Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/PJ1yV8M0M_WmDpE4nv94gh-bVq8.roa
File: PJ1yV8M0M_WmDpE4nv94gh-bVq8.roa (raw, json)
Hash identifier: rdzz6UnVTWqNzPbIakK6LYUl7wgnXrmEmyVL5JSzUK4=
Subject key identifier: 3C:9D:72:57:C3:34:33:F5:A6:0E:91:38:9E:FF:78:82:1F:9B:56:AF
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019904D08493046006ABC7197FF93E36BD81
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/PJ1yV8M0M_WmDpE4nv94gh-bVq8.roa
Signing time: Mon 01 Sep 2025 10:26:38 +0000
ROA not before: Mon 01 Sep 2025 10:26:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210542
IP address blocks: 82.152.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 17:17:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:04:d0:84:93:04:60:06:ab:c7:19:7f:f9:3e:36:bd:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Sep 1 10:26:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3c9d7257c33433f5a60e91389eff78821f9b56af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:33:7e:4d:70:d8:5d:fa:de:2e:87:a9:aa:fe:
22:59:10:dd:25:76:48:09:fe:1b:5a:87:ff:4e:6b:
7a:ed:3b:4f:36:3e:fc:b4:b4:03:33:91:d2:36:ac:
87:29:f8:92:53:4d:88:3b:b4:a4:dc:bf:1c:f1:ad:
7b:26:8d:09:e1:09:19:78:f8:1d:80:1f:2c:b8:98:
65:5f:d9:e4:e8:3b:bd:ac:00:98:ed:ee:0a:8c:68:
83:52:7a:85:95:7c:69:b3:d7:3a:5f:df:47:54:57:
e8:62:45:f8:16:94:db:7c:60:2b:46:c6:ad:1e:9d:
d5:71:53:2d:39:d5:0b:8e:5d:16:e6:e9:23:99:f2:
94:83:d1:8e:86:6b:0b:ce:0e:f8:3c:59:13:2a:f8:
df:c6:ee:80:08:d2:87:aa:7e:ae:c0:f4:5f:64:80:
b7:80:bd:94:e5:37:31:7a:3d:5d:18:7b:70:02:4b:
8f:77:f6:bb:a9:03:6f:09:3f:c4:ee:d5:19:fb:f5:
4c:0a:68:00:72:d3:78:aa:a8:e2:db:ab:41:15:8c:
ad:a7:f7:6a:a5:c7:04:d8:fc:a9:ed:23:24:26:a7:
73:33:28:59:be:69:e4:65:68:67:70:48:ec:a7:32:
79:e1:bb:71:bc:5b:7c:bd:4e:fa:74:2a:78:c1:2c:
3a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:9D:72:57:C3:34:33:F5:A6:0E:91:38:9E:FF:78:82:1F:9B:56:AF
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/PJ1yV8M0M_WmDpE4nv94gh-bVq8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.49.0/24
Signature Algorithm: sha256WithRSAEncryption
08:0b:91:eb:9c:f9:d8:b3:af:99:be:f0:b3:20:3b:cd:94:d0:
f1:b0:fb:84:c7:4b:02:41:f6:33:a3:06:c3:1c:eb:e8:f3:fb:
37:0b:3b:90:7c:98:75:12:8d:f7:08:8f:db:e8:8b:ba:ef:98:
7c:9c:02:84:2c:bf:19:19:91:99:49:d9:1f:a1:13:b6:24:4b:
5c:bb:e0:a6:25:8e:27:ed:70:11:6d:e2:39:bd:d7:f8:8e:89:
fd:28:87:9d:23:52:5a:26:70:d6:a9:bd:bf:85:d1:69:2e:f3:
04:1d:ee:a5:22:2d:04:c7:6f:f6:a4:09:f1:81:70:3c:88:23:
94:fd:8e:6a:fc:b9:22:b8:0e:f2:ca:c1:3e:3e:eb:a4:48:95:
ba:8b:63:4a:56:b3:41:27:31:69:31:83:bf:8c:03:35:29:13:
37:94:2e:22:18:de:13:d8:2a:1d:5c:4d:b5:94:31:84:cd:6e:
6d:32:f7:e7:2c:e4:d9:33:4c:a0:50:e4:9e:ed:57:6c:55:02:
0c:6a:89:50:29:c3:73:80:98:d4:6c:70:49:c7:75:66:3d:82:
d4:f7:e4:d3:77:41:67:e0:7f:02:f2:8e:23:8f:fb:ea:81:68:
6e:6d:d3:c8:f3:98:de:1e:7d:04:a4:fc:b5:b9:44:cf:1d:4e:
db:19:bc:2e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZkE0ISTBGAGq8cZf/k+Nr2BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjUwOTAxMTAyNjM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYzlkNzI1N2MzMzQzM2Y1YTYwZTkxMzg5ZWZmNzg4MjFmOWI1NmFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzN+TXDYXfreLoepqv4iWRDdJXZI
Cf4bWof/Tmt67TtPNj78tLQDM5HSNqyHKfiSU02IO7Sk3L8c8a17Jo0J4QkZePgd
gB8suJhlX9nk6Du9rACY7e4KjGiDUnqFlXxps9c6X99HVFfoYkX4FpTbfGArRsat
Hp3VcVMtOdULjl0W5ukjmfKUg9GOhmsLzg74PFkTKvjfxu6ACNKHqn6uwPRfZIC3
gL2U5Tcxej1dGHtwAkuPd/a7qQNvCT/E7tUZ+/VMCmgActN4qqji26tBFYytp/dq
pccE2Pyp7SMkJqdzMyhZvmnkZWhncEjspzJ54btxvFt8vU76dCp4wSw68wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDydclfDNDP1pg6ROJ7/eIIfm1avMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvUEoxeVY4TTBNX1dtRHBFNG52OTRnaC1iVnE4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUpgxMA0G
CSqGSIb3DQEBCwUAA4IBAQAIC5HrnPnYs6+ZvvCzIDvNlNDxsPuEx0sCQfYzowbD
HOvo8/s3CzuQfJh1Eo33CI/b6Iu675h8nAKELL8ZGZGZSdkfoRO2JEtcu+CmJY4n
7XARbeI5vdf4jon9KIedI1JaJnDWqb2/hdFpLvMEHe6lIi0Ex2/2pAnxgXA8iCOU
/Y5q/LkiuA7yysE+PuukSJW6i2NKVrNBJzFpMYO/jAM1KRM3lC4iGN4T2CodXE21
lDGEzW5tMvfnLOTZM0ygUOSe7VdsVQIMaolQKcNzgJjUbHBJx3VmPYLU9+TTd0Fn
4H8C8o4jj/vqgWhubdPI85jeHn0EpPy1uUTPHU7bGbwu
-----END CERTIFICATE-----
Generated at Sat Sep 6 02:33:25 2025 by rpki-client