Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/cUaEhVdptn_zdUt27HnBSNtKOHA.roa
File: cUaEhVdptn_zdUt27HnBSNtKOHA.roa (raw, json)
Hash identifier: lue2404j9fMy8MK0Et6rUofKH8tT3LUASOUClOCsRHs=
Subject key identifier: 71:46:84:85:57:69:B6:7F:F3:75:4B:76:EC:79:C1:48:DB:4A:38:70
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019937DE4114BE283EA95AEB415430506BFF
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/cUaEhVdptn_zdUt27HnBSNtKOHA.roa
Signing time: Thu 11 Sep 2025 08:22:16 +0000
ROA not before: Thu 11 Sep 2025 08:22:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137517
IP address blocks: 82.152.12.0/24 maxlen: 24
213.130.138.0/24 maxlen: 24
213.218.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 16:33:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:37:de:41:14:be:28:3e:a9:5a:eb:41:54:30:50:6b:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Sep 11 08:22:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=714684855769b67ff3754b76ec79c148db4a3870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:bc:dc:4c:8c:cb:c2:6a:fb:e9:96:57:bd:5b:
78:52:81:67:d0:1e:62:e7:c3:32:3e:64:d9:6d:d6:
d0:54:a8:25:c3:4b:80:aa:e1:08:52:b6:9c:4e:06:
90:14:d2:58:7a:17:3f:d8:65:b2:f0:ba:91:59:55:
a7:e5:ce:b8:1f:e6:c3:d2:63:58:2e:b2:55:79:c7:
8d:f6:c8:2b:cd:92:30:df:0f:8f:f2:6f:ba:3c:7b:
b8:34:d4:33:f6:88:0d:8a:ee:b9:9f:70:3c:2b:4b:
80:b6:4b:bc:48:dc:a8:24:48:3f:97:c6:b9:c9:31:
ed:28:3c:21:b4:24:b8:3e:aa:76:bd:0d:ab:f5:23:
65:b1:03:7c:27:42:b1:0b:33:51:e0:7f:15:ac:61:
24:b6:a5:c2:f7:ed:96:f5:0e:5e:14:b5:4f:10:74:
91:eb:14:0f:56:61:b5:36:1c:74:56:7c:63:ef:25:
8f:08:51:f0:07:18:f3:47:a9:9b:a4:f9:18:e3:a4:
35:15:ef:d7:34:09:46:78:08:9c:fe:d9:12:86:b0:
4e:f5:cc:95:d2:93:ec:31:a0:e4:10:d3:a9:0e:30:
46:68:31:4b:2d:08:f3:a6:98:c9:8a:46:44:8c:d2:
17:69:47:0d:23:f9:e0:41:75:b5:45:17:ec:f8:86:
f8:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:46:84:85:57:69:B6:7F:F3:75:4B:76:EC:79:C1:48:DB:4A:38:70
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/cUaEhVdptn_zdUt27HnBSNtKOHA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.12.0/24
213.130.138.0/24
213.218.224.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:31:24:97:8c:b5:c5:1f:b9:db:8d:51:ff:4d:21:78:4a:66:
33:41:f0:8e:c1:a4:f3:40:5a:b9:5c:c5:6c:6d:ec:1f:d2:37:
6c:9e:be:cf:a1:54:e2:b8:fe:27:b4:7a:65:d8:aa:ef:ee:c6:
83:2e:fd:75:bc:5d:ae:8e:bf:cd:8b:2c:5d:ab:b0:f5:0b:bd:
8e:29:88:18:88:e3:68:5e:81:69:4d:77:ec:b6:1d:da:36:10:
6a:06:95:bb:5c:48:02:de:60:55:8f:ba:fa:70:d6:62:af:9b:
40:3e:8a:5a:36:fa:08:22:2c:cc:2f:d4:15:ff:49:42:1f:bd:
ba:c3:10:84:11:1c:76:7e:00:94:0e:49:c9:4c:80:b9:e4:50:
83:4a:e2:ad:a8:0d:01:2c:b9:22:53:e6:e3:63:b5:0a:8a:07:
c2:2b:b3:e1:c5:f0:28:e3:c9:83:1e:ad:c1:c6:0a:b6:c7:a9:
b9:bd:a8:9f:d7:12:e9:f2:f6:ab:64:42:d7:12:ec:a0:09:d2:
08:a7:99:fc:7e:64:48:09:e9:eb:56:31:9d:0a:7c:b2:53:f9:
7e:01:6d:e1:fd:09:13:e9:38:eb:46:36:bb:3c:2b:9e:e3:05:
79:3c:9d:b1:ce:c0:f0:0f:2e:a3:16:4a:26:7d:b7:13:69:48:
f6:56:9e:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 01:28:03 2025 by rpki-client