Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/DiojNNQH08E8VT8z31hy5NWp8N0.roa
File: DiojNNQH08E8VT8z31hy5NWp8N0.roa (raw, json)
Hash identifier: hxWfnXr3HMo5cijkMcL7NHIRvQIwClyV18FZj70iFnY=
Subject key identifier: 0E:2A:23:34:D4:07:D3:C1:3C:55:3F:33:DF:58:72:E4:D5:A9:F0:DD
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 0199671E503899368D14A8329D6A7C57BE71
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/DiojNNQH08E8VT8z31hy5NWp8N0.roa
Signing time: Sat 20 Sep 2025 12:34:23 +0000
ROA not before: Sat 20 Sep 2025 12:34:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214943
IP address blocks: 213.209.129.0/24 maxlen: 24
213.209.143.0/24 maxlen: 24
213.209.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:67:1e:50:38:99:36:8d:14:a8:32:9d:6a:7c:57:be:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Sep 20 12:34:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0e2a2334d407d3c13c553f33df5872e4d5a9f0dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:32:c9:ca:12:99:59:23:78:46:16:ce:e8:0e:
b3:f0:34:0b:19:68:bf:60:48:a5:3c:1f:c5:a1:93:
3d:ca:50:71:bc:44:34:63:90:92:18:c5:b3:ac:34:
69:11:b0:a1:37:0d:d3:a1:0d:b3:3c:10:22:44:af:
3f:06:49:68:b0:87:b7:1e:ed:2e:b8:60:b8:92:5a:
ea:7b:e3:80:8a:80:3e:95:48:75:e3:46:c6:18:d1:
bf:f0:92:83:d7:a3:99:fd:12:cf:a7:41:31:c9:7b:
64:51:81:13:6b:8d:83:69:53:73:45:01:68:bd:22:
8f:d4:70:8b:7d:1f:b3:9c:ed:b4:c2:9c:cb:8b:46:
64:d5:c5:a6:ed:b4:56:bf:66:6d:23:20:c9:d9:a3:
6b:88:4a:e3:0e:01:5c:79:3c:4f:1e:c6:ee:15:99:
a4:dc:0b:27:43:f6:09:e1:1e:01:f7:69:43:f8:b9:
7f:46:a6:03:0f:0f:ea:70:59:7f:07:d8:0b:a0:51:
20:05:48:09:d8:f7:0a:59:91:33:69:84:49:8c:bf:
e1:2b:bd:dc:2a:53:40:6f:5b:f5:5c:8b:7d:0a:fc:
15:00:4c:6b:e6:e1:57:a2:c2:29:21:28:99:f4:fa:
c7:ea:b3:61:69:fb:ef:9b:d8:d4:3d:a2:cc:57:a6:
57:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:2A:23:34:D4:07:D3:C1:3C:55:3F:33:DF:58:72:E4:D5:A9:F0:DD
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/DiojNNQH08E8VT8z31hy5NWp8N0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.209.129.0/24
213.209.143.0/24
213.209.156.0/24
Signature Algorithm: sha256WithRSAEncryption
35:8a:1c:da:50:d0:f3:8f:76:45:a6:5f:c2:13:0d:a8:4e:31:
77:23:65:7a:e7:e1:db:4e:dc:4c:b4:60:16:c1:5a:02:95:93:
ed:58:9b:fd:bb:28:dd:98:8a:e5:5c:a2:5c:09:5b:bf:c3:bc:
35:d5:21:86:8c:04:d1:4c:fe:06:16:8f:35:aa:58:63:fe:28:
df:6f:5f:ae:cf:f8:40:2b:3c:cf:ce:fd:d2:c1:5a:c1:22:6e:
55:dd:58:78:36:99:9c:97:72:a2:3f:62:a5:26:8d:63:cb:40:
19:bb:72:cd:c5:8e:7d:8f:30:1e:dd:33:46:c8:f0:8e:64:68:
ac:a0:fa:ab:26:98:a2:d9:76:8d:68:fa:4a:a8:6c:f0:f7:7c:
2b:52:7b:fb:e2:59:c9:9b:60:6f:fd:9b:b5:5e:73:16:34:c6:
ac:13:18:d9:bc:a5:5e:2e:c2:b6:3b:5c:2f:89:df:8b:02:54:
06:ae:2b:4c:3d:0c:ea:cf:44:62:11:28:29:58:64:ad:9f:b1:
96:c1:ca:64:ae:9d:d7:dc:81:4d:9d:46:d6:f0:e8:b2:bb:f6:
84:64:1b:96:28:63:71:42:b5:8d:15:7e:e2:83:da:a8:2a:49:
16:e4:7c:00:a7:6f:4d:31:5c:b0:2d:52:95:98:62:c5:cc:17:
58:73:75:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:15:31 2025 by rpki-client