Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/3_QUX0Y1KroB5F1-NPC5TQvpgnc.roa
File: 3_QUX0Y1KroB5F1-NPC5TQvpgnc.roa (raw, json)
Hash identifier: wdKwymD7k75WY4rShVLqlSlWCtmlMYlcDUveKBoGB2A=
Subject key identifier: DF:F4:14:5F:46:35:2A:BA:01:E4:5D:7E:34:F0:B9:4D:0B:E9:82:77
Certificate issuer: /CN=a2b12e8df3abd5559f9cf9680af65dd16589de86
Certificate serial: 0198D5E09E167D0D633961AD3E4BA79436A2
Authority key identifier: A2:B1:2E:8D:F3:AB:D5:55:9F:9C:F9:68:0A:F6:5D:D1:65:89:DE:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/orEujfOr1VWfnPloCvZd0WWJ3oY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/3_QUX0Y1KroB5F1-NPC5TQvpgnc.roa
Signing time: Sat 23 Aug 2025 07:42:04 +0000
ROA not before: Sat 23 Aug 2025 07:42:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3320
IP address blocks: 82.139.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/orEujfOr1VWfnPloCvZd0WWJ3oY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/orEujfOr1VWfnPloCvZd0WWJ3oY.mft
rsync://rpki.ripe.net/repository/DEFAULT/orEujfOr1VWfnPloCvZd0WWJ3oY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:e0:9e:16:7d:0d:63:39:61:ad:3e:4b:a7:94:36:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2b12e8df3abd5559f9cf9680af65dd16589de86
Validity
Not Before: Aug 23 07:42:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dff4145f46352aba01e45d7e34f0b94d0be98277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a0:6b:9f:2d:62:58:87:87:4c:33:73:c2:ab:
d7:aa:5e:f7:4e:04:ea:6f:af:f9:e4:f1:1a:55:e4:
19:bb:5c:a8:8d:90:62:20:92:c7:32:eb:10:af:df:
03:ec:0c:31:1f:6a:12:76:a2:1d:ae:b6:23:61:8d:
71:0c:f3:82:cf:d6:56:c2:77:4d:72:13:08:8d:4d:
9d:dd:eb:06:ff:87:84:c7:d7:60:23:d8:c3:bb:10:
a3:0c:7a:4a:c0:2b:17:b4:9c:e8:1d:22:c3:42:67:
b3:96:95:6b:a4:96:78:8a:c2:ab:2e:c5:50:83:25:
cd:02:e3:ab:5d:b4:fa:76:ae:7f:61:c9:1a:27:f0:
ae:41:9b:f2:28:6a:67:1b:6c:0f:99:ad:56:a6:8e:
a4:00:ee:b5:2f:b1:0a:c6:c6:30:2e:8e:7c:69:be:
a6:04:7a:9e:cd:e4:d8:e4:5b:bb:6c:38:c2:25:e5:
18:12:8e:c1:71:c7:3f:46:4f:49:ba:99:ee:c4:38:
bb:1a:83:ae:47:ed:6e:fb:38:6b:12:b8:5d:04:ef:
17:cc:9b:49:19:f3:11:74:c8:13:0f:86:26:79:26:
d5:c9:00:60:24:cd:d0:96:ca:8d:51:0a:a2:c3:9c:
ea:c8:49:33:57:ca:5f:d0:f6:39:21:6a:46:5c:5b:
a3:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:F4:14:5F:46:35:2A:BA:01:E4:5D:7E:34:F0:B9:4D:0B:E9:82:77
X509v3 Authority Key Identifier:
keyid:A2:B1:2E:8D:F3:AB:D5:55:9F:9C:F9:68:0A:F6:5D:D1:65:89:DE:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/orEujfOr1VWfnPloCvZd0WWJ3oY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/3_QUX0Y1KroB5F1-NPC5TQvpgnc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/orEujfOr1VWfnPloCvZd0WWJ3oY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.139.230.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:59:0a:12:5a:8d:59:f9:de:8c:90:54:c2:6a:dc:ba:a2:d5:
4e:87:05:d1:fc:f8:b9:2d:9e:5b:36:04:d1:85:9d:fd:6e:f0:
46:40:3f:a9:74:09:f7:1e:f1:32:6d:61:2f:70:4b:29:b1:f6:
1a:fa:50:ba:88:23:7a:95:06:39:76:7d:55:81:dc:86:ed:50:
3d:ad:e7:27:54:fd:d3:01:f0:03:db:8b:40:c3:9d:43:f0:0b:
c9:4c:ca:2a:7d:c9:46:01:0c:f9:05:33:dc:e0:bf:aa:08:47:
34:bd:4c:71:73:88:70:ca:c5:b6:d5:80:a3:4e:ec:63:f1:84:
3f:f6:be:40:04:cd:1f:f3:eb:b1:ee:9b:ff:0a:84:75:cb:ba:
87:c1:03:1d:f5:86:18:9d:6c:05:cd:35:62:aa:89:78:1a:e5:
ea:9e:f9:07:e8:c9:80:10:7f:73:c0:fa:b8:31:59:63:a7:f8:
63:ae:32:d8:41:04:4e:80:50:13:43:83:41:6b:01:ab:3c:27:
0f:a5:9b:b3:5e:d3:64:e9:4e:4a:e9:97:72:a1:4b:e8:38:4b:
1f:55:4c:7c:36:8d:da:ac:ff:67:a1:a6:28:49:e7:7f:74:cd:
70:54:a0:bc:a6:a2:82:be:1f:23:f4:61:37:65:ab:d6:ba:9e:
2b:95:e1:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:45:48 2025 by rpki-client