Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/RiMwGbPrm_L1LidMsvJ8voS6M60.roa
File: RiMwGbPrm_L1LidMsvJ8voS6M60.roa (raw, json)
Hash identifier: xp9FwNHuzzV7xrCZm+NNv9EPLDvklH1UWqVrGuKdATs=
Subject key identifier: 46:23:30:19:B3:EB:9B:F2:F5:2E:27:4C:B2:F2:7C:BE:84:BA:33:AD
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 01990ED5CEA9A406BDB9A174A904A7C349B5
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/RiMwGbPrm_L1LidMsvJ8voS6M60.roa
Signing time: Wed 03 Sep 2025 09:08:37 +0000
ROA not before: Wed 03 Sep 2025 09:08:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61390
IP address blocks: 92.38.33.0/24 maxlen: 24
93.170.108.0/22 maxlen: 24
93.170.180.0/22 maxlen: 24
93.170.232.0/22 maxlen: 24
93.171.40.0/22 maxlen: 24
93.171.182.0/23 maxlen: 24
95.46.116.0/22 maxlen: 24
146.120.48.0/22 maxlen: 24
146.120.120.0/22 maxlen: 24
146.120.236.0/22 maxlen: 24
146.120.252.0/22 maxlen: 24
146.158.60.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:0e:d5:ce:a9:a4:06:bd:b9:a1:74:a9:04:a7:c3:49:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Sep 3 09:08:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=46233019b3eb9bf2f52e274cb2f27cbe84ba33ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:85:f4:84:fe:ce:1b:15:3c:0a:48:c7:34:26:
e8:fe:a7:ec:a1:e1:bd:52:5d:dc:a5:b2:22:3b:73:
d6:24:19:b4:63:13:e6:c2:35:8d:63:6b:b1:ea:63:
51:16:0d:23:19:42:ed:69:ef:13:f9:29:93:76:42:
b4:5c:f5:12:4e:42:7e:66:e0:47:70:e4:3a:e5:67:
96:79:7c:6c:69:98:bd:29:dc:cb:48:7e:7a:db:f6:
4f:c8:bd:65:75:62:0e:b3:ab:aa:c7:69:ee:f1:d7:
73:8a:b7:55:8c:f6:87:3e:06:14:67:d0:a3:e6:cf:
ec:fd:c9:66:79:d1:c1:99:00:71:df:9c:d7:55:60:
ce:fa:fd:65:3c:0b:a3:83:a4:4b:53:02:33:dd:26:
27:85:5a:0a:15:e2:22:82:a7:5b:ca:62:d6:a6:7a:
54:d7:2a:5c:78:bf:c1:65:7b:df:e9:7a:23:ff:97:
dd:de:f8:0d:cb:0e:05:b0:5e:4e:31:52:a7:b2:2e:
86:a1:8d:ff:db:1e:88:fb:85:38:3b:49:7a:2c:bf:
13:3d:25:97:cf:68:cd:a4:dc:04:06:1f:ef:40:76:
72:b9:e2:da:b1:83:4f:33:48:a3:1d:9a:a9:07:1c:
2f:7e:e1:92:06:4f:7e:37:3b:0c:6b:f4:0a:47:4a:
ba:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:23:30:19:B3:EB:9B:F2:F5:2E:27:4C:B2:F2:7C:BE:84:BA:33:AD
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/RiMwGbPrm_L1LidMsvJ8voS6M60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.38.33.0/24
93.170.108.0/22
93.170.180.0/22
93.170.232.0/22
93.171.40.0/22
93.171.182.0/23
