Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/3mEix0msHjr3Ixg3EZaN7HHjGH0.roa
File: 3mEix0msHjr3Ixg3EZaN7HHjGH0.roa (raw, json)
Hash identifier: ptvW8jTvyf/qn8pEMqMfrjkHcOTSJi3koEIWlzMS3AU=
Subject key identifier: DE:61:22:C7:49:AC:1E:3A:F7:23:18:37:11:96:8D:EC:71:E3:18:7D
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 0198A033C879DD4D23B8C60DF16964DEF120
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/3mEix0msHjr3Ixg3EZaN7HHjGH0.roa
Signing time: Tue 12 Aug 2025 21:33:24 +0000
ROA not before: Tue 12 Aug 2025 21:33:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197450
IP address blocks: 45.138.180.0/24 maxlen: 24
77.83.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:33:c8:79:dd:4d:23:b8:c6:0d:f1:69:64:de:f1:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Aug 12 21:33:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=de6122c749ac1e3af723183711968dec71e3187d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d5:94:e3:d6:85:2a:4f:4c:24:d9:ad:68:49:
54:14:bd:4b:f3:8b:7e:38:df:a4:05:dd:b1:07:f6:
16:36:e9:f6:49:b9:9c:0d:0a:6a:ac:5e:d0:cc:f4:
87:8f:81:41:3d:11:4d:4e:d1:c3:59:78:d2:04:5c:
d0:2d:8b:1e:ae:f1:8e:11:1b:5c:80:25:4e:f7:10:
aa:a3:1d:3e:74:9c:49:56:02:e6:b1:36:7f:27:e5:
1e:83:0b:7c:dd:cc:56:94:cc:30:96:45:37:6e:2f:
6a:dc:0d:0c:9e:bc:78:d4:dd:71:07:e3:5f:3b:9b:
c5:29:fc:9d:6a:cf:49:f5:b1:b4:d8:d4:11:e4:e2:
4b:05:1f:af:f1:2d:56:91:2d:65:fe:95:7a:f9:04:
d8:93:82:49:03:23:6b:c8:7f:e2:0b:6b:3a:10:88:
2a:c7:e5:26:32:2d:c9:13:11:70:4f:db:7a:00:8d:
82:8c:bc:40:fd:95:44:fd:68:9c:ba:36:1d:f2:9c:
af:e5:04:20:2b:f1:e3:b7:62:5b:46:3f:20:fd:c8:
c5:e3:6c:c4:8c:5e:e5:ae:5f:f9:5a:1f:7e:ca:af:
0e:19:ae:0b:12:a0:d4:f3:df:07:8d:23:55:0b:08:
21:f8:20:d6:94:44:c8:31:28:4a:6e:b7:03:90:b6:
84:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:61:22:C7:49:AC:1E:3A:F7:23:18:37:11:96:8D:EC:71:E3:18:7D
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/3mEix0msHjr3Ixg3EZaN7HHjGH0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.180.0/24
77.83.39.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:71:c8:89:43:15:be:4d:1c:6b:e8:e1:ac:6b:56:60:06:65:
15:d6:aa:c2:51:aa:7c:bd:54:55:c4:1f:c7:10:3c:7f:7c:9b:
59:32:f0:3e:3d:33:df:c5:3c:3f:ec:2f:5b:c2:5a:43:6a:3d:
c5:4d:ab:2f:4f:18:8a:10:c1:10:e7:13:1e:c3:19:a4:19:b2:
35:cc:a3:47:a0:b9:b9:2b:35:92:fc:f6:e3:b9:b6:42:4c:27:
b9:a8:16:df:13:64:2a:83:c3:f0:d2:30:03:7e:3a:3f:2b:90:
38:77:4a:8c:6b:66:11:f6:6d:90:3b:c1:87:2d:7a:82:2e:a1:
bc:ae:5a:34:2b:6f:42:e6:95:7c:ce:c8:a6:a0:32:ac:d7:bb:
86:21:04:98:4a:2c:62:43:d6:16:ac:ee:88:10:f2:bf:55:d5:
ea:78:f4:1d:e6:fc:28:93:a1:55:e4:cc:05:52:9d:70:47:6e:
d4:e4:0a:50:0e:25:57:21:c3:d9:72:81:ec:dd:1a:fa:0f:65:
39:e0:cd:17:87:fc:9b:1a:9f:cc:f7:a2:1d:3a:02:c6:12:91:
d9:72:7c:9e:12:ed:e2:23:e8:55:6e:50:f3:3c:6c:f5:c4:b1:
27:94:c3:24:9e:5c:f9:9b:14:2f:6c:84:0d:8a:ac:2b:12:5b:
01:7b:e6:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:40:48 2025 by rpki-client