Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/3vz-rOJraHXgtuodvtQFH_a0-9E.roa
File: 3vz-rOJraHXgtuodvtQFH_a0-9E.roa (raw, json)
Hash identifier: IX6pchZZJC1/03c77tkG6zkGv/Mwl6B+D7gi48C82ao=
Subject key identifier: DE:FC:FE:AC:E2:6B:68:75:E0:B6:EA:1D:BE:D4:05:1F:F6:B4:FB:D1
Certificate issuer: /CN=66ed3ba68c78bff2c4724400ade6348482fb4364
Certificate serial: 0198FE2B6FF54CA6AC8FA170F6EFFC2E32D0
Authority key identifier: 66:ED:3B:A6:8C:78:BF:F2:C4:72:44:00:AD:E6:34:84:82:FB:43:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zu07pox4v_LEckQAreY0hIL7Q2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/3vz-rOJraHXgtuodvtQFH_a0-9E.roa
Signing time: Sun 31 Aug 2025 03:28:36 +0000
ROA not before: Sun 31 Aug 2025 03:28:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 151779
IP address blocks: 185.225.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zu07pox4v_LEckQAreY0hIL7Q2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 08:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:fe:2b:6f:f5:4c:a6:ac:8f:a1:70:f6:ef:fc:2e:32:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66ed3ba68c78bff2c4724400ade6348482fb4364
Validity
Not Before: Aug 31 03:28:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=defcfeace26b6875e0b6ea1dbed4051ff6b4fbd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:21:1f:01:d0:94:f8:48:7a:73:a4:b9:0c:13:
28:29:ca:ca:a6:1b:b5:a7:01:d8:34:68:4f:cf:bd:
19:39:cb:66:7c:59:3e:ef:05:85:82:c4:2a:a2:b0:
a4:6b:4a:47:17:a5:2d:b0:8f:8f:00:88:2f:e1:02:
9a:18:58:fc:11:b6:a1:0f:d3:d9:a9:64:e8:c5:f3:
d3:4b:ed:be:e3:0d:00:0d:f5:d3:7e:c1:0f:9c:e4:
9c:d5:47:b0:a6:ce:06:38:f9:36:69:b3:8e:c9:a7:
5e:68:dc:d0:07:a7:4f:ad:8a:d1:45:a1:c9:db:f3:
ff:9e:aa:15:e0:dd:59:b2:67:4e:de:fb:80:0f:b7:
19:c8:7d:e3:f3:89:48:b8:38:65:48:9f:aa:28:89:
23:a7:65:f7:7f:0a:21:0a:5e:f6:cb:9d:f0:f4:64:
6c:e6:85:bb:24:c2:67:6e:f0:d3:c5:10:43:09:91:
f1:b4:3f:69:a0:b5:2d:81:ad:f7:07:fc:72:35:ea:
2a:18:4a:6a:5d:89:69:f9:c0:f9:03:2d:94:31:d5:
27:f7:15:b2:46:5c:e3:bd:59:4a:16:df:98:a2:e9:
80:f6:35:4b:fd:51:da:a3:57:df:1d:2c:87:1d:8c:
03:7a:c0:ab:0d:68:ee:95:d1:92:5d:37:aa:d4:dc:
d6:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:FC:FE:AC:E2:6B:68:75:E0:B6:EA:1D:BE:D4:05:1F:F6:B4:FB:D1
X509v3 Authority Key Identifier:
keyid:66:ED:3B:A6:8C:78:BF:F2:C4:72:44:00:AD:E6:34:84:82:FB:43:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zu07pox4v_LEckQAreY0hIL7Q2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/3vz-rOJraHXgtuodvtQFH_a0-9E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.24.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:aa:94:ad:e7:5e:67:f3:dc:38:74:8e:68:1f:87:05:27:de:
