Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/S3WGMPY-OzezhDsk-gOqjIT9wqE.roa
File: S3WGMPY-OzezhDsk-gOqjIT9wqE.roa (raw, json)
Hash identifier: B0hQgvaTLIn8DwMEJturhomMZwtDUgE45NKruZhEvSo=
Subject key identifier: 4B:75:86:30:F6:3E:3B:37:B3:84:3B:24:FA:03:AA:8C:84:FD:C2:A1
Certificate issuer: /CN=88775003f7d9e8e6e1ef48db06728e668ed187bc
Certificate serial: 019A34A903C5F84B34F9A781F0985766A473
Authority key identifier: 88:77:50:03:F7:D9:E8:E6:E1:EF:48:DB:06:72:8E:66:8E:D1:87:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/S3WGMPY-OzezhDsk-gOqjIT9wqE.roa
Signing time: Thu 30 Oct 2025 10:28:03 +0000
ROA not before: Thu 30 Oct 2025 10:28:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211908
IP address blocks: 46.149.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:34:a9:03:c5:f8:4b:34:f9:a7:81:f0:98:57:66:a4:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88775003f7d9e8e6e1ef48db06728e668ed187bc
Validity
Not Before: Oct 30 10:28:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4b758630f63e3b37b3843b24fa03aa8c84fdc2a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:64:91:fa:b4:bb:16:90:0e:d7:9e:e7:a7:64:
a6:f3:0c:6d:b6:2b:d8:4e:c7:ad:63:53:01:85:84:
d5:c9:bb:b1:86:53:0b:2f:14:6f:27:a5:8c:c3:47:
a4:e7:ab:6d:74:33:a6:2c:cb:8f:05:49:5f:6e:a8:
e5:4c:78:a4:c4:22:f1:40:da:3c:d9:8f:f7:06:fc:
77:f7:c3:e0:3a:77:e9:63:db:f9:60:d7:29:bb:a6:
c5:46:68:30:ec:d1:f2:59:1a:d5:e5:79:88:11:46:
63:6e:a6:17:1f:a6:e0:5f:f6:35:60:12:92:3d:ff:
d2:e7:d0:98:0f:3d:af:6c:06:66:6e:0b:28:49:87:
05:f5:27:9f:ff:14:e9:72:31:b4:c8:13:a1:5b:8f:
7e:b3:f0:5a:b6:46:9c:ef:14:62:28:67:58:2d:10:
6c:15:58:f9:22:69:5f:53:ad:99:a9:49:f6:bc:bc:
88:fc:92:70:fe:d0:6c:d0:41:7d:6d:0e:2e:e4:38:
4a:14:7a:3c:39:ff:ab:57:24:d6:5d:5d:25:f8:d2:
6f:b7:57:91:00:f9:6f:b6:fd:53:8f:09:24:22:00:
39:7b:cb:59:ce:32:0c:92:c2:02:a9:0d:fb:a9:eb:
fd:9e:1b:c7:42:66:22:b5:43:d9:a3:ad:2b:8a:b0:
e7:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:75:86:30:F6:3E:3B:37:B3:84:3B:24:FA:03:AA:8C:84:FD:C2:A1
X509v3 Authority Key Identifier:
keyid:88:77:50:03:F7:D9:E8:E6:E1:EF:48:DB:06:72:8E:66:8E:D1:87:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/S3WGMPY-OzezhDsk-gOqjIT9wqE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.149.96.0/24
Signature Algorithm: sha256WithRSAEncryption
97:3b:6e:61:f6:87:4c:33:91:82:da:d9:b0:84:44:05:43:51:
e2:9c:f3:65:70:56:02:aa:22:9a:83:1d:4c:77:b7:52:ab:f6:
29:ec:bc:f2:64:95:8f:81:0c:4d:df:08:be:65:5e:d2:4a:ea:
86:58:cb:dd:e5:ce:95:26:63:4e:40:38:0c:68:4c:2d:f7:ce:
cf:25:c5:b9:15:59:e4:0b:7c:3e:ca:2c:fd:43:ed:eb:b4:18:
f8:69:a0:2e:47:7c:bf:90:02:b0:38:24:cc:f8:7c:cb:cc:40:
ed:e3:50:85:f5:cb:66:f1:9e:d4:2e:aa:92:59:6f:27:c8:c7:
ae:4a:b3:8f:c3:df:36:5e:6a:4e:8c:71:4f:ff:fd:b0:8f:22:
44:9c:e5:4c:33:4c:38:8f:bf:a9:e6:f7:cd:80:1e:ce:e2:f0:
8c:a9:9e:5f:67:cf:c4:ed:ee:83:d5:de:a0:0b:65:80:c1:89:
48:c1:49:cc:ff:dd:e9:b2:f0:fa:78:58:35:ee:b1:4b:e9:35:
be:7a:4a:9d:e9:61:d1:74:9c:fd:1c:b9:8d:31:23:12:eb:49:
05:29:a6:d5:d6:fd:49:06:80:b4:ff:c0:76:68:1c:53:03:51:
fb:d3:05:04:b9:8d:ac:46:37:75:d6:da:14:79:6e:3f:95:45:
59:c4:68:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:06:28 2025 by rpki-client