Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/1ot1wVgNKiy7f5Q_KkgWwxcupPY.roa
File: 1ot1wVgNKiy7f5Q_KkgWwxcupPY.roa (raw, json)
Hash identifier: 2fsytBZtTQTbZFR7ZidVszEXUsogQ1cJFGtkdnwnKT8=
Subject key identifier: D6:8B:75:C1:58:0D:2A:2C:BB:7F:94:3F:2A:48:16:C3:17:2E:A4:F6
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019888C9D647BFD3E11B764CE52F408BF2E3
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/1ot1wVgNKiy7f5Q_KkgWwxcupPY.roa
Signing time: Fri 08 Aug 2025 08:26:25 +0000
ROA not before: Fri 08 Aug 2025 08:26:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42831
IP address blocks: 82.152.110.0/24 maxlen: 24
82.153.66.0/24 maxlen: 24
109.176.165.0/24 maxlen: 24
213.218.213.0/24 maxlen: 24
213.218.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 14:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:88:c9:d6:47:bf:d3:e1:1b:76:4c:e5:2f:40:8b:f2:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Aug 8 08:26:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d68b75c1580d2a2cbb7f943f2a4816c3172ea4f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:56:21:1b:3d:7c:02:8a:d0:0f:5a:a2:0f:c1:
af:6e:15:3e:5e:f5:af:19:33:74:cd:e7:29:40:67:
47:26:b4:ab:61:5a:d2:51:d9:c0:fc:92:6b:6f:de:
34:62:00:01:15:7a:18:9d:e8:cc:14:a3:53:bb:99:
e6:45:57:e9:76:33:b8:f5:7c:55:c1:ba:82:01:82:
18:5a:9d:46:ba:49:30:dc:be:c8:8d:c6:5f:61:54:
43:b1:c3:d4:05:9b:f4:76:8b:c8:16:b4:ce:cc:dc:
06:4e:10:3a:d4:a4:34:ae:e0:0d:de:5d:19:4b:a0:
df:e0:7f:08:52:48:dd:0c:8b:7d:ac:1f:69:83:c2:
cf:a4:a1:68:b4:b3:50:92:4d:9b:3b:99:d6:04:e8:
6b:18:69:8c:cd:2d:5d:6b:8e:f1:17:a5:6d:41:48:
22:a7:e6:e5:af:93:64:f3:b5:95:66:ca:bf:7e:86:
36:63:7e:c2:da:b5:c3:0f:09:ec:a0:88:cb:eb:69:
c9:ac:93:91:ed:c8:d1:24:6a:bc:dd:f1:62:f8:97:
6d:8d:a4:96:2a:b2:58:da:5a:a2:ed:c7:22:3b:60:
c0:63:ad:5e:96:20:b1:61:e0:a4:02:d1:9a:a6:f8:
38:c3:02:ac:36:8f:4b:37:ff:24:15:5b:b6:91:00:
7b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:8B:75:C1:58:0D:2A:2C:BB:7F:94:3F:2A:48:16:C3:17:2E:A4:F6
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/1ot1wVgNKiy7f5Q_KkgWwxcupPY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.110.0/24
82.153.66.0/24
109.176.165.0/24
213.218.213.0/24
213.218.227.0/24
Signature Algorithm: sha256WithRSAEncryption
10:6b:d2:f2:60:b7:9d:3c:61:da:53:c6:1e:ba:86:3e:c1:a9:
1d:87:b1:f5:c8:e2:1f:5d:18:b7:3b:ef:0e:dd:e1:95:09:15:
02:61:9d:4e:d1:b5:87:5a:81:c4:51:f6:50:0e:2d:dd:64:17:
d7:53:15:a0:8d:eb:4d:8a:fb:1d:9e:e7:af:81:f7:94:0b:3a:
36:6e:fb:97:e4:ec:c3:1b:56:62:05:fc:e0:ac:99:49:cb:f8:
af:b2:c1:cb:1c:86:12:ff:9e:fc:1a:0f:11:03:1d:20:5e:23:
c7:b0:e9:0e:30:71:4a:b4:f8:83:2c:b9:f1:1f:d7:1c:64:9f:
db:a8:52:44:35:a9:eb:40:43:38:0b:b2:08:1e:c8:fc:c3:1e:
0b:8f:e1:34:54:80:55:c9:8b:41:a2:7b:66:3d:f6:59:c4:c3:
b9:0d:19:8e:06:67:22:d1:f0:0a:15:2e:da:94:72:b7:76:5e:
4a:f9:34:db:d0:e4:5e:31:da:2d:4b:38:37:c1:c3:ed:11:11:
fe:f1:0b:93:aa:12:d6:25:13:ab:e6:24:e2:29:7c:3e:4f:50:
bf:1c:44:fe:1e:00:0d:a8:ad:5a:09:db:98:16:0d:01:a3:4b:
a0:cc:81:d4:a0:21:e7:45:e6:17:6e:6b:b2:42:de:53:bf:5a:
23:e1:1c:4f
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZiIydZHv9PhG3ZM5S9Ai/LjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjUwODA4MDgyNjI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNjhiNzVjMTU4MGQyYTJjYmI3Zjk0M2YyYTQ4MTZjMzE3MmVhNGY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1YhGz18AorQD1qiD8GvbhU+XvWv
GTN0zecpQGdHJrSrYVrSUdnA/JJrb940YgABFXoYnejMFKNTu5nmRVfpdjO49XxV
wbqCAYIYWp1Gukkw3L7IjcZfYVRDscPUBZv0dovIFrTOzNwGThA61KQ0ruAN3l0Z
S6Df4H8IUkjdDIt9rB9pg8LPpKFotLNQkk2bO5nWBOhrGGmMzS1da47xF6VtQUgi
p+blr5Nk87WVZsq/foY2Y37C2rXDDwnsoIjL62nJrJOR7cjRJGq83fFi+JdtjaSW
KrJY2lqi7cciO2DAY61eliCxYeCkAtGapvg4wwKsNo9LN/8kFVu2kQB7vwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFNaLdcFYDSosu3+UPypIFsMXLqT2MB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvMW90MXdWZ05LaXk3ZjVRX0trZ1d3eGN1cFBZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAUphuAwQA
UplCAwQAbbClAwQA1drVAwQA1drjMA0GCSqGSIb3DQEBCwUAA4IBAQAQa9LyYLed
PGHaU8YeuoY+wakdh7H1yOIfXRi3O+8O3eGVCRUCYZ1O0bWHWoHEUfZQDi3dZBfX
UxWgjetNivsdnuevgfeUCzo2bvuX5OzDG1ZiBfzgrJlJy/ivssHLHIYS/578Gg8R
Ax0gXiPHsOkOMHFKtPiDLLnxH9ccZJ/bqFJENanrQEM4C7IIHsj8wx4Lj+E0VIBV
yYtBontmPfZZxMO5DRmOBmci0fAKFS7alHK3dl5K+TTb0OReMdotSzg3wcPtERH+
8QuTqhLWJROr5iTiKXw+T1C/HET+HgANqK1aCduYFg0Bo0ugzIHUoCHnReYXbmuy
Qt5Tv1oj4RxP
-----END CERTIFICATE-----
Generated at Wed Aug 20 19:41:34 2025 by rpki-client