95.46.116.0/22
146.120.48.0/22
146.120.120.0/22
146.120.236.0/22
146.120.252.0/22
146.158.60.0/22
Signature Algorithm: sha256WithRSAEncryption
a5:e4:21:d2:07:fa:3f:cb:f1:5a:02:5a:47:50:67:c1:f8:de:
c4:e2:c9:f5:04:61:9f:be:df:7e:36:29:2b:f3:98:26:7d:32:
2c:dd:9b:de:d1:1c:c8:ee:ca:e4:e6:b5:23:a5:46:5f:71:ba:
89:1b:6a:89:40:1c:d3:ad:81:6f:4c:8c:59:c3:e6:88:c6:76:
c7:6e:6f:5e:80:07:ef:6a:09:6e:c5:e5:15:fc:da:ce:8b:6f:
86:b6:8d:91:e8:65:c5:dd:03:32:c1:8f:6d:27:4c:33:22:6e:
51:34:b3:5d:79:d2:67:b0:70:57:4f:79:c4:2d:f6:50:43:7c:
78:21:d0:95:51:e5:d2:15:8a:ff:39:32:41:b2:06:d0:eb:96:
05:3e:30:5b:c3:34:80:41:87:1c:45:31:fb:27:57:5e:b3:31:
e4:ef:0b:1a:84:9e:5b:34:a6:9f:02:eb:42:65:fe:5b:e8:8d:
da:a7:1d:cd:b4:c4:56:82:c6:ff:b2:83:e6:2c:eb:0a:00:8b:
75:8e:60:51:a9:37:62:da:e1:9c:52:9b:91:e1:f5:1b:0e:82:
da:a1:a2:9d:07:c9:e7:b3:c7:1b:9c:21:26:34:be:25:fc:7b:
5b:06:41:e2:9d:75:80:0b:3c:7d:6f:0c:02:b4:5d:66:90:2c:
f0:9f:74:38
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgISAZkO1c6ppAa9uaF0qQSnw0m1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjUwOTAzMDkwODM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NjIzMzAxOWIzZWI5YmYyZjUyZTI3NGNiMmYyN2NiZTg0YmEzM2FkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4X0hP7OGxU8CkjHNCbo/qfsoeG9
Ul3cpbIiO3PWJBm0YxPmwjWNY2ux6mNRFg0jGULtae8T+SmTdkK0XPUSTkJ+ZuBH
cOQ65WeWeXxsaZi9KdzLSH562/ZPyL1ldWIOs6uqx2nu8ddzirdVjPaHPgYUZ9Cj
5s/s/clmedHBmQBx35zXVWDO+v1lPAujg6RLUwIz3SYnhVoKFeIigqdbymLWpnpU
1ypceL/BZXvf6Xoj/5fd3vgNyw4FsF5OMVKnsi6GoY3/2x6I+4U4O0l6LL8TPSWX
z2jNpNwEBh/vQHZyueLasYNPM0ijHZqpBxwvfuGSBk9+NzsMa/QKR0q6JQIDAQAB
o4ICSzCCAkcwHQYDVR0OBBYEFEYjMBmz65vy9S4nTLLyfL6EujOtMB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEvUmlNd0diUHJtX0wxTGlkTXN2Sjh2b1M2TTYwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGEGCCsGAQUFBwEHAQH/BFIwUDBOBAIAATBIAwQAXCYhAwQC
XapsAwQCXaq0AwQCXaroAwQCXasoAwQBXau2AwQCXy50AwQCkngwAwQCknh4AwQC
knjsAwQCknj8AwQCkp48MA0GCSqGSIb3DQEBCwUAA4IBAQCl5CHSB/o/y/FaAlpH
UGfB+N7E4sn1BGGfvt9+Nikr85gmfTIs3Zve0RzI7srk5rUjpUZfcbqJG2qJQBzT
rYFvTIxZw+aIxnbHbm9egAfvagluxeUV/NrOi2+Gto2R6GXF3QMywY9tJ0wzIm5R
NLNdedJnsHBXT3nELfZQQ3x4IdCVUeXSFYr/OTJBsgbQ65YFPjBbwzSAQYccRTH7
J1deszHk7wsahJ5bNKafAutCZf5b6I3apx3NtMRWgsb/soPmLOsKAIt1jmBRqTdi
2uGcUpuR4fUbDoLaoaKdB8nns8cbnCEmNL4l/HtbBkHinXWACzx9bwwCtF1mkCzw
n3Q4
-----END CERTIFICATE-----
Generated at Sun Sep 7 14:56:19 2025 by rpki-client