Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/r3-jhMzUpqRf-XPJjV_rCoTSW1Y.roa
File: r3-jhMzUpqRf-XPJjV_rCoTSW1Y.roa (raw, json)
Hash identifier: d1j3zpkkY7fbTjCgTFyKErgvb3ejNuj/hmKVrcssWYs=
Subject key identifier: AF:7F:A3:84:CC:D4:A6:A4:5F:F9:73:C9:8D:5F:EB:0A:84:D2:5B:56
Certificate issuer: /CN=67499595a65aab0b53768def08091e31061e9e65
Certificate serial: 01983DB6C9389093E3CA9E2FF4A6978EBC06
Authority key identifier: 67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/r3-jhMzUpqRf-XPJjV_rCoTSW1Y.roa
Signing time: Thu 24 Jul 2025 18:34:05 +0000
ROA not before: Thu 24 Jul 2025 18:34:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48449
IP address blocks: 46.20.97.0/24 maxlen: 24
46.20.111.0/24 maxlen: 24
185.160.194.0/24 maxlen: 24
185.160.195.0/24 maxlen: 24
185.169.220.0/24 maxlen: 24
185.169.221.0/24 maxlen: 24
185.169.222.0/24 maxlen: 24
185.169.223.0/24 maxlen: 24
2a14:80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3d:b6:c9:38:90:93:e3:ca:9e:2f:f4:a6:97:8e:bc:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67499595a65aab0b53768def08091e31061e9e65
Validity
Not Before: Jul 24 18:34:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=af7fa384ccd4a6a45ff973c98d5feb0a84d25b56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:63:78:5c:15:91:2b:6d:49:e8:af:2d:ad:18:
93:3e:69:13:e6:a4:28:b3:b3:aa:11:f1:c3:b8:86:
8d:67:28:6e:f9:f2:4f:24:3a:0b:59:83:6d:81:b4:
a0:f9:52:42:77:aa:a0:7b:20:6e:f1:5a:75:a0:13:
1a:cf:67:8e:bd:c5:c7:8f:e5:52:fb:f2:8f:3f:1c:
52:2c:aa:a9:b7:70:ad:4d:e3:3e:3a:70:9a:6e:f4:
a1:78:a1:c3:90:61:06:c2:81:f5:a0:2f:e4:f5:b0:
50:93:97:c3:2f:62:ad:32:86:1e:18:8e:fd:61:a6:
fb:e0:5c:d1:b3:1c:46:31:57:14:5a:db:c0:02:d2:
fc:46:ef:c6:03:ef:91:5c:2e:ba:fc:ef:75:73:aa:
c7:6f:8b:9c:8b:0b:cf:aa:e4:c0:db:c3:f1:32:26:
7f:05:50:44:63:c5:ad:1a:53:92:60:92:0d:07:71:
df:b4:bd:99:b9:6d:ed:0c:92:91:0d:dc:55:26:18:
99:07:30:90:7a:70:ab:e8:25:39:b0:ab:4a:be:43:
b9:02:ed:56:cb:82:d4:b4:ef:6f:8d:52:76:c6:cc:
72:39:0b:f5:27:d7:f3:a7:2e:34:53:3a:ba:1c:9a:
e7:c0:b6:59:fa:4b:f7:94:f0:b7:50:0c:ee:16:e6:
b9:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:7F:A3:84:CC:D4:A6:A4:5F:F9:73:C9:8D:5F:EB:0A:84:D2:5B:56
X509v3 Authority Key Identifier:
keyid:67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/r3-jhMzUpqRf-XPJjV_rCoTSW1Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.20.97.0/24
46.20.111.0/24
185.160.194.0/23
185.169.220.0/22
IPv6:
2a14:80::/48
Signature Algorithm: sha256WithRSAEncryption
18:2b:62:cb:68:9e:cc:c2:c8:38:69:bb:a1:f7:21:7b:74:cd:
76:16:b5:89:64:51:d0:27:db:7b:98:dc:82:bf:3d:6b:76:c6:
1c:47:a9:34:fe:49:2c:4d:51:bf:cf:e8:12:b2:7f:0c:5c:7b:
ca:9e:7f:db:24:8b:e9:b3:45:18:53:72:30:68:51:1c:30:9b:
9b:32:b3:5b:72:7e:70:6d:b8:f5:56:bc:5f:1b:07:05:77:75:
c0:24:72:16:35:23:aa:92:95:23:e1:01:03:8e:34:98:9d:0e:
cc:55:ab:4f:5b:c4:81:b3:7d:ef:84:d7:0f:6e:06:f8:9b:34:
80:7f:cb:2d:15:21:ca:87:f9:6f:9b:33:cc:31:19:e7:2e:17:
ce:c8:89:34:bf:5c:9b:d3:b5:32:ea:cd:d3:08:c9:a9:f7:71:
67:fa:d3:f3:3e:94:2b:1c:49:95:37:76:48:09:8c:0b:23:13:
3e:24:33:83:a0:c5:cc:15:8d:2f:be:db:1a:65:07:c5:d3:58:
8b:08:95:4f:9b:a0:ce:1e:f5:a6:4f:70:b2:b9:2b:2a:17:cb:
73:9d:55:4c:30:89:e8:93:3d:cb:69:d7:a8:75:dd:0e:46:df:
e9:ca:8c:05:c5:8a:a1:1f:24:9f:1c:d8:3c:3a:8c:82:8f:3c:
8d:57:61:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 00:55:44 2025 by rpki-client