Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/3dhPwrEfhjofRYtfJkI4cPyP9HQ.roa
File: 3dhPwrEfhjofRYtfJkI4cPyP9HQ.roa (raw, json)
Hash identifier: ghQ2YzpCC9cQdtiIH9wDRG0qGVcd1atQTaldPN8jXwM=
Subject key identifier: DD:D8:4F:C2:B1:1F:86:3A:1F:45:8B:5F:26:42:38:70:FC:8F:F4:74
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 0198F22BD9374E94BDFF1C5077591F9AAF3E
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/3dhPwrEfhjofRYtfJkI4cPyP9HQ.roa
Signing time: Thu 28 Aug 2025 19:33:36 +0000
ROA not before: Thu 28 Aug 2025 19:33:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199654
IP address blocks: 45.149.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 17:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:f2:2b:d9:37:4e:94:bd:ff:1c:50:77:59:1f:9a:af:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Aug 28 19:33:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ddd84fc2b11f863a1f458b5f26423870fc8ff474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:75:b7:3a:fa:f4:80:de:4a:11:af:36:2a:3f:
32:7d:50:5e:3f:9c:45:47:fe:71:06:96:32:db:5f:
4b:d5:28:d0:68:9a:c3:fd:10:59:d5:2a:08:c8:74:
31:08:ac:05:2d:f8:e4:f4:c6:58:5d:10:a3:35:c2:
8f:45:f0:0d:24:a8:c3:91:0d:35:1d:23:bc:0c:98:
04:66:66:4b:bd:50:a6:be:94:ab:bb:fa:6a:e4:a2:
79:0e:46:36:b7:5d:21:85:f2:b5:6c:83:68:66:39:
fc:61:35:7e:ba:a5:d8:8d:a5:ba:5e:71:5f:38:a5:
0b:98:c9:5b:6a:4e:84:92:6c:c0:83:ae:78:4b:ae:
c7:fc:23:50:39:e1:1a:73:46:0b:83:68:3e:27:bf:
e1:b5:79:1c:2e:61:99:51:ef:2f:6c:62:18:69:19:
2d:e6:48:a9:4c:fa:41:b4:d6:d4:25:0e:48:a3:de:
40:f6:db:0a:94:4a:4d:4e:a3:9d:fd:6d:af:8f:5a:
22:00:f0:41:e1:bb:4b:9a:41:f8:85:4d:b0:82:57:
a6:64:6d:fa:ee:c8:3c:72:8f:7f:b6:45:6b:48:ee:
7d:8b:63:40:01:5c:67:d1:e4:a6:b6:e1:45:4f:8d:
70:11:00:3e:dd:25:dd:20:0f:eb:02:42:14:70:77:
12:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:D8:4F:C2:B1:1F:86:3A:1F:45:8B:5F:26:42:38:70:FC:8F:F4:74
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/3dhPwrEfhjofRYtfJkI4cPyP9HQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.27.0/24
Signature Algorithm: sha256WithRSAEncryption
66:ef:09:a2:84:d5:8f:4f:61:a4:39:5b:f4:5a:f5:4a:6d:b9:
44:4d:f2:52:92:53:39:24:cf:01:24:47:f1:0f:52:ff:50:d0:
09:c6:5a:9e:92:c1:90:0c:7b:fb:32:48:72:ab:80:fa:3b:16:
28:56:60:ba:80:61:c8:19:b7:18:36:22:c9:ca:e9:80:ea:b8:
16:97:24:1a:90:f8:3c:f3:ab:78:87:d5:cc:2b:39:e2:b4:4c:
6a:19:dc:62:62:66:12:b1:4a:54:01:02:09:e2:14:7e:7d:1d:
11:13:7f:4d:72:1d:fe:3d:99:30:67:71:da:ca:04:0d:3d:95:
28:98:ba:61:6f:68:45:f3:2f:da:b4:5e:83:79:b6:68:14:6a:
3b:ad:ae:bb:73:cf:46:c7:0f:5b:d8:28:11:30:5f:9a:49:35:
76:4b:18:50:8d:77:91:8d:33:0f:21:b2:84:a7:06:09:0f:ab:
73:c4:86:ec:57:5e:ef:99:ba:96:7d:52:21:05:44:09:f7:e9:
7b:58:d9:50:a0:61:39:dc:07:40:c5:d6:e9:73:d0:4d:12:6f:
eb:b0:64:7c:12:4f:08:c3:82:1c:11:22:28:55:3d:89:a4:a1:
bb:7c:ae:52:aa:8b:71:61:2a:6d:fc:01:9d:fb:82:63:91:9b:
8a:4d:92:de
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZjyK9k3TpS9/xxQd1kfmq8+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzM2UzZjVlZjgyNTU1NmIwMTRhMDg1ZDMyNTY1YmIwY2Jj
NWFjOGQwHhcNMjUwODI4MTkzMzM2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZGQ4NGZjMmIxMWY4NjNhMWY0NThiNWYyNjQyMzg3MGZjOGZmNDc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXW3Ovr0gN5KEa82Kj8yfVBeP5xF
R/5xBpYy219L1SjQaJrD/RBZ1SoIyHQxCKwFLfjk9MZYXRCjNcKPRfANJKjDkQ01
HSO8DJgEZmZLvVCmvpSru/pq5KJ5DkY2t10hhfK1bINoZjn8YTV+uqXYjaW6XnFf
OKULmMlbak6EkmzAg654S67H/CNQOeEac0YLg2g+J7/htXkcLmGZUe8vbGIYaRkt
5kipTPpBtNbUJQ5Io95A9tsKlEpNTqOd/W2vj1oiAPBB4btLmkH4hU2wglemZG36
7sg8co9/tkVrSO59i2NAAVxn0eSmtuFFT41wEQA+3SXdIA/rAkIUcHcSXQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFN3YT8KxH4Y6H0WLXyZCOHD8j/R0MB8GA1UdIwQY
MBaAFIM+P174JVVrAUoIXTJWW7DLxayNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAt
MzE4YTI2ZDRhOGM5LzEvM2RoUHdyRWZoam9mUll0ZkprSTRjUHlQOUhRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAtMzE4YTI2ZDRhOGM5
LzEvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZUbMA0G
CSqGSIb3DQEBCwUAA4IBAQBm7wmihNWPT2GkOVv0WvVKbblETfJSklM5JM8BJEfx
D1L/UNAJxlqeksGQDHv7Mkhyq4D6OxYoVmC6gGHIGbcYNiLJyumA6rgWlyQakPg8
86t4h9XMKznitExqGdxiYmYSsUpUAQIJ4hR+fR0RE39Nch3+PZkwZ3HaygQNPZUo
mLphb2hF8y/atF6DebZoFGo7ra67c89Gxw9b2CgRMF+aSTV2SxhQjXeRjTMPIbKE
pwYJD6tzxIbsV17vmbqWfVIhBUQJ9+l7WNlQoGE53AdAxdbpc9BNEm/rsGR8Ek8I
w4IcESIoVT2JpKG7fK5SqotxYSpt/AGd+4JjkZuKTZLe
-----END CERTIFICATE-----
Generated at Fri Sep 5 22:17:06 2025 by rpki-client