Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/w3JXIRcbr6KwnMwme1orx9slU8I.roa
File: w3JXIRcbr6KwnMwme1orx9slU8I.roa (raw, json)
Hash identifier: VFCCyy87daugzyIA/V3roqMFDyUsgWDtMgKdLSeZBKc=
Subject key identifier: C3:72:57:21:17:1B:AF:A2:B0:9C:CC:26:7B:5A:2B:C7:DB:25:53:C2
Certificate issuer: /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial: 019A319A3CFECC6CB774EA43341AE9B5EF1F
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/w3JXIRcbr6KwnMwme1orx9slU8I.roa
Signing time: Wed 29 Oct 2025 20:13:03 +0000
ROA not before: Wed 29 Oct 2025 20:13:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 81.31.234.0/23 maxlen: 24
81.31.242.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 31 Oct 2025 19:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:31:9a:3c:fe:cc:6c:b7:74:ea:43:34:1a:e9:b5:ef:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
Validity
Not Before: Oct 29 20:13:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c3725721171bafa2b09ccc267b5a2bc7db2553c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ed:95:b6:ea:4a:0f:61:13:86:4a:35:d5:78:
7c:8c:a5:0a:60:81:bd:20:b6:f5:0e:55:52:62:f3:
60:92:6d:dd:78:67:f0:51:61:9a:a4:02:e2:45:0d:
6d:86:43:b4:72:f7:7c:96:75:10:2e:e1:c7:f1:d9:
37:05:f2:fd:29:20:44:27:a3:95:d4:f5:96:0d:89:
8a:ac:64:9c:cf:4e:0e:44:85:33:5d:34:7d:d1:ab:
c8:02:2b:c7:05:73:f7:33:ce:9b:92:f9:ca:c0:3d:
3b:66:07:36:6d:a8:c9:d9:45:57:56:76:38:10:ee:
c4:d5:25:53:55:81:b9:97:ae:1f:63:03:86:7f:89:
79:ed:6c:9c:9c:7c:6a:89:3c:b3:97:7d:2c:1d:bb:
11:4f:98:43:0d:f6:3b:df:4c:2d:4d:5e:d9:3c:9f:
cf:78:02:3b:20:84:52:3b:e5:33:8a:64:91:df:ff:
6b:a6:21:3d:dc:8e:db:ce:19:ec:00:83:81:47:a2:
2e:c0:7f:1b:1c:49:1a:5d:fa:63:31:ef:f2:c7:d9:
fe:b5:58:50:b7:19:4a:3b:24:cb:4e:0f:3d:82:fa:
8b:78:fc:e8:d3:55:69:05:db:d9:89:b7:29:f1:aa:
31:fe:3d:25:0c:a7:35:7c:4c:32:f5:6d:dc:4b:6e:
56:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:72:57:21:17:1B:AF:A2:B0:9C:CC:26:7B:5A:2B:C7:DB:25:53:C2
X509v3 Authority Key Identifier:
keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/w3JXIRcbr6KwnMwme1orx9slU8I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.31.234.0/23
81.31.242.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:6e:2d:e5:90:f8:15:33:c2:f6:90:ff:15:1c:e7:bd:cb:1f:
8b:ee:b7:10:00:52:93:11:26:7b:6f:ca:38:ff:a3:a1:29:e9:
b2:f2:ee:87:e8:ed:2b:5b:b2:af:e3:cf:81:1f:6d:47:a5:ff:
b8:00:6e:1f:78:af:12:c8:37:3f:dd:da:78:b7:65:05:b8:92:
e2:44:42:18:3b:b3:8b:3f:14:79:f6:49:77:ea:bf:09:d7:a2:
47:15:52:30:39:e3:d4:e9:dc:f2:d8:f3:c6:bd:48:6a:47:cb:
c2:1d:c7:fd:74:a2:48:a6:2e:29:d7:34:0d:17:f5:70:0b:c7:
47:9c:ce:a8:92:a9:f4:82:a9:c4:8d:bf:b2:3b:8a:c8:73:34:
3f:12:59:24:67:d0:f8:f1:fa:c8:87:33:56:cc:a5:a9:1c:ca:
18:3f:8a:49:32:d2:f8:99:b0:30:03:88:e2:0f:04:22:32:ab:
9c:df:bd:ff:51:a8:e4:83:37:ab:cb:da:80:04:e7:4d:2c:2c:
2a:23:bf:b4:db:05:9d:f5:32:c5:e0:ed:93:b0:b8:b8:b2:95:
e1:c6:aa:c9:27:b5:f5:60:63:ca:fe:32:b2:7e:2a:ee:14:2a:
19:92:d0:d7:07:a2:ba:85:bb:ec:c8:0f:f1:1a:bd:4e:56:07:
4c:05:b6:90
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZoxmjz+zGy3dOpDNBrpte8fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwNTZiY2Q0MjZmZDg3Y2Q2ZjQxNDdlMTMzMjE2ZDAzMTEy
YjE4MWIwHhcNMjUxMDI5MjAxMzAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMzcyNTcyMTE3MWJhZmEyYjA5Y2NjMjY3YjVhMmJjN2RiMjU1M2MyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAou2VtupKD2EThko11Xh8jKUKYIG9
ILb1DlVSYvNgkm3deGfwUWGapALiRQ1thkO0cvd8lnUQLuHH8dk3BfL9KSBEJ6OV
1PWWDYmKrGScz04ORIUzXTR90avIAivHBXP3M86bkvnKwD07Zgc2bajJ2UVXVnY4
EO7E1SVTVYG5l64fYwOGf4l57WycnHxqiTyzl30sHbsRT5hDDfY730wtTV7ZPJ/P
eAI7IIRSO+UzimSR3/9rpiE93I7bzhnsAIOBR6IuwH8bHEkaXfpjMe/yx9n+tVhQ
txlKOyTLTg89gvqLePzo01VpBdvZibcp8aox/j0lDKc1fEwy9W3cS25WSQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMNyVyEXG6+isJzMJntaK8fbJVPCMB8GA1UdIwQY
MBaAFBBWvNQm/YfNb0FH4TMhbQMRKxgbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUZhODFDYjloODF2UVVmaE15RnRBeEVyR0JzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lNmY0ZTQtNjhiYi00NDk2LTkwYzct
YWE4NTllMTkyYjE2LzEvdzNKWElSY2JyNkt3bk13bWUxb3J4OXNsVThJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9lNmY0ZTQtNjhiYi00NDk2LTkwYzctYWE4NTllMTkyYjE2
LzEvRUZhODFDYjloODF2UVVmaE15RnRBeEVyR0JzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBUR/qAwQB
UR/yMA0GCSqGSIb3DQEBCwUAA4IBAQA+bi3lkPgVM8L2kP8VHOe9yx+L7rcQAFKT
ESZ7b8o4/6OhKemy8u6H6O0rW7Kv48+BH21Hpf+4AG4feK8SyDc/3dp4t2UFuJLi
REIYO7OLPxR59kl36r8J16JHFVIwOePU6dzy2PPGvUhqR8vCHcf9dKJIpi4p1zQN
F/VwC8dHnM6okqn0gqnEjb+yO4rIczQ/ElkkZ9D48frIhzNWzKWpHMoYP4pJMtL4
mbAwA4jiDwQiMquc373/Uajkgzery9qABOdNLCwqI7+02wWd9TLF4O2TsLi4spXh
xqrJJ7X1YGPK/jKyfiruFCoZktDXB6K6hbvsyA/xGr1OVgdMBbaQ
-----END CERTIFICATE-----
Generated at Fri Oct 31 05:28:43 2025 by rpki-client