Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/Pk-166nBqp2AnHZRjt3naSPZm_A.roa
File: Pk-166nBqp2AnHZRjt3naSPZm_A.roa (raw, json)
Hash identifier: vCXEEXcMS38HEhXquUN+5uxP1rLIYunBHbDrNhQYfIs=
Subject key identifier: 3E:4F:B5:EB:A9:C1:AA:9D:80:9C:76:51:8E:DD:E7:69:23:D9:9B:F0
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 0198E00C60706FD14C446E900DC59DBE4B12
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/Pk-166nBqp2AnHZRjt3naSPZm_A.roa
Signing time: Mon 25 Aug 2025 07:06:04 +0000
ROA not before: Mon 25 Aug 2025 07:06:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213918
IP address blocks: 195.114.201.0/24 maxlen: 24
213.220.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e0:0c:60:70:6f:d1:4c:44:6e:90:0d:c5:9d:be:4b:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Aug 25 07:06:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3e4fb5eba9c1aa9d809c76518edde76923d99bf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0e:53:f1:c8:7c:10:0b:d0:ee:fb:6f:c1:be:
0e:32:df:d2:e6:43:e9:3c:da:35:e3:d2:ce:1d:b5:
06:0b:9c:de:83:da:63:58:1c:6c:a5:65:51:83:37:
29:9c:f3:0a:71:04:0a:52:ce:bf:69:1f:1c:a9:58:
60:1d:7d:5a:8c:f6:cc:73:52:c8:58:89:bd:c0:aa:
e7:cc:62:a9:38:14:e4:49:01:b0:08:0f:b5:46:11:
3c:5b:77:a2:c5:84:f4:be:a6:c7:1f:45:a0:49:32:
c0:37:3f:d0:38:89:43:70:e1:12:71:a4:f7:53:32:
eb:0b:1d:5a:49:e4:2f:fe:22:c3:c5:01:4f:31:38:
06:45:37:2c:be:2c:a3:35:42:f8:6f:b9:16:59:4c:
28:81:9e:f7:d4:13:e5:f0:65:03:75:3d:aa:d8:bd:
ca:b6:00:22:ca:87:7e:95:95:da:24:10:47:41:4e:
94:c1:38:8f:c1:07:4a:a6:e5:b5:bc:26:eb:84:60:
fc:d9:01:d1:6a:2e:f2:9b:b9:31:83:b2:11:de:62:
cc:a8:fb:9f:d2:2b:d7:ca:a9:b4:94:16:5d:41:ff:
08:f3:41:0f:f8:97:d0:6d:98:d1:4f:0b:78:35:a4:
b0:14:de:42:a2:ee:38:36:e8:eb:32:94:e3:3e:79:
7c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:4F:B5:EB:A9:C1:AA:9D:80:9C:76:51:8E:DD:E7:69:23:D9:9B:F0
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/Pk-166nBqp2AnHZRjt3naSPZm_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.114.201.0/24
213.220.62.0/24
Signature Algorithm: sha256WithRSAEncryption
54:63:86:62:ee:e9:7f:ac:23:35:6a:16:13:c6:5a:a0:3f:9b:
5d:96:34:b4:ac:9f:d2:f2:70:66:1f:b6:b3:cd:d0:49:eb:99:
37:56:c1:ef:2e:ac:e0:f3:a3:75:6d:48:36:c2:e2:0f:bc:80:
3f:2f:e5:cf:99:44:02:30:17:0f:97:5e:09:44:a7:a1:d1:8e:
86:5c:68:31:33:45:a8:77:28:d3:9e:f4:30:b7:af:29:40:21:
c4:f1:e7:9e:00:89:d1:b4:d0:23:ba:19:94:56:66:1c:be:63:
00:7c:8d:63:7c:26:1a:45:7b:80:66:71:d4:c9:bd:5a:89:05:
02:2b:f8:36:74:38:14:e7:63:ae:bc:cf:c3:d2:0f:76:32:c9:
28:58:c2:c0:c9:6c:ed:a7:21:7c:09:b6:48:9c:da:a9:6f:76:
50:ad:fe:c3:6c:dd:de:48:d4:a3:d9:73:e9:52:43:1b:c5:fe:
cc:0a:2b:06:6b:82:08:c4:b7:1a:a7:c7:71:47:60:62:13:95:
df:4f:20:fb:ea:46:f4:48:10:dd:c9:ab:ed:ce:ad:69:3a:e0:
0a:32:49:d9:e3:6e:7e:6a:b0:f7:cb:b2:4d:b2:4e:5d:b4:85:
6a:43:33:fa:e2:21:c4:8f:29:ea:4c:63:1d:81:59:b9:07:1f:
fc:74:fe:a7
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZjgDGBwb9FMRG6QDcWdvksSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2NzFkY2M3YTlhYzczNTFjNzFlMGJjMjI3OGNmNDVmZDAy
MGFlMmUwHhcNMjUwODI1MDcwNjA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZTRmYjVlYmE5YzFhYTlkODA5Yzc2NTE4ZWRkZTc2OTIzZDk5YmYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAog5T8ch8EAvQ7vtvwb4OMt/S5kPp
PNo149LOHbUGC5zeg9pjWBxspWVRgzcpnPMKcQQKUs6/aR8cqVhgHX1ajPbMc1LI
WIm9wKrnzGKpOBTkSQGwCA+1RhE8W3eixYT0vqbHH0WgSTLANz/QOIlDcOEScaT3
UzLrCx1aSeQv/iLDxQFPMTgGRTcsviyjNUL4b7kWWUwogZ731BPl8GUDdT2q2L3K
tgAiyod+lZXaJBBHQU6UwTiPwQdKpuW1vCbrhGD82QHRai7ym7kxg7IR3mLMqPuf
0ivXyqm0lBZdQf8I80EP+JfQbZjRTwt4NaSwFN5Cou44NujrMpTjPnl83QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFD5PteupwaqdgJx2UY7d52kj2ZvwMB8GA1UdIwQY
MBaAFAZx3MeprHNRxx4LwieM9F/QIK4uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGIt
MWRkZWM0Y2NlMjRjLzEvUGstMTY2bkJxcDJBbkhaUmp0M25hU1BabV9BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGItMWRkZWM0Y2NlMjRj
LzEvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAw3LJAwQA
1dw+MA0GCSqGSIb3DQEBCwUAA4IBAQBUY4Zi7ul/rCM1ahYTxlqgP5tdljS0rJ/S
8nBmH7azzdBJ65k3VsHvLqzg86N1bUg2wuIPvIA/L+XPmUQCMBcPl14JRKeh0Y6G
XGgxM0WodyjTnvQwt68pQCHE8eeeAInRtNAjuhmUVmYcvmMAfI1jfCYaRXuAZnHU
yb1aiQUCK/g2dDgU52OuvM/D0g92MskoWMLAyWztpyF8CbZInNqpb3ZQrf7DbN3e
SNSj2XPpUkMbxf7MCisGa4IIxLcap8dxR2BiE5XfTyD76kb0SBDdyavtzq1pOuAK
MknZ425+arD3y7JNsk5dtIVqQzP64iHEjynqTGMdgVm5Bx/8dP6n
-----END CERTIFICATE-----
Generated at Sun Sep 7 13:13:25 2025 by rpki-client