Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/8mwNU1i4lM5hitrjlT4PAmRauC4.roa
File: 8mwNU1i4lM5hitrjlT4PAmRauC4.roa (raw, json)
Hash identifier: mmdt7TTsWwzK1S0TSsT8EAz05GFjK/2/oKFtz4huHOo=
Subject key identifier: F2:6C:0D:53:58:B8:94:CE:61:8A:DA:E3:95:3E:0F:02:64:5A:B8:2E
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019A31FFDD8FE8E63DDB97E2845BF92B6BF3
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/8mwNU1i4lM5hitrjlT4PAmRauC4.roa
Signing time: Wed 29 Oct 2025 22:04:03 +0000
ROA not before: Wed 29 Oct 2025 22:04:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214929
IP address blocks: 94.249.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:31:ff:dd:8f:e8:e6:3d:db:97:e2:84:5b:f9:2b:6b:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 29 22:04:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f26c0d5358b894ce618adae3953e0f02645ab82e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:39:d2:9b:b3:d4:53:65:9e:b2:f8:f8:68:80:
bf:a4:6f:89:25:50:f0:03:13:57:ce:4e:b2:a1:75:
3d:ec:9b:6e:82:19:c6:35:c0:b4:7a:55:90:f2:28:
9c:37:b2:92:a4:74:8c:8b:1c:01:93:73:da:7d:52:
fa:4d:b9:88:fe:6c:d5:d5:b3:73:7c:34:33:43:df:
3c:b6:74:aa:03:4f:58:34:82:0e:dd:8b:cd:a7:ee:
f6:e2:19:e0:8a:3a:53:ae:6c:12:eb:45:db:7c:e3:
70:22:f2:c3:57:dd:b4:48:6b:4d:be:cf:22:0e:80:
e8:a2:18:ef:e1:4b:46:c9:b1:97:fd:a7:ff:c7:c1:
92:5f:6b:64:67:43:2d:ae:2e:7d:c0:5a:36:a4:1c:
53:4f:98:c0:7e:54:7c:a5:f6:8b:f8:6e:81:8b:28:
cd:59:b2:03:d5:78:47:49:9b:34:b8:7e:14:8b:75:
d4:6d:8a:b6:3b:69:11:b5:6f:68:59:68:a5:6c:36:
76:08:eb:94:0f:39:ff:c7:27:54:72:ae:be:ea:f0:
f0:1a:b5:f0:2c:1c:1b:2d:4d:4f:2d:3c:bc:4e:02:
76:c4:96:e2:66:c2:6b:a2:48:cf:2e:f0:90:86:1f:
f6:65:ef:99:19:7b:e0:8d:9a:96:b8:f8:9b:6a:6a:
8b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:6C:0D:53:58:B8:94:CE:61:8A:DA:E3:95:3E:0F:02:64:5A:B8:2E
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/8mwNU1i4lM5hitrjlT4PAmRauC4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.249.228.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:9e:fe:0d:3a:6b:22:74:38:f3:ea:a8:79:c4:72:0c:84:4a:
60:d5:2f:8e:58:6e:28:ef:84:80:4f:23:34:c7:1c:95:74:59:
5f:54:ec:18:90:95:35:ef:09:a3:c1:c1:2c:54:05:3a:a6:47:
93:d7:b1:3c:e9:d5:84:58:70:fb:be:34:b0:2f:a6:03:ad:39:
49:e0:55:07:4c:bc:de:67:33:7f:61:86:a7:d7:cf:2b:d0:e7:
50:7b:96:52:02:e0:2e:a5:d8:00:51:e1:70:70:d2:47:24:9c:
0a:13:92:97:36:3e:c9:74:7f:aa:fe:4f:08:0c:a4:62:1c:72:
44:f6:a5:e1:8a:c0:b1:cd:3c:31:99:ae:8f:f7:22:5c:bd:19:
f3:a7:f8:6a:ef:66:c8:93:f2:d1:ba:a1:a2:4a:84:bb:30:e8:
28:83:93:75:91:ff:41:c5:15:b4:c5:61:a0:c8:0b:9c:b5:d7:
7d:eb:b7:97:71:ed:b5:5d:a1:48:d1:e5:f6:09:ab:09:0d:2c:
4c:57:34:9d:67:d1:a8:48:1a:40:55:93:71:77:fc:e7:33:93:
bf:b7:0a:06:41:e7:47:4b:0a:23:24:c0:b9:46:7f:51:83:8c:
b3:3f:2a:b0:b3:a1:a8:58:2f:72:22:01:25:bd:6a:3e:50:1e:
09:9d:90:89
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZox/92P6OY925fihFv5K2vzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjUxMDI5MjIwNDAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMjZjMGQ1MzU4Yjg5NGNlNjE4YWRhZTM5NTNlMGYwMjY0NWFiODJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0TnSm7PUU2Wesvj4aIC/pG+JJVDw
AxNXzk6yoXU97JtughnGNcC0elWQ8iicN7KSpHSMixwBk3PafVL6TbmI/mzV1bNz
fDQzQ988tnSqA09YNIIO3YvNp+724hngijpTrmwS60XbfONwIvLDV920SGtNvs8i
DoDoohjv4UtGybGX/af/x8GSX2tkZ0Mtri59wFo2pBxTT5jAflR8pfaL+G6BiyjN
WbID1XhHSZs0uH4Ui3XUbYq2O2kRtW9oWWilbDZ2COuUDzn/xydUcq6+6vDwGrXw
LBwbLU1PLTy8TgJ2xJbiZsJrokjPLvCQhh/2Ze+ZGXvgjZqWuPibamqLDwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPJsDVNYuJTOYYra45U+DwJkWrguMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvOG13TlUxaTRsTTVoaXRyamxUNFBBbVJhdUM0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXvnkMA0G
CSqGSIb3DQEBCwUAA4IBAQChnv4NOmsidDjz6qh5xHIMhEpg1S+OWG4o74SATyM0
xxyVdFlfVOwYkJU17wmjwcEsVAU6pkeT17E86dWEWHD7vjSwL6YDrTlJ4FUHTLze
ZzN/YYan188r0OdQe5ZSAuAupdgAUeFwcNJHJJwKE5KXNj7JdH+q/k8IDKRiHHJE
9qXhisCxzTwxma6P9yJcvRnzp/hq72bIk/LRuqGiSoS7MOgog5N1kf9BxRW0xWGg
yAuctdd967eXce21XaFI0eX2CasJDSxMVzSdZ9GoSBpAVZNxd/znM5O/twoGQedH
SwojJMC5Rn9Rg4yzPyqws6GoWC9yIgElvWo+UB4JnZCJ
-----END CERTIFICATE-----
Generated at Wed Nov 5 03:21:57 2025 by rpki-client