Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rq3_2EMmh0cv5ivlO8JPPUeogQc.roa
File: rq3_2EMmh0cv5ivlO8JPPUeogQc.roa (raw, json)
Hash identifier: 9kTdzZUfT/wSfRhG2PTu31/f9X4NTLfSEK/53blCYJ4=
Subject key identifier: AE:AD:FF:D8:43:26:87:47:2F:E6:2B:E5:3B:C2:4F:3D:47:A8:81:07
Certificate issuer: /CN=aebf394e2f1b251c88d988a87161084580786ef5
Certificate serial: 0197F9073593B13463483C89B8EF6C88362F
Authority key identifier: AE:BF:39:4E:2F:1B:25:1C:88:D9:88:A8:71:61:08:45:80:78:6E:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rq3_2EMmh0cv5ivlO8JPPUeogQc.roa
Signing time: Fri 11 Jul 2025 10:28:08 +0000
ROA not before: Fri 11 Jul 2025 10:28:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212720
IP address blocks: 193.3.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 10:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:f9:07:35:93:b1:34:63:48:3c:89:b8:ef:6c:88:36:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aebf394e2f1b251c88d988a87161084580786ef5
Validity
Not Before: Jul 11 10:28:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aeadffd8432687472fe62be53bc24f3d47a88107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:38:92:00:3a:db:eb:84:9b:68:9a:9c:2c:72:
92:ec:b5:b7:4c:56:ab:59:74:14:33:db:24:58:09:
fb:2e:bb:e9:1a:18:fd:72:63:ee:db:0c:b3:bb:4d:
df:71:ca:98:f2:d2:22:fa:d1:f3:26:70:73:6c:81:
92:12:02:3a:8c:0d:57:fa:b0:9b:e6:b6:28:03:2b:
21:a6:35:f8:ea:0c:48:2b:47:6e:fb:b0:b6:ed:5a:
13:d8:15:7f:e2:80:4a:a0:d9:12:4a:ab:f1:40:12:
c2:78:73:4f:c2:ae:b5:11:8f:ca:91:29:2e:05:5e:
7d:c2:86:1a:ea:aa:c8:00:24:6d:9e:02:25:ce:31:
a5:e7:c8:d2:ed:60:ac:e3:4f:53:56:a0:7f:d9:81:
b7:ea:44:57:a3:d3:0a:6f:51:51:bf:22:05:fa:8f:
76:97:2a:72:aa:e3:3b:57:90:4e:50:82:06:4b:73:
2b:f4:96:f1:81:0c:27:e8:0c:c9:bb:cf:27:a5:bd:
2b:24:a5:96:b1:b3:e7:b4:e2:5b:f5:4e:e4:ef:b8:
82:9b:2a:85:a3:08:00:cc:ff:f4:7f:32:38:3e:f8:
8a:b5:b5:0d:77:84:15:11:52:0b:b4:df:a2:37:9f:
66:1f:23:ab:10:b6:62:50:fa:ad:89:45:17:a0:b2:
cf:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:AD:FF:D8:43:26:87:47:2F:E6:2B:E5:3B:C2:4F:3D:47:A8:81:07
X509v3 Authority Key Identifier:
keyid:AE:BF:39:4E:2F:1B:25:1C:88:D9:88:A8:71:61:08:45:80:78:6E:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rq3_2EMmh0cv5ivlO8JPPUeogQc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.3.24.0/24
Signature Algorithm: sha256WithRSAEncryption
74:e1:e7:24:a9:39:c3:4d:74:df:3c:b4:0c:46:29:a9:73:10:
59:bf:1d:d7:a4:5c:d2:d1:8c:d1:25:be:ed:4c:05:0a:45:36:
ec:c3:82:a9:5b:57:31:08:e9:13:70:6c:d0:60:3b:c0:14:4a:
86:01:c7:f9:9c:6d:43:31:fe:37:15:6a:4c:04:45:84:a9:0f:
37:e6:8f:9f:4f:a3:dd:55:d9:00:be:f4:35:50:26:81:b3:cc:
6a:c3:2b:89:c5:03:4b:b0:52:c1:2f:5e:79:bf:0c:34:3c:b7:
3b:47:0f:d3:62:66:ea:96:5a:97:49:8b:6e:ad:fa:95:c9:d7:
8d:76:bd:e0:a2:af:41:8e:04:a8:9a:7e:86:3f:3b:91:7f:f3:
69:ae:11:5f:35:1c:f6:7e:5f:06:b8:03:6f:7b:26:4a:d0:6f:
bb:6a:8b:0b:c6:d5:10:a4:71:c6:fb:11:4d:36:c3:21:31:c2:
75:c6:55:dc:f0:8a:22:fd:df:25:a7:31:68:87:06:c3:db:3c:
90:73:91:b8:4f:6e:8b:d4:67:23:6f:18:9b:4c:af:08:28:d5:
ee:38:f9:b0:ef:5c:74:ab:ab:52:15:0f:02:4f:4d:0e:89:a0:
ba:71:96:0c:d7:46:ed:60:7c:81:ad:e9:4e:48:c9:ab:ae:8e:
ef:82:be:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 19:57:46 2025 by rpki-client