Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/3bUHh4iFbE31i6JLLtmn5RaLNEw.roa
File: 3bUHh4iFbE31i6JLLtmn5RaLNEw.roa (raw, json)
Hash identifier: OrsU0J0SCeq8sjxXyJAVJZuki/kvr0znL85ADmJ9Hpc=
Subject key identifier: DD:B5:07:87:88:85:6C:4D:F5:8B:A2:4B:2E:D9:A7:E5:16:8B:34:4C
Certificate issuer: /CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc
Certificate serial: 01994E4519F68964B7A01A65495C76E58D3C
Authority key identifier: CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/3bUHh4iFbE31i6JLLtmn5RaLNEw.roa
Signing time: Mon 15 Sep 2025 16:46:15 +0000
ROA not before: Mon 15 Sep 2025 16:46:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209242
IP address blocks: 216.163.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Sep 2025 15:33:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:4e:45:19:f6:89:64:b7:a0:1a:65:49:5c:76:e5:8d:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc
Validity
Not Before: Sep 15 16:46:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ddb5078788856c4df58ba24b2ed9a7e5168b344c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:21:35:81:22:34:ae:34:d9:fc:8f:64:6f:50:
53:0c:08:03:7a:60:13:34:6f:e6:14:a7:e8:5f:e3:
cf:9a:3c:56:dd:b1:05:3e:0f:f5:bc:c6:39:9b:95:
4a:95:78:ab:58:b9:00:a5:d8:5c:20:68:37:88:71:
62:49:b7:1c:6f:4d:9b:6a:90:89:96:bf:81:9f:f0:
de:8d:0e:46:d4:39:7e:06:4e:82:8a:e6:13:dd:93:
30:1e:43:b9:02:ab:35:87:aa:42:d5:04:4b:15:25:
51:05:33:4c:72:7d:e6:f4:82:0d:9c:b4:da:f2:28:
9f:18:15:e3:04:25:24:07:90:58:9b:db:cf:83:58:
06:e3:ea:61:63:05:f5:6f:c8:3e:51:a0:22:1a:03:
84:37:c0:ea:48:f6:7f:6c:ea:ec:99:67:ed:55:cb:
75:b1:43:1e:3e:76:8e:07:bc:86:ce:0f:92:1f:28:
4c:ff:77:49:ff:d1:8e:18:b0:0c:fd:50:f7:fc:7c:
b4:ab:bb:f4:2b:3d:96:01:fd:ea:09:5e:3c:5a:bf:
e5:63:23:2e:78:d9:da:2d:bf:7d:89:3b:90:68:e1:
b0:bf:97:aa:e3:fd:d3:fc:e5:48:08:33:25:aa:a6:
7f:10:15:44:3f:ce:a6:cc:d2:3f:f0:4d:40:ae:6f:
7e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:B5:07:87:88:85:6C:4D:F5:8B:A2:4B:2E:D9:A7:E5:16:8B:34:4C
X509v3 Authority Key Identifier:
keyid:CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/3bUHh4iFbE31i6JLLtmn5RaLNEw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.163.179.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:2a:6c:04:ea:b7:f6:1d:86:b7:1f:c0:d9:0d:68:5a:8f:1c:
0a:a6:0d:dc:30:9d:fe:85:15:c0:51:e9:24:97:20:77:c2:3b:
8f:23:01:ae:78:a5:35:7f:41:93:21:8a:a4:33:e9:38:63:80:
11:58:e8:20:05:30:be:58:a0:49:d5:fb:40:00:5e:99:c3:b3:
a6:bd:f2:d8:81:ce:91:e6:72:d8:75:2a:96:41:26:4e:d2:4c:
74:74:e0:68:b6:67:cf:14:83:98:a6:ad:81:ad:a5:e6:81:e5:
54:9a:ee:40:95:61:29:a6:c2:6f:7a:ee:13:c0:a1:8c:da:ac:
92:3a:a4:7b:18:2c:3c:e4:49:1a:6f:08:15:72:4f:05:70:b7:
b1:c1:a2:f1:5b:33:ac:71:b0:e5:f0:84:aa:24:76:0e:1d:86:
0d:b4:c0:c6:6d:c4:31:f6:ed:cb:d2:04:dc:ce:ea:ba:cc:ff:
a9:70:95:4b:2e:03:b4:5d:51:bc:de:53:2c:b1:93:43:b9:f5:
a5:f7:61:ca:c5:bd:62:c8:5b:88:8d:d9:38:87:f9:c0:8b:a9:
42:4a:57:01:37:2d:7a:fd:76:fe:7c:db:49:d7:ce:51:77:41:
33:85:77:42:fc:5d:f3:34:22:a1:65:cb:67:74:46:18:ac:e1:
84:15:fc:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 23:25:25 2025 by rpki-client