Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/3PRB8mHuWaZxTIE-bmpqv9X7nJg.roa
File: 3PRB8mHuWaZxTIE-bmpqv9X7nJg.roa (raw, json)
Hash identifier: fCMWTCmY/pe3MZcrWsNsJ8BHtbDntcLGTll3F+bs2xA=
Subject key identifier: DC:F4:41:F2:61:EE:59:A6:71:4C:81:3E:6E:6A:6A:BF:D5:FB:9C:98
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 01981835A78F924139F0CBAD47F62A93F1AC
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/3PRB8mHuWaZxTIE-bmpqv9X7nJg.roa
Signing time: Thu 17 Jul 2025 11:47:06 +0000
ROA not before: Thu 17 Jul 2025 11:47:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209945
IP address blocks: 5.182.28.0/22 maxlen: 22
185.255.98.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft
rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 14:17:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:18:35:a7:8f:92:41:39:f0:cb:ad:47:f6:2a:93:f1:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jul 17 11:47:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dcf441f261ee59a6714c813e6e6a6abfd5fb9c98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:11:00:79:78:00:1e:4b:cd:aa:5f:e6:71:4c:
47:fd:5f:45:d6:af:a7:7b:19:2a:f6:79:16:cb:43:
62:be:73:5a:7c:4b:29:ae:ae:e7:b2:f2:70:6c:c9:
49:40:10:a8:72:ad:ab:97:57:d0:3d:f0:aa:d8:12:
e2:a1:77:81:9e:5c:48:a9:a6:29:26:f7:66:e7:22:
69:f3:ce:28:0d:3a:d4:57:d9:03:89:fa:84:1c:da:
45:bf:79:3d:9e:27:bd:31:47:c9:d2:f6:a9:89:f6:
dd:27:2c:86:f6:67:fb:ce:c9:a1:b1:41:7d:b1:1d:
e7:cd:80:53:ba:c4:46:a6:38:16:46:9e:31:94:ae:
a8:f2:eb:ac:a4:44:f9:fa:be:80:e9:ce:d5:69:4d:
bd:1e:21:24:88:cd:50:f3:4c:0c:1e:98:d9:32:0b:
20:30:b9:d3:62:38:37:29:e1:25:58:fc:24:1d:85:
e4:39:07:bb:2a:30:dc:6b:04:f6:a4:10:d9:82:f9:
db:9c:b8:c1:c2:7a:86:cc:e9:b6:60:51:e4:43:95:
83:b1:d1:a0:de:0f:5c:8c:80:bd:95:5f:60:50:3a:
28:0b:22:de:df:f0:01:e6:88:de:5b:55:af:01:b1:
d8:32:e2:ab:3b:57:e8:63:fb:74:25:25:68:78:88:
4b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:F4:41:F2:61:EE:59:A6:71:4C:81:3E:6E:6A:6A:BF:D5:FB:9C:98
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/3PRB8mHuWaZxTIE-bmpqv9X7nJg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.28.0/22
185.255.98.0/23
Signature Algorithm: sha256WithRSAEncryption
63:46:ff:bf:13:67:d7:a8:be:aa:f4:8c:c5:79:b6:aa:f7:f6:
76:3f:77:89:f1:e7:05:6e:d8:78:91:b9:db:bd:9a:c9:c4:23:
36:ab:35:a6:88:fd:d8:bf:d4:e1:75:ff:1c:d1:38:5d:f3:33:
3d:7d:8a:75:bf:77:3e:99:dd:1d:bc:c0:05:5e:3e:a9:0c:76:
ee:f0:6e:25:7c:a7:39:96:1f:5e:32:4e:87:7a:6e:11:98:72:
3f:c4:cc:2c:ff:bb:d4:30:e0:78:72:bb:68:56:38:89:c3:c7:
74:2f:fc:9a:ef:61:0c:84:06:51:e1:03:b6:6c:4d:b7:aa:20:
66:29:f9:aa:40:c4:67:96:bd:6b:74:a5:64:7c:18:9d:81:3b:
86:9c:29:52:01:1b:a1:72:2f:9a:a2:db:0e:55:e0:07:97:dc:
94:eb:71:9a:2a:39:d6:e1:22:13:00:5f:e9:48:81:66:6c:40:
94:9c:e4:8d:05:78:de:cd:3c:54:1b:80:d0:3d:92:25:4d:27:
3c:f2:89:23:1f:7f:85:fb:d7:df:68:e9:66:37:c3:8f:b7:08:
0b:6b:10:71:80:0b:a2:7b:fd:dc:d4:58:15:df:4d:c5:c2:2d:
d7:a3:6f:9f:47:8e:9b:85:54:6a:c4:a3:9a:25:86:1e:12:b7:
f8:3a:e1:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 22:47:23 2025 by rpki-client