Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/pSCaGLXGlax7z2vjoEE0UjZYWbM.roa
File: pSCaGLXGlax7z2vjoEE0UjZYWbM.roa (raw, json)
Hash identifier: eXhbppxZqfCZwYSdr6F8iGmyUze/vQihX+L1H+Bj6d4=
Subject key identifier: A5:20:9A:18:B5:C6:95:AC:7B:CF:6B:E3:A0:41:34:52:36:58:59:B3
Certificate issuer: /CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Certificate serial: 0197C4D0F6EEB094D5BC3E4389CDFD77616F
Authority key identifier: B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/pSCaGLXGlax7z2vjoEE0UjZYWbM.roa
Signing time: Tue 01 Jul 2025 07:08:38 +0000
ROA not before: Tue 01 Jul 2025 07:08:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201808
IP address blocks: 185.50.128.0/22 maxlen: 22
185.240.156.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Jul 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c4:d0:f6:ee:b0:94:d5:bc:3e:43:89:cd:fd:77:61:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Validity
Not Before: Jul 1 07:08:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a5209a18b5c695ac7bcf6be3a0413452365859b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:0e:4c:0c:96:43:cb:62:48:87:e1:95:d2:46:
58:a6:29:f2:d6:e2:85:78:ea:1a:b8:a8:76:9e:76:
6a:f9:0f:6a:fa:7c:7b:8a:4a:25:27:78:fa:81:c9:
d1:bb:49:ed:cc:0c:4d:80:63:e5:3e:7a:fa:ec:d1:
15:ef:c4:00:34:68:4a:89:d5:d2:c4:16:67:a5:32:
e9:f8:bf:8d:d2:e4:7e:67:a9:7d:51:32:9e:f8:18:
a5:3c:58:7c:96:13:85:95:62:2a:e8:55:84:c7:8e:
22:c2:ac:b6:09:6c:ef:aa:2e:b0:5c:c8:48:a9:15:
a3:56:ef:73:63:63:5b:33:11:d2:95:48:ea:e1:7a:
65:09:d8:5d:38:26:6d:a6:90:43:62:3a:50:c4:24:
31:be:31:92:3b:a7:d3:ae:d3:14:51:7b:3f:84:96:
0e:02:fb:46:56:53:de:2c:20:b1:eb:5e:25:f3:dd:
11:1b:f1:ba:54:9b:7b:7f:a7:59:4f:09:19:1a:54:
8a:9b:4c:f3:8f:4d:dc:1c:eb:26:8a:3b:4f:13:20:
cd:43:e8:f1:0b:9f:3b:fe:33:98:ca:29:c7:cc:be:
98:0f:a9:1e:3f:7f:0a:70:c2:a4:ae:ef:d9:df:a4:
11:cc:02:bf:22:84:59:d2:d7:d1:db:97:41:d7:02:
90:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:20:9A:18:B5:C6:95:AC:7B:CF:6B:E3:A0:41:34:52:36:58:59:B3
X509v3 Authority Key Identifier:
keyid:B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/pSCaGLXGlax7z2vjoEE0UjZYWbM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.50.128.0/22
185.240.156.0/22
Signature Algorithm: sha256WithRSAEncryption
79:e7:f2:44:e5:5e:5d:4b:34:a4:dc:42:03:1d:78:ef:6b:80:
95:aa:67:20:0e:08:b8:ec:6d:10:2c:2c:b0:79:b9:8c:d7:97:
