Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/3uqZYvXfoULOBYZMq0BztkG5f9c.roa
File: 3uqZYvXfoULOBYZMq0BztkG5f9c.roa (raw, json)
Hash identifier: k7oN8D2la5Ob8Bo62WBcujAKAcQ9w4DY01xOiPOh5Ec=
Subject key identifier: DE:EA:99:62:F5:DF:A1:42:CE:05:86:4C:AB:40:73:B6:41:B9:7F:D7
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 019957EEDC5D58E4CA88D6C2482E47E1FD68
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/3uqZYvXfoULOBYZMq0BztkG5f9c.roa
Signing time: Wed 17 Sep 2025 13:48:15 +0000
ROA not before: Wed 17 Sep 2025 13:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199527
IP address blocks: 80.81.39.0/24 maxlen: 24
83.223.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:57:ee:dc:5d:58:e4:ca:88:d6:c2:48:2e:47:e1:fd:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Sep 17 13:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=deea9962f5dfa142ce05864cab4073b641b97fd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:1b:03:25:66:7a:2f:68:08:89:37:96:11:7f:
28:93:13:d6:09:89:68:9c:46:6b:0b:bf:b4:31:0d:
c1:e4:08:c4:d7:78:50:3e:1d:80:e9:fe:ce:a6:dd:
8e:20:fb:16:b0:60:9c:34:59:84:ce:b1:95:c0:f4:
e5:9c:62:25:34:9d:28:c2:f5:99:f0:fb:9a:cf:89:
1e:d1:23:8c:af:d2:ba:d8:c9:69:93:98:8a:22:82:
4c:08:e8:09:cf:6f:e9:57:8f:5d:de:fe:15:d6:2d:
e3:0f:72:58:a1:88:16:ea:5a:4b:8d:46:a4:51:71:
ee:67:21:ba:98:a4:12:ad:bf:47:8a:4a:0e:d8:45:
13:8b:20:5f:b6:bb:c9:0b:35:4e:e2:06:f5:64:b3:
6c:67:4f:9f:a3:15:34:8a:45:9d:60:ac:23:cd:cb:
ad:3e:cf:b5:5b:13:a5:ca:8c:73:1d:86:35:2e:ae:
f4:cd:c6:bc:a0:19:d3:a9:6d:67:ea:43:74:a3:92:
4a:e4:63:28:62:89:81:94:8f:85:33:bf:02:32:52:
bc:f0:20:a3:17:4d:93:f1:5f:2d:f3:ca:22:80:94:
6a:f6:13:12:30:94:61:eb:ae:4f:8f:22:f4:44:4e:
32:77:f3:e2:b8:e7:1c:36:16:51:20:96:6a:b5:f3:
77:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:EA:99:62:F5:DF:A1:42:CE:05:86:4C:AB:40:73:B6:41:B9:7F:D7
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/3uqZYvXfoULOBYZMq0BztkG5f9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.81.39.0/24
83.223.157.0/24
Signature Algorithm: sha256WithRSAEncryption
22:f3:41:84:3a:36:7c:fd:69:63:19:ba:b7:8a:18:5e:62:f1:
99:fc:29:87:06:6a:dc:36:94:3f:48:4d:97:2f:49:09:cc:88:
59:04:6d:f1:d4:46:34:81:45:d4:36:2c:3b:a3:a3:1e:e9:c5:
6b:93:92:6f:ae:46:7d:f4:dd:e3:39:25:5a:a4:e7:12:78:81:
3b:01:4a:19:69:d2:f9:16:86:27:df:a1:3f:30:c1:b6:ef:66:
60:5a:a9:54:a7:d5:6a:16:1e:28:e6:7a:6d:94:77:9b:e9:b4:
b9:3a:f6:a0:f5:dc:09:a8:b6:2f:dc:d6:59:95:7f:9f:95:69:
44:69:68:1f:47:c3:9b:85:c7:c5:a2:86:e4:e7:e6:bb:70:7b:
23:f6:cf:62:a6:29:de:dc:29:53:b5:b7:2a:74:ee:86:18:04:
05:23:7d:76:fe:6b:24:7a:28:a4:db:ee:ba:a3:87:03:9a:75:
20:c9:01:39:90:0c:1f:89:53:e9:83:58:c5:bb:62:2b:b3:53:
6d:45:e3:1d:09:42:fd:27:89:4a:85:7b:29:de:60:a3:4f:fe:
9c:bf:d9:81:4b:5b:dc:0c:5b:95:c1:f5:92:53:f6:13:b2:92:
e2:6d:3a:e2:6c:0e:81:e5:b8:1a:71:c4:6b:b7:53:33:e0:f0:
bd:07:38:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:14:57 2025 by rpki-client