
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/tBs3bX4J0-9LsINf9s_NNM9KYP4.roa
File: tBs3bX4J0-9LsINf9s_NNM9KYP4.roa (raw, json)
Hash identifier: z3OYgwZG26UNQ9PTrifLK/shbhTolEU4CpJZtWbYWG8=
Subject key identifier: B4:1B:37:6D:7E:09:D3:EF:4B:B0:83:5F:F6:CF:CD:34:CF:4A:60:FE
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019814051072211AC968785FDE4FCC06D151
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/tBs3bX4J0-9LsINf9s_NNM9KYP4.roa
Signing time: Wed 16 Jul 2025 16:15:32 +0000
ROA not before: Wed 16 Jul 2025 16:15:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2856
IP address blocks: 82.152.72.0/24 maxlen: 24
82.153.53.0/24 maxlen: 24
82.153.58.0/24 maxlen: 24
82.153.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 15:45:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:14:05:10:72:21:1a:c9:68:78:5f:de:4f:cc:06:d1:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jul 16 16:15:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b41b376d7e09d3ef4bb0835ff6cfcd34cf4a60fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:32:e8:f8:b2:14:36:a0:5e:8c:c5:c6:87:90:
00:65:9e:8c:62:9f:25:1c:d6:23:69:e8:4b:41:fb:
92:3b:66:35:77:7d:1c:b2:f2:9b:44:96:c7:42:f5:
31:09:42:4d:c0:b7:e6:14:ab:9e:4f:fd:9d:cc:24:
94:29:d0:7c:58:19:d2:9c:b2:94:7c:5f:fb:c9:6b:
61:b6:bf:3b:1b:51:9a:6b:9e:a7:4f:82:ad:a8:a8:
7a:6c:0f:0a:60:dc:23:60:35:39:22:67:db:37:bd:
03:62:6c:cb:49:7a:c4:63:c1:ed:d5:19:e1:a0:f7:
5c:5e:c0:df:aa:83:ef:11:2d:a2:77:5b:96:b7:f6:
05:9b:f1:5c:4f:07:6a:6a:f4:4d:68:79:59:ea:1c:
1c:9a:56:f2:f3:7a:d4:86:27:8a:03:38:e7:25:bd:
a5:77:82:ed:5e:37:9d:90:4d:c3:c0:40:e2:c0:4c:
f0:44:59:4e:46:09:b6:46:5f:4b:f4:74:b1:c7:6d:
ff:3c:2a:95:a7:19:c7:52:ff:0d:61:d6:1c:df:a5:
af:2f:95:59:e9:82:2e:b8:2e:1a:a4:56:b7:39:09:
57:2f:a5:fc:2e:09:df:35:b3:fd:e7:24:9a:51:ec:
30:41:54:42:e3:54:3d:73:26:60:92:a1:6b:59:ac:
e0:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:1B:37:6D:7E:09:D3:EF:4B:B0:83:5F:F6:CF:CD:34:CF:4A:60:FE
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/tBs3bX4J0-9LsINf9s_NNM9KYP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.72.0/24
82.153.53.0/24
82.153.58.0/24
82.153.80.0/24
Signature Algorithm: sha256WithRSAEncryption
81:d1:4e:40:74:ba:d3:a9:eb:12:ca:ed:0a:17:fc:ff:59:ec:
90:b6:31:1f:f4:e1:17:01:92:00:52:fe:2e:fc:66:03:2c:8f:
6a:92:bc:eb:ba:3c:b0:5b:78:11:e6:e9:22:87:04:8b:39:99:
a3:23:c8:ee:ee:eb:ad:4c:00:15:aa:86:4e:f1:0b:f0:59:6a:
4b:65:9f:ad:69:c2:86:78:d6:71:74:a1:31:f1:ce:f8:6e:fd:
b8:6d:e6:bb:06:35:2e:f4:5d:d7:76:d8:ca:78:bb:18:d3:5c:
d8:dc:f4:0a:fb:ee:92:bd:bd:8c:27:0d:1e:ac:6c:1f:78:14:
45:66:54:0d:21:dc:21:26:20:84:1c:af:1c:e7:3b:0b:e2:e5:
0c:a2:88:55:db:8c:e3:7b:e6:f2:35:85:d8:ba:91:10:be:92:
d8:f4:d7:d4:0a:bb:bb:c0:4b:b5:53:ee:89:73:2b:3c:9f:f0:
0b:92:ac:76:91:bc:44:ec:aa:60:d7:b5:78:eb:3f:b1:d2:fc:
5e:b4:00:00:dc:b6:7d:50:fd:8e:28:ea:26:19:bd:a0:69:99:
be:a5:fb:33:5a:aa:8d:0c:94:bc:4b:b7:0f:a9:0f:f7:74:5d:
ad:89:51:2c:5a:8e:07:54:ff:b2:e4:7a:bd:b8:04:07:9c:04:
b3:50:45:a9
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZgUBRByIRrJaHhf3k/MBtFRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjUwNzE2MTYxNTMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNDFiMzc2ZDdlMDlkM2VmNGJiMDgzNWZmNmNmY2QzNGNmNGE2MGZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjLo+LIUNqBejMXGh5AAZZ6MYp8l
HNYjaehLQfuSO2Y1d30csvKbRJbHQvUxCUJNwLfmFKueT/2dzCSUKdB8WBnSnLKU
fF/7yWthtr87G1Gaa56nT4KtqKh6bA8KYNwjYDU5ImfbN70DYmzLSXrEY8Ht1Rnh
oPdcXsDfqoPvES2id1uWt/YFm/FcTwdqavRNaHlZ6hwcmlby83rUhieKAzjnJb2l
d4LtXjedkE3DwEDiwEzwRFlORgm2Rl9L9HSxx23/PCqVpxnHUv8NYdYc36WvL5VZ
6YIuuC4apFa3OQlXL6X8LgnfNbP95ySaUewwQVRC41Q9cyZgkqFrWazgQwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFLQbN21+CdPvS7CDX/bPzTTPSmD+MB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvdEJzM2JYNEowLTlMc0lOZjlzX05OTTlLWVA0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAUphIAwQA
Upk1AwQAUpk6AwQAUplQMA0GCSqGSIb3DQEBCwUAA4IBAQCB0U5AdLrTqesSyu0K
F/z/WeyQtjEf9OEXAZIAUv4u/GYDLI9qkrzrujywW3gR5ukihwSLOZmjI8ju7uut
TAAVqoZO8QvwWWpLZZ+tacKGeNZxdKEx8c74bv24bea7BjUu9F3XdtjKeLsY01zY
3PQK++6Svb2MJw0erGwfeBRFZlQNIdwhJiCEHK8c5zsL4uUMoohV24zje+byNYXY
upEQvpLY9NfUCru7wEu1U+6Jcys8n/ALkqx2kbxE7Kpg17V46z+x0vxetAAA3LZ9
UP2OKOomGb2gaZm+pfszWqqNDJS8S7cPqQ/3dF2tiVEsWo4HVP+y5Hq9uAQHnASz
UEWp
-----END CERTIFICATE-----
Generated at Fri Aug 8 00:32:45 2025 by rpki-client