Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/3EJsfQ_vMeebaEF7StBb0bY9-4E.roa
File: 3EJsfQ_vMeebaEF7StBb0bY9-4E.roa (raw, json)
Hash identifier: vQrB+AzXec26YmIbBcWWz4bsoq+mlSti0Gz4pMqSX1I=
Subject key identifier: DC:42:6C:7D:0F:EF:31:E7:9B:68:41:7B:4A:D0:5B:D1:B6:3D:FB:81
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01978DE9446032138A9D46DBFEB4B787B06A
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/3EJsfQ_vMeebaEF7StBb0bY9-4E.roa
Signing time: Fri 20 Jun 2025 15:16:04 +0000
ROA not before: Fri 20 Jun 2025 15:16:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215614
IP address blocks: 85.202.203.0/24 maxlen: 24
2a0e:97c1::/48 maxlen: 48
2a10:2f00:167::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 21:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8d:e9:44:60:32:13:8a:9d:46:db:fe:b4:b7:87:b0:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jun 20 15:16:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dc426c7d0fef31e79b68417b4ad05bd1b63dfb81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:0b:2e:3a:7f:65:b9:d4:10:73:c2:b7:4c:68:
b4:31:00:8d:49:6d:ef:04:62:a0:64:0a:7e:ed:01:
58:1c:1d:e5:78:6b:78:92:5c:21:9c:a3:b0:6d:5e:
e3:d6:16:50:9c:34:68:ac:f3:b1:f0:d2:29:26:89:
a6:cc:e7:47:6a:29:e2:c6:ff:94:c1:75:ea:7a:c1:
3a:5d:66:1f:f8:b2:c9:1c:0a:3d:5c:02:f1:e4:ad:
7b:7d:5e:b7:2c:a0:33:9f:14:0d:7d:f3:b9:0c:23:
c4:7a:3a:db:38:c0:34:10:72:04:38:36:9c:25:cf:
73:75:f8:58:8a:08:0f:7a:37:e4:0b:de:00:7e:e7:
1f:1e:26:53:aa:62:fa:83:1c:df:80:f0:5b:07:8e:
b3:57:88:31:3e:44:e2:90:27:27:65:86:8f:ab:e5:
f1:ce:ad:87:2a:87:8f:8e:b5:66:85:14:56:d6:0e:
40:01:d8:c7:82:6c:e5:da:86:c4:0f:dd:05:41:78:
ea:90:d3:1f:14:85:96:fa:bd:63:39:2e:6b:3b:e6:
c3:fb:00:91:b6:87:d0:fc:68:93:c4:28:16:9b:1d:
ed:e3:18:a0:a8:db:9b:db:8e:b1:3d:d6:8f:65:a0:
03:0c:14:bf:c8:06:1c:f4:95:f6:60:04:56:dc:5c:
e6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:42:6C:7D:0F:EF:31:E7:9B:68:41:7B:4A:D0:5B:D1:B6:3D:FB:81
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/3EJsfQ_vMeebaEF7StBb0bY9-4E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.202.203.0/24
IPv6:
2a0e:97c1::/48
2a10:2f00:167::/48
Signature Algorithm: sha256WithRSAEncryption
bd:d3:16:6d:5a:78:09:6b:7b:b7:53:70:3e:38:50:8b:41:0c:
8a:ee:74:4b:e1:74:b2:56:37:5e:47:6e:fc:83:89:32:eb:54:
6e:58:58:56:99:2b:6a:9f:df:9e:27:3e:a0:d0:14:a9:9e:09:
bc:e7:83:04:22:bd:ce:9e:8d:2e:31:b9:df:41:39:8b:26:09:
80:e7:29:93:3f:b5:cc:1b:45:ea:b1:69:1f:f1:c2:d7:93:10:
d6:00:d1:ff:8e:21:65:a5:51:0d:ea:4b:93:72:6f:1a:64:c8:
73:dc:41:93:17:ab:9e:74:83:cb:21:73:c8:e3:d3:67:ac:82:
96:c5:a1:28:77:b8:e3:cd:12:17:1e:89:75:40:3e:15:f8:86:
9c:ee:6f:f7:5c:0b:a1:fb:38:83:e3:30:b4:c2:d6:2a:ad:73:
55:aa:77:01:6e:d4:86:b6:b0:39:09:5d:90:13:62:ef:54:f0:
86:cd:99:3a:af:cc:5a:69:b2:37:85:81:de:b8:e9:84:2c:1f:
77:43:4c:a8:62:bd:2b:7c:b3:6d:cf:ba:58:20:48:14:df:d8:
e3:4f:6d:4f:86:e9:7e:c6:ef:9a:b7:68:05:30:cb:18:70:a5:
f6:37:a5:f7:d1:8d:ba:6d:ed:5c:fe:f7:0a:d9:91:02:2b:05:
6d:16:a4:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 03:26:51 2025 by rpki-client