Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/P1AouXfemIWVVfo5TEibTocze1c.roa
File: P1AouXfemIWVVfo5TEibTocze1c.roa (raw, json)
Hash identifier: wHpE6e7xo4f0TlJdJmgZHfCjcbJSNy3kZ6obH44Jzik=
Subject key identifier: 3F:50:28:B9:77:DE:98:85:95:55:FA:39:4C:48:9B:4E:87:33:7B:57
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 01999A21FDF9871DD8AB055BA3C742FE48F3
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/P1AouXfemIWVVfo5TEibTocze1c.roa
Signing time: Tue 30 Sep 2025 10:19:02 +0000
ROA not before: Tue 30 Sep 2025 10:19:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9009
IP address blocks: 37.49.145.0/24 maxlen: 24
37.49.151.0/24 maxlen: 24
109.203.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Oct 2025 21:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:9a:21:fd:f9:87:1d:d8:ab:05:5b:a3:c7:42:fe:48:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Sep 30 10:19:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3f5028b977de98859555fa394c489b4e87337b57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b5:4a:a0:6e:d3:4f:5c:ac:80:2d:e7:cf:53:
27:6c:ae:7e:69:1a:42:3a:19:a2:15:e6:86:ce:0f:
ba:b4:f2:35:de:db:38:71:d7:4b:87:e2:06:ee:3b:
a4:be:6d:74:33:4d:84:7a:a3:a6:0e:b6:bf:59:28:
2a:65:6d:13:b6:85:8b:0a:95:bb:bb:f3:6f:ab:89:
10:ca:fd:9a:29:c9:4d:ba:1a:f4:e9:06:9d:e8:1d:
d4:cd:ae:cc:c4:17:85:7a:11:56:4a:04:da:41:ea:
0e:99:07:8e:c5:ce:1a:8e:98:42:7d:fb:c3:5d:4c:
44:f1:e7:34:83:19:1e:c5:9a:0a:51:31:24:6c:f5:
69:90:df:04:be:84:da:41:ca:1a:0c:33:23:06:ea:
4e:2c:ac:6f:16:37:07:9f:86:3f:08:db:86:01:6e:
39:eb:5d:53:75:23:7a:dc:34:cd:f6:64:6b:f5:87:
41:9d:76:e2:8a:36:fa:ba:0e:cb:7f:68:1f:84:85:
bc:b1:2f:47:2d:8c:c8:04:c0:f3:d2:49:0c:83:9b:
4a:4d:a0:56:2d:b6:89:c7:da:07:09:43:60:f2:04:
27:ea:22:6a:76:a0:74:a8:18:e8:38:c1:3b:7a:55:
7d:56:01:82:d7:97:93:85:cf:5e:14:7b:be:65:91:
86:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:50:28:B9:77:DE:98:85:95:55:FA:39:4C:48:9B:4E:87:33:7B:57
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/P1AouXfemIWVVfo5TEibTocze1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.49.145.0/24
37.49.151.0/24
109.203.160.0/24
Signature Algorithm: sha256WithRSAEncryption
44:de:e7:33:4b:53:8d:bd:be:4e:e0:48:67:ad:0e:e2:47:90:
f7:c8:7e:3d:c7:60:b0:28:aa:0c:8b:cf:17:b4:08:12:4e:e2:
1a:0a:7c:9e:93:9f:f7:16:11:c4:de:f6:0e:c8:d8:85:fa:0f:
59:09:99:f2:11:7a:83:26:a6:73:3f:ef:98:14:db:74:75:6d:
16:e4:b7:66:88:84:5b:f9:be:71:03:6c:cb:17:26:16:8b:c7:
30:f3:13:42:4a:79:51:8d:1a:8e:98:b0:ca:75:f5:b1:0a:e0:
97:ab:bb:01:98:79:ed:6c:05:2c:14:0b:d3:bc:3f:84:67:1a:
4f:f9:14:c3:37:4a:a8:9e:7c:ab:a7:16:37:c0:dc:68:42:3b:
50:6d:07:e6:fe:97:a3:88:e4:a5:6c:14:80:3d:3d:dc:2f:5a:
bb:2a:fc:ed:de:95:5e:ca:2c:0c:08:ce:d5:71:d8:e6:5d:63:
06:b9:c3:6f:de:41:7d:98:1d:13:46:95:95:d6:fc:b8:5d:8a:
d8:e3:9a:93:59:f2:d5:d3:d1:24:81:02:1e:4b:d6:0f:0c:5d:
1b:13:04:43:a5:7a:16:9e:3a:5b:6e:41:0f:8a:68:31:07:f3:
02:23:13:65:bd:28:ae:42:73:ac:6a:d9:ef:ba:d8:8a:27:3e:
a1:41:8e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 07:05:59 2025 by rpki-client