Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/3MnJDLOq_VBrHVvHK2f3mbUAwW0.roa
File: 3MnJDLOq_VBrHVvHK2f3mbUAwW0.roa (raw, json)
Hash identifier: 64LzPC+ZGrPKmCOqfPuSyQatIzMUWRCyv8INy9zu0ko=
Subject key identifier: DC:C9:C9:0C:B3:AA:FD:50:6B:1D:5B:C7:2B:67:F7:99:B5:00:C1:6D
Certificate issuer: /CN=bb0d4e85937b7a0f271054d28614f2934d4ea500
Certificate serial: 01989D860C0243A4502ED927896605E84B19
Authority key identifier: BB:0D:4E:85:93:7B:7A:0F:27:10:54:D2:86:14:F2:93:4D:4E:A5:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uw1OhZN7eg8nEFTShhTyk01OpQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/3MnJDLOq_VBrHVvHK2f3mbUAwW0.roa
Signing time: Tue 12 Aug 2025 09:04:24 +0000
ROA not before: Tue 12 Aug 2025 09:04:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206986
IP address blocks: 78.143.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/uw1OhZN7eg8nEFTShhTyk01OpQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9d:86:0c:02:43:a4:50:2e:d9:27:89:66:05:e8:4b:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb0d4e85937b7a0f271054d28614f2934d4ea500
Validity
Not Before: Aug 12 09:04:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dcc9c90cb3aafd506b1d5bc72b67f799b500c16d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ec:be:ec:6f:ef:e7:9e:27:c9:f4:c9:56:f3:
83:4d:a1:d6:f2:ed:05:c1:f8:ac:7f:f9:7d:62:98:
94:a0:24:fd:b8:da:8b:8e:d4:90:12:83:78:87:56:
00:2b:f2:70:99:ef:3d:0b:18:19:8f:6c:e0:31:fd:
db:7c:90:ee:02:5e:21:c2:e5:12:d6:eb:71:b1:d8:
a7:81:b4:ca:60:47:03:79:86:09:f9:d5:c8:33:90:
e5:a7:70:1b:8a:8a:22:fb:8d:d6:f5:e9:68:5b:cc:
23:3f:c7:a4:37:ce:cd:c6:ad:3d:7c:dd:ec:81:b9:
d6:dc:3a:1e:59:68:f4:9c:4a:b7:5d:99:a6:3f:d9:
45:b5:c7:cf:9d:e5:b5:8a:3f:16:a1:fe:34:37:9e:
4e:55:00:7c:62:21:5d:30:25:97:4e:25:c9:ac:53:
38:41:b0:2f:22:bb:a8:8f:d4:74:ba:6c:7e:c2:e9:
d2:09:e5:e0:7f:0e:c9:d1:5e:f9:2e:8e:fa:29:55:
78:c8:41:0e:00:ad:b9:42:b6:56:15:71:43:7c:bc:
a8:03:da:5f:de:d9:1a:f8:a1:d3:88:4a:a6:14:ff:
21:09:3e:e1:12:d3:db:13:60:0f:cc:9f:17:e1:c4:
ef:ed:e1:e3:3e:4f:d2:a2:7e:7f:53:b9:a6:f9:34:
9b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:C9:C9:0C:B3:AA:FD:50:6B:1D:5B:C7:2B:67:F7:99:B5:00:C1:6D
X509v3 Authority Key Identifier:
keyid:BB:0D:4E:85:93:7B:7A:0F:27:10:54:D2:86:14:F2:93:4D:4E:A5:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uw1OhZN7eg8nEFTShhTyk01OpQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/3MnJDLOq_VBrHVvHK2f3mbUAwW0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.143.252.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:0e:f7:40:eb:44:5a:d8:73:9f:d7:db:78:3e:2d:27:a8:83:
a8:67:23:e1:54:4f:67:cb:4f:19:28:65:1d:00:bf:57:ff:65:
18:da:db:cb:e7:53:97:76:5e:5b:9a:36:37:69:20:26:7b:b5:
55:58:41:ee:5e:c3:19:2c:79:85:da:79:ce:e0:8d:ce:90:52:
ee:84:a6:ad:04:da:f2:84:be:47:ae:ff:08:c2:22:f6:e5:d0:
b7:33:c7:e5:70:27:57:05:42:b3:66:fc:7a:de:ef:8b:1d:91:
80:da:a4:28:5b:41:c3:12:09:c5:1e:a8:9b:fa:5e:1b:38:47:
13:4d:ec:72:9c:02:f0:f3:9d:3d:1f:ab:fe:a9:32:d6:a4:72:
6f:2d:70:5c:26:b7:ba:b3:0b:9b:c8:1d:40:1e:87:6c:51:8c:
48:85:40:94:aa:d2:42:4e:f8:38:6e:ef:b4:f7:96:4b:14:7c:
57:17:3c:c5:02:2c:02:13:bc:eb:0d:9d:a5:65:6a:2a:a0:42:
12:41:d1:c8:62:9d:a8:36:43:eb:71:a1:cb:eb:50:ee:f4:1e:
d8:5c:4c:f0:0f:95:d9:b7:f3:00:fa:77:f7:fc:d8:84:01:88:
60:a9:c6:0f:25:c8:f3:ae:7a:98:7a:b7:6e:cd:47:c1:0a:44:
ed:e6:bc:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:44:36 2025 by rpki-client