Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/prwbWlzo__DrIfukygZbC6-2J9k.roa
File: prwbWlzo__DrIfukygZbC6-2J9k.roa (raw, json)
Hash identifier: qA5jeraHTJOX5AyOvp3lSROXTMkyZugZH/MR/vLpr8w=
Subject key identifier: A6:BC:1B:5A:5C:E8:FF:F0:EB:21:FB:A4:CA:06:5B:0B:AF:B6:27:D9
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0198FE71F1F00852EC91DF7C8756A63AAFE9
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/prwbWlzo__DrIfukygZbC6-2J9k.roa
Signing time: Sun 31 Aug 2025 04:45:36 +0000
ROA not before: Sun 31 Aug 2025 04:45:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214971
IP address blocks: 94.103.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 02:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:fe:71:f1:f0:08:52:ec:91:df:7c:87:56:a6:3a:af:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Aug 31 04:45:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a6bc1b5a5ce8fff0eb21fba4ca065b0bafb627d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:12:60:3a:45:a6:74:a4:33:01:a7:d2:32:a7:
7c:cf:7b:95:49:76:e6:ca:9a:ad:f4:d6:b0:8e:62:
93:c9:48:f5:3a:43:0a:47:b8:90:a8:a1:0a:88:d4:
ec:bd:17:94:c7:54:56:03:dc:35:5d:c2:19:47:70:
ec:c7:f2:fb:2c:40:24:66:e9:46:c8:94:79:a3:4c:
84:40:53:3a:72:f7:af:c7:7e:c0:16:a8:92:f7:9d:
47:47:78:19:dc:71:3c:5e:74:8a:53:73:9d:72:cd:
e9:42:53:94:94:e2:6b:bb:c7:ce:ef:e6:19:f8:b0:
e8:5f:29:31:0a:5e:62:3c:91:93:72:ad:a9:1b:b2:
31:a7:c4:57:d6:47:b2:3d:1f:ae:e0:d5:56:0d:14:
3e:5a:c9:02:79:7d:e5:24:ad:3e:9f:5c:d1:8f:f3:
3e:24:7d:7e:a3:fb:6d:68:a3:d0:b3:f9:82:98:34:
da:f8:d2:f9:78:72:f5:22:d8:1e:da:cc:68:e2:4a:
cb:c4:3a:66:97:9f:62:8b:43:9b:29:78:0f:77:40:
e1:ec:91:e9:18:60:58:bc:05:d1:f7:58:e1:b4:06:
c9:30:20:af:88:6f:98:c5:c1:f5:13:71:63:fa:66:
c0:70:74:8b:f1:19:6b:33:32:fd:31:61:fe:db:77:
f3:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:BC:1B:5A:5C:E8:FF:F0:EB:21:FB:A4:CA:06:5B:0B:AF:B6:27:D9
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/prwbWlzo__DrIfukygZbC6-2J9k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.103.164.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:12:6e:f2:75:0d:f7:65:d7:1a:70:a9:f1:f7:cc:39:0c:ce:
ba:3e:a9:3b:85:d5:15:3c:1f:42:49:5f:3a:e9:f7:6f:4c:85:
d0:3b:99:83:69:ce:65:02:9b:45:8f:57:05:b4:20:7a:5d:39:
a7:38:e9:f7:14:28:58:55:8a:a8:e5:ac:a0:f4:5f:13:cd:94:
10:1f:53:a2:2c:84:ec:15:76:19:31:c3:6c:18:25:84:90:71:
45:d3:81:2b:a3:de:21:ee:b1:ee:7b:6c:6e:48:b0:a0:c4:6a:
b2:0b:73:9d:b8:5e:33:ba:a3:cd:d9:3f:af:ea:91:75:f4:90:
dd:90:25:f5:c8:be:8c:fb:01:01:be:3a:96:52:4a:9c:10:91:
3e:29:84:f2:f1:f8:e2:ae:a9:35:94:38:bd:cd:29:ec:4c:27:
59:0e:c1:a5:fa:ae:6e:b8:dc:ea:28:40:e4:4b:bb:bb:88:f5:
3c:3a:77:e7:64:e9:91:dc:4b:52:a6:46:d0:65:03:f6:19:06:
d7:0e:f6:71:58:d5:8d:2d:05:df:b4:2f:be:5b:70:ce:f4:a4:
ed:36:21:b0:ab:80:8b:6c:dc:ea:bb:ba:d3:75:d0:b8:92:17:
4c:3c:6d:48:b7:79:a9:19:15:01:54:ad:57:01:86:a9:1f:e1:
3b:c7:da:77
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZj+cfHwCFLskd98h1amOq/pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjUwODMxMDQ0NTM2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNmJjMWI1YTVjZThmZmYwZWIyMWZiYTRjYTA2NWIwYmFmYjYyN2Q5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2xJgOkWmdKQzAafSMqd8z3uVSXbm
ypqt9NawjmKTyUj1OkMKR7iQqKEKiNTsvReUx1RWA9w1XcIZR3Dsx/L7LEAkZulG
yJR5o0yEQFM6cvevx37AFqiS951HR3gZ3HE8XnSKU3Odcs3pQlOUlOJru8fO7+YZ
+LDoXykxCl5iPJGTcq2pG7Ixp8RX1keyPR+u4NVWDRQ+WskCeX3lJK0+n1zRj/M+
JH1+o/ttaKPQs/mCmDTa+NL5eHL1Itge2sxo4krLxDpml59ii0ObKXgPd0Dh7JHp
GGBYvAXR91jhtAbJMCCviG+YxcH1E3Fj+mbAcHSL8RlrMzL9MWH+23fzIQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKa8G1pc6P/w6yH7pMoGWwuvtifZMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvcHJ3Yldsem9fX0RySWZ1a3lnWmJDNi0ySjlrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXmekMA0G
CSqGSIb3DQEBCwUAA4IBAQC6Em7ydQ33ZdcacKnx98w5DM66Pqk7hdUVPB9CSV86
6fdvTIXQO5mDac5lAptFj1cFtCB6XTmnOOn3FChYVYqo5ayg9F8TzZQQH1OiLITs
FXYZMcNsGCWEkHFF04Ero94h7rHue2xuSLCgxGqyC3OduF4zuqPN2T+v6pF19JDd
kCX1yL6M+wEBvjqWUkqcEJE+KYTy8fjirqk1lDi9zSnsTCdZDsGl+q5uuNzqKEDk
S7u7iPU8OnfnZOmR3EtSpkbQZQP2GQbXDvZxWNWNLQXftC++W3DO9KTtNiGwq4CL
bNzqu7rTddC4khdMPG1It3mpGRUBVK1XAYapH+E7x9p3
-----END CERTIFICATE-----
Generated at Sat Sep 6 08:05:55 2025 by rpki-client