Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/C3gRuaVj7fum0MoPK0NSsfbFE0Y.roa
File: C3gRuaVj7fum0MoPK0NSsfbFE0Y.roa (raw, json)
Hash identifier: Go2aAnH28DxpRGibl8nPDIZhJhUoPLbPUoWeUBM5q+w=
Subject key identifier: 0B:78:11:B9:A5:63:ED:FB:A6:D0:CA:0F:2B:43:52:B1:F6:C5:13:46
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0198F61A053B2126105929FF81A03ADBE5BC
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/C3gRuaVj7fum0MoPK0NSsfbFE0Y.roa
Signing time: Fri 29 Aug 2025 13:52:37 +0000
ROA not before: Fri 29 Aug 2025 13:52:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137409
IP address blocks: 89.213.97.0/24 maxlen: 24
89.213.143.0/24 maxlen: 24
217.145.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 17:17:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:f6:1a:05:3b:21:26:10:59:29:ff:81:a0:3a:db:e5:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Aug 29 13:52:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0b7811b9a563edfba6d0ca0f2b4352b1f6c51346
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:3e:10:32:b5:4d:ad:0f:b3:c1:1b:cf:9e:e6:
3a:8b:08:82:31:64:cc:d1:85:fa:73:16:22:3c:9f:
31:64:37:da:f8:19:f9:50:ae:37:91:a9:2d:3d:d4:
46:e1:b1:cf:8b:e6:33:69:22:55:cf:92:3a:3e:b9:
90:09:40:ec:5a:05:2f:af:4e:9a:f3:cb:eb:7e:32:
9a:89:2f:53:40:08:a4:54:7e:95:97:a2:eb:44:6e:
43:94:f6:f5:5a:a1:94:07:e7:05:7b:eb:4c:5a:c7:
3e:7d:84:fa:59:71:7f:e5:d2:ec:ad:a2:7d:25:db:
53:c8:61:71:d0:9d:e5:bc:26:61:c6:6f:0d:96:3d:
c4:bd:fa:4f:02:ec:9e:75:d8:d8:b0:da:53:e0:f4:
96:97:8a:7b:94:74:fd:54:65:22:b5:1b:8f:46:f5:
33:57:a7:cc:78:91:7e:b9:13:de:3f:63:ae:d0:d7:
cd:23:b6:57:cc:ca:c9:7b:7e:a2:c1:de:40:c3:96:
3a:e9:ff:9f:3e:c3:35:9a:84:04:79:71:cb:ed:51:
a4:9b:06:f7:a2:95:f9:63:75:65:32:b5:a0:41:f7:
5d:73:54:55:fe:08:40:1d:5f:58:c5:cc:0a:a1:7a:
d6:38:de:7e:b7:fd:92:d0:ca:6e:ec:e3:b0:39:a3:
5f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:78:11:B9:A5:63:ED:FB:A6:D0:CA:0F:2B:43:52:B1:F6:C5:13:46
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/C3gRuaVj7fum0MoPK0NSsfbFE0Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.97.0/24
89.213.143.0/24
217.145.74.0/24
Signature Algorithm: sha256WithRSAEncryption
44:5f:3e:32:45:fa:87:f3:d5:c1:bc:53:f4:76:f4:b9:27:6f:
41:c7:aa:56:a8:06:cc:79:5c:c0:8e:ad:1f:fa:8a:47:1f:54:
81:42:ff:0c:6f:fb:48:e4:f8:e7:dc:2e:05:af:3b:94:dd:95:
d3:48:dc:ec:08:24:43:d2:38:4c:b9:9a:88:ad:76:fb:c9:aa:
74:97:12:31:64:e0:35:7b:89:fe:23:9a:8f:c1:85:d4:b7:b8:
aa:fe:63:f8:b8:56:7c:b8:87:24:7d:7e:88:73:f4:95:84:37:
7e:1f:74:e6:3f:71:54:46:03:4a:de:e0:c6:2f:97:99:4e:ff:
93:45:ba:b0:5c:dd:2d:77:73:ca:9a:71:de:57:b7:37:f0:c1:
8c:2d:19:35:ef:6a:4d:8c:6f:65:80:0a:05:95:b5:68:76:61:
e7:bf:90:de:00:f3:a7:ed:ae:bc:f5:81:60:62:88:87:b6:d9:
6f:a8:a0:44:3e:a3:50:65:20:ea:57:07:44:57:52:23:7c:17:
66:a6:89:70:e3:7e:9d:d1:0d:4b:a5:01:7c:a3:f0:47:c6:28:
d3:64:d9:44:de:77:30:d3:d9:b1:d3:bb:aa:56:2a:78:03:5b:
ec:cd:36:24:50:26:7c:dd:5b:39:53:cd:7d:c8:a9:9e:60:66:
39:29:b2:34
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZj2GgU7ISYQWSn/gaA62+W8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjUwODI5MTM1MjM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYjc4MTFiOWE1NjNlZGZiYTZkMGNhMGYyYjQzNTJiMWY2YzUxMzQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2z4QMrVNrQ+zwRvPnuY6iwiCMWTM
0YX6cxYiPJ8xZDfa+Bn5UK43kaktPdRG4bHPi+YzaSJVz5I6PrmQCUDsWgUvr06a
88vrfjKaiS9TQAikVH6Vl6LrRG5DlPb1WqGUB+cFe+tMWsc+fYT6WXF/5dLsraJ9
JdtTyGFx0J3lvCZhxm8Nlj3EvfpPAuyeddjYsNpT4PSWl4p7lHT9VGUitRuPRvUz
V6fMeJF+uRPeP2Ou0NfNI7ZXzMrJe36iwd5Aw5Y66f+fPsM1moQEeXHL7VGkmwb3
opX5Y3VlMrWgQfddc1RV/ghAHV9YxcwKoXrWON5+t/2S0Mpu7OOwOaNfFQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFAt4EbmlY+37ptDKDytDUrH2xRNGMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvQzNnUnVhVmo3ZnVtME1vUEswTlNzZmJGRTBZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAWdVhAwQA
WdWPAwQA2ZFKMA0GCSqGSIb3DQEBCwUAA4IBAQBEXz4yRfqH89XBvFP0dvS5J29B
x6pWqAbMeVzAjq0f+opHH1SBQv8Mb/tI5Pjn3C4FrzuU3ZXTSNzsCCRD0jhMuZqI
rXb7yap0lxIxZOA1e4n+I5qPwYXUt7iq/mP4uFZ8uIckfX6Ic/SVhDd+H3TmP3FU
RgNK3uDGL5eZTv+TRbqwXN0td3PKmnHeV7c38MGMLRk172pNjG9lgAoFlbVodmHn
v5DeAPOn7a689YFgYoiHttlvqKBEPqNQZSDqVwdEV1IjfBdmpolw436d0Q1LpQF8
o/BHxijTZNlE3ncw09mx07uqVip4A1vszTYkUCZ83Vs5U819yKmeYGY5KbI0
-----END CERTIFICATE-----
Generated at Sat Sep 6 02:52:54 2025 by rpki-client