Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/3cWKW-QG3-QZroGcE26xmXtGbYA.roa
File: 3cWKW-QG3-QZroGcE26xmXtGbYA.roa (raw, json)
Hash identifier: K1QCk1G52wmdNLkbkR73+GosAK4DpOS/Xs9aVSvIVRw=
Subject key identifier: DD:C5:8A:5B:E4:06:DF:E4:19:AE:81:9C:13:6E:B1:99:7B:46:6D:80
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 01994E4432167A777FE2095A6A754FB2A875
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/3cWKW-QG3-QZroGcE26xmXtGbYA.roa
Signing time: Mon 15 Sep 2025 16:45:16 +0000
ROA not before: Mon 15 Sep 2025 16:45:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209896
IP address blocks: 45.86.20.0/22 maxlen: 22
95.214.152.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft
rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:4e:44:32:16:7a:77:7f:e2:09:5a:6a:75:4f:b2:a8:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Sep 15 16:45:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ddc58a5be406dfe419ae819c136eb1997b466d80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f1:4e:ec:e5:e7:f3:b9:fe:21:67:0e:8e:b0:
d9:47:e3:fb:a7:de:dd:66:8b:1a:c3:93:f7:a2:b6:
a0:79:3c:ad:0d:5e:61:95:a0:1f:d2:de:f5:cb:b5:
63:40:0f:e7:3d:26:71:f2:b3:08:70:c7:71:d8:71:
11:b9:88:60:44:8e:68:47:3e:94:1e:4a:88:11:80:
f5:b6:79:31:d5:0a:bf:74:5d:bb:43:41:94:28:20:
4f:14:5a:54:ea:50:31:a2:f9:03:ed:9c:3f:20:7a:
45:14:ed:ee:fe:4f:c0:94:39:42:3a:7a:e6:19:0f:
5e:17:9f:e8:80:01:12:b3:47:33:c7:7d:e6:e6:32:
f7:c2:35:ad:42:f3:c4:71:f2:18:12:9a:6c:57:b6:
04:0a:ce:6a:9d:48:52:c3:ca:49:9c:77:17:ec:c5:
5f:f0:60:62:1d:b5:cb:5f:e8:31:2b:55:12:bd:b6:
5d:bf:a8:a8:0d:74:a8:e9:ce:5c:b8:6b:00:e3:db:
0d:53:c5:10:e7:70:a4:dc:3c:95:04:f3:37:56:54:
f6:75:81:62:36:16:b9:62:fe:42:94:6d:f5:49:e0:
6e:bf:f2:c9:74:d6:08:0e:7a:33:63:ba:f4:8e:14:
1e:d7:33:c2:a6:3a:06:56:4a:67:00:ea:56:a6:8a:
d4:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:C5:8A:5B:E4:06:DF:E4:19:AE:81:9C:13:6E:B1:99:7B:46:6D:80
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/3cWKW-QG3-QZroGcE26xmXtGbYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.20.0/22
95.214.152.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:5d:28:61:72:ec:80:dc:e8:17:47:3e:18:27:d3:fd:cf:19:
b6:24:1b:a0:b4:e4:c6:67:24:37:4f:fa:1c:1f:0f:1f:00:cb:
95:98:81:cc:6f:78:c0:0e:bb:d9:bb:c0:04:05:9a:e8:d3:d0:
e2:73:6a:19:0c:9f:b1:0c:54:52:ff:66:54:2f:91:63:7f:42:
6f:0e:62:3c:a0:bf:bb:d5:a4:0a:82:64:8d:5d:5f:1a:37:13:
81:9f:3a:6b:7e:18:70:0f:fd:13:1d:dc:90:71:ac:cd:2a:90:
27:7a:70:2b:91:b4:84:8d:c0:3b:c3:aa:cd:26:b0:df:81:0b:
39:3d:1c:7f:d7:3d:45:0a:00:9b:d2:46:89:35:49:25:47:66:
60:c7:68:1d:a6:ea:32:12:91:8a:74:9d:79:64:76:95:79:56:
3c:59:52:bd:6a:8f:60:5a:4e:c1:9f:d6:d5:5e:e3:61:82:6a:
ce:fe:17:a4:54:f3:84:07:53:dd:db:fc:05:b2:7c:01:b6:b0:
b5:37:90:46:39:ef:57:bd:74:b6:24:25:bd:e6:6d:0b:79:5a:
ee:96:ab:8c:7b:7f:0c:9d:44:d8:e8:bf:ca:6e:c0:45:ef:f9:
ff:ec:bf:e1:df:6c:d5:97:96:d2:c8:54:3c:1d:68:8f:a9:3d:
33:fa:a9:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:40:43 2025 by rpki-client