Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/7wlcP1FFFOdwAsz1QSxq5bJgfN4.roa
File: 7wlcP1FFFOdwAsz1QSxq5bJgfN4.roa (raw, json)
Hash identifier: ffQpYZtgR4Vr+/sY+S2R5Fum6GmyiG07xjDVoihR2lM=
Subject key identifier: EF:09:5C:3F:51:45:14:E7:70:02:CC:F5:41:2C:6A:E5:B2:60:7C:DE
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01990FADD809CF31E2C67CB04BF9241B1D03
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/7wlcP1FFFOdwAsz1QSxq5bJgfN4.roa
Signing time: Wed 03 Sep 2025 13:04:34 +0000
ROA not before: Wed 03 Sep 2025 13:04:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216138
IP address blocks: 82.153.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:0f:ad:d8:09:cf:31:e2:c6:7c:b0:4b:f9:24:1b:1d:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Sep 3 13:04:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ef095c3f514514e77002ccf5412c6ae5b2607cde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b9:b9:75:1b:fe:d7:fd:2b:ff:ae:31:bc:8e:
68:81:e1:cb:fa:0d:e7:05:6f:c1:d8:1b:91:36:f0:
f3:cb:04:a4:3f:73:68:b3:c3:b3:1f:a3:0a:0e:66:
50:60:0a:b3:ee:ab:45:9b:cf:bb:08:b4:8f:70:ce:
a0:37:38:1f:7a:f3:35:74:f7:9a:f3:54:ed:68:94:
d5:8e:a7:6a:04:9f:8a:f6:3e:bc:a2:bc:48:94:63:
af:8b:f3:03:ea:bd:1d:cc:9d:34:2b:d3:7a:b8:4a:
d2:42:12:20:11:aa:84:3e:75:d1:fa:e6:5c:4f:01:
2a:d1:8c:1d:df:9d:e5:b8:ee:99:b9:8f:72:61:7c:
8b:2e:d2:86:49:5e:9a:15:7b:15:1d:cf:6b:5f:ed:
44:3f:37:c6:55:e9:cb:20:4b:19:e1:bc:9b:fa:d6:
c2:f8:56:2f:0f:28:cf:b7:35:0a:2a:62:67:a4:39:
94:9e:ae:d6:8b:d6:6f:6d:65:7d:07:a7:32:af:20:
61:7e:e9:c5:ae:5f:55:e9:40:89:77:16:14:40:88:
ea:13:92:8a:99:3a:42:5a:9f:6b:a1:09:f9:35:11:
65:a6:34:71:1b:d1:7b:47:ff:55:90:74:07:3d:1c:
7d:42:4c:36:69:70:15:9a:94:04:7f:7d:fd:29:7d:
0a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:09:5C:3F:51:45:14:E7:70:02:CC:F5:41:2C:6A:E5:B2:60:7C:DE
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/7wlcP1FFFOdwAsz1QSxq5bJgfN4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.212.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:85:c7:8a:3e:32:a4:71:2d:14:b5:8b:72:68:ca:82:4c:24:
30:ae:17:ba:85:8b:98:0c:87:69:33:2a:44:c0:eb:94:e9:0f:
5e:05:0b:53:19:d7:78:08:7f:01:b1:30:ea:4d:79:b6:aa:5b:
13:97:61:fd:1f:9f:ba:ac:f8:0f:01:60:db:b5:f0:fa:4a:ec:
7b:0a:c8:22:07:41:85:82:66:5a:ca:b9:6d:86:96:e7:63:27:
a2:fb:15:86:15:89:d0:1b:7c:11:47:6f:4c:bf:9c:83:aa:f0:
6a:86:fa:0f:66:01:bd:04:53:30:e6:01:a6:33:7f:7f:9a:99:
7c:e3:6b:fe:4e:a2:14:30:8f:55:3d:ff:86:5e:37:43:d2:9a:
8c:e0:36:22:9c:b9:87:81:ee:ac:b6:b0:4f:c4:d0:c4:7c:7f:
86:23:3e:91:e8:b5:06:5b:b0:2f:4d:5a:45:22:c9:af:fc:2f:
02:78:a2:a1:9a:54:22:96:f1:6f:87:71:ec:a7:56:d7:8b:86:
c6:e4:7a:9b:1f:f4:a9:ec:21:08:d5:0f:35:42:23:9c:53:13:
e6:19:f9:4a:4f:1b:15:64:24:58:2a:43:f5:87:89:24:e4:e1:
13:05:7e:52:21:6a:2a:55:cb:be:b1:74:94:e3:6c:85:7e:f5:
ca:f7:a9:24
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZkPrdgJzzHixnywS/kkGx0DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjUwOTAzMTMwNDM0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZjA5NWMzZjUxNDUxNGU3NzAwMmNjZjU0MTJjNmFlNWIyNjA3Y2RlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrm5dRv+1/0r/64xvI5ogeHL+g3n
BW/B2BuRNvDzywSkP3Nos8OzH6MKDmZQYAqz7qtFm8+7CLSPcM6gNzgfevM1dPea
81TtaJTVjqdqBJ+K9j68orxIlGOvi/MD6r0dzJ00K9N6uErSQhIgEaqEPnXR+uZc
TwEq0Ywd353luO6ZuY9yYXyLLtKGSV6aFXsVHc9rX+1EPzfGVenLIEsZ4byb+tbC
+FYvDyjPtzUKKmJnpDmUnq7Wi9ZvbWV9B6cyryBhfunFrl9V6UCJdxYUQIjqE5KK
mTpCWp9roQn5NRFlpjRxG9F7R/9VkHQHPRx9Qkw2aXAVmpQEf339KX0KnQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO8JXD9RRRTncALM9UEsauWyYHzeMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvN3dsY1AxRkZGT2R3QXN6MVFTeHE1YkpnZk40LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUpnUMA0G
CSqGSIb3DQEBCwUAA4IBAQCLhceKPjKkcS0UtYtyaMqCTCQwrhe6hYuYDIdpMypE
wOuU6Q9eBQtTGdd4CH8BsTDqTXm2qlsTl2H9H5+6rPgPAWDbtfD6Sux7CsgiB0GF
gmZayrlthpbnYyei+xWGFYnQG3wRR29Mv5yDqvBqhvoPZgG9BFMw5gGmM39/mpl8
42v+TqIUMI9VPf+GXjdD0pqM4DYinLmHge6strBPxNDEfH+GIz6R6LUGW7AvTVpF
Ismv/C8CeKKhmlQilvFvh3Hsp1bXi4bG5HqbH/Sp7CEI1Q81QiOcUxPmGflKTxsV
ZCRYKkP1h4kk5OETBX5SIWoqVcu+sXSU42yFfvXK96kk
-----END CERTIFICATE-----
Generated at Fri Sep 19 14:50:13 2025 by rpki-client