Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/3xAfrUCguBCL0ChzAlJge6AIWGU.roa
File: 3xAfrUCguBCL0ChzAlJge6AIWGU.roa (raw, json)
Hash identifier: anEF+0wk8y5tzPZByZ5tO2WOfwG+mSOnLEJv4/0Afio=
Subject key identifier: DF:10:1F:AD:40:A0:B8:10:8B:D0:28:73:02:52:60:7B:A0:08:58:65
Certificate issuer: /CN=a87090c275c34c05c306f3b36063893a0d72782a
Certificate serial: 0197E1DA36D26C1D7C2D5C54F9848A1584C6
Authority key identifier: A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/3xAfrUCguBCL0ChzAlJge6AIWGU.roa
Signing time: Sun 06 Jul 2025 22:27:43 +0000
ROA not before: Sun 06 Jul 2025 22:27:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199961
IP address blocks: 45.132.254.0/24 maxlen: 24
194.67.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 06:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:e1:da:36:d2:6c:1d:7c:2d:5c:54:f9:84:8a:15:84:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a87090c275c34c05c306f3b36063893a0d72782a
Validity
Not Before: Jul 6 22:27:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=df101fad40a0b8108bd028730252607ba0085865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c3:46:ff:e5:d8:ea:73:97:80:c3:c8:a7:3a:
f2:6b:53:c3:5c:63:c9:0d:4b:1a:75:55:ca:04:e0:
a2:52:99:f9:6d:b5:a7:3d:1c:e8:56:3b:05:f9:db:
bd:bb:e4:b6:ba:f3:9f:12:10:79:99:da:35:56:9a:
5a:cc:52:9b:e1:0f:3f:2f:61:f5:d6:50:4b:ca:05:
68:d3:84:4f:91:a3:ee:3d:69:46:0d:c1:8b:7d:9f:
57:05:ea:01:82:5e:56:bc:7e:6a:28:75:44:15:59:
4a:c1:9a:f4:8a:48:14:70:0e:5b:e0:e2:cb:21:a2:
05:be:7e:a3:71:dd:22:65:99:b2:b7:2f:5f:73:2d:
7e:79:a3:46:65:8e:ab:66:f2:9d:18:14:d5:72:9d:
8d:38:9c:35:11:23:da:95:e6:b3:a1:33:27:b5:91:
b9:3a:68:2f:5d:14:8b:da:40:31:4d:73:d5:e2:da:
85:f6:4a:ea:4f:95:6b:60:b1:ff:cc:10:b2:6f:c3:
1c:34:d1:8b:00:09:5c:bc:12:fd:45:d8:d4:38:32:
b3:d2:99:42:de:0f:2a:07:22:73:4c:9c:a8:1a:0b:
80:e0:ec:76:19:47:c2:9d:90:e5:ba:62:36:54:e0:
89:a0:2b:57:20:d2:a9:8b:ec:ff:55:8f:90:6f:6c:
f0:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:10:1F:AD:40:A0:B8:10:8B:D0:28:73:02:52:60:7B:A0:08:58:65
X509v3 Authority Key Identifier:
keyid:A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/3xAfrUCguBCL0ChzAlJge6AIWGU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.254.0/24
194.67.194.0/24
Signature Algorithm: sha256WithRSAEncryption
00:08:16:1e:bb:8c:07:73:95:eb:b9:88:79:4e:ff:3a:75:79:
e3:13:8d:03:eb:2c:fc:08:8b:c3:77:be:e1:62:1c:7c:9e:32:
83:e7:10:06:c0:32:db:c0:bd:7f:2b:44:b9:10:fd:7a:eb:c3:
3c:53:01:a1:a3:bb:28:0d:a7:f6:b7:23:93:b2:ed:22:1c:63:
eb:7d:13:cb:01:a1:7a:f5:24:b2:09:e9:01:38:45:cd:ea:7e:
b0:48:c0:7e:e8:d4:1c:35:33:07:96:f7:5b:6c:07:0d:a4:f6:
7a:b7:2b:4f:b5:f4:93:28:5a:43:da:df:86:e5:a7:e3:b4:52:
19:04:fd:5d:63:d0:c7:43:30:2f:2e:fe:76:2f:f6:42:66:0e:
b2:50:fd:6f:ea:b9:17:b3:48:32:52:13:50:48:4d:52:5d:93:
1f:b5:4f:b2:f1:6e:84:20:41:0b:ac:5c:b3:1b:2f:9c:51:5d:
92:cd:42:3d:27:30:b0:d4:93:39:d8:64:92:33:52:e1:20:a4:
64:07:b7:bf:70:fc:46:87:cb:fd:4a:24:7c:8a:31:97:5e:f7:
48:0d:6e:36:5d:0d:ee:5c:36:4d:29:79:02:d4:d2:9d:59:80:
eb:9f:c4:44:9f:d2:79:94:cc:54:12:a3:f5:05:31:6f:01:a4:
cb:30:a5:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 12:40:05 2025 by rpki-client