Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/DK3tbQCBnJzEUSphxlbPexSxuSc.roa
File: DK3tbQCBnJzEUSphxlbPexSxuSc.roa (raw, json)
Hash identifier: oy+VYg7xPVfsl+GWes1fmQYw3lo7t6n2do65fz6s9kA=
Subject key identifier: 0C:AD:ED:6D:00:81:9C:9C:C4:51:2A:61:C6:56:CF:7B:14:B1:B9:27
Certificate issuer: /CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Certificate serial: 0199724EFE80265166FBCE53A17B0BE951B1
Authority key identifier: 74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/DK3tbQCBnJzEUSphxlbPexSxuSc.roa
Signing time: Mon 22 Sep 2025 16:43:23 +0000
ROA not before: Mon 22 Sep 2025 16:43:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 11404
IP address blocks: 9.142.32.0/20 maxlen: 20
9.142.192.0/19 maxlen: 19
138.226.56.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 08:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:72:4e:fe:80:26:51:66:fb:ce:53:a1:7b:0b:e9:51:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Validity
Not Before: Sep 22 16:43:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0caded6d00819c9cc4512a61c656cf7b14b1b927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:af:2b:93:57:b0:b6:85:9e:c6:6e:9b:ab:17:
da:89:29:1a:66:7c:da:35:0e:ae:0d:4f:a5:1d:12:
21:1f:1d:52:33:aa:c8:7c:7d:bb:9f:24:57:33:a6:
5e:55:2c:76:90:24:a5:8f:c0:4e:6a:c9:a7:a8:ce:
e6:aa:df:70:c4:f5:70:ef:78:a9:d8:84:8e:dc:fd:
78:41:cc:98:cb:cd:08:1b:0d:13:8c:15:d9:a7:47:
4a:bc:3b:03:bd:c9:91:e8:5f:0c:4f:f9:94:24:a2:
84:35:9b:04:cb:4d:d5:74:75:69:88:c4:8e:84:12:
06:92:db:45:13:2b:70:2a:5e:e7:89:42:51:26:d6:
34:6e:34:bf:d4:20:87:0d:3e:eb:dc:33:05:0b:17:
fb:8b:7d:0c:fb:50:59:1c:2e:f2:86:41:b5:a8:e4:
0c:f5:4b:bd:32:7e:26:b0:77:d8:a3:69:ca:eb:6f:
fd:53:03:79:b8:b9:06:81:3a:0f:23:ac:9c:7a:95:
a6:86:12:6d:ac:76:a3:82:19:0e:69:28:71:fd:5e:
b8:ec:ed:ad:d6:ff:b0:c4:32:c3:50:25:ee:3e:45:
b0:fd:f3:1f:89:90:24:f4:38:ed:f2:e5:20:8b:d4:
a6:05:2d:12:2b:77:e8:bc:9b:57:69:21:e0:0a:96:
6b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:AD:ED:6D:00:81:9C:9C:C4:51:2A:61:C6:56:CF:7B:14:B1:B9:27
X509v3 Authority Key Identifier:
keyid:74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/DK3tbQCBnJzEUSphxlbPexSxuSc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
9.142.32.0/20
9.142.192.0/19
138.226.56.0/21
Signature Algorithm: sha256WithRSAEncryption
7e:b0:3d:06:e8:7a:c7:bd:5c:4c:05:0f:66:31:38:4d:32:5f:
00:3a:16:c7:1f:e0:0a:b6:69:11:85:0f:65:c5:b1:b0:55:86:
