Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/3XRXUFFaWVh_usZeR7hZVb4Jvcw.roa
File: 3XRXUFFaWVh_usZeR7hZVb4Jvcw.roa (raw, json)
Hash identifier: yAwRlDNm7OdLzFSk+lSyDArDl3R3ItMyb247bPQjawI=
Subject key identifier: DD:74:57:50:51:5A:59:58:7F:BA:C6:5E:47:B8:59:55:BE:09:BD:CC
Certificate issuer: /CN=6c03a2caf298019fbd668621516c8c6e1d10e83c
Certificate serial: 0199BE046125217119468206256ADFD3611B
Authority key identifier: 6C:03:A2:CA:F2:98:01:9F:BD:66:86:21:51:6C:8C:6E:1D:10:E8:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/3XRXUFFaWVh_usZeR7hZVb4Jvcw.roa
Signing time: Tue 07 Oct 2025 09:33:02 +0000
ROA not before: Tue 07 Oct 2025 09:33:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203020
IP address blocks: 45.114.12.0/22 maxlen: 32
45.250.64.0/22 maxlen: 32
91.132.114.0/23 maxlen: 32
103.53.216.0/22 maxlen: 24
103.240.180.0/22 maxlen: 32
185.232.45.0/24 maxlen: 32
193.28.182.0/24 maxlen: 32
193.28.191.0/24 maxlen: 32
193.28.202.0/24 maxlen: 32
193.28.237.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.mft
rsync://rpki.ripe.net/repository/DEFAULT/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:be:04:61:25:21:71:19:46:82:06:25:6a:df:d3:61:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c03a2caf298019fbd668621516c8c6e1d10e83c
Validity
Not Before: Oct 7 09:33:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dd745750515a59587fbac65e47b85955be09bdcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a8:98:ee:08:60:89:75:9f:ba:26:dd:3b:38:
9d:02:7b:b7:ed:6f:f0:6a:42:a0:30:6d:c2:bb:57:
c2:68:2b:bf:83:35:18:b3:5b:4a:8a:43:7e:5a:58:
6c:06:ee:74:8e:e6:d7:2f:8b:a3:5a:21:16:a9:34:
aa:50:0e:5f:b1:b6:b3:7c:61:35:ba:f7:61:8a:c3:
34:6f:1b:1c:f5:0b:74:67:26:7f:d3:a9:ce:11:01:
31:e5:4c:4c:29:dd:43:d4:b7:c0:f4:30:b3:dd:e0:
80:6e:2c:19:75:9b:f0:4b:f0:e0:48:63:bc:8a:e9:
95:60:29:92:fb:8b:84:59:4e:15:68:bc:ae:f6:a5:
cc:27:b9:1b:55:59:e9:5d:12:7e:19:32:49:c1:11:
31:2a:31:1e:c4:cc:87:b3:5a:18:c8:6d:b5:01:1b:
07:30:c2:76:56:20:ce:46:c6:91:2c:e2:e5:8c:d9:
a2:b2:7a:b1:43:a3:10:cf:27:d2:4b:af:17:29:b2:
2b:13:87:1c:29:89:c9:35:c8:40:4a:d1:07:41:70:
e9:42:63:a9:e5:ed:ec:45:5c:d2:b5:4f:26:ca:41:
9c:9f:b7:d5:bf:98:59:de:46:45:82:f1:b3:81:cc:
af:ae:e3:f3:bb:1f:d9:8f:53:9b:37:24:52:cd:53:
2e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:74:57:50:51:5A:59:58:7F:BA:C6:5E:47:B8:59:55:BE:09:BD:CC
X509v3 Authority Key Identifier:
keyid:6C:03:A2:CA:F2:98:01:9F:BD:66:86:21:51:6C:8C:6E:1D:10:E8:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/3XRXUFFaWVh_usZeR7hZVb4Jvcw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.114.12.0/22
45.250.64.0/22
91.132.114.0/23
103.53.216.0/22
103.240.180.0/22
185.232.45.0/24
193.28.182.0/24
193.28.191.0/24
193.28.202.0/24
193.28.237.0/24
Signature Algorithm: sha256WithRSAEncryption
17:01:67:04:dc:a9:18:9d:04:09:34:6b:89:ff:73:bc:e9:9e:
b7:6e:51:98:80:d5:51:29:f4:76:5a:ec:b8:f4:88:a1:7a:39:
08:10:55:34:10:84:4c:f8:b6:74:5e:41:50:fb:45:13:36:f5:
a1:d4:81:95:47:dd:71:2f:45:bd:14:7e:3e:35:87:52:c5:f8:
47:83:03:d4:b2:80:8d:fe:f7:9a:af:36:04:3d:0a:eb:44:49:
66:aa:e5:a6:98:da:d5:67:e0:23:49:69:8f:88:c8:55:03:a1:
2b:68:db:bd:94:86:0e:76:c7:cd:30:9d:7d:13:3f:c2:4f:2a:
f7:8d:08:32:c6:dc:fe:01:f3:24:c7:55:cc:35:96:e5:92:ba:
ca:24:7d:30:fc:a5:46:c3:b1:04:6c:ea:ec:b0:a6:43:84:79:
04:bc:3a:c0:8c:60:14:a2:bc:b5:9b:84:45:fd:69:0f:ec:91:
7d:7f:7c:e1:98:93:1d:2d:11:a0:1a:0a:5a:3f:38:fe:12:b7:
1f:f7:50:f1:09:a8:39:84:9b:22:36:51:8a:ae:0e:a2:5f:a0:
b6:7d:1a:05:a6:59:4e:d4:a8:46:a7:2f:64:0f:94:7c:61:72:
63:4c:0d:c3:92:92:b4:c3:05:5f:f2:c3:71:92:2b:2b:3b:3e:
26:69:1b:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 16:10:31 2025 by rpki-client