Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/Pwv-mSejsD1IvLMHwKlBmYXhgyA.roa
File: Pwv-mSejsD1IvLMHwKlBmYXhgyA.roa (raw, json)
Hash identifier: tWye5h5MURbId8Sq8cBOL206la0HCmgbKLSPuUKtWgk=
Subject key identifier: 3F:0B:FE:99:27:A3:B0:3D:48:BC:B3:07:C0:A9:41:99:85:E1:83:20
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 0198F5EC3C49EA1ACF3C11EA2F02EEEC6B1D
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/Pwv-mSejsD1IvLMHwKlBmYXhgyA.roa
Signing time: Fri 29 Aug 2025 13:02:36 +0000
ROA not before: Fri 29 Aug 2025 13:02:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 33659
IP address blocks: 45.150.168.0/22 maxlen: 22
45.151.196.0/22 maxlen: 22
193.31.104.0/22 maxlen: 22
195.138.109.0/24 maxlen: 24
195.138.110.0/24 maxlen: 24
195.138.113.0/24 maxlen: 24
195.138.115.0/24 maxlen: 24
195.138.124.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft
rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 04:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:f5:ec:3c:49:ea:1a:cf:3c:11:ea:2f:02:ee:ec:6b:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Aug 29 13:02:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3f0bfe9927a3b03d48bcb307c0a9419985e18320
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:dd:ff:25:29:a1:77:67:e4:4c:11:3f:76:db:
f4:c8:07:35:71:0e:63:76:92:61:43:a8:ab:7d:0b:
a0:db:56:82:f6:09:1d:1b:b8:b2:c5:35:74:19:18:
c4:bf:51:7f:42:79:aa:e8:e2:21:2e:c1:a9:1d:8c:
d4:33:cc:47:3e:75:fe:62:e6:c2:77:06:36:46:71:
c8:f8:0c:eb:50:ab:d2:a1:73:ac:6c:f9:4c:5d:6b:
b2:ec:2c:f1:29:4a:9e:43:7d:a5:0f:8a:ba:df:5a:
d5:c0:bc:03:1a:f5:bc:e9:0e:c7:fc:8a:ef:93:94:
35:66:6b:b7:8b:00:90:e1:6d:eb:dc:b4:e8:69:ee:
05:41:e6:89:68:ce:58:41:d8:dc:81:46:f1:6a:95:
fb:38:ad:b7:ba:d5:1e:26:ca:2a:19:27:92:ee:6f:
e1:cc:be:c6:8b:3f:87:7b:e7:c2:89:01:3b:10:f2:
a7:f0:74:32:84:80:2e:ad:a4:37:9e:59:d8:5d:d9:
d2:86:ff:f7:82:0d:b8:20:d2:05:19:78:ed:ae:3e:
bb:4f:0e:9f:e7:3a:8b:6f:33:75:0b:ff:51:f7:5b:
b2:93:fa:15:ed:8c:6e:9a:a4:4d:8a:e2:9b:2a:1f:
3a:b9:96:3a:02:81:27:5a:7e:ca:43:50:b3:eb:2e:
22:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:0B:FE:99:27:A3:B0:3D:48:BC:B3:07:C0:A9:41:99:85:E1:83:20
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/Pwv-mSejsD1IvLMHwKlBmYXhgyA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.168.0/22
45.151.196.0/22
193.31.104.0/22
195.138.109.0-195.138.110.255
195.138.113.0/24
195.138.115.0/24
195.138.124.0/22
