Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/C3d3ZO8XQCxeFhqBO_oP_VQ09OQ.roa
File: C3d3ZO8XQCxeFhqBO_oP_VQ09OQ.roa (raw, json)
Hash identifier: MMaye3J7V2SoKbNbcveyEYGo5j7+iVVQUv9e6yI1lxk=
Subject key identifier: 0B:77:77:64:EF:17:40:2C:5E:16:1A:81:3B:FA:0F:FD:54:34:F4:E4
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 0198EC2C045CA5D404EFCB685413C101DB0E
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/C3d3ZO8XQCxeFhqBO_oP_VQ09OQ.roa
Signing time: Wed 27 Aug 2025 15:36:04 +0000
ROA not before: Wed 27 Aug 2025 15:36:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3319
IP address blocks: 195.178.132.0/24 maxlen: 24
195.178.133.0/24 maxlen: 24
195.178.134.0/24 maxlen: 24
195.178.135.0/24 maxlen: 24
195.178.144.0/23 maxlen: 23
195.178.147.0/24 maxlen: 24
212.111.207.0/24 maxlen: 24
212.111.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Sep 2025 22:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:ec:2c:04:5c:a5:d4:04:ef:cb:68:54:13:c1:01:db:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Aug 27 15:36:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0b777764ef17402c5e161a813bfa0ffd5434f4e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:56:62:10:b5:c8:39:a9:4f:6d:76:ec:3e:6e:
2e:63:c3:bc:5b:b2:5f:1b:a4:c5:10:8c:b5:21:2a:
83:f2:d4:97:6a:52:fd:62:f6:14:6c:a7:56:7c:ac:
8e:0b:48:51:0e:a4:75:dd:a6:a8:3f:bf:be:e9:23:
b2:5f:b2:dc:ed:64:cf:b3:bd:31:5e:35:91:48:05:
62:4e:8d:a8:ef:99:e5:85:d5:09:6b:71:6c:c4:43:
1f:bc:84:1c:33:3c:d4:25:a7:b4:7d:88:27:89:4f:
4c:9c:02:be:ab:95:98:3a:03:d3:30:13:bd:99:80:
5e:53:92:79:e5:93:d8:3b:17:31:02:e7:d9:f0:b1:
1a:66:51:ed:87:71:f3:2e:8d:fc:72:c1:63:8b:19:
01:ef:6e:2f:47:45:e0:53:01:03:26:bb:ea:50:50:
2a:16:de:04:fe:17:e4:b0:e7:23:19:97:2e:8b:6a:
c3:ec:f5:30:42:3c:64:f9:ce:3d:84:53:b3:88:a5:
f0:62:98:da:b2:fe:b5:b7:a2:ae:c7:cd:2c:9f:d9:
38:d7:89:0f:f4:1a:7f:2c:2a:f6:7b:bb:1d:7a:1b:
ae:37:02:fe:95:77:0b:c0:22:6f:a6:37:9d:43:4d:
27:69:a8:b9:33:2b:ff:5a:c4:1a:f3:c2:50:d6:49:
07:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:77:77:64:EF:17:40:2C:5E:16:1A:81:3B:FA:0F:FD:54:34:F4:E4
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/C3d3ZO8XQCxeFhqBO_oP_VQ09OQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.178.132.0/22
195.178.144.0/23
195.178.147.0/24
212.111.207.0/24
212.111.216.0/24
Signature Algorithm: sha256WithRSAEncryption
78:10:1f:50:f9:0e:88:85:33:f1:80:3a:0b:b1:e1:5e:e7:9b:
c3:92:a9:1e:5a:39:43:a4:de:15:56:bf:35:69:08:d5:a2:ef:
62:e9:6b:f4:81:5c:14:fa:8c:44:49:23:6c:ea:ab:46:23:3a:
fb:ae:23:04:39:ab:8f:24:06:02:a0:03:a3:6c:f4:e3:87:9e:
f2:88:4e:6e:48:62:3e:66:55:f0:ab:8b:a6:df:8a:80:ec:e0:
89:60:63:1a:26:72:4b:af:a5:2a:01:52:88:38:3e:a6:ec:6c:
55:de:17:6d:74:e0:ee:3a:1c:fa:43:6a:ae:bd:d5:70:4d:8a:
45:88:8e:86:df:34:03:18:c4:59:c9:6d:ce:e5:db:b5:96:52:
cb:ac:4b:96:b3:e8:6f:bf:cf:55:04:9e:64:83:ac:5c:c6:b6:
79:09:66:c6:8e:a8:d6:b8:c1:5f:af:9e:cb:12:16:f5:68:10:
6e:f6:61:a5:36:47:21:e3:e4:1c:0b:45:bc:32:f6:37:01:8f:
35:68:43:b0:f4:6e:64:37:27:ea:16:47:bc:ff:4c:54:f5:1a:
f1:2c:ad:dc:93:32:06:a6:5a:c6:e5:6a:b1:9e:0e:02:ce:e9:
63:28:33:70:ff:c7:00:cf:59:e6:a5:1b:9a:d3:b4:47:b1:8d:
7c:70:55:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 05:05:21 2025 by rpki-client