Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/PDqkVJ40PrFe4suGg4WOJqzMUow.roa
File: PDqkVJ40PrFe4suGg4WOJqzMUow.roa (raw, json)
Hash identifier: RXbO3f8rMaUmCLGNqlV1Dn/DyLMq2vMWOPh4GbDgazk=
Subject key identifier: 3C:3A:A4:54:9E:34:3E:B1:5E:E2:CB:86:83:85:8E:26:AC:CC:52:8C
Certificate issuer: /CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Certificate serial: 019A25AA36E8F891ABA535F240BAB864D5B8
Authority key identifier: BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/PDqkVJ40PrFe4suGg4WOJqzMUow.roa
Signing time: Mon 27 Oct 2025 12:35:03 +0000
ROA not before: Mon 27 Oct 2025 12:35:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 45.140.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:aa:36:e8:f8:91:ab:a5:35:f2:40:ba:b8:64:d5:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Validity
Not Before: Oct 27 12:35:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3c3aa4549e343eb15ee2cb8683858e26accc528c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:03:97:1a:e2:12:3e:5d:7a:90:69:39:05:96:
aa:d7:e0:b3:9e:f6:39:30:da:36:de:1a:e5:14:41:
4d:6f:e5:07:01:a5:c1:2c:a2:63:bd:15:8c:59:c7:
ab:58:f2:c5:42:a6:96:de:16:27:49:98:40:53:50:
f8:fa:99:88:46:0d:23:4c:bc:6a:49:1d:61:06:1a:
07:e2:49:a1:bf:67:76:c0:ca:2b:d3:ba:7e:9f:88:
a1:58:6f:5a:d9:88:d8:99:a0:17:c6:a7:49:c8:27:
71:9d:fc:fd:34:c6:24:4f:ab:04:80:23:ca:16:d2:
35:cc:94:5a:37:ab:71:c7:a2:9a:1e:f3:e9:ab:bf:
16:07:c6:92:d4:44:c0:36:98:7f:35:c5:06:28:2d:
c3:a7:56:bf:c8:26:a8:d4:8c:06:de:41:f0:a2:92:
ea:56:b4:57:30:43:c9:d4:57:71:2d:c2:e2:b7:d0:
e7:d0:7c:89:8b:a3:50:41:85:b7:fe:93:07:26:d9:
7f:d1:78:2a:53:d8:7b:e3:99:43:07:c0:77:59:82:
bb:38:8a:57:56:e0:87:24:c7:e0:4b:4c:03:40:a8:
0d:39:6e:2f:5a:66:1b:2d:60:30:7d:05:49:2a:26:
7b:ee:f1:4a:fe:5e:91:04:ce:ee:2d:a8:82:be:db:
e2:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:3A:A4:54:9E:34:3E:B1:5E:E2:CB:86:83:85:8E:26:AC:CC:52:8C
X509v3 Authority Key Identifier:
keyid:BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/PDqkVJ40PrFe4suGg4WOJqzMUow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.58.0/24
Signature Algorithm: sha256WithRSAEncryption
03:a3:0d:6a:05:f4:20:7b:14:1a:1a:d7:06:39:4c:93:d3:ae:
8b:ad:e0:37:35:1a:68:69:ff:24:1e:60:9b:80:8d:88:be:12:
c8:e4:2b:6c:d4:9d:10:5b:8b:df:13:79:0f:6c:44:b6:98:f6:
14:69:3e:73:da:de:c0:2d:b5:e9:26:3f:0c:13:d3:e6:d9:0a:
aa:a2:5f:c1:d1:71:2f:59:e1:67:c0:69:d6:4c:e6:69:c4:c0:
c0:d3:5f:f0:0d:db:7e:e7:78:df:27:87:f2:06:2d:cf:d0:e7:
02:c7:12:71:81:6f:af:88:5c:1c:f2:4d:65:e8:c3:00:e5:04:
fd:a1:31:db:41:fb:9f:a4:b3:ac:fa:ed:09:c5:2a:0a:2d:f8:
89:f7:43:5c:c7:3a:2d:a7:3c:c9:35:ff:e8:67:31:3b:f5:37:
84:d6:99:54:3e:12:90:15:1a:72:24:d0:df:c4:51:58:19:e2:
be:72:c9:91:0a:79:4a:e3:46:c8:b5:12:8b:19:87:28:d3:06:
c0:fd:2b:ff:83:f4:7b:ff:4f:ed:50:92:24:3c:70:43:a2:3a:
d7:4a:69:b8:e0:81:db:26:98:37:41:1e:3c:5d:34:e1:db:be:
09:af:08:82:22:e6:93:b2:43:c9:55:2b:36:71:1e:86:7f:37:
49:6c:eb:47
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZolqjbo+JGrpTXyQLq4ZNW4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkMzY2ODYyOGYwZGY3OWQwNDdlY2EwZDlhZGNmYzBiNjY5
M2UzMDkwHhcNMjUxMDI3MTIzNTAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYzNhYTQ1NDllMzQzZWIxNWVlMmNiODY4Mzg1OGUyNmFjY2M1MjhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQOXGuISPl16kGk5BZaq1+CznvY5
MNo23hrlFEFNb+UHAaXBLKJjvRWMWcerWPLFQqaW3hYnSZhAU1D4+pmIRg0jTLxq
SR1hBhoH4kmhv2d2wMor07p+n4ihWG9a2YjYmaAXxqdJyCdxnfz9NMYkT6sEgCPK
FtI1zJRaN6txx6KaHvPpq78WB8aS1ETANph/NcUGKC3Dp1a/yCao1IwG3kHwopLq
VrRXMEPJ1FdxLcLit9Dn0HyJi6NQQYW3/pMHJtl/0XgqU9h745lDB8B3WYK7OIpX
VuCHJMfgS0wDQKgNOW4vWmYbLWAwfQVJKiZ77vFK/l6RBM7uLaiCvtvisQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDw6pFSeND6xXuLLhoOFjiaszFKMMB8GA1UdIwQY
MBaAFL02aGKPDfedBH7KDZrc/Atmk+MJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlRab1lvOE45NTBFZnNvTm10ejhDMmFUNHdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8xYjU3MjItMWRkYS00ZGYzLWE0NWMt
ZTZiZjMxNmM5NGExLzEvUERxa1ZKNDBQckZlNHN1R2c0V09KcXpNVW93LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi8xYjU3MjItMWRkYS00ZGYzLWE0NWMtZTZiZjMxNmM5NGEx
LzEvdlRab1lvOE45NTBFZnNvTm10ejhDMmFUNHdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYw6MA0G
CSqGSIb3DQEBCwUAA4IBAQADow1qBfQgexQaGtcGOUyT066LreA3NRpoaf8kHmCb
gI2IvhLI5Cts1J0QW4vfE3kPbES2mPYUaT5z2t7ALbXpJj8ME9Pm2Qqqol/B0XEv
WeFnwGnWTOZpxMDA01/wDdt+53jfJ4fyBi3P0OcCxxJxgW+viFwc8k1l6MMA5QT9
oTHbQfufpLOs+u0JxSoKLfiJ90NcxzotpzzJNf/oZzE79TeE1plUPhKQFRpyJNDf
xFFYGeK+csmRCnlK40bItRKLGYco0wbA/Sv/g/R7/0/tUJIkPHBDojrXSmm44IHb
Jpg3QR48XTTh274JrwiCIuaTskPJVSs2cR6GfzdJbOtH
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:54:44 2025 by rpki-client