Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/wo3XMqa0VMvYZ6BKIicwYFk_gb0.roa
File: wo3XMqa0VMvYZ6BKIicwYFk_gb0.roa (raw, json)
Hash identifier: PpXWPCmdwKtpo10BY8/KwGdhF6nzSDE/58tYPopcoy8=
Subject key identifier: C2:8D:D7:32:A6:B4:54:CB:D8:67:A0:4A:22:27:30:60:59:3F:81:BD
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01975A53EA1D05468CF5FEAD23529923E522
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/wo3XMqa0VMvYZ6BKIicwYFk_gb0.roa
Signing time: Tue 10 Jun 2025 14:52:18 +0000
ROA not before: Tue 10 Jun 2025 14:52:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 40676
IP address blocks: 77.93.143.0/24 maxlen: 24
109.176.18.0/24 maxlen: 24
109.176.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5a:53:ea:1d:05:46:8c:f5:fe:ad:23:52:99:23:e5:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jun 10 14:52:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c28dd732a6b454cbd867a04a22273060593f81bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:78:fd:34:2b:d2:da:f6:27:2b:a4:fa:86:15:
71:7a:d8:c4:b2:35:3d:f4:15:e3:67:1b:45:05:5a:
20:fa:73:65:aa:40:b5:5f:26:89:2a:49:62:7f:40:
90:df:f5:c3:80:45:a6:d4:46:5f:f6:86:46:87:2c:
fe:28:2b:eb:ea:5d:66:db:1f:ec:9c:b4:8a:d4:0b:
4a:3b:37:53:ba:21:b3:cd:21:91:79:68:14:2c:6b:
26:5f:b1:e0:65:c4:2e:bd:43:4d:18:15:92:a9:11:
bd:4a:d6:2b:d5:58:49:17:04:29:d0:2f:8f:92:10:
98:f3:e9:f2:f4:f1:d1:e0:6a:8d:77:f2:c0:57:e5:
78:68:4a:c9:0f:57:9b:56:cc:34:29:8b:74:6a:9c:
c7:e7:36:77:a6:0b:72:73:b5:e2:26:17:b7:9d:bd:
e2:e3:25:77:43:cb:7f:67:10:e3:3b:f3:4b:8d:a9:
f1:ce:3f:51:75:22:2d:c2:a0:c7:35:2c:c4:18:78:
ca:8f:ed:13:58:6d:00:3f:55:b2:cc:8c:78:79:b4:
dc:d3:2f:11:03:d3:6f:7c:c9:1b:71:aa:5b:2f:9c:
6a:d6:a6:94:a0:ef:15:b8:b4:2a:f0:e7:f3:fa:6f:
a5:b4:c7:06:db:99:13:1a:35:f9:d3:2b:95:28:06:
d1:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:8D:D7:32:A6:B4:54:CB:D8:67:A0:4A:22:27:30:60:59:3F:81:BD
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/wo3XMqa0VMvYZ6BKIicwYFk_gb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.93.143.0/24
109.176.18.0/24
109.176.208.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:5b:0e:a6:de:0b:0c:af:0f:75:5f:57:09:72:c4:b7:4e:f9:
60:cc:22:b7:e0:6e:25:43:1a:e2:7f:46:95:22:43:41:6f:7f:
2d:75:a2:b8:bc:4c:5c:19:40:0f:04:ba:56:e7:35:04:05:31:
a8:bd:44:00:46:90:ba:a8:38:68:63:cb:c7:7e:5b:79:14:0c:
cc:06:7f:8a:bc:e9:a7:cb:be:3e:3d:58:63:68:41:1e:a7:21:
55:5a:0c:a8:49:4a:a9:24:dd:a0:98:35:0b:bd:fb:14:d5:96:
6c:72:ef:79:27:1a:43:b8:4d:f2:ca:11:61:6c:3f:3e:57:91:
48:53:7f:a8:3d:d4:33:b9:e5:5e:f7:d1:47:5c:34:44:8e:95:
2c:ae:1a:08:3d:0c:76:cc:69:10:36:55:a4:1b:bf:ef:4a:12:
5a:88:53:01:79:ba:62:f5:2c:4c:e8:c3:9b:0b:ac:7e:75:fc:
41:10:ff:8c:ab:2b:da:ba:23:a5:e1:73:62:3a:0b:b4:fe:12:
bc:69:e0:db:97:25:b8:d1:a1:3f:af:8b:09:f7:60:72:37:2c:
37:86:22:35:bf:7f:65:e1:cd:a2:07:36:f8:71:23:d3:b8:ec:
06:b2:91:4d:d8:28:5b:6b:e7:32:5a:f1:01:6d:1a:ee:7c:ff:
d4:c1:e4:15
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZdaU+odBUaM9f6tI1KZI+UiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjUwNjEwMTQ1MjE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMjhkZDczMmE2YjQ1NGNiZDg2N2EwNGEyMjI3MzA2MDU5M2Y4MWJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnj9NCvS2vYnK6T6hhVxetjEsjU9
9BXjZxtFBVog+nNlqkC1XyaJKklif0CQ3/XDgEWm1EZf9oZGhyz+KCvr6l1m2x/s
nLSK1AtKOzdTuiGzzSGReWgULGsmX7HgZcQuvUNNGBWSqRG9StYr1VhJFwQp0C+P
khCY8+ny9PHR4GqNd/LAV+V4aErJD1ebVsw0KYt0apzH5zZ3pgtyc7XiJhe3nb3i
4yV3Q8t/ZxDjO/NLjanxzj9RdSItwqDHNSzEGHjKj+0TWG0AP1WyzIx4ebTc0y8R
A9NvfMkbcapbL5xq1qaUoO8VuLQq8Ofz+m+ltMcG25kTGjX50yuVKAbREQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFMKN1zKmtFTL2GegSiInMGBZP4G9MB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvd28zWE1xYTBWTXZZWjZCS0lpY3dZRmtfZ2IwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQATV2PAwQA
bbASAwQAbbDQMA0GCSqGSIb3DQEBCwUAA4IBAQB+Ww6m3gsMrw91X1cJcsS3Tvlg
zCK34G4lQxrif0aVIkNBb38tdaK4vExcGUAPBLpW5zUEBTGovUQARpC6qDhoY8vH
flt5FAzMBn+KvOmny74+PVhjaEEepyFVWgyoSUqpJN2gmDULvfsU1ZZscu95JxpD
uE3yyhFhbD8+V5FIU3+oPdQzueVe99FHXDREjpUsrhoIPQx2zGkQNlWkG7/vShJa
iFMBebpi9SxM6MObC6x+dfxBEP+MqyvauiOl4XNiOgu0/hK8aeDblyW40aE/r4sJ
92ByNyw3hiI1v39l4c2iBzb4cSPTuOwGspFN2Chba+cyWvEBbRrufP/UweQV
-----END CERTIFICATE-----
Generated at Sat Jun 14 11:39:21 2025 by rpki-client