Signature Algorithm: sha256WithRSAEncryption
50:60:2b:2e:61:69:10:b1:b8:15:3a:ba:ce:4b:31:a6:0d:7e:
12:d7:23:dc:25:14:09:a9:ad:43:b9:c9:50:47:0b:c4:b4:d8:
42:de:59:e9:1f:27:dc:bb:81:4b:27:26:ec:db:3c:18:0d:b0:
bf:f0:68:4f:d7:bf:ee:e8:26:f4:93:d6:fb:d6:3a:7c:da:57:
23:3c:34:e0:bb:d3:be:7d:84:4a:2d:66:0c:c3:18:0c:64:66:
d7:f2:b4:8a:b8:0c:5b:4b:6f:ef:e4:78:91:f9:8a:00:ba:40:
21:f0:0a:3a:cc:ce:30:a9:a4:4d:84:90:60:e5:72:df:9b:aa:
0f:d4:8f:7a:d7:18:50:b2:b4:ec:6f:ec:be:e5:02:1d:57:c1:
68:e2:43:92:cf:98:87:7c:99:e8:8b:48:ad:70:6d:1e:d5:c5:
85:72:32:6a:75:93:b3:92:02:46:ef:11:9d:2f:7e:2b:f6:6f:
73:d9:17:78:37:4e:d4:07:bc:44:c5:7b:c6:eb:c8:31:2b:ad:
14:da:2c:da:3a:19:f7:0b:84:50:80:6e:2b:95:9c:ed:7a:b4:
bd:1e:2f:4e:33:61:e4:70:ae:6c:1b:fa:3d:41:b3:8a:c9:32:
c8:5b:9c:a2:b3:a6:e0:e7:03:27:35:5a:e9:bb:2f:96:62:cf:
93:be:ca:63
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgISAZj17DxJ6hrPPBHqLwLu7GsdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiYWIzMDY4Mzg1OWVjN2UwMjA2ZmU5MjY1MzYzZThlMzk3
MWE5YTgwHhcNMjUwODI5MTMwMjM2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZjBiZmU5OTI3YTNiMDNkNDhiY2IzMDdjMGE5NDE5OTg1ZTE4MzIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0N3/JSmhd2fkTBE/dtv0yAc1cQ5j
dpJhQ6irfQug21aC9gkdG7iyxTV0GRjEv1F/Qnmq6OIhLsGpHYzUM8xHPnX+YubC
dwY2RnHI+AzrUKvSoXOsbPlMXWuy7CzxKUqeQ32lD4q631rVwLwDGvW86Q7H/Irv
k5Q1Zmu3iwCQ4W3r3LToae4FQeaJaM5YQdjcgUbxapX7OK23utUeJsoqGSeS7m/h
zL7Giz+He+fCiQE7EPKn8HQyhIAuraQ3nlnYXdnShv/3gg24INIFGXjtrj67Tw6f
5zqLbzN1C/9R91uyk/oV7YxumqRNiuKbKh86uZY6AoEnWn7KQ1Cz6y4iDQIDAQAB
o4ICNTCCAjEwHQYDVR0OBBYEFD8L/pkno7A9SLyzB8CpQZmF4YMgMB8GA1UdIwQY
MBaAFIurMGg4Wex+Agb+kmU2Po45camoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQt
M2FjOWU1NmMzMDg5LzEvUHd2LW1TZWpzRDFJdkxNSHdLbEJtWVhoZ3lBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQtM2FjOWU1NmMzMDg5
LzEvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEsGCCsGAQUFBwEHAQH/BDwwOjA4BAIAATAyAwQCLZaoAwQC
LZfEAwQCwR9oMAwDBADDim0DBADDim4DBADDinEDBADDinMDBALDinwwDQYJKoZI
hvcNAQELBQADggEBAFBgKy5haRCxuBU6us5LMaYNfhLXI9wlFAmprUO5yVBHC8S0
2ELeWekfJ9y7gUsnJuzbPBgNsL/waE/Xv+7oJvST1vvWOnzaVyM8NOC70759hEot
ZgzDGAxkZtfytIq4DFtLb+/keJH5igC6QCHwCjrMzjCppE2EkGDlct+bqg/Uj3rX
GFCytOxv7L7lAh1XwWjiQ5LPmId8meiLSK1wbR7VxYVyMmp1k7OSAkbvEZ0vfiv2
b3PZF3g3TtQHvETFe8bryDErrRTaLNo6GfcLhFCAbiuVnO16tL0eL04zYeRwrmwb
+j1Bs4rJMshbnKKzpuDnAyc1Wum7L5Ziz5O+ymM=
-----END CERTIFICATE-----
Generated at Sat Sep 6 12:06:39 2025 by rpki-client