1a:2c:ec:ab:a3:d6:b6:52:26:1e:cd:31:36:18:37:33:76:92:
00:aa:66:78:0c:b9:57:c0:0d:9f:04:1d:06:e9:47:f5:1f:e5:
d7:3c:95:fe:94:7a:f8:ec:51:87:44:6e:9c:c6:e4:57:cd:e0:
77:d8:56:14:64:a3:67:e2:bc:13:03:bf:8a:be:1c:40:6d:b1:
91:3e:bb:34:5f:a7:bc:1b:87:f4:ef:30:7a:08:c9:f6:be:07:
93:fd:26:2e:b1:0f:26:b6:0a:1d:f5:84:79:7b:bf:82:6b:4b:
a0:d6:52:5f:cf:0f:b0:4e:8e:11:84:21:1d:d4:6e:7e:3d:2f:
b3:96:a8:b9:5e:4a:d3:1d:90:14:01:c6:bb:41:fe:c1:60:45:
fc:67:c1:bf:69:8c:13:d0:35:ad:28:5f:05:63:d5:5a:4d:36:
79:cf:1f:5d:6b:a3:e8:84:2b:af:6f:40:01:5c:61:a2:e0:2a:
b1:23:13:5b:4a:79:16:e6:fd:97:a3:fa:66:c9:01:2e:d6:ba:
79:bf:8d:36:f7:b2:90:5b:e3:5b:7f:57:28:9b:af:ce:7c:f1:
df:c2:29:ce
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZfE0PbusJTVvD5Dic39d2FvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzZDVlYzE1MTZlZTZkYzE5ZDFlNWMzOTk4Y2I3ZTdhNjQ2
ZjcxNWEwHhcNMjUwNzAxMDcwODM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNTIwOWExOGI1YzY5NWFjN2JjZjZiZTNhMDQxMzQ1MjM2NTg1OWIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2A5MDJZDy2JIh+GV0kZYpiny1uKF
eOoauKh2nnZq+Q9q+nx7ikolJ3j6gcnRu0ntzAxNgGPlPnr67NEV78QANGhKidXS
xBZnpTLp+L+N0uR+Z6l9UTKe+BilPFh8lhOFlWIq6FWEx44iwqy2CWzvqi6wXMhI
qRWjVu9zY2NbMxHSlUjq4XplCdhdOCZtppBDYjpQxCQxvjGSO6fTrtMUUXs/hJYO
AvtGVlPeLCCx614l890RG/G6VJt7f6dZTwkZGlSKm0zzj03cHOsmijtPEyDNQ+jx
C587/jOYyinHzL6YD6keP38KcMKkru/Z36QRzAK/IoRZ0tfR25dB1wKQAwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFKUgmhi1xpWse89r46BBNFI2WFmzMB8GA1UdIwQY
MBaAFLPV7BUW7m3BnR5cOZjLfnpkb3FaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczlYc0ZSYnViY0dkSGx3NW1NdC1lbVJ2Y1ZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8zYWQ3Y2MtM2MwOC00YjcyLTg3MGEt
NmMzMDVhNmRiYWI5LzEvcFNDYUdMWEdsYXg3ejJ2am9FRTBValpZV2JNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS8zYWQ3Y2MtM2MwOC00YjcyLTg3MGEtNmMzMDVhNmRiYWI5
LzEvczlYc0ZSYnViY0dkSGx3NW1NdC1lbVJ2Y1ZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuTKAAwQC
ufCcMA0GCSqGSIb3DQEBCwUAA4IBAQB55/JE5V5dSzSk3EIDHXjva4CVqmcgDgi4
7G0QLCywebmM15caLOyro9a2UiYezTE2GDczdpIAqmZ4DLlXwA2fBB0G6Uf1H+XX
PJX+lHr47FGHRG6cxuRXzeB32FYUZKNn4rwTA7+KvhxAbbGRPrs0X6e8G4f07zB6
CMn2vgeT/SYusQ8mtgod9YR5e7+Ca0ug1lJfzw+wTo4RhCEd1G5+PS+zlqi5XkrT
HZAUAca7Qf7BYEX8Z8G/aYwT0DWtKF8FY9VaTTZ5zx9da6PohCuvb0ABXGGi4Cqx
IxNbSnkW5v2Xo/pmyQEu1rp5v40297KQW+Nbf1com6/OfPHfwinO
-----END CERTIFICATE-----
Generated at Mon Jul 7 03:15:09 2025 by rpki-client