Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/3GQpF2Vp8B3R3JnRIAMETE_t7tI.roa
File: 3GQpF2Vp8B3R3JnRIAMETE_t7tI.roa (raw, json)
Hash identifier: oWvlkdRrP8kPgL3vbt5miFJzX8joHcu8Pn8uuHnwOf4=
Subject key identifier: DC:64:29:17:65:69:F0:1D:D1:DC:99:D1:20:03:04:4C:4F:ED:EE:D2
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 0199C3632348F77279C34A66360F53E24919
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/3GQpF2Vp8B3R3JnRIAMETE_t7tI.roa
Signing time: Wed 08 Oct 2025 10:34:38 +0000
ROA not before: Wed 08 Oct 2025 10:34:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199109
IP address blocks: 2a0c:9a40:8320::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c3:63:23:48:f7:72:79:c3:4a:66:36:0f:53:e2:49:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Oct 8 10:34:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dc6429176569f01dd1dc99d12003044c4fedeed2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2d:6b:3b:e9:08:ec:42:87:2c:23:e7:e6:8c:
cb:26:92:0f:8a:c6:70:2e:6e:ab:c6:89:09:b5:1d:
5b:37:44:19:cd:3d:86:07:88:75:4f:15:4f:14:9d:
95:55:7e:a2:f6:2b:eb:00:68:0f:5f:47:39:db:4c:
3a:e1:b2:7c:cf:05:5b:ee:96:47:85:da:85:e6:96:
70:5f:3f:c5:39:a4:9c:eb:52:59:bf:81:fe:5e:6b:
2d:4d:c9:ee:67:08:f7:a0:e1:47:8c:c3:79:0f:c1:
dd:9d:2a:8b:d2:25:e2:f4:46:a8:7a:02:74:33:88:
51:07:75:23:7e:18:f1:73:50:c3:76:03:73:9d:6d:
ca:90:3f:23:04:ec:59:65:bf:31:eb:65:a2:1c:d0:
50:1f:43:e9:70:43:aa:a1:43:57:83:78:87:52:42:
88:7e:53:9d:df:74:0d:87:fe:94:05:aa:9e:8d:b7:
a0:a7:58:a3:8e:6d:81:5a:b4:1a:38:eb:00:c0:f7:
18:b3:08:d7:2a:02:39:4a:d2:08:a4:19:b1:c2:d2:
e2:35:a1:1d:fe:cd:ec:5a:12:71:24:76:ce:bd:c3:
74:b6:89:52:09:2d:9b:7d:ec:97:0d:91:38:d4:85:
aa:a3:30:89:33:d2:8f:87:e4:70:f4:06:7d:c0:ba:
95:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:64:29:17:65:69:F0:1D:D1:DC:99:D1:20:03:04:4C:4F:ED:EE:D2
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/3GQpF2Vp8B3R3JnRIAMETE_t7tI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8320::/44
Signature Algorithm: sha256WithRSAEncryption
4c:b3:a5:75:d1:29:3b:0a:2b:28:55:5c:42:88:af:29:b4:70:
9b:2e:91:5a:98:b1:5e:d9:67:d2:2a:32:e9:ab:d9:e9:64:4f:
10:dd:f0:e2:1a:d3:a4:8a:82:fb:bf:60:40:9d:fb:c1:bb:c1:
84:7a:d2:8f:1c:92:d4:e8:b8:11:3e:df:64:83:90:8a:35:7b:
01:22:3d:9d:46:9b:78:3a:e7:3b:7d:bb:9f:e4:7a:2b:51:93:
62:0c:3b:5c:be:be:8d:a7:18:df:98:9f:02:98:8b:92:30:20:
24:10:2c:99:74:57:5f:82:64:f5:92:2c:79:45:0d:59:31:df:
a9:97:32:5b:72:9f:8f:ba:a9:33:47:1d:34:07:c7:60:07:da:
4e:cc:f6:37:3e:f6:75:43:cd:39:8d:f9:91:8d:3e:ac:bd:da:
f6:6d:3c:6d:d9:26:7f:97:f6:65:f5:5a:b4:15:09:46:f3:c8:
bb:a0:40:bb:15:90:05:8c:aa:35:a0:22:1f:0c:d2:0c:1d:2d:
31:d4:67:a4:56:60:13:ae:11:15:25:bd:27:ab:a9:aa:90:47:
61:57:d6:a4:d8:d2:ae:b1:9f:fd:bd:99:8e:32:54:03:9b:3d:
76:49:a2:01:3c:e3:36:9a:b8:bd:4f:dc:8b:69:de:e2:bb:4a:
9e:f5:4c:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:24:19 2025 by rpki-client