9f:0e:13:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a81fe9059f6820bc18ad5802f2f1fca77d254b7
Validity
Not Before: Oct 20 11:37:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3ee1ca78b44c26b92209724dc4684704f1675708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fc:e7:8d:a8:b2:af:02:c1:00:b6:21:da:de:
64:79:8a:c9:79:3d:46:a3:4a:77:41:48:5a:12:cd:
33:f7:88:e1:cb:a2:ee:7f:92:bf:03:61:37:81:10:
65:f3:38:d2:5f:aa:57:5e:3a:67:65:c6:a3:d6:82:
28:e8:6b:af:ce:e1:73:bb:eb:c8:b5:f7:38:f7:fa:
76:67:9f:44:53:b6:a6:45:ad:bd:8c:66:6e:1c:28:
0e:15:6a:f3:0d:e3:67:3d:55:31:67:05:fb:b5:f3:
1c:a7:97:11:9f:59:ce:ed:64:27:d8:93:ca:15:4a:
89:6f:47:fe:5e:d5:41:9d:70:13:e9:22:53:0e:7f:
d7:f6:2e:09:4d:c0:d7:c4:f0:59:f9:52:dd:5a:8f:
6f:03:b9:ab:7c:e7:ec:1f:05:a1:c9:6d:6a:ae:d1:
0e:b5:76:89:89:fd:0d:bc:7f:49:cc:28:d2:bc:70:
77:df:cc:f7:23:4f:a2:f9:17:fe:1d:ef:a1:e6:85:
01:26:e2:37:a7:e9:ae:b5:02:d0:74:94:fe:24:fc:
e4:6d:0c:25:da:a0:5f:84:99:11:e1:8d:b2:62:76:
fb:03:8b:1c:4c:e2:3f:64:5f:87:64:09:b1:0f:35:
30:b2:a4:c4:d9:7a:32:e3:5f:b1:65:06:25:9f:e1:
4a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:E1:CA:78:B4:4C:26:B9:22:09:72:4D:C4:68:47:04:F1:67:57:08
X509v3 Authority Key Identifier:
keyid:0A:81:FE:90:59:F6:82:0B:C1:8A:D5:80:2F:2F:1F:CA:77:D2:54:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/PuHKeLRMJrkiCXJNxGhHBPFnVwg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.131.0/24
212.7.212.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:55:16:1e:ad:84:c3:b8:cb:0b:d6:5b:1c:d0:12:e9:a0:6a:
60:6a:2e:24:70:b1:50:00:f6:ba:95:cf:38:76:50:90:1e:ee:
c6:15:53:0f:6b:ae:4f:cc:2b:43:a2:d9:08:71:94:5e:4c:e4:
6b:d3:96:2a:f9:d5:49:88:0e:c2:e1:c1:f8:43:fe:aa:f1:63:
86:b8:3f:76:bd:ec:07:de:9e:89:d8:82:37:04:c8:5f:45:af:
7d:5e:c4:da:30:e8:3a:fc:da:6b:ce:ea:9a:04:3b:81:ff:fe:
09:1a:c7:75:bb:f6:8f:84:5d:85:59:0d:6f:4f:e3:0e:1b:5d:
63:2b:40:0e:45:f3:a0:04:a2:ce:e6:8c:6e:85:ce:e9:fa:f5:
cd:eb:8a:23:45:59:cd:ce:a9:7e:71:c7:90:97:6d:6b:20:49:
3b:54:ac:01:b3:68:9c:10:26:33:98:92:28:bf:34:05:7b:aa:
f8:e3:be:82:d3:aa:a6:f0:46:44:2b:c4:75:55:56:ae:60:31:
a7:3b:1a:88:02:09:6c:c8:d9:d6:af:01:af:59:76:14:1d:ec:
62:ed:c7:ae:86:96:52:4a:e3:50:eb:10:60:b0:61:d6:6a:92:
19:34:ef:62:eb:6c:91:b5:f8:58:bb:f6:7e:f1:2d:ff:e1:f9:
96:8b:f6:56
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZoBaXI7OWU+fWWB5L2fDhMIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhODFmZTkwNTlmNjgyMGJjMThhZDU4MDJmMmYxZmNhNzdk
MjU0YjcwHhcNMjUxMDIwMTEzNzU4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZWUxY2E3OGI0NGMyNmI5MjIwOTcyNGRjNDY4NDcwNGYxNjc1NzA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/znjaiyrwLBALYh2t5keYrJeT1G
o0p3QUhaEs0z94jhy6Luf5K/A2E3gRBl8zjSX6pXXjpnZcaj1oIo6GuvzuFzu+vI
tfc49/p2Z59EU7amRa29jGZuHCgOFWrzDeNnPVUxZwX7tfMcp5cRn1nO7WQn2JPK
FUqJb0f+XtVBnXAT6SJTDn/X9i4JTcDXxPBZ+VLdWo9vA7mrfOfsHwWhyW1qrtEO
tXaJif0NvH9JzCjSvHB338z3I0+i+Rf+He+h5oUBJuI3p+mutQLQdJT+JPzkbQwl
2qBfhJkR4Y2yYnb7A4scTOI/ZF+HZAmxDzUwsqTE2Xoy41+xZQYln+FKGwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFD7hyni0TCa5IglyTcRoRwTxZ1cIMB8GA1UdIwQY
MBaAFAqB/pBZ9oILwYrVgC8vH8p30lS3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ29ILWtGbjJnZ3ZCaXRXQUx5OGZ5bmZTVkxjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC80OTg0ZGYtNmRiMi00ZTBhLTkxZjgt
YmYwNWFjYzgyYmQxLzEvUHVIS2VMUk1KcmtpQ1hKTnhHaEhCUEZuVndnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC80OTg0ZGYtNmRiMi00ZTBhLTkxZjgtYmYwNWFjYzgyYmQx
LzEvQ29ILWtGbjJnZ3ZCaXRXQUx5OGZ5bmZTVkxjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW+yDAwQA
1AfUMA0GCSqGSIb3DQEBCwUAA4IBAQBtVRYerYTDuMsL1lsc0BLpoGpgai4kcLFQ
APa6lc84dlCQHu7GFVMPa65PzCtDotkIcZReTORr05Yq+dVJiA7C4cH4Q/6q8WOG
uD92vewH3p6J2II3BMhfRa99XsTaMOg6/NprzuqaBDuB//4JGsd1u/aPhF2FWQ1v
T+MOG11jK0AORfOgBKLO5oxuhc7p+vXN64ojRVnNzql+cceQl21rIEk7VKwBs2ic
ECYzmJIovzQFe6r4476C06qm8EZEK8R1VVauYDGnOxqIAglsyNnWrwGvWXYUHexi
7ceuhpZSSuNQ6xBgsGHWapIZNO9i62yRtfhYu/Z+8S3/4fmWi/ZW
-----END CERTIFICATE-----
Generated at Mon Oct 27 01:59:00 2025 by rpki-client