Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/3pElPQX5nfhr-v_K0Nz2xfjAU7o.roa
File: 3pElPQX5nfhr-v_K0Nz2xfjAU7o.roa (raw, json)
Hash identifier: 6gZ/2xAQn0Zg7wbs59+ceud/eOP3ydDnkoAm1TPe+uY=
Subject key identifier: DE:91:25:3D:05:F9:9D:F8:6B:FA:FF:CA:D0:DC:F6:C5:F8:C0:53:BA
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0199AEA0DB96BC971EDAF2DBC8C28142AF58
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/3pElPQX5nfhr-v_K0Nz2xfjAU7o.roa
Signing time: Sat 04 Oct 2025 09:50:01 +0000
ROA not before: Sat 04 Oct 2025 09:50:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 133495
IP address blocks: 45.9.157.0/24 maxlen: 24
45.90.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ae:a0:db:96:bc:97:1e:da:f2:db:c8:c2:81:42:af:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 4 09:50:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=de91253d05f99df86bfaffcad0dcf6c5f8c053ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:72:87:e7:a8:ea:4b:59:84:cd:90:d8:5f:5e:
f4:00:3c:4f:0c:35:1c:4f:86:da:e4:f1:bd:f7:51:
c3:f1:d2:f9:e1:1d:15:82:39:43:32:40:f3:cb:fd:
6a:7b:0b:80:4f:3c:4d:bd:7d:11:3f:db:aa:e9:1d:
08:45:71:17:fe:99:19:8b:f5:2a:ba:0b:ce:4d:60:
4e:d0:7f:d4:84:33:78:a5:3b:b3:d4:3d:02:2a:69:
9d:4d:ef:1e:99:01:c4:af:51:7b:a6:be:10:59:27:
89:47:15:c2:95:c1:15:0d:8a:6d:4a:bf:f1:39:43:
16:66:4b:49:0f:38:23:7c:2f:7d:df:1b:e8:8f:ff:
83:7e:7a:2c:15:56:22:c2:23:cd:95:2c:d9:38:79:
53:b9:19:77:1b:e9:ef:2c:25:22:cc:8d:70:b6:42:
f6:97:5e:88:89:34:b5:e7:7e:16:28:2a:44:6c:1a:
6a:6e:7f:89:58:c3:af:8a:2b:a7:be:c4:78:1c:db:
fb:31:cc:14:e6:50:7c:1e:bf:27:cf:b2:4e:31:55:
9f:01:b3:58:6a:1e:34:2b:35:71:19:3a:94:37:31:
cd:5a:98:02:9e:d9:d4:06:3b:d8:78:b0:20:89:51:
3a:b1:a3:1c:0f:a0:f7:cc:ef:1b:9b:94:7a:ab:32:
07:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:91:25:3D:05:F9:9D:F8:6B:FA:FF:CA:D0:DC:F6:C5:F8:C0:53:BA
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/3pElPQX5nfhr-v_K0Nz2xfjAU7o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.157.0/24
45.90.89.0/24
Signature Algorithm: sha256WithRSAEncryption
08:d3:54:e6:8e:b5:5e:97:e9:be:d0:d3:ad:c7:f8:95:8b:4d:
21:78:b9:80:23:89:2c:b5:21:f3:e2:3b:27:67:fe:a9:04:dd:
fe:11:69:3c:ef:31:79:95:49:b6:2e:13:11:2b:42:ea:13:c8:
e9:95:29:3f:98:6e:42:38:59:07:9a:22:10:0e:d2:00:a8:1e:
cd:91:26:29:3e:ae:fe:ac:10:e9:8d:7c:35:c8:cc:02:07:ca:
4d:45:b9:85:3c:0a:a4:83:4c:b2:93:0b:2e:a3:25:5a:3b:15:
dd:e4:d2:18:d5:b3:15:53:84:f9:df:e5:54:6b:48:a4:20:93:
9f:99:ff:ce:6b:65:de:23:7a:8a:85:14:5b:63:fa:96:13:79:
ed:58:b0:c0:95:04:94:f9:a3:59:2b:44:6a:6a:54:5d:9b:2f:
b2:93:64:81:da:04:47:da:3f:28:25:c2:59:11:06:69:1a:7d:
66:0a:a5:f0:6b:8b:1c:87:f9:f6:15:5e:69:8e:1a:7e:42:92:
21:25:26:0e:cd:33:09:9d:11:9d:9d:cd:65:d8:61:1d:9b:e6:
1b:f2:54:a7:31:76:6e:2d:47:49:0f:b6:26:5b:91:19:cb:85:
ab:44:78:ca:8f:fc:3b:4b:3f:98:0f:41:76:0f:bb:4f:60:b0:
a6:f5:f4:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:05:51 2025 by rpki-client