Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/3PmySbT08h69EYYDTw_LKGyc_zA.roa
File: 3PmySbT08h69EYYDTw_LKGyc_zA.roa (raw, json)
Hash identifier: 6w5+mQbJKQuvYQYHGCg5hDgOd45rUczyHrNuTCBPMOY=
Subject key identifier: DC:F9:B2:49:B4:F4:F2:1E:BD:11:86:03:4F:0F:CB:28:6C:9C:FF:30
Certificate issuer: /CN=a87090c275c34c05c306f3b36063893a0d72782a
Certificate serial: 019809B36CF0E81D375B24D85A99F22E2700
Authority key identifier: A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/3PmySbT08h69EYYDTw_LKGyc_zA.roa
Signing time: Mon 14 Jul 2025 16:10:10 +0000
ROA not before: Mon 14 Jul 2025 16:10:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62282
IP address blocks: 45.137.106.0/24 maxlen: 24
193.34.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 12:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:09:b3:6c:f0:e8:1d:37:5b:24:d8:5a:99:f2:2e:27:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a87090c275c34c05c306f3b36063893a0d72782a
Validity
Not Before: Jul 14 16:10:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dcf9b249b4f4f21ebd1186034f0fcb286c9cff30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ae:59:20:03:77:3e:29:72:fb:19:66:cf:75:
64:32:25:78:e0:0c:39:c6:09:5b:24:fd:8c:dd:2f:
83:5c:cf:9f:14:7f:39:da:77:19:ea:8d:b4:4e:8c:
29:a9:28:59:3d:78:91:98:3c:33:be:db:cd:79:c3:
d8:0e:f9:1c:81:73:5d:d3:dd:b6:a9:ba:b3:fa:ae:
bf:ab:db:9d:59:50:e1:45:51:dc:4f:82:a2:1c:e5:
82:2f:e7:eb:59:6b:ea:11:de:0e:59:d9:45:91:b4:
22:df:c3:4a:a7:36:59:32:f9:ab:04:cd:61:00:d3:
28:3b:50:a4:2e:f4:21:58:5f:87:75:89:ee:98:15:
bd:b3:62:38:f4:6e:50:84:53:da:22:1c:b2:e3:5f:
f7:03:2b:31:f4:c7:9e:9b:54:58:b9:e2:07:8d:e6:
b6:a7:0c:9c:42:9d:ec:c4:00:57:18:10:4f:ad:54:
98:02:b1:18:e7:cc:23:98:0a:a0:c0:50:4f:47:f0:
be:c2:1a:50:55:32:e7:39:00:6f:e9:8f:aa:b1:45:
a6:82:62:18:61:3a:56:37:11:28:17:6b:f2:ae:c6:
e6:e4:62:7a:97:7e:76:23:39:22:73:2e:3a:7a:c8:
44:10:f8:be:3c:ed:0b:2b:88:5e:39:1b:b1:02:2e:
3e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:F9:B2:49:B4:F4:F2:1E:BD:11:86:03:4F:0F:CB:28:6C:9C:FF:30
X509v3 Authority Key Identifier:
keyid:A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/3PmySbT08h69EYYDTw_LKGyc_zA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.106.0/24
193.34.233.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:12:d6:07:88:d1:c3:b4:5e:50:d4:87:df:1b:b5:b2:4c:71:
6a:d8:2f:e2:1e:4e:f8:b6:f2:21:a2:a0:a2:88:78:1a:35:76:
72:cd:39:31:28:0c:83:30:38:f6:ba:7b:17:37:9f:14:f8:ef:
53:0e:34:e0:ad:de:21:0b:03:10:98:79:02:fb:a0:45:72:01:
03:bd:b8:f9:bb:d8:44:4b:e5:b6:15:3b:07:eb:74:66:93:c3:
c6:49:05:f8:1b:2c:93:8b:97:9d:1c:9f:67:72:bd:a5:e3:7b:
39:ef:7c:ed:7d:97:b8:50:30:aa:6c:95:23:ba:8a:1b:0c:8f:
92:fa:01:66:06:ad:41:a6:13:24:5d:2b:cb:42:51:79:4e:ba:
d4:b1:75:02:22:fa:e7:c5:56:11:e2:e6:ce:21:29:28:59:0a:
10:b8:5f:47:ab:23:21:89:a3:b7:c1:96:a5:6e:8f:4f:75:6f:
79:a3:3b:d3:90:77:92:dd:5e:41:21:79:6d:4a:59:ad:a5:e3:
96:a6:a7:8a:a6:e9:52:b8:c9:06:ff:dc:87:5f:1f:b1:37:47:
a4:f1:ab:0e:fe:a0:f0:d5:e1:18:66:74:d3:75:bd:18:9a:cf:
8d:e0:9d:44:a5:24:7e:b1:39:52:5c:e0:e7:e3:58:55:83:c7:
06:77:0a:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 18:24:23 2025 by rpki-client