Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/ow1d5QBs6gc3mppGo_vB6nOiC_g.roa
File: ow1d5QBs6gc3mppGo_vB6nOiC_g.roa (raw, json)
Hash identifier: 1hvz7U+aKNxUIPrahyAe4NoVaz2n90s2ejkYew54GjA=
Subject key identifier: A3:0D:5D:E5:00:6C:EA:07:37:9A:9A:46:A3:FB:C1:EA:73:A2:0B:F8
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019A177C254EA77FF95C0E65082E0D8324CF
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/ow1d5QBs6gc3mppGo_vB6nOiC_g.roa
Signing time: Fri 24 Oct 2025 18:30:03 +0000
ROA not before: Fri 24 Oct 2025 18:30:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199785
IP address blocks: 37.46.16.0/24 maxlen: 24
37.46.17.0/24 maxlen: 24
37.46.18.0/24 maxlen: 24
37.46.19.0/24 maxlen: 24
64.188.99.0/24 maxlen: 24
77.239.106.0/24 maxlen: 24
144.31.80.0/23 maxlen: 24
144.31.194.0/23 maxlen: 24
150.241.113.0/24 maxlen: 24
150.241.114.0/24 maxlen: 24
150.241.115.0/24 maxlen: 24
150.241.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Nov 2025 04:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:17:7c:25:4e:a7:7f:f9:5c:0e:65:08:2e:0d:83:24:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Oct 24 18:30:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a30d5de5006cea07379a9a46a3fbc1ea73a20bf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c8:fa:9c:dc:9b:6c:c8:70:26:c7:da:f8:af:
24:c9:2b:83:fb:a0:e2:08:ce:0a:c3:fc:a6:72:cd:
12:76:4f:d7:14:13:0e:98:2f:b5:09:a6:eb:ad:a1:
67:95:01:4a:cd:f6:fd:7f:22:4a:73:c1:c5:f4:b8:
82:f5:cb:4f:ed:4b:5e:36:cb:5e:6b:0b:98:9d:d2:
18:09:59:48:1d:40:b8:fe:4b:9c:6c:32:7b:91:e4:
6e:cc:f6:9a:96:69:32:00:9f:c8:0f:32:a2:f2:ce:
fa:96:b8:46:09:15:2d:06:96:e5:b8:4c:0a:e5:c0:
46:b7:61:43:c2:cd:2e:1b:b7:1d:84:d7:38:03:32:
7f:06:99:1b:6f:19:8d:a8:c3:f4:9a:67:db:b5:e7:
08:0b:64:6b:f0:21:bd:ff:cf:20:43:98:80:f9:4c:
f9:46:13:a6:e2:10:a8:22:77:a9:99:03:56:13:0f:
e9:67:81:17:a5:79:27:e0:2d:f1:e0:2e:30:44:98:
81:a5:18:1a:cd:66:52:52:06:41:20:18:8c:3f:c3:
3c:d7:9d:cc:5b:22:a2:1b:3e:d3:d7:84:83:9b:d4:
0f:aa:95:2e:92:31:5a:f3:a9:73:db:eb:20:cb:4b:
bf:ec:91:40:39:d6:9f:5c:21:c3:ba:c3:b5:09:6c:
8d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:0D:5D:E5:00:6C:EA:07:37:9A:9A:46:A3:FB:C1:EA:73:A2:0B:F8
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/ow1d5QBs6gc3mppGo_vB6nOiC_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.46.16.0/22
64.188.99.0/24
77.239.106.0/24
144.31.80.0/23
144.31.194.0/23
150.241.113.0-150.241.116.255
Signature Algorithm: sha256WithRSAEncryption
27:73:26:6f:a4:b5:09:e9:d6:3f:1c:5d:e4:4b:e2:a8:3d:8e:
9b:28:e6:56:56:c8:e4:13:f3:e5:e4:ac:f4:ad:92:ba:97:da:
d1:1a:e4:ec:84:b1:e6:7b:34:dd:3b:c0:36:d7:c7:ab:ca:c2:
7d:6f:97:ca:b9:4e:f7:8f:9b:16:8d:35:40:b5:3d:9a:49:0a:
5c:03:e2:d2:17:25:7e:b2:1c:44:c8:bc:3b:45:0f:e8:20:7f:
3c:33:33:46:cc:d0:23:de:be:40:08:f1:13:a9:d1:c0:33:64:
95:02:ff:ef:53:09:7d:f5:d3:55:b0:4f:25:a5:b4:01:c6:7e:
85:08:79:e4:a3:0b:c8:a0:ea:d6:b4:e0:e8:a0:0c:38:a5:eb:
38:a0:d8:22:0b:1c:f5:4a:a6:a0:6f:7e:a0:86:4d:2a:e8:b5:
1e:43:a7:3d:31:f0:b2:bc:1b:af:e6:8e:17:0a:54:04:fd:2a:
42:f7:66:86:e9:e7:30:e7:34:97:d9:e1:38:26:4c:5c:3d:b7:
b8:12:55:a3:70:a8:c5:60:c7:19:d1:83:07:6f:0d:48:bb:4d:
b3:84:c4:eb:b8:c3:ed:24:db:3c:df:57:e2:5d:0f:dc:7c:53:
ca:79:c0:1b:79:ba:6e:c8:b6:2a:ae:75:18:52:1c:05:f8:2a:
5a:90:f2:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 14:14:38 2025 by rpki-client