Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/cc3ad4-ff1a-4497-82da-8d51db65db66/1/_3Y85B8z2fS2vGq-Hizl4wDXl38.roa
File: _3Y85B8z2fS2vGq-Hizl4wDXl38.roa (raw, json)
Hash identifier: F8o4Ii7BXNvUdtKshefQ1D79z84X0mOy6rEj4bR0/gc=
Subject key identifier: FF:76:3C:E4:1F:33:D9:F4:B6:BC:6A:BE:1E:2C:E5:E3:00:D7:97:7F
Certificate issuer: /CN=f887ac7e5b289ce681b2474c38f7952cca9c0fb8
Certificate serial: 0198B93C2874EC86F6E4B75272E8B0EA513D
Authority key identifier: F8:87:AC:7E:5B:28:9C:E6:81:B2:47:4C:38:F7:95:2C:CA:9C:0F:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-IesflsonOaBskdMOPeVLMqcD7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/cc3ad4-ff1a-4497-82da-8d51db65db66/1/_3Y85B8z2fS2vGq-Hizl4wDXl38.roa
Signing time: Sun 17 Aug 2025 18:13:04 +0000
ROA not before: Sun 17 Aug 2025 18:13:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57588
IP address blocks: 185.54.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/cc3ad4-ff1a-4497-82da-8d51db65db66/1/1-IesflsonOaBskdMOPeVLMqcD7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/cc3ad4-ff1a-4497-82da-8d51db65db66/1/1-IesflsonOaBskdMOPeVLMqcD7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-IesflsonOaBskdMOPeVLMqcD7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:b9:3c:28:74:ec:86:f6:e4:b7:52:72:e8:b0:ea:51:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f887ac7e5b289ce681b2474c38f7952cca9c0fb8
Validity
Not Before: Aug 17 18:13:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ff763ce41f33d9f4b6bc6abe1e2ce5e300d7977f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b4:69:39:46:57:7e:49:cb:32:2f:4e:2c:cb:
b7:4e:15:ea:dd:10:9e:59:95:c9:4b:d4:97:cc:99:
3c:9d:21:e5:51:3a:48:68:b1:37:05:93:a5:d3:42:
6c:11:f6:55:b3:a8:f9:18:b9:ff:c3:bd:6d:3e:ee:
74:44:b7:bf:52:86:7c:96:e1:40:04:83:9e:04:b9:
e8:9a:49:af:86:6c:9b:4c:37:88:02:08:08:aa:e1:
53:39:0e:c3:50:63:89:1d:d9:42:c5:7a:6e:2a:e3:
71:25:27:6f:69:87:95:a2:7f:56:2f:11:66:8a:34:
55:92:3b:f2:ef:3d:74:45:bb:90:9b:1b:98:0e:ec:
62:f6:33:6e:8d:a6:60:32:a5:83:a3:2d:f2:87:c6:
6b:3a:e3:81:f2:ff:6c:74:c2:b6:2c:88:6f:e0:80:
0f:6e:66:d7:de:c2:8c:ad:6b:8d:94:30:15:7c:7d:
ad:9c:89:41:24:f4:b6:13:c0:bf:93:20:6f:21:1f:
77:2a:d4:de:82:31:5c:4a:dc:66:48:ca:cf:5b:7d:
f1:f0:21:dc:10:fb:79:50:82:f8:92:9c:92:44:2e:
95:b9:62:43:24:31:24:a3:80:13:43:3e:84:f3:2a:
0a:12:ab:8e:47:8a:42:08:2a:43:9b:77:81:9c:f1:
88:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:76:3C:E4:1F:33:D9:F4:B6:BC:6A:BE:1E:2C:E5:E3:00:D7:97:7F
X509v3 Authority Key Identifier:
keyid:F8:87:AC:7E:5B:28:9C:E6:81:B2:47:4C:38:F7:95:2C:CA:9C:0F:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-IesflsonOaBskdMOPeVLMqcD7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/cc3ad4-ff1a-4497-82da-8d51db65db66/1/_3Y85B8z2fS2vGq-Hizl4wDXl38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/cc3ad4-ff1a-4497-82da-8d51db65db66/1/1-IesflsonOaBskdMOPeVLMqcD7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.54.159.0/24
Signature Algorithm: sha256WithRSAEncryption
18:bf:d5:f6:4a:58:db:4e:93:3a:3e:fa:aa:ee:47:b7:fa:10:
47:57:df:ac:fc:05:87:99:fe:6d:85:94:f4:10:60:df:dc:14:
2c:7c:d9:4d:ee:f0:b4:bb:2d:ff:a8:cd:5d:03:3e:8b:4e:b3:
5d:a0:99:5e:d6:eb:d3:eb:97:4c:7f:f4:ab:de:0f:30:38:70:
16:d8:12:85:9a:a2:68:78:f1:1c:e5:c0:78:b3:ab:d8:54:43:
0a:df:89:75:05:03:bd:9f:56:eb:d2:3c:a2:be:03:31:fc:9d:
7f:95:93:63:94:58:74:ab:a3:77:d4:14:fc:8c:42:44:36:7e:
ba:7e:fd:95:75:fe:fb:2b:32:9b:17:de:9e:29:53:e4:95:6f:
3e:e2:5b:1d:cd:9e:39:fc:43:35:07:5a:42:08:e0:ef:e0:19:
98:82:0b:c7:aa:42:58:ad:8d:09:51:e1:5f:0e:28:ba:82:33:
d8:7e:3c:15:3e:61:a2:f0:7d:30:7e:9e:cb:48:a2:b1:a6:3e:
2e:bd:77:db:fe:5a:57:70:6a:5a:c4:bb:e0:1a:af:48:e5:f0:
93:44:3e:2a:c9:d9:cf:28:13:81:a1:95:e5:2d:8c:5b:70:c0:
eb:be:5b:06:3c:39:cc:5c:5e:0a:b2:14:8c:cc:8a:c3:67:c7:
20:46:5a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:29:59 2025 by rpki-client