Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/t3nqbHqlBscnUaxPHLGUE-2J54c.roa
File: t3nqbHqlBscnUaxPHLGUE-2J54c.roa (raw, json)
Hash identifier: DLN+/ViLRwOrpJx8eI4FGnodUeH9BYoGpSEgrUIipy4=
Subject key identifier: B7:79:EA:6C:7A:A5:06:C7:27:51:AC:4F:1C:B1:94:13:ED:89:E7:87
Certificate issuer: /CN=0c7887582d83d3f087682af8780a324a353ce782
Certificate serial: 0199354A249E48D742B988BDEBA15FC2B5B6
Authority key identifier: 0C:78:87:58:2D:83:D3:F0:87:68:2A:F8:78:0A:32:4A:35:3C:E7:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DHiHWC2D0_CHaCr4eAoySjU854I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/t3nqbHqlBscnUaxPHLGUE-2J54c.roa
Signing time: Wed 10 Sep 2025 20:21:15 +0000
ROA not before: Wed 10 Sep 2025 20:21:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 213.179.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/DHiHWC2D0_CHaCr4eAoySjU854I.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/DHiHWC2D0_CHaCr4eAoySjU854I.mft
rsync://rpki.ripe.net/repository/DEFAULT/DHiHWC2D0_CHaCr4eAoySjU854I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Sep 2025 05:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:4a:24:9e:48:d7:42:b9:88:bd:eb:a1:5f:c2:b5:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c7887582d83d3f087682af8780a324a353ce782
Validity
Not Before: Sep 10 20:21:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b779ea6c7aa506c72751ac4f1cb19413ed89e787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:df:a6:20:e3:5f:c6:75:b5:c6:12:48:ba:d7:
a3:87:cd:b4:fb:a2:0e:05:16:e0:76:62:f1:3b:f2:
21:17:09:a0:df:0f:ab:28:d6:ff:0b:e4:5d:a2:85:
34:09:cc:43:60:89:e7:73:a0:c2:60:f1:2b:14:76:
bb:64:69:e5:5d:ef:e6:2f:b0:15:ea:45:26:93:b5:
32:d5:cf:04:b6:5b:c7:5a:e2:06:8c:f7:4d:03:21:
2c:26:95:af:1c:f4:af:2d:d6:fb:0b:08:9e:ac:04:
e1:b6:56:8d:d3:99:ed:73:c4:ae:14:3e:1e:62:4b:
98:ea:a7:50:16:2f:3c:d8:95:cf:7f:8a:b7:de:1e:
fc:af:d3:ba:32:6e:c1:f5:4b:a0:71:77:88:7a:f7:
06:a9:5a:51:c3:ad:e9:4d:4b:dc:67:23:a2:46:b3:
bf:69:e8:26:f9:9d:ba:c5:e9:8a:cc:6d:c4:d9:8f:
d2:b5:34:3a:24:f0:2a:68:27:26:fc:87:ec:7d:90:
f8:b8:d2:1b:e6:73:94:b3:c9:ed:d0:5c:9c:79:54:
f2:ac:b4:49:3a:85:3b:cb:35:05:ae:ef:1c:f2:56:
87:c1:a9:7a:07:86:f5:90:96:84:2c:9c:eb:ad:8f:
02:e6:a3:43:e7:97:c5:3e:c6:ee:01:08:09:ae:6f:
b8:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:79:EA:6C:7A:A5:06:C7:27:51:AC:4F:1C:B1:94:13:ED:89:E7:87
X509v3 Authority Key Identifier:
keyid:0C:78:87:58:2D:83:D3:F0:87:68:2A:F8:78:0A:32:4A:35:3C:E7:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DHiHWC2D0_CHaCr4eAoySjU854I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/t3nqbHqlBscnUaxPHLGUE-2J54c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/DHiHWC2D0_CHaCr4eAoySjU854I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.179.70.0/24
Signature Algorithm: sha256WithRSAEncryption
23:4e:e3:4e:21:f9:7b:89:f5:8a:99:ea:e0:cc:33:83:83:48:
73:a8:03:ce:52:6d:bb:68:a6:0b:ea:53:28:18:77:91:12:8e:
4b:f2:1a:cd:68:e1:7b:24:49:21:51:3b:7b:05:e1:87:df:9f:
c2:c7:9f:3e:28:a4:61:7d:25:e9:7b:54:b5:78:17:00:3e:60:
7e:1c:6d:8a:43:07:a6:58:ae:56:e8:83:0f:6a:ea:be:dc:18:
bd:80:42:62:51:55:61:2f:fb:58:09:2e:2b:e6:1e:5c:df:c0:
66:39:db:d0:a5:1b:aa:f8:bd:71:f2:c8:fb:7b:64:fd:f7:9d:
93:5a:96:12:26:fc:2f:03:53:ab:be:cd:14:f4:b8:c6:c8:88:
31:15:2e:9f:45:43:b3:58:a3:07:c5:79:1e:75:2b:e4:80:22:
a8:b1:95:e1:15:ca:1c:5d:52:d5:54:10:a4:f4:5d:4d:f2:5f:
ba:86:5d:77:06:e1:7a:f3:b0:8f:97:b2:03:7f:d6:ad:cc:48:
c1:0a:4e:a3:4b:2a:bd:e4:23:15:06:e6:8a:1a:e0:09:52:03:
df:0d:ff:fe:1d:3e:11:1c:36:0f:5a:1b:c5:7a:fe:cd:f4:7b:
f9:4f:b1:f3:cd:c5:0b:5e:04:31:70:f5:c0:35:c4:fc:31:75:
13:dc:03:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 12:03:14 2025 by rpki-client