Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/3GUm_HsThPUJjf5Xl65FHt13AV8.roa
File: 3GUm_HsThPUJjf5Xl65FHt13AV8.roa (raw, json)
Hash identifier: Lhftb+taQ8v4bYwk3pVYGnzP3vZQbnGHWFTFTRUD1PM=
Subject key identifier: DC:65:26:FC:7B:13:84:F5:09:8D:FE:57:97:AE:45:1E:DD:77:01:5F
Certificate issuer: /CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c
Certificate serial: 019A166228E87493CCD5EBE00720CB5DBF05
Authority key identifier: D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/3GUm_HsThPUJjf5Xl65FHt13AV8.roa
Signing time: Fri 24 Oct 2025 13:22:03 +0000
ROA not before: Fri 24 Oct 2025 13:22:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41745
IP address blocks: 77.110.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 02:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:16:62:28:e8:74:93:cc:d5:eb:e0:07:20:cb:5d:bf:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c
Validity
Not Before: Oct 24 13:22:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dc6526fc7b1384f5098dfe5797ae451edd77015f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:0b:a1:9c:d4:c4:58:74:f6:b2:72:1f:5f:4b:
ef:e2:97:ad:42:01:d8:62:e7:76:59:7a:d5:7a:d7:
ab:1f:aa:14:aa:6b:75:5d:9c:f1:bc:72:94:d3:28:
5a:c7:49:93:73:26:c2:2f:17:8f:6c:19:7b:e2:88:
5c:b8:98:22:bf:72:a0:56:fd:23:a7:a7:83:5b:0b:
bf:52:9f:94:64:61:9d:9a:28:63:05:1e:66:89:95:
93:11:ff:8a:85:18:24:b6:3c:d2:0f:54:50:c7:ac:
64:ce:ee:ca:92:de:2c:d8:d0:f1:8a:78:fa:59:d7:
4f:d7:46:83:9b:34:86:e5:a2:c6:ff:ca:7c:e2:a3:
26:d3:a3:95:0b:8c:63:c4:2d:92:16:b5:06:0e:20:
43:72:53:4a:40:a4:e4:86:ca:fb:b8:cf:97:dc:fe:
e6:04:5f:75:f5:e1:4b:18:23:77:81:2d:3d:46:4f:
3b:99:95:75:32:e2:75:8c:02:ae:a9:be:04:14:e7:
b4:5c:01:e7:cd:8a:c8:aa:7e:aa:e9:47:29:d3:38:
48:23:95:80:5e:21:d8:d8:f8:59:d2:75:04:e9:84:
3d:df:8a:60:d0:12:82:1f:24:a6:ba:8b:48:e3:5f:
ea:b4:56:da:38:eb:0f:3b:3d:1f:00:e0:63:83:8d:
c4:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:65:26:FC:7B:13:84:F5:09:8D:FE:57:97:AE:45:1E:DD:77:01:5F
X509v3 Authority Key Identifier:
keyid:D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/3GUm_HsThPUJjf5Xl65FHt13AV8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.110.111.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:42:f3:35:e5:41:38:68:76:5a:ed:23:3a:c5:11:6c:ee:0e:
3e:37:cb:44:90:30:52:f6:c5:d6:47:0c:bc:c7:8e:fb:93:17:
63:d4:7c:90:2a:b5:c9:ef:44:4c:dc:e0:b0:95:f4:3d:05:89:
a0:79:ef:73:b9:bb:dd:0b:7d:63:f1:99:92:d6:ce:a6:60:5a:
d1:5f:7c:7b:cc:dc:d1:0a:b3:4d:e8:86:b0:3d:12:2e:8f:fc:
8f:d5:fa:45:21:57:52:1e:37:db:d0:65:85:92:d0:18:47:09:
00:89:15:d2:de:b6:2a:5d:cd:43:dd:ed:81:e6:c2:1a:21:ce:
52:e3:c1:34:09:dc:7e:95:ec:e8:77:c7:29:50:5c:89:8c:fa:
26:82:fe:1c:41:00:e1:47:c4:e9:7a:58:e9:7c:ac:7a:75:e8:
83:9d:6d:75:c3:35:17:b4:2d:0f:00:90:d4:f4:04:b6:dd:d4:
e2:e7:b7:ed:3e:b3:e2:14:a9:ba:e3:5c:cb:05:4f:de:52:ee:
32:64:d2:df:33:1f:64:2d:e8:2b:5b:51:f5:78:26:46:4c:f4:
4d:d5:2b:70:92:ff:3a:d1:60:00:b0:d9:04:83:fe:ae:82:63:
78:92:a1:8a:58:0c:0e:ca:34:26:34:0f:f7:00:0e:69:f8:11:
f5:57:7c:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 11:30:42 2025 by rpki-client