64:2a:38:d0:25:9a:b5:35:39:f7:04:58:84:2a:48:af:bc:26:
60:d5:a0:60:b3:77:23:0e:e9:78:8d:50:ba:ff:01:78:6e:5e:
ec:1a:2c:8b:3e:87:34:71:04:00:e3:f6:60:3c:e7:a2:78:07:
bd:63:ea:9f:c9:08:cb:9d:bf:ba:96:c6:02:dc:52:e6:46:c9:
c1:db:26:af:b3:1a:e3:7e:73:97:1a:48:b3:d3:2b:8b:30:05:
7e:90:5d:36:65:2a:64:3e:4e:29:fc:9d:8c:bb:61:40:06:64:
44:8c:1c:b8:ee:4a:c1:77:f0:be:da:db:2b:f6:d4:1c:cc:44:
c1:ed:51:bf:1a:b6:db:2d:fe:b8:1b:cf:a1:6e:3c:4a:e2:ce:
34:d1:28:60:5c:e8:b6:d6:17:48:d6:ae:90:1d:79:43:c9:e6:
c1:d7:9f:15:a0:6b:8f:c6:2a:de:3d:17:eb:48:e1:83:bf:61:
f7:e0:7d:a0:9c:14:22:c8:bc:71:fd:3c:f6:a9:ae:39:67:d7:
9d:90:6e:14:39:8c:e1:97:10:6b:04:a4:9e:a2:ab:05:47:81:
1f:0e:ae:b7:5b:35:c0:e1:f9:96:87:a8:f8:6d:65:1e:cf:b1:
70:65:a7:b3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZj+K2/1TKasj6Fw9u/8LjLQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2ZWQzYmE2OGM3OGJmZjJjNDcyNDQwMGFkZTYzNDg0ODJm
YjQzNjQwHhcNMjUwODMxMDMyODM2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZWZjZmVhY2UyNmI2ODc1ZTBiNmVhMWRiZWQ0MDUxZmY2YjRmYmQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSEfAdCU+Eh6c6S5DBMoKcrKphu1
pwHYNGhPz70ZOctmfFk+7wWFgsQqorCka0pHF6UtsI+PAIgv4QKaGFj8EbahD9PZ
qWToxfPTS+2+4w0ADfXTfsEPnOSc1Uewps4GOPk2abOOyadeaNzQB6dPrYrRRaHJ
2/P/nqoV4N1ZsmdO3vuAD7cZyH3j84lIuDhlSJ+qKIkjp2X3fwohCl72y53w9GRs
5oW7JMJnbvDTxRBDCZHxtD9poLUtga33B/xyNeoqGEpqXYlp+cD5Ay2UMdUn9xWy
RlzjvVlKFt+YoumA9jVL/VHao1ffHSyHHYwDesCrDWjuldGSXTeq1NzWwQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFN78/qzia2h14LbqHb7UBR/2tPvRMB8GA1UdIwQY
MBaAFGbtO6aMeL/yxHJEAK3mNISC+0NkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnUwN3BveDR2X0xFY2tRQXJlWTBoSUw3UTJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9iNzlhNjgtNWIwMi00MDk3LWEyZTMt
MGE0M2I3YTNlYjU0LzEvM3Z6LXJPSnJhSFhndHVvZHZ0UUZIX2EwLTlFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9iNzlhNjgtNWIwMi00MDk3LWEyZTMtMGE0M2I3YTNlYjU0
LzEvWnUwN3BveDR2X0xFY2tRQXJlWTBoSUw3UTJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueEYMA0G
CSqGSIb3DQEBCwUAA4IBAQC5qpSt515n89w4dI5oH4cFJ95kKjjQJZq1NTn3BFiE
KkivvCZg1aBgs3cjDul4jVC6/wF4bl7sGiyLPoc0cQQA4/ZgPOeieAe9Y+qfyQjL
nb+6lsYC3FLmRsnB2yavsxrjfnOXGkiz0yuLMAV+kF02ZSpkPk4p/J2Mu2FABmRE
jBy47krBd/C+2tsr9tQczETB7VG/GrbbLf64G8+hbjxK4s400ShgXOi21hdI1q6Q
HXlDyebB158VoGuPxirePRfrSOGDv2H34H2gnBQiyLxx/Tz2qa45Z9edkG4UOYzh
lxBrBKSeoqsFR4EfDq63WzXA4fmWh6j4bWUez7FwZaez
-----END CERTIFICATE-----
Generated at Tue Sep 9 17:12:21 2025 by rpki-client