Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/T_3CW91l4Ozg0UI-EMyAPQNoU_g.roa
File: T_3CW91l4Ozg0UI-EMyAPQNoU_g.roa (raw, json)
Hash identifier: SMOplo2gA8wZUBwfetQvreWq71DhKQvNI+FZVh2vTrU=
Subject key identifier: 4F:FD:C2:5B:DD:65:E0:EC:E0:D1:42:3E:10:CC:80:3D:03:68:53:F8
Certificate issuer: /CN=2415bf9c61c85db7c99ac4cdf79257e7997ab77c
Certificate serial: 01996DF2F766C3B56734189990D166DFB283
Authority key identifier: 24:15:BF:9C:61:C8:5D:B7:C9:9A:C4:CD:F7:92:57:E7:99:7A:B7:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JBW_nGHIXbfJmsTN95JX55l6t3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/T_3CW91l4Ozg0UI-EMyAPQNoU_g.roa
Signing time: Sun 21 Sep 2025 20:24:23 +0000
ROA not before: Sun 21 Sep 2025 20:24:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 37.153.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/JBW_nGHIXbfJmsTN95JX55l6t3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/JBW_nGHIXbfJmsTN95JX55l6t3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/JBW_nGHIXbfJmsTN95JX55l6t3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:6d:f2:f7:66:c3:b5:67:34:18:99:90:d1:66:df:b2:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2415bf9c61c85db7c99ac4cdf79257e7997ab77c
Validity
Not Before: Sep 21 20:24:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4ffdc25bdd65e0ece0d1423e10cc803d036853f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:1e:05:7e:a3:cc:19:f1:03:35:dd:c7:89:04:
87:61:3b:12:cc:59:88:67:b3:7e:8a:91:28:7b:4b:
84:8a:d4:6c:63:5f:96:20:65:6f:ab:97:b4:5a:1c:
e5:01:28:e6:3a:87:5f:7e:05:3d:63:eb:4d:b3:f6:
b1:f8:5d:d6:86:e9:e1:9a:72:fb:7d:90:c5:48:b6:
8b:72:6c:3e:2a:fe:af:50:67:b4:c1:2d:fc:75:b9:
39:6c:2b:6f:85:ef:aa:db:8a:79:a9:49:d7:35:7a:
d2:82:50:e9:cd:73:1d:b0:35:4a:0f:e2:e2:61:ca:
b8:f4:7f:db:5d:03:2e:a1:d3:40:52:ea:c9:29:73:
8b:d1:3b:ba:8d:e6:2f:e6:0d:1d:90:76:44:dc:b4:
c1:a2:1a:de:4f:2b:7b:22:5f:86:f5:b1:2a:54:0c:
35:be:7f:3d:a5:09:88:1d:ad:c5:de:0f:bd:3a:b6:
df:59:8d:42:49:54:3f:ed:63:fd:79:6b:3b:70:e0:
d0:13:6e:b9:be:45:00:83:3d:46:28:0f:cb:8b:94:
0e:58:d6:9b:16:d9:69:a7:72:7a:aa:fc:01:f8:ae:
ff:eb:6d:a8:23:50:38:af:78:07:26:2f:37:c3:d7:
45:45:f2:35:52:6f:e5:5b:7e:af:f4:d6:bd:1a:ee:
b7:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:FD:C2:5B:DD:65:E0:EC:E0:D1:42:3E:10:CC:80:3D:03:68:53:F8
X509v3 Authority Key Identifier:
keyid:24:15:BF:9C:61:C8:5D:B7:C9:9A:C4:CD:F7:92:57:E7:99:7A:B7:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JBW_nGHIXbfJmsTN95JX55l6t3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/T_3CW91l4Ozg0UI-EMyAPQNoU_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/JBW_nGHIXbfJmsTN95JX55l6t3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.153.153.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:b6:ff:bf:97:9e:90:df:bb:45:cd:56:fe:8a:dc:94:90:50:
0b:f1:60:ca:5a:17:67:88:1e:f9:3a:10:d7:0d:87:9f:ba:46:
8f:c6:2c:d9:ba:88:19:28:60:c5:da:f0:f9:d7:00:e2:bb:e7:
7e:d5:23:6b:62:91:fd:35:05:e1:3c:60:ec:00:49:4d:34:b9:
01:dd:34:69:5e:45:8a:23:3e:20:95:52:a5:93:4b:23:7d:c0:
30:00:e0:f1:78:70:56:3f:c0:8d:7e:f7:4e:cc:1d:19:36:ef:
74:1d:50:ee:9c:db:e7:83:92:5a:c0:59:94:87:db:7d:04:86:
86:e4:ee:2c:dc:a4:2a:c8:46:9e:79:9f:b9:4f:2e:01:3e:b9:
4c:49:eb:18:76:0b:35:3c:27:e4:55:f9:a4:6a:c7:24:6b:34:
b6:c6:f5:91:f3:7c:85:16:97:b8:03:d4:af:62:fb:76:da:11:
1c:1c:ac:ec:95:96:e0:ec:c1:e7:16:a0:37:07:04:30:7a:62:
b4:f6:09:57:8c:f4:5a:ef:e2:53:e2:e7:c7:06:f9:5c:f9:39:
31:b5:ab:49:57:a4:ea:b5:b0:e5:9b:e1:21:c2:c1:da:d5:f1:
0f:7a:9a:19:0e:50:12:51:92:1c:ac:2f:3b:1a:e8:aa:44:e7:
7b:e4:8a:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:55:09 2025 by rpki-client