Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/3FbaZR0zxfx0WA80YXG85ZDcCq4.roa
File: 3FbaZR0zxfx0WA80YXG85ZDcCq4.roa (raw, json)
Hash identifier: qryijX9WTlELqR/vPu/COvNZoSxzH7bA72VNuMKufdo=
Subject key identifier: DC:56:DA:65:1D:33:C5:FC:74:58:0F:34:61:71:BC:E5:90:DC:0A:AE
Certificate issuer: /CN=321ec194107843848cd36330232b5f6a43791db4
Certificate serial: 0198C1C2C687BDE7C881467B08B88C577111
Authority key identifier: 32:1E:C1:94:10:78:43:84:8C:D3:63:30:23:2B:5F:6A:43:79:1D:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mh7BlBB4Q4SM02MwIytfakN5HbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/3FbaZR0zxfx0WA80YXG85ZDcCq4.roa
Signing time: Tue 19 Aug 2025 09:57:04 +0000
ROA not before: Tue 19 Aug 2025 09:57:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8075
IP address blocks: 155.231.208.0/24 maxlen: 24
155.231.209.0/24 maxlen: 24
195.105.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/Mh7BlBB4Q4SM02MwIytfakN5HbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/Mh7BlBB4Q4SM02MwIytfakN5HbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mh7BlBB4Q4SM02MwIytfakN5HbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c1:c2:c6:87:bd:e7:c8:81:46:7b:08:b8:8c:57:71:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=321ec194107843848cd36330232b5f6a43791db4
Validity
Not Before: Aug 19 09:57:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dc56da651d33c5fc74580f346171bce590dc0aae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:30:b9:6d:97:85:80:b6:bc:eb:38:72:ee:4c:
75:8a:28:25:51:95:72:5c:d9:ae:a3:fb:c7:74:54:
7b:f9:d3:5e:be:a3:bc:2a:89:c5:e8:24:b1:3a:56:
2b:b3:1a:18:fd:22:a8:e2:2b:7f:78:8b:d7:cf:99:
b0:59:9f:aa:4a:48:3f:37:66:61:bd:62:b0:94:0b:
e4:3c:24:bc:f8:f4:0c:60:c0:09:cb:0c:d6:1c:fa:
f4:cd:19:ad:c1:b9:cb:90:ec:99:51:56:27:bc:5e:
eb:db:c1:97:32:58:53:a4:17:d5:e7:a4:0f:24:0f:
ba:12:57:89:c9:f3:7f:14:15:05:1f:11:fb:35:68:
bc:97:c9:63:c4:ce:f8:c0:37:3f:36:12:c2:4a:8e:
01:4c:99:ba:8d:30:b5:43:e5:3f:05:3d:62:09:60:
32:1f:3f:5b:97:fb:50:47:d3:62:81:0a:72:8c:35:
c5:09:4f:04:5e:7c:fe:e6:0f:aa:61:30:cc:f0:9d:
25:ed:bc:09:31:31:1a:f8:14:7d:f4:02:f9:57:08:
c6:29:a6:3c:8a:1c:10:da:4c:e0:7f:26:1b:a0:47:
33:a0:2b:84:7a:2d:59:6b:be:cc:cb:2e:da:d5:77:
4f:fc:16:65:60:34:b3:d1:f0:6d:d3:9c:91:87:63:
1c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:56:DA:65:1D:33:C5:FC:74:58:0F:34:61:71:BC:E5:90:DC:0A:AE
X509v3 Authority Key Identifier:
keyid:32:1E:C1:94:10:78:43:84:8C:D3:63:30:23:2B:5F:6A:43:79:1D:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mh7BlBB4Q4SM02MwIytfakN5HbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/3FbaZR0zxfx0WA80YXG85ZDcCq4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/Mh7BlBB4Q4SM02MwIytfakN5HbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.231.208.0/23
195.105.26.0/24
Signature Algorithm: sha256WithRSAEncryption
64:bd:cf:42:8e:ae:ac:ab:b2:48:63:5d:fd:1b:f6:f7:e1:19:
34:8a:7a:77:c4:cc:67:41:37:8f:60:15:fc:22:61:4f:bf:3b:
9e:34:f7:bc:49:64:2a:04:c2:54:9d:6d:36:9d:06:2d:2f:22:
b0:71:2b:a0:75:96:05:fe:d1:18:ee:2c:4c:8f:1d:f9:6a:2d:
a4:f0:65:84:61:40:4d:2a:aa:4f:d6:0b:41:fa:a4:3a:ae:3b:
f9:6c:0c:07:30:e5:58:91:eb:70:43:88:72:f4:d5:38:c4:f5:
07:f9:34:cc:b9:54:86:7f:54:e8:2d:30:df:32:bd:da:13:6a:
fd:22:a1:6f:54:dc:28:3c:d0:3a:1a:cb:c5:59:fb:9c:53:10:
bd:c4:9d:33:50:90:ee:42:46:48:f3:ba:6c:36:1a:e8:b4:8c:
a2:a5:ce:20:da:6a:de:a1:31:9c:25:49:36:5a:1a:9b:a0:64:
2d:6f:e3:a8:70:cf:77:0f:dd:a1:42:b9:1d:ab:a7:dd:3c:7b:
c7:d3:bb:94:bd:e3:5a:88:e2:f1:1a:14:d9:4c:04:55:87:e4:
14:fc:10:61:28:68:e5:67:be:34:70:65:63:07:27:d9:4f:e2:
ef:fe:60:d5:d1:e9:db:b6:28:3b:f8:87:2e:25:36:4e:92:8a:
8f:07:7a:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:31:53 2025 by rpki-client