Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/c3ca86-3e76-48c4-98ac-c2d00342235c/1/3Up1_xa72MiZWR7nWOfb73OaQpo.roa
File: 3Up1_xa72MiZWR7nWOfb73OaQpo.roa (raw, json)
Hash identifier: 1q/8zbXRfkHh7ti5Qn6/5yv+DBtAzLUxzEAz3cXMIlY=
Subject key identifier: DD:4A:75:FF:16:BB:D8:C8:99:59:1E:E7:58:E7:DB:EF:73:9A:42:9A
Certificate issuer: /CN=360a9601e02f8128ef646f5595336e0a57917caf
Certificate serial: 0199518A54E3204198FECCE5C3F5915430D1
Authority key identifier: 36:0A:96:01:E0:2F:81:28:EF:64:6F:55:95:33:6E:0A:57:91:7C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NgqWAeAvgSjvZG9VlTNuCleRfK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/c3ca86-3e76-48c4-98ac-c2d00342235c/1/3Up1_xa72MiZWR7nWOfb73OaQpo.roa
Signing time: Tue 16 Sep 2025 08:00:44 +0000
ROA not before: Tue 16 Sep 2025 08:00:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29305
IP address blocks: 194.177.4.0/22 maxlen: 24
194.177.4.0/23 maxlen: 24
194.177.4.0/24 maxlen: 24
194.177.5.0/24 maxlen: 24
194.177.6.0/23 maxlen: 24
194.177.6.0/24 maxlen: 24
194.177.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/c3ca86-3e76-48c4-98ac-c2d00342235c/1/NgqWAeAvgSjvZG9VlTNuCleRfK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/c3ca86-3e76-48c4-98ac-c2d00342235c/1/NgqWAeAvgSjvZG9VlTNuCleRfK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NgqWAeAvgSjvZG9VlTNuCleRfK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:51:8a:54:e3:20:41:98:fe:cc:e5:c3:f5:91:54:30:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=360a9601e02f8128ef646f5595336e0a57917caf
Validity
Not Before: Sep 16 08:00:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dd4a75ff16bbd8c899591ee758e7dbef739a429a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:74:4b:42:c6:ba:c7:fa:d2:d1:48:a8:31:c1:
47:19:5c:6a:d8:98:63:24:63:36:6a:7c:b7:00:c2:
57:b4:88:72:63:22:11:08:d9:44:67:62:99:08:3f:
89:46:a2:7d:6a:58:69:f3:27:a4:84:b4:4c:d6:15:
10:22:53:db:8c:c7:68:a9:ac:d1:c9:51:88:ce:c1:
1e:cd:5d:59:28:11:02:48:e2:7a:ad:8c:dd:1b:ea:
29:a6:ad:cf:2c:43:9d:6d:ad:db:7a:af:cd:ee:81:
a2:18:d5:ca:ba:e7:50:ad:88:3a:fd:e3:29:57:14:
08:29:94:54:a8:f5:d6:75:77:03:ba:e5:ee:49:0d:
1a:a3:f9:c6:e2:50:c1:e9:6d:d3:1e:43:dd:9e:0e:
a1:1c:ea:c9:35:d5:60:3c:fc:af:e9:38:1a:64:67:
10:34:ff:86:19:ce:fa:97:0d:7c:fc:c2:cd:88:67:
45:cb:fc:e1:5b:8f:7a:2a:e1:c1:79:b5:d4:4c:8e:
02:c8:53:48:2d:12:76:43:36:b5:5f:a3:ba:22:16:
ad:b0:63:be:7a:0e:e9:66:3e:da:0c:39:f0:2a:ed:
14:41:33:91:cc:9d:c3:56:c2:e0:8f:87:b2:84:95:
3c:6c:f6:b8:1d:19:52:57:da:72:40:12:6c:3c:1a:
b8:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:4A:75:FF:16:BB:D8:C8:99:59:1E:E7:58:E7:DB:EF:73:9A:42:9A
X509v3 Authority Key Identifier:
keyid:36:0A:96:01:E0:2F:81:28:EF:64:6F:55:95:33:6E:0A:57:91:7C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NgqWAeAvgSjvZG9VlTNuCleRfK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c3ca86-3e76-48c4-98ac-c2d00342235c/1/3Up1_xa72MiZWR7nWOfb73OaQpo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c3ca86-3e76-48c4-98ac-c2d00342235c/1/NgqWAeAvgSjvZG9VlTNuCleRfK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.177.4.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:a5:ee:a2:ae:11:76:75:83:5a:a4:37:f5:85:e9:18:3d:50:
65:47:c1:99:0b:cf:fa:24:31:de:17:3c:90:f2:06:3e:2d:c9:
00:16:1f:2c:ba:35:d3:17:34:03:38:78:39:73:10:db:29:90:
b9:9f:84:84:64:6e:a0:22:69:49:29:8b:d4:0a:9d:54:e5:bc:
bd:2b:2b:36:2f:55:88:5e:3a:be:5b:26:d2:42:6a:c8:ca:7c:
4e:e8:ed:19:fc:fb:6e:d5:ec:79:4c:e5:3a:45:53:28:fd:0c:
13:7b:89:e0:9d:ef:06:d4:2b:a8:24:96:62:9a:21:db:38:bf:
62:8d:e8:5e:ee:0b:c4:ce:e5:a0:8d:36:36:e4:48:23:9a:07:
43:f2:01:fd:93:ce:fc:36:97:81:3b:45:26:85:de:f5:fd:2f:
ea:d9:c2:48:60:fa:e2:bf:80:93:1b:00:d0:8b:41:37:c3:ab:
4f:94:f8:d8:af:a9:d0:7b:9e:14:f5:1e:a7:d8:3b:60:a6:94:
df:de:f6:29:5c:2c:73:5a:18:d4:e7:4c:00:1b:67:99:93:9e:
8a:0e:88:5c:93:fb:b9:73:10:9a:66:f2:0d:48:da:5c:3a:62:
b3:0d:86:15:dd:21:1a:ed:00:78:35:6b:75:ae:e7:8b:81:10:
fe:5f:f2:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:09:20 2025 by rpki-client