Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/82rx__POkVWVNw0J12FmyIq-pf4.roa
File: 82rx__POkVWVNw0J12FmyIq-pf4.roa (raw, json)
Hash identifier: rMg9L/E2lnfRWVlvzIdYmsVjJ/25R9PX/vLocHiT54A=
Subject key identifier: F3:6A:F1:FF:F3:CE:91:55:95:37:0D:09:D7:61:66:C8:8A:BE:A5:FE
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019A2A249DBCA52A448BC7CF40318FB43E33
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/82rx__POkVWVNw0J12FmyIq-pf4.roa
Signing time: Tue 28 Oct 2025 09:27:14 +0000
ROA not before: Tue 28 Oct 2025 09:27:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48266
IP address blocks: 81.5.191.0/24 maxlen: 24
82.152.177.0/24 maxlen: 24
82.153.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:24:9d:bc:a5:2a:44:8b:c7:cf:40:31:8f:b4:3e:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Oct 28 09:27:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f36af1fff3ce915595370d09d76166c88abea5fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:ea:f8:f6:e6:29:24:40:fe:09:80:ec:b3:50:
98:0a:0d:24:76:99:79:8a:1c:55:2e:03:5d:1e:88:
49:45:df:34:e4:af:d2:96:4f:be:76:51:87:83:75:
f0:1b:a5:90:db:52:cc:bf:ce:f8:68:21:3b:aa:32:
80:d8:03:97:e0:03:86:73:66:24:ab:71:f8:69:70:
91:33:ba:fc:4c:9e:51:f6:01:f7:27:a9:1d:66:a8:
0f:89:5d:f8:84:93:ae:13:cd:81:0d:45:ce:55:0e:
1d:ce:c8:95:51:59:29:86:a1:b7:ce:65:3a:bd:e6:
68:c2:f8:ad:0f:f2:cc:e6:00:34:15:81:70:63:cd:
b0:e2:5b:7c:d3:5c:b6:76:e1:8b:bf:d0:e4:64:ee:
88:8d:21:3c:86:c8:9c:50:fe:e1:24:a5:d7:97:ed:
ad:f5:68:e1:b8:40:07:c0:a9:e6:b2:33:84:f1:ee:
4c:c2:c9:dc:7b:21:a3:db:7d:1c:df:24:26:3c:11:
23:0a:41:f3:0b:5c:42:11:a5:7e:05:46:7d:6c:36:
e1:56:3a:5f:90:ce:fe:ab:b7:33:38:3c:c0:41:07:
6f:63:fb:7e:a3:c8:84:23:14:68:d0:f3:3c:a3:13:
16:e7:e0:ca:61:df:3b:1f:0b:d6:bc:15:16:4b:97:
ac:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:6A:F1:FF:F3:CE:91:55:95:37:0D:09:D7:61:66:C8:8A:BE:A5:FE
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/82rx__POkVWVNw0J12FmyIq-pf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.5.191.0/24
82.152.177.0/24
82.153.69.0/24
Signature Algorithm: sha256WithRSAEncryption
55:c0:35:7c:08:c7:b1:32:68:77:db:a0:d9:9d:e0:19:75:6c:
b2:5d:17:89:22:2c:47:43:90:7b:8a:6b:52:08:ab:3b:24:d5:
a8:b3:87:67:37:da:5f:30:4c:b9:73:a7:a3:cb:25:59:ed:0a:
3e:65:13:c7:67:08:f1:fe:52:75:f1:e7:8c:6c:73:39:29:8a:
7a:82:1b:f5:fc:d6:0b:51:a9:48:9c:34:61:b1:e6:58:a6:9d:
76:ef:c4:c9:9a:46:b9:a9:04:9a:f9:36:5f:07:9a:d9:31:8f:
bf:f7:75:36:1b:37:fa:47:18:e3:a3:99:95:4a:58:1b:ff:11:
24:12:5a:03:38:18:6b:53:bd:bf:be:df:96:dc:35:ec:47:d9:
2b:01:10:01:87:f5:ac:29:d1:c5:8f:44:5c:48:b9:c5:5b:27:
bf:62:83:57:b8:e3:f5:dd:c6:5e:6a:ee:a0:20:2a:df:37:d6:
cb:d4:81:fc:67:a4:5e:8f:73:5d:78:96:d1:fd:00:1a:5c:29:
da:dc:82:ef:85:14:b2:f1:c4:85:f3:be:a2:fd:15:fa:37:e7:
8c:9c:e5:1a:57:5d:3e:99:6f:01:3b:ed:ac:3c:74:88:cc:a5:
d7:85:ce:35:b1:c7:97:34:4d:1f:82:e2:43:44:44:b2:43:44:
bf:55:8c:a2
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZoqJJ28pSpEi8fPQDGPtD4zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjUxMDI4MDkyNzE0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMzZhZjFmZmYzY2U5MTU1OTUzNzBkMDlkNzYxNjZjODhhYmVhNWZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Or49uYpJED+CYDss1CYCg0kdpl5
ihxVLgNdHohJRd805K/Slk++dlGHg3XwG6WQ21LMv874aCE7qjKA2AOX4AOGc2Yk
q3H4aXCRM7r8TJ5R9gH3J6kdZqgPiV34hJOuE82BDUXOVQ4dzsiVUVkphqG3zmU6
veZowvitD/LM5gA0FYFwY82w4lt801y2duGLv9DkZO6IjSE8hsicUP7hJKXXl+2t
9WjhuEAHwKnmsjOE8e5MwsnceyGj230c3yQmPBEjCkHzC1xCEaV+BUZ9bDbhVjpf
kM7+q7czODzAQQdvY/t+o8iEIxRo0PM8oxMW5+DKYd87HwvWvBUWS5esOwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFPNq8f/zzpFVlTcNCddhZsiKvqX+MB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvODJyeF9fUE9rVldWTncwSjEyRm15SXEtcGY0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAUQW/AwQA
UpixAwQAUplFMA0GCSqGSIb3DQEBCwUAA4IBAQBVwDV8CMexMmh326DZneAZdWyy
XReJIixHQ5B7imtSCKs7JNWos4dnN9pfMEy5c6ejyyVZ7Qo+ZRPHZwjx/lJ18eeM
bHM5KYp6ghv1/NYLUalInDRhseZYpp1278TJmka5qQSa+TZfB5rZMY+/93U2Gzf6
Rxjjo5mVSlgb/xEkEloDOBhrU72/vt+W3DXsR9krARABh/WsKdHFj0RcSLnFWye/
YoNXuOP13cZeau6gICrfN9bL1IH8Z6Rej3NdeJbR/QAaXCna3ILvhRSy8cSF876i
/RX6N+eMnOUaV10+mW8BO+2sPHSIzKXXhc41sceXNE0fguJDRESyQ0S/VYyi
-----END CERTIFICATE-----
Generated at Wed Nov 5 13:41:18 2025 by rpki-client