Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/PI3liVbKDiaCLGIugnWJkh3DbUQ.roa
File: PI3liVbKDiaCLGIugnWJkh3DbUQ.roa (raw, json)
Hash identifier: KjVpzVOHzI2cWVyzxXu5Z5MjrctS7eEJdBT+u20+ygI=
Subject key identifier: 3C:8D:E5:89:56:CA:0E:26:82:2C:62:2E:82:75:89:92:1D:C3:6D:44
Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial: 01990C37A1BD877BA43AA3C6F8FEFA27BA6D
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/PI3liVbKDiaCLGIugnWJkh3DbUQ.roa
Signing time: Tue 02 Sep 2025 20:56:36 +0000
ROA not before: Tue 02 Sep 2025 20:56:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 80.246.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:0c:37:a1:bd:87:7b:a4:3a:a3:c6:f8:fe:fa:27:ba:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
Validity
Not Before: Sep 2 20:56:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3c8de58956ca0e26822c622e827589921dc36d44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a4:f0:43:92:46:3f:1d:20:3c:4c:37:0a:9f:
99:b0:c9:0d:50:b5:94:5b:3f:fb:62:e9:6a:92:36:
83:e1:fa:2d:92:81:3c:58:ef:43:30:69:96:e6:97:
20:99:52:f5:33:10:f4:26:c6:a0:5d:f1:03:a1:ac:
62:d8:c8:39:ca:fe:ac:ea:0e:0e:a8:b8:b2:02:e6:
dd:5e:06:5b:1f:b2:51:81:f5:75:af:2e:76:db:29:
dc:50:d8:ac:91:3d:35:bb:e6:7a:14:1e:90:c2:1f:
a7:15:17:e8:00:df:00:0c:fc:53:d6:e4:51:75:d1:
61:d8:16:73:ea:17:f9:04:e6:43:e0:73:d7:40:0c:
ce:87:19:79:45:12:92:ba:8c:92:c6:3f:0c:27:14:
ef:b7:03:b9:7b:a3:e7:85:17:b7:6a:fa:18:59:af:
45:d8:7d:b9:12:3c:77:b1:e7:30:f2:52:33:30:ab:
10:80:4b:4f:e0:74:d2:ce:62:68:40:ff:48:7b:9b:
96:3e:72:03:bc:30:e7:d0:21:80:21:b3:ee:30:b5:
c2:a6:49:c3:b2:e3:27:18:22:c5:36:e3:58:34:0f:
ba:90:51:24:3c:d7:ce:58:d7:e8:6b:7f:7e:2d:5f:
78:0d:f8:a0:56:f4:85:bf:c6:2f:d5:3e:bd:a8:b8:
24:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:8D:E5:89:56:CA:0E:26:82:2C:62:2E:82:75:89:92:1D:C3:6D:44
X509v3 Authority Key Identifier:
keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/PI3liVbKDiaCLGIugnWJkh3DbUQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.246.230.0/24
Signature Algorithm: sha256WithRSAEncryption
73:e0:88:1d:93:83:6a:b0:91:eb:f7:f3:04:ec:8d:10:77:5f:
b8:76:bf:75:7a:2b:b9:55:e5:c7:c2:a1:a5:db:be:20:7e:7e:
44:81:be:fe:2e:d4:db:95:c6:40:50:26:b0:aa:97:50:5c:35:
41:fe:70:4b:99:89:c3:26:41:73:69:5b:22:07:8a:17:15:06:
4c:0e:44:2b:c8:31:5f:9d:98:6d:c7:5a:e7:86:33:2e:0a:79:
d0:bc:3d:21:ff:9c:b5:c9:22:c3:38:ab:40:64:ed:2f:b8:22:
01:cd:61:1b:1d:d5:91:c7:76:04:9b:15:cd:cf:2b:9a:1e:78:
7c:00:3c:4f:7c:54:64:77:7b:f0:15:85:2e:09:54:ca:04:48:
df:f9:e0:28:61:0f:49:c2:1e:25:10:1f:7f:b1:3a:86:4b:53:
73:04:e1:54:fb:46:a0:e4:fd:e6:ea:e5:72:3c:12:43:e6:eb:
4d:a7:49:a4:d2:83:1c:9a:06:10:d4:44:50:27:7a:de:40:7a:
8a:3e:f8:08:d6:ad:8b:f8:f4:80:35:1c:80:3a:4a:92:31:71:
3e:96:ec:b6:29:e6:79:b9:00:63:ae:39:78:48:aa:01:88:17:
4d:e1:a7:b1:dd:9e:c4:c7:c3:50:40:c0:79:a8:0f:50:25:0a:
ef:cb:09:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 12:33:48 2025 by rpki-client