Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/3jZN0CjhOxymJgqv-vnm-03eyVU.roa
File: 3jZN0CjhOxymJgqv-vnm-03eyVU.roa (raw, json)
Hash identifier: Xhtc9IarxK9XiRqnlhcgxS0MPN3MBJPgWJT4TQ4VOIQ=
Subject key identifier: DE:36:4D:D0:28:E1:3B:1C:A6:26:0A:AF:FA:F9:E6:FB:4D:DE:C9:55
Certificate issuer: /CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Certificate serial: 0199D238BEE8870FA379AD9D6B328BF214CF
Authority key identifier: 8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/3jZN0CjhOxymJgqv-vnm-03eyVU.roa
Signing time: Sat 11 Oct 2025 07:42:38 +0000
ROA not before: Sat 11 Oct 2025 07:42:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44559
IP address blocks: 46.151.176.0/24 maxlen: 24
46.151.177.0/24 maxlen: 24
46.151.178.0/24 maxlen: 24
46.151.179.0/24 maxlen: 24
46.151.180.0/24 maxlen: 24
83.142.208.0/24 maxlen: 24
83.142.210.0/24 maxlen: 24
83.142.211.0/24 maxlen: 24
83.142.212.0/24 maxlen: 24
83.142.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 18:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:d2:38:be:e8:87:0f:a3:79:ad:9d:6b:32:8b:f2:14:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Validity
Not Before: Oct 11 07:42:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=de364dd028e13b1ca6260aaffaf9e6fb4ddec955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:bf:11:84:c0:74:d0:0e:af:c8:eb:99:ce:ce:
b8:f1:c0:92:ad:49:d0:08:a0:4d:55:b4:16:41:e7:
11:82:5b:0f:7b:98:f2:5f:63:e8:f0:35:98:dd:86:
f5:2a:9d:67:39:d7:b0:67:b3:7e:1e:30:7c:ed:64:
2c:8e:97:bf:e8:11:fe:3d:b4:db:04:bb:5b:28:28:
35:9b:f1:3d:5e:eb:21:cf:19:05:e8:de:40:3a:d1:
b6:b2:91:de:cb:0a:5b:79:0d:31:a3:87:d3:a0:f7:
fc:59:d8:da:5e:e5:de:9c:07:34:10:3b:2a:21:52:
37:e4:be:e4:86:18:20:3c:54:c0:a7:ff:0f:f9:c0:
45:8f:50:f0:69:87:85:22:c1:f3:cd:6b:06:60:fe:
8a:3a:00:cb:95:3b:03:ac:11:ba:ea:d6:cc:cc:76:
c1:17:1c:ad:dd:40:27:4a:96:95:62:cc:9f:2c:f1:
0e:3e:78:c4:69:c8:cf:e5:48:0b:16:6b:7f:40:65:
a3:80:64:ed:c1:fe:f3:3a:8a:d7:f1:53:8a:82:db:
4f:f0:ec:dd:69:2e:56:9a:7d:3c:d7:ee:ec:ef:7d:
6c:6a:da:e8:5c:8d:8c:d9:e4:70:35:d4:7b:6f:ea:
66:84:90:a8:3d:37:8a:1f:e4:b5:57:1e:d5:3c:cb:
2a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:36:4D:D0:28:E1:3B:1C:A6:26:0A:AF:FA:F9:E6:FB:4D:DE:C9:55
X509v3 Authority Key Identifier:
keyid:8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/3jZN0CjhOxymJgqv-vnm-03eyVU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.151.176.0-46.151.180.255
83.142.208.0/24
83.142.210.0-83.142.212.255
83.142.215.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:19:6c:96:e7:ed:ad:18:1e:7c:07:95:f6:c4:25:8a:f8:b6:
cd:2e:67:16:0e:30:52:38:d2:59:f2:a1:c5:b5:9e:e0:e6:4e:
88:09:a7:f5:d4:ef:c1:03:9c:7e:a1:7e:ad:f5:25:a6:3e:af:
86:06:05:f4:b7:98:63:76:bb:ae:bf:c7:92:09:b8:25:5d:56:
09:be:d9:03:7c:18:a9:3c:12:f4:58:e3:d0:0b:9b:37:7d:77:
9f:86:e5:fd:0d:b4:27:e7:76:fa:9a:57:7a:00:a7:1c:7b:48:
8d:aa:fc:a1:12:93:fb:2a:1f:31:11:2d:4f:e7:57:c4:26:cd:
c0:1e:da:fe:4f:49:f8:32:92:ae:a9:e6:2b:4d:db:ca:97:27:
56:8a:8c:37:44:dc:4d:f5:7f:c2:8d:f9:e5:99:a8:1f:33:e5:
d6:11:68:8e:f5:a9:54:1f:f6:c7:bc:d0:17:ec:9a:95:cd:7c:
0b:e3:5e:b8:54:c0:0f:e1:05:e3:e8:9e:04:17:99:d5:33:cd:
bb:a9:9e:02:16:f6:b7:08:79:ad:04:51:7c:9f:8b:fc:92:34:
b7:1f:98:c3:f5:f4:f3:46:7d:db:75:45:b9:d5:dc:cc:29:c5:
31:cb:c4:cb:dc:b6:2b:7c:6b:b7:b7:44:5a:da:f8:b3:92:35:
9d:68:b4:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:51:39 2025 by rpki-client