Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/63667b-7a25-440f-84f9-2ab9587e5f1d/1/m3GZ3uzof7l0GBgnn84BPxNFAYA.roa
File: m3GZ3uzof7l0GBgnn84BPxNFAYA.roa (raw, json)
Hash identifier: 2i1OlK6EDLBEyz+L6W8IHqQybGpvkp0P97W/04ZDHzg=
Subject key identifier: 9B:71:99:DE:EC:E8:7F:B9:74:18:18:27:9F:CE:01:3F:13:45:01:80
Certificate issuer: /CN=0d4c6b6ae50007769d28d98970d24fbcee1ba390
Certificate serial: 0198BC3C6E789B58A09A299CC3670C2E00BA
Authority key identifier: 0D:4C:6B:6A:E5:00:07:76:9D:28:D9:89:70:D2:4F:BC:EE:1B:A3:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DUxrauUAB3adKNmJcNJPvO4bo5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/63667b-7a25-440f-84f9-2ab9587e5f1d/1/m3GZ3uzof7l0GBgnn84BPxNFAYA.roa
Signing time: Mon 18 Aug 2025 08:12:13 +0000
ROA not before: Mon 18 Aug 2025 08:12:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39686
IP address blocks: 171.25.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/63667b-7a25-440f-84f9-2ab9587e5f1d/1/DUxrauUAB3adKNmJcNJPvO4bo5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/63667b-7a25-440f-84f9-2ab9587e5f1d/1/DUxrauUAB3adKNmJcNJPvO4bo5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/DUxrauUAB3adKNmJcNJPvO4bo5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 17:19:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:bc:3c:6e:78:9b:58:a0:9a:29:9c:c3:67:0c:2e:00:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d4c6b6ae50007769d28d98970d24fbcee1ba390
Validity
Not Before: Aug 18 08:12:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9b7199deece87fb9741818279fce013f13450180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:75:58:ef:c5:30:71:46:b2:c7:aa:50:ce:39:
1d:f1:a2:ee:19:a9:10:5e:1c:59:64:89:3c:00:b1:
4f:72:a3:b4:3d:85:c4:54:7c:ae:01:8c:0c:94:bd:
42:58:d7:08:e1:62:bd:1e:e5:9c:7f:41:fe:50:a6:
2e:87:0b:eb:21:bd:c2:89:2a:94:fb:af:90:76:1c:
fa:b2:84:c9:68:b4:e5:2e:88:f8:4a:30:f8:1f:d0:
a5:5b:7c:53:cc:27:7d:cb:6a:c1:89:f3:75:4b:cf:
8c:95:ad:16:01:19:66:ec:79:ea:a0:32:a4:a2:fd:
05:ac:f0:47:90:a9:b1:13:ff:38:57:70:33:ea:a4:
0d:7d:0c:ec:f0:73:34:44:58:67:3e:34:b0:bb:e0:
3a:0f:a2:71:1e:d6:9b:e2:3b:44:52:33:a7:50:53:
bd:3a:a0:0e:5d:33:e3:34:c5:cd:b5:42:cf:06:08:
5f:14:8b:93:a4:c8:26:88:00:cc:c8:46:6e:20:7d:
7c:47:30:90:1e:e5:12:fb:2f:95:83:3b:dc:39:b4:
a5:d6:0d:a9:cb:aa:6d:84:f0:6a:14:8a:58:6a:ca:
9e:fc:98:2d:2f:4e:7d:cc:7c:2a:41:3a:12:27:83:
ad:79:cf:b1:ea:e3:fc:bb:ed:56:f2:c4:1d:0f:48:
e6:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:71:99:DE:EC:E8:7F:B9:74:18:18:27:9F:CE:01:3F:13:45:01:80
X509v3 Authority Key Identifier:
keyid:0D:4C:6B:6A:E5:00:07:76:9D:28:D9:89:70:D2:4F:BC:EE:1B:A3:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DUxrauUAB3adKNmJcNJPvO4bo5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/63667b-7a25-440f-84f9-2ab9587e5f1d/1/m3GZ3uzof7l0GBgnn84BPxNFAYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/63667b-7a25-440f-84f9-2ab9587e5f1d/1/DUxrauUAB3adKNmJcNJPvO4bo5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.25.217.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:be:bb:35:32:b8:ad:97:3b:62:4f:5c:f3:2c:eb:32:14:27:
4e:3b:6c:86:00:46:1d:77:70:c5:7d:a2:a7:62:09:56:33:17:
0d:95:89:33:7d:53:a2:a1:55:3a:99:eb:51:46:54:40:b0:b5:
d6:a7:ba:02:5b:58:ef:23:e6:67:cd:d5:71:f9:11:41:28:69:
92:2a:7e:cd:67:7f:6e:06:79:1b:7a:ee:83:f7:18:4c:2d:e1:
09:94:96:5c:8d:02:4c:72:95:80:fa:04:59:2e:92:16:30:36:
03:d8:d5:3e:bd:f4:ce:0b:67:21:bb:9f:97:c2:6b:df:2e:2e:
07:72:55:a0:52:3b:16:5e:94:fb:a0:17:94:02:ad:0c:21:51:
72:34:cf:1f:42:d0:ea:c8:b1:94:d9:2f:de:90:da:04:6c:1c:
c9:ca:66:9b:e4:c5:e3:84:5a:a6:c4:3a:cd:8f:b0:2a:91:0e:
b7:0d:7c:11:af:c0:d1:35:9b:ba:a8:05:d2:9a:ac:57:4a:f7:
cb:e9:26:a4:54:19:9c:1c:f0:70:f9:26:1c:03:2a:70:0a:d2:
c0:3a:74:d3:78:2c:50:db:47:a8:ba:3a:43:05:06:40:e6:34:
f1:be:a1:15:4d:86:18:93:91:8a:b2:9a:ed:2c:e2:c0:a5:6e:
95:53:75:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:04:08 2025 by rpki-client