a4:ff:de:66:89:4d:f8:8b:7e:25:74:a3:79:31:e3:de:6c:11:
00:23:a3:34:44:de:3a:fb:01:8c:4c:bc:e9:a5:3e:00:4e:9e:
5e:04:e1:1d:a3:c1:c0:0f:55:08:25:55:b7:28:27:90:e9:94:
e5:1c:c6:0a:e0:fb:8f:59:55:51:93:68:8a:79:fe:f6:77:a4:
62:f6:36:41:a6:62:87:40:77:c5:70:bd:bd:c4:12:7e:1b:dc:
49:ce:d2:9a:86:2d:9c:a7:38:50:86:f2:0a:4b:00:e1:29:1e:
54:4f:04:1c:ea:ba:75:ec:c2:3b:20:d0:6f:17:4b:14:c7:2a:
78:a9:68:91:de:91:8a:f8:49:4e:fc:89:57:0a:3f:c3:de:8d:
28:fd:f8:90:2f:ba:42:9b:97:7e:fd:05:18:88:a0:96:32:9c:
a1:63:c7:0b:3b:e8:aa:a8:07:43:f5:31:31:17:a4:1e:d2:b2:
bb:3c:a1:2a:32:b5:10:93:8f:43:2a:69:a4:d1:f3:44:56:bc:
ad:e2:26:fc:b7:b1:5f:a8:23:9b:9d:44:d3:8d:1c:83:4e:05:
bf:4a:7a:eb
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZlyTv6AJlFm+85ToXsL6VGxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0M2U0NDdlZGI4YTVlMGUxYjFkN2Y1Y2RjMjg3YzM2NGE1
ZmIwYjUwHhcNMjUwOTIyMTY0MzIzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwY2FkZWQ2ZDAwODE5YzljYzQ1MTJhNjFjNjU2Y2Y3YjE0YjFiOTI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5K8rk1ewtoWexm6bqxfaiSkaZnza
NQ6uDU+lHRIhHx1SM6rIfH27nyRXM6ZeVSx2kCSlj8BOasmnqM7mqt9wxPVw73ip
2ISO3P14QcyYy80IGw0TjBXZp0dKvDsDvcmR6F8MT/mUJKKENZsEy03VdHVpiMSO
hBIGkttFEytwKl7niUJRJtY0bjS/1CCHDT7r3DMFCxf7i30M+1BZHC7yhkG1qOQM
9Uu9Mn4msHfYo2nK62/9UwN5uLkGgToPI6ycepWmhhJtrHajghkOaShx/V647O2t
1v+wxDLDUCXuPkWw/fMfiZAk9Djt8uUgi9SmBS0SK3fovJtXaSHgCpZrfwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFAyt7W0AgZycxFEqYcZWz3sUsbknMB8GA1UdIwQY
MBaAFHQ+RH7bil4OGx1/XNwofDZKX7C1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEQ1RWZ0dUtYZzRiSFg5YzNDaDhOa3Bmc0xVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9hMWFlNzAtNzk5Ni00Njg3LWEwZDct
NWUwZjRhYjgwOWJiLzEvREszdGJRQ0JuSnpFVVNwaHhsYlBleFN4dVNjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS9hMWFlNzAtNzk5Ni00Njg3LWEwZDctNWUwZjRhYjgwOWJi
LzEvZEQ1RWZ0dUtYZzRiSFg5YzNDaDhOa3Bmc0xVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQECY4gAwQF
CY7AAwQDiuI4MA0GCSqGSIb3DQEBCwUAA4IBAQB+sD0G6HrHvVxMBQ9mMThNMl8A
OhbHH+AKtmkRhQ9lxbGwVYak/95miU34i34ldKN5MePebBEAI6M0RN46+wGMTLzp
pT4ATp5eBOEdo8HAD1UIJVW3KCeQ6ZTlHMYK4PuPWVVRk2iKef72d6Ri9jZBpmKH
QHfFcL29xBJ+G9xJztKahi2cpzhQhvIKSwDhKR5UTwQc6rp17MI7INBvF0sUxyp4
qWiR3pGK+ElO/IlXCj/D3o0o/fiQL7pCm5d+/QUYiKCWMpyhY8cLO+iqqAdD9TEx
F6Qe0rK7PKEqMrUQk49DKmmk0fNEVryt4ib8t7FfqCObnUTTjRyDTgW/Snrr
-----END CERTIFICATE-----
Generated at Mon Oct 20 14:54:31 2025 by rpki-client