Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/3EzuBFNcE3-Y9EKRZTTEJ-hJ0r0.roa
File: 3EzuBFNcE3-Y9EKRZTTEJ-hJ0r0.roa (raw, json)
Hash identifier: c7Qo95/rDIGaWw+UtmeeU76uTMOHrZiqKPmI6hQSOzo=
Subject key identifier: DC:4C:EE:04:53:5C:13:7F:98:F4:42:91:65:34:C4:27:E8:49:D2:BD
Certificate issuer: /CN=49216f5c165b827a7fd73d8107aebd2f63c63e24
Certificate serial: 0199042D3397357DC0274A842FE9D8446FCD
Authority key identifier: 49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/3EzuBFNcE3-Y9EKRZTTEJ-hJ0r0.roa
Signing time: Mon 01 Sep 2025 07:28:15 +0000
ROA not before: Mon 01 Sep 2025 07:28:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57443
IP address blocks: 81.90.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 07:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:04:2d:33:97:35:7d:c0:27:4a:84:2f:e9:d8:44:6f:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49216f5c165b827a7fd73d8107aebd2f63c63e24
Validity
Not Before: Sep 1 07:28:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dc4cee04535c137f98f442916534c427e849d2bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e7:6a:41:99:20:b4:d3:63:b7:d8:a9:4b:fc:
a7:25:20:c6:e0:f9:4c:1e:28:06:0f:55:66:10:93:
c2:e6:bc:3d:12:2c:33:4d:58:53:76:0b:16:79:f2:
77:01:ef:fe:78:45:1e:2f:58:39:e2:db:18:0b:46:
c5:30:cd:39:b8:f5:f1:6f:05:c2:10:b3:6a:52:3e:
ab:36:55:70:cf:14:b7:52:86:2f:ea:3c:6c:ad:16:
11:d2:f1:5d:29:df:2c:5c:b7:41:5f:a4:47:54:41:
01:4f:65:37:fa:f9:44:c4:a8:e0:da:87:2b:5e:cc:
81:6a:3d:3d:33:bf:d1:9d:fb:98:15:51:5c:15:bc:
f7:21:c9:4a:d5:11:cb:2e:ce:15:6e:67:94:31:fa:
0c:90:a0:75:41:82:c5:d5:08:6f:2e:b6:46:55:8b:
6b:0d:88:51:a3:9d:5b:92:95:e5:48:3d:02:aa:c4:
8a:a2:92:41:83:3b:16:54:c2:64:46:59:d5:28:5b:
11:62:17:0c:eb:44:b1:5d:9c:a4:81:86:61:73:cb:
4d:e0:69:9f:27:84:94:97:32:d9:96:48:00:db:d2:
7d:04:a2:14:82:63:0d:5e:e0:aa:70:ca:b6:c5:9a:
d8:d5:4f:a8:28:20:09:ec:64:94:45:01:59:21:ad:
07:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:4C:EE:04:53:5C:13:7F:98:F4:42:91:65:34:C4:27:E8:49:D2:BD
X509v3 Authority Key Identifier:
keyid:49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/3EzuBFNcE3-Y9EKRZTTEJ-hJ0r0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.90.30.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:12:8b:87:68:fc:f4:76:1e:0c:c8:ef:73:f9:d8:4d:9d:e6:
a3:2d:a3:2e:24:ad:81:d8:b2:8d:12:bf:f7:9d:3b:2c:16:57:
70:fe:a9:8f:5f:34:96:4f:83:9a:b5:9c:29:52:e9:ae:65:08:
20:32:33:6b:1b:f0:98:03:52:b3:47:99:f2:26:1b:9a:71:02:
ab:74:03:13:a9:9c:61:fb:46:2f:05:4a:83:3b:2d:f8:10:83:
41:96:bd:28:37:41:85:2e:da:e5:02:e1:c0:6c:29:58:f3:79:
bc:db:b4:36:54:f6:9b:b8:77:d5:4f:a2:92:95:a6:a8:87:fe:
63:10:9d:5d:16:da:67:c9:2e:f3:8b:6d:0a:00:82:0b:8f:54:
dd:a1:ec:bd:c4:3c:4e:ea:d7:98:4c:d0:0d:cf:f1:99:f2:08:
db:54:e7:e3:57:8a:32:b3:a5:88:fc:75:37:72:8b:c1:98:50:
c5:a2:8c:1c:f8:19:54:4d:5e:ed:a8:88:18:62:6f:e2:33:53:
35:56:68:c1:cf:6e:93:42:72:b8:24:f7:bb:c1:20:c2:98:85:
1a:0a:49:50:f7:6e:2f:51:1d:ae:e3:78:e0:11:2b:2a:c3:a1:
b5:84:b2:5b:7c:65:06:53:2b:0c:a9:20:7e:0b:a4:f1:f2:74:
b6:94:07:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 12:33:48 2025 by rpki-client