Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/AY3hXsFBmk0BiaMRpk_scVlSukE.roa
File: AY3hXsFBmk0BiaMRpk_scVlSukE.roa (raw, json)
Hash identifier: FlAQPgHAR1c9hw2Oc9DDNzQmDepYBrO8/HAPn6cwsB4=
Subject key identifier: 01:8D:E1:5E:C1:41:9A:4D:01:89:A3:11:A6:4F:EC:71:59:52:BA:41
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0199960091C45C37ABA6E7426E4B9D1EAB97
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/AY3hXsFBmk0BiaMRpk_scVlSukE.roa
Signing time: Mon 29 Sep 2025 15:04:03 +0000
ROA not before: Mon 29 Sep 2025 15:04:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42489
IP address blocks: 93.170.134.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:96:00:91:c4:5c:37:ab:a6:e7:42:6e:4b:9d:1e:ab:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Sep 29 15:04:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=018de15ec1419a4d0189a311a64fec715952ba41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c4:d1:7f:1e:82:6f:3e:20:83:8d:bf:72:a1:
08:4f:bb:0b:23:c5:35:2a:bd:db:c9:4b:54:76:08:
88:1f:5a:72:65:c8:53:90:4e:6a:62:1e:f2:9e:32:
d8:7e:77:33:ff:d6:93:1d:e3:2a:36:e3:fa:1e:4a:
ff:55:7d:ee:05:b8:5b:28:9e:ec:bf:25:72:2d:b0:
f2:2a:23:0f:7a:67:17:7e:39:25:f6:d0:bb:d1:87:
23:09:a7:98:29:af:5c:aa:4e:d7:4f:7a:a3:c7:c1:
b1:92:49:6a:18:0d:1a:a8:b8:f3:0b:89:36:2f:bf:
11:24:36:ba:d8:c3:05:ee:5b:53:13:4c:33:05:7d:
48:66:2a:29:dd:76:ad:c9:76:d5:0c:e7:f8:50:a1:
75:95:4f:c7:53:f5:d7:fc:96:e7:0c:af:e6:f6:66:
81:0d:a3:19:c7:d3:87:d3:1a:39:a2:ad:76:ea:c8:
18:32:de:8a:e2:82:f8:27:91:32:02:80:01:3c:1b:
19:17:37:8b:5f:c0:d2:ac:bf:53:fc:15:bc:12:ce:
a0:48:49:89:2f:f4:b8:fa:66:e6:04:8d:79:2e:54:
24:b0:30:48:32:19:3e:ce:07:56:6b:3c:db:58:1e:
9d:f3:d9:1f:58:a7:4c:a0:a8:27:d2:b8:d9:d7:be:
bf:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:8D:E1:5E:C1:41:9A:4D:01:89:A3:11:A6:4F:EC:71:59:52:BA:41
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/AY3hXsFBmk0BiaMRpk_scVlSukE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.134.0/23
Signature Algorithm: sha256WithRSAEncryption
6e:cf:12:c5:b8:e8:3c:d4:17:37:f9:28:f6:ef:aa:96:a3:23:
ea:cc:01:4f:65:20:c5:f5:a6:16:58:b2:13:49:96:7a:5a:6d:
af:a3:2c:0c:df:08:66:07:a0:c4:0c:33:29:b9:bc:b0:85:bd:
10:6c:df:c1:d1:4f:61:10:50:71:12:7b:cf:49:31:1e:ed:6b:
1d:b0:a4:3e:d1:e7:c8:09:4d:62:24:89:57:e6:f0:0b:5c:1f:
9e:47:57:2c:de:68:a1:83:12:01:5a:85:1c:07:1f:0a:ce:3f:
28:32:34:49:2b:20:a0:d5:71:66:51:42:ca:a9:ac:ef:b7:5e:
7e:66:15:5e:13:8c:87:cc:03:a9:ba:c3:26:68:ad:eb:92:30:
c0:88:3b:35:c4:d7:4f:77:3b:ab:8f:bf:bf:b4:a7:80:93:02:
a8:ae:fd:58:73:1d:f0:19:f9:e2:33:d1:a0:a2:73:97:a6:90:
9a:d3:1e:20:8d:22:20:95:5e:72:e6:ce:9f:8d:09:7f:8b:56:
80:28:c8:54:d9:0f:81:c4:c3:a7:4f:e3:d2:06:54:42:50:3f:
76:b8:0c:c6:f9:92:f5:35:a3:13:c4:48:05:99:25:08:67:35:
b7:52:d7:be:f0:cb:43:3f:69:3c:6e:76:48:89:4e:0b:38:c4:
cb:45:2d:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:30:06 2025 by rpki-client