Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/dUEg2uHl_mzH4Gc59hF0SQlEOPk.roa
File: dUEg2uHl_mzH4Gc59hF0SQlEOPk.roa (raw, json)
Hash identifier: FAec0jGTBdqWnGcu6aY23AJJHb4v1uDZ1rxzpmt/9ug=
Subject key identifier: 75:41:20:DA:E1:E5:FE:6C:C7:E0:67:39:F6:11:74:49:09:44:38:F9
Certificate issuer: /CN=3c22643ba6a0eaef57329bf5bdc90b31c386f8a7
Certificate serial: 01994CB8E3B26D96B199EFC05B831BB32138
Authority key identifier: 3C:22:64:3B:A6:A0:EA:EF:57:32:9B:F5:BD:C9:0B:31:C3:86:F8:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PCJkO6ag6u9XMpv1vckLMcOG-Kc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/dUEg2uHl_mzH4Gc59hF0SQlEOPk.roa
Signing time: Mon 15 Sep 2025 09:33:29 +0000
ROA not before: Mon 15 Sep 2025 09:33:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9081
IP address blocks: 212.102.128.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/PCJkO6ag6u9XMpv1vckLMcOG-Kc.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/PCJkO6ag6u9XMpv1vckLMcOG-Kc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PCJkO6ag6u9XMpv1vckLMcOG-Kc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:4c:b8:e3:b2:6d:96:b1:99:ef:c0:5b:83:1b:b3:21:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c22643ba6a0eaef57329bf5bdc90b31c386f8a7
Validity
Not Before: Sep 15 09:33:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=754120dae1e5fe6cc7e06739f6117449094438f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:31:2c:17:bf:4e:13:98:f3:e0:af:24:ef:b1:
34:77:4f:f9:da:6c:54:15:c1:84:78:5c:08:aa:88:
2d:29:3e:86:4a:30:28:52:89:ca:79:77:aa:58:4d:
30:45:cb:5b:dd:0d:e5:e7:3b:42:f2:db:d1:d0:36:
db:d7:45:e6:e2:f3:a3:ed:12:dd:10:56:45:b3:54:
f3:85:1d:93:87:43:d0:06:90:53:54:28:88:59:ef:
24:9e:23:35:ca:92:65:c4:7c:b3:6b:bd:96:22:ad:
48:78:a0:12:4f:a3:9e:1a:97:c0:18:bf:21:20:06:
c6:ea:f0:20:e9:ce:78:6e:ff:c4:1b:18:47:05:78:
51:3d:c4:52:cf:ca:a5:20:70:c7:40:42:b4:f4:9e:
51:9d:79:a0:31:25:76:cc:21:e8:af:a7:ee:fc:ae:
9b:83:21:c1:b9:59:fb:fe:bf:53:8d:ab:cb:14:5e:
5d:72:20:9d:13:b3:73:f5:a8:92:0a:82:cb:bc:eb:
35:18:e9:9f:ae:69:e6:a5:c7:6f:e0:95:13:ed:b3:
04:8e:ef:10:e4:61:aa:c6:b8:fa:a5:d0:c3:af:b6:
e6:b3:8e:83:f4:aa:d3:51:1c:14:67:56:65:57:19:
27:09:cd:61:56:57:51:d4:39:96:93:12:74:e4:85:
82:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:41:20:DA:E1:E5:FE:6C:C7:E0:67:39:F6:11:74:49:09:44:38:F9
X509v3 Authority Key Identifier:
keyid:3C:22:64:3B:A6:A0:EA:EF:57:32:9B:F5:BD:C9:0B:31:C3:86:F8:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PCJkO6ag6u9XMpv1vckLMcOG-Kc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/dUEg2uHl_mzH4Gc59hF0SQlEOPk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/PCJkO6ag6u9XMpv1vckLMcOG-Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.102.128.0/20
Signature Algorithm: sha256WithRSAEncryption
70:de:4b:53:81:05:eb:be:f8:37:15:7b:14:2f:ca:bd:00:51:
5a:6a:fa:aa:b7:25:50:5b:d0:fa:f7:cb:e0:00:52:46:4c:e9:
be:9c:b4:3c:7b:d0:e0:d8:eb:4f:16:de:7f:ff:f2:0b:24:76:
13:07:82:6a:cb:6c:4b:39:e4:8f:e7:ef:79:06:53:f9:45:d3:
c7:2e:01:9c:16:cc:e9:c4:22:fb:30:a5:99:72:31:ef:2f:bd:
19:cb:83:5d:0c:66:b2:17:8e:91:20:6a:81:e2:aa:46:92:7f:
bb:9f:bc:6d:6a:e8:35:05:5b:70:3c:f7:1c:93:fe:bf:11:88:
46:d7:60:e8:d3:6f:f5:6b:c9:34:22:77:fd:08:f9:70:60:b8:
57:b3:59:87:ce:a8:e1:0e:eb:2e:cf:4b:9a:a2:33:9a:7e:3c:
70:39:c2:1d:fa:8b:95:05:33:11:e4:75:19:d4:ef:5e:b4:30:
70:ab:6f:97:82:f4:67:2a:ca:c8:16:7f:65:22:01:22:38:db:
cb:57:96:b0:f5:1a:87:3f:8e:bd:a6:50:32:08:a7:cd:e5:17:
f2:4f:c7:aa:c6:1c:2d:8b:63:60:2a:ea:e5:da:ed:07:b0:a9:
53:ad:59:82:0c:b5:67:5b:ff:7d:a1:7a:ee:38:fa:60:4c:31:
9a:66:d9:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:42:42 2025 by rpki-client