Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/3_KIvbNh74KbgwrqrRMIXll0uGQ.roa
File: 3_KIvbNh74KbgwrqrRMIXll0uGQ.roa (raw, json)
Hash identifier: qsd81VHCGBUh4b+m7CYletnIp3wP2mkiYMIqajzSMuw=
Subject key identifier: DF:F2:88:BD:B3:61:EF:82:9B:83:0A:EA:AD:13:08:5E:59:74:B8:64
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0199858FE1CD4ECE314EF66DD6823F8752BA
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/3_KIvbNh74KbgwrqrRMIXll0uGQ.roa
Signing time: Fri 26 Sep 2025 10:27:02 +0000
ROA not before: Fri 26 Sep 2025 10:27:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207320
IP address blocks: 95.46.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:85:8f:e1:cd:4e:ce:31:4e:f6:6d:d6:82:3f:87:52:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Sep 26 10:27:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dff288bdb361ef829b830aeaad13085e5974b864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:eb:69:40:4c:15:a0:b5:a2:47:27:93:cb:6e:
57:0e:20:fc:1a:48:13:24:0f:a1:9d:52:b8:0b:92:
83:4e:6a:68:79:39:06:79:10:25:b2:21:fc:fb:37:
33:49:1c:10:6e:78:d0:2f:27:76:40:d1:63:d0:db:
cd:03:92:9d:48:d5:f1:32:f1:59:90:90:a8:ef:ba:
bb:17:98:a2:a6:1a:f2:ba:21:1b:9b:bb:10:a4:a1:
f0:d3:87:55:71:c7:a9:73:ea:d9:5e:4c:04:45:97:
8f:ce:f3:84:15:8d:68:ed:c8:97:06:11:a8:f7:a8:
62:78:76:9f:75:da:6d:5c:9a:e7:c5:a1:2d:eb:25:
74:37:0b:17:b6:9e:25:16:ba:5f:c2:6d:03:71:16:
27:f3:30:e7:89:84:db:7d:95:b0:b8:65:46:79:8c:
eb:17:20:8c:73:0d:28:f0:3d:11:b2:f2:60:b6:8f:
d8:4c:dd:99:46:4c:9a:45:08:97:27:80:3a:fe:c5:
bf:0e:02:1d:8a:9d:73:a5:47:6d:07:5e:a1:97:a0:
93:72:74:54:35:5d:e0:a9:79:ca:88:82:a5:d2:26:
17:03:da:ca:cd:73:2b:dd:0f:63:d1:3b:f8:df:71:
0d:44:29:65:be:90:fc:93:ef:0e:80:08:11:d4:e4:
aa:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:F2:88:BD:B3:61:EF:82:9B:83:0A:EA:AD:13:08:5E:59:74:B8:64
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/3_KIvbNh74KbgwrqrRMIXll0uGQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.46.105.0/24
Signature Algorithm: sha256WithRSAEncryption
03:87:12:e0:bf:6c:73:5c:40:2e:a0:ba:50:dd:9a:53:0f:a1:
b4:31:15:7c:4f:29:be:93:fc:3e:4a:31:56:41:2a:65:99:18:
00:67:6e:9c:13:a2:2e:09:d9:45:33:8b:6f:bd:1a:2e:d7:9e:
3c:c6:6a:74:ae:24:91:b3:a2:d7:2b:94:cc:3f:b8:8a:6c:a8:
09:e4:45:a0:4f:3d:0c:79:0d:99:22:b7:fe:3f:b7:b3:10:d8:
dc:90:6f:dc:00:16:28:80:7f:96:89:0b:a1:6d:b3:3d:6f:a0:
eb:95:81:38:15:c4:ec:1e:57:47:78:83:e1:24:63:ab:6b:b2:
70:1d:56:47:92:e2:ff:b9:57:39:77:50:bb:15:f1:6b:e6:e5:
2f:26:4b:23:68:51:37:f5:73:06:36:b2:c1:c0:fe:41:db:f2:
f1:24:b5:2f:ac:d9:ce:a7:60:4c:31:7b:99:53:a6:00:9a:b3:
59:f6:97:e0:c2:5b:c6:6c:5e:af:29:2f:15:52:05:3f:24:05:
e5:5a:60:b0:3f:0c:be:30:e3:2f:ce:ef:56:fc:35:b7:be:59:
2f:f2:2c:d1:a4:58:d1:78:29:52:48:b6:65:63:36:97:e9:87:
2c:42:b0:25:5c:36:d2:fc:68:64:41:a5:0c:f8:ee:d8:1a:4f:
de:2e:7b:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:30:18 2025 by rpki-client