Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/3fcJYWB83X5ex8vsg8VK-NRT6bk.roa
File: 3fcJYWB83X5ex8vsg8VK-NRT6bk.roa (raw, json)
Hash identifier: z7WSYFFRBQzbhr7OubyCBoExxK4Wl0kXEGYroigobNU=
Subject key identifier: DD:F7:09:61:60:7C:DD:7E:5E:C7:CB:EC:83:C5:4A:F8:D4:53:E9:B9
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0198F3096AF3540A0CA020267EC6813C7714
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/3fcJYWB83X5ex8vsg8VK-NRT6bk.roa
Signing time: Thu 28 Aug 2025 23:35:37 +0000
ROA not before: Thu 28 Aug 2025 23:35:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214929
IP address blocks: 89.144.15.0/24 maxlen: 24
94.249.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 02:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:f3:09:6a:f3:54:0a:0c:a0:20:26:7e:c6:81:3c:77:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Aug 28 23:35:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ddf70961607cdd7e5ec7cbec83c54af8d453e9b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ed:4d:21:3c:31:fd:4d:6a:6a:20:24:a4:45:
91:09:35:ae:5c:3f:c6:ec:60:fa:c7:52:a5:f6:2c:
62:2c:84:b9:4b:34:0a:dd:21:dc:9f:db:ec:7f:2b:
5d:11:f4:66:8f:0d:8e:ee:d9:b0:69:06:4f:55:c3:
c7:25:8b:1c:b7:ab:ae:1f:5d:e9:14:bb:cc:40:fb:
d8:6c:ba:20:88:93:cf:99:de:14:86:10:ff:be:57:
a0:f1:c7:51:54:cf:93:11:6c:62:84:42:ed:0f:21:
7e:2a:41:f6:90:c6:e6:e2:61:18:98:fc:7d:1b:12:
8a:03:0f:31:09:70:a9:ef:0c:68:76:b1:9c:a6:d6:
f4:a6:b6:7d:8f:45:b6:86:e1:7b:b9:27:1e:88:c1:
e1:fc:49:28:06:fc:67:05:62:a7:b7:84:05:d3:a3:
b6:7d:a1:c4:10:a2:00:88:24:14:3e:6e:5f:27:ca:
83:4f:93:4b:bd:e4:65:72:1d:fa:41:bd:9e:8e:e1:
3c:43:31:c1:b2:32:f0:89:fe:24:13:76:cb:8c:1f:
c2:3b:5e:fd:29:e4:59:5d:dc:75:4c:15:19:9d:f9:
d4:54:af:8d:43:c8:62:0e:91:12:e3:51:4e:06:17:
0f:1c:d5:88:7b:57:79:2a:fd:84:6a:75:13:24:e0:
98:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:F7:09:61:60:7C:DD:7E:5E:C7:CB:EC:83:C5:4A:F8:D4:53:E9:B9
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/3fcJYWB83X5ex8vsg8VK-NRT6bk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.144.15.0/24
94.249.228.0/24
Signature Algorithm: sha256WithRSAEncryption
42:91:53:d0:a4:3e:29:7e:ac:ba:c3:5b:f9:e4:24:64:20:43:
f2:de:ec:8a:b1:1c:3b:d8:46:20:bb:77:21:82:f2:65:1b:85:
c8:b9:f4:e1:23:0d:b0:a5:68:d8:98:4b:b0:f9:88:f9:30:d4:
3d:64:2f:06:e4:7e:06:0d:f1:a5:dc:5c:1a:ce:6c:22:3f:dc:
2b:af:c0:89:12:f7:ea:e1:2b:50:e0:b1:44:06:4a:d2:0a:b1:
e6:64:33:9d:1d:a5:1a:5e:d6:d2:f0:8e:02:55:d4:87:13:b2:
dc:65:93:6e:02:95:a1:56:73:62:a1:1c:bb:4f:3b:8e:92:ed:
37:02:70:60:d1:21:30:1a:f2:b8:74:8d:b3:cc:92:a8:57:99:
4c:4a:a0:7b:a2:b7:f2:1f:a2:5f:df:a4:f1:4a:0a:73:04:58:
a0:2e:c2:47:e3:c4:4d:71:d8:99:22:fe:47:4b:0f:6d:dc:8e:
a8:a1:b4:39:e8:6f:fc:a9:c9:f7:b1:9f:2f:ee:a8:2f:f0:65:
43:16:24:bd:67:79:22:14:e3:ca:bd:68:68:ee:ad:5a:5d:95:
8d:5d:35:c1:99:84:94:1a:f3:06:48:ac:90:27:0c:42:a4:df:
bb:20:a8:12:8f:c6:f7:37:24:13:8f:6c:3f:29:4e:e3:98:9f:
79:cd:a4:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 08:05:56 2025 by rpki-client