
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/lwFIJZHSCeUHFsDGwydOHc4Vm-w.roa
File: lwFIJZHSCeUHFsDGwydOHc4Vm-w.roa (raw, json)
Hash identifier: IprMr+k0uKtviFeEXNYRk55EK6C2aKbzQcmMP7J96h0=
Subject key identifier: 97:01:48:25:91:D2:09:E5:07:16:C0:C6:C3:27:4E:1D:CE:15:9B:EC
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019838DD51622DE6256336A6DC29E6567DB3
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/lwFIJZHSCeUHFsDGwydOHc4Vm-w.roa
Signing time: Wed 23 Jul 2025 19:58:05 +0000
ROA not before: Wed 23 Jul 2025 19:58:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211522
IP address blocks: 77.239.96.0/21 maxlen: 24
77.239.112.0/22 maxlen: 24
77.239.116.0/22 maxlen: 24
77.239.120.0/23 maxlen: 24
77.239.124.0/24 maxlen: 24
150.241.64.0/19 maxlen: 24
150.241.96.0/22 maxlen: 24
150.241.100.0/24 maxlen: 24
150.241.101.0/24 maxlen: 24
150.241.102.0/24 maxlen: 24
150.241.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:38:dd:51:62:2d:e6:25:63:36:a6:dc:29:e6:56:7d:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 23 19:58:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9701482591d209e50716c0c6c3274e1dce159bec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:41:8b:62:56:1c:74:e3:6e:eb:26:19:b9:ee:
b2:df:c7:af:b1:1c:19:7b:1f:e2:b9:2a:ca:32:21:
8a:7a:a0:eb:b0:e9:90:24:49:6d:05:71:6e:46:34:
51:14:81:0f:e4:6d:cd:2e:41:31:4d:4d:bc:9b:76:
bf:f9:66:c5:34:e9:67:e8:7a:b3:be:2f:46:40:ce:
81:30:6e:64:97:eb:98:fd:7a:ac:af:d9:57:77:58:
90:07:0e:16:89:41:0c:a9:ad:e9:75:22:65:1b:b7:
16:af:f6:37:89:d4:4c:fe:50:2d:43:08:a1:75:d9:
87:9a:ac:a9:be:c9:29:0f:90:09:1c:de:ec:54:6b:
4f:19:40:89:f7:03:15:5f:41:d6:bb:d1:5a:23:b9:
38:b3:45:09:91:ac:3f:a7:e1:b1:f1:f2:1f:49:3a:
a6:26:c8:91:a9:01:20:8e:81:f8:e7:9d:a8:d8:58:
23:ff:b2:9b:c2:e9:a0:91:44:62:de:26:a3:86:0b:
9d:75:00:e0:9e:84:94:42:aa:3c:3b:fe:64:ea:bc:
2c:d8:0a:ce:dc:46:77:d5:82:f3:7c:66:c7:c8:ab:
b8:d5:d0:96:83:e4:b8:27:49:a0:4d:7f:9e:83:06:
e0:4f:f8:3a:be:f5:16:01:59:d0:e8:61:55:61:c5:
ca:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:01:48:25:91:D2:09:E5:07:16:C0:C6:C3:27:4E:1D:CE:15:9B:EC
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/lwFIJZHSCeUHFsDGwydOHc4Vm-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.239.96.0/21
77.239.112.0-77.239.121.255
77.239.124.0/24
150.241.64.0-150.241.103.255
Signature Algorithm: sha256WithRSAEncryption
bb:2b:c8:ad:23:54:f5:78:a6:68:ee:c2:1b:15:12:5f:db:d7:
c3:e1:ff:de:0a:7c:6c:27:a3:01:78:66:64:b2:dd:d5:18:bc:
92:57:65:93:b4:b4:bc:d4:85:ef:19:c7:42:a1:d8:f4:5f:17:
08:94:45:a8:ab:22:6f:50:75:52:be:4e:d5:6b:ea:d6:96:21:
b7:43:62:93:bd:d8:1b:e2:56:43:81:4d:53:cb:09:88:d0:b0:
87:36:33:f8:0e:b6:66:8f:ba:0b:f2:0c:d7:df:32:3d:20:ac:
f4:71:98:ce:a3:a5:ce:a9:7d:2a:b5:48:b6:1c:b3:41:16:cd:
de:8d:77:2e:01:d6:be:37:e8:25:17:33:2f:1e:9d:3b:4b:a1:
65:8f:d6:da:08:54:30:d9:de:f1:95:bd:9e:10:78:80:f4:c0:
bd:00:ca:81:18:d5:0b:ca:b8:f9:e8:9f:1b:9d:37:74:fb:ab:
d6:43:d2:91:ab:0d:09:99:7c:2c:40:01:40:31:01:64:7d:c0:
21:8c:8a:e7:1b:a9:71:04:77:46:8c:92:e3:82:4f:80:54:bd:
4e:d6:77:34:da:0f:e2:65:4a:c3:8a:4e:89:b4:5c:33:54:98:
14:7f:b9:c0:25:e9:d6:cd:24:ea:24:8a:f3:03:1f:46:d9:ec:
4e:14:31:7a
-----BEGIN CERTIFICATE-----
MIIFHzCCBAegAwIBAgISAZg43VFiLeYlYzam3CnmVn2zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjUwNzIzMTk1ODA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NzAxNDgyNTkxZDIwOWU1MDcxNmMwYzZjMzI3NGUxZGNlMTU5YmVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkGLYlYcdONu6yYZue6y38evsRwZ
ex/iuSrKMiGKeqDrsOmQJEltBXFuRjRRFIEP5G3NLkExTU28m3a/+WbFNOln6Hqz
vi9GQM6BMG5kl+uY/Xqsr9lXd1iQBw4WiUEMqa3pdSJlG7cWr/Y3idRM/lAtQwih
ddmHmqypvskpD5AJHN7sVGtPGUCJ9wMVX0HWu9FaI7k4s0UJkaw/p+Gx8fIfSTqm
JsiRqQEgjoH4552o2Fgj/7KbwumgkURi3iajhguddQDgnoSUQqo8O/5k6rws2ArO
3EZ31YLzfGbHyKu41dCWg+S4J0mgTX+egwbgT/g6vvUWAVnQ6GFVYcXKPQIDAQAB
o4ICKzCCAicwHQYDVR0OBBYEFJcBSCWR0gnlBxbAxsMnTh3OFZvsMB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvbHdGSUpaSFNDZVVIRnNER3d5ZE9IYzRWbS13LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoAwQDTe9gMAwD
BARN73ADBAFN73gDBABN73wwDAMEBpbxQAMEA5bxYDANBgkqhkiG9w0BAQsFAAOC
AQEAuyvIrSNU9XimaO7CGxUSX9vXw+H/3gp8bCejAXhmZLLd1Ri8kldlk7S0vNSF
7xnHQqHY9F8XCJRFqKsib1B1Ur5O1Wvq1pYht0Nik73YG+JWQ4FNU8sJiNCwhzYz
+A62Zo+6C/IM198yPSCs9HGYzqOlzql9KrVIthyzQRbN3o13LgHWvjfoJRczLx6d
O0uhZY/W2ghUMNne8ZW9nhB4gPTAvQDKgRjVC8q4+eifG503dPur1kPSkasNCZl8
LEABQDEBZH3AIYyK5xupcQR3RoyS44JPgFS9TtZ3NNoP4mVKw4pOibRcM1SYFH+5
wCXp1s0k6iSK8wMfRtnsThQxeg==
-----END CERTIFICATE-----
Generated at Wed Aug 6 16:16:49 2025 by rpki-client