Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/37a93b-87b5-4995-9e8c-6635debc395c/1/u3PN03nF5VRKETuxZ9hrIBp3WRM.roa
File: u3PN03nF5VRKETuxZ9hrIBp3WRM.roa (raw, json)
Hash identifier: rHF4nTbYLmbRxQ2ai3QsJ15aqStQlt+XG0ZvOMJP3fs=
Subject key identifier: BB:73:CD:D3:79:C5:E5:54:4A:11:3B:B1:67:D8:6B:20:1A:77:59:13
Certificate issuer: /CN=617252ebbb33484adcec7405adea4de08a0afb04
Certificate serial: 0199E8186EAE94A3C54EF611580DF19A17EA
Authority key identifier: 61:72:52:EB:BB:33:48:4A:DC:EC:74:05:AD:EA:4D:E0:8A:0A:FB:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YXJS67szSErc7HQFrepN4IoK-wQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/37a93b-87b5-4995-9e8c-6635debc395c/1/u3PN03nF5VRKETuxZ9hrIBp3WRM.roa
Signing time: Wed 15 Oct 2025 13:38:59 +0000
ROA not before: Wed 15 Oct 2025 13:38:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34420
IP address blocks: 195.149.119.0/24 maxlen: 24
2a0b:8bc7::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/37a93b-87b5-4995-9e8c-6635debc395c/1/YXJS67szSErc7HQFrepN4IoK-wQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/37a93b-87b5-4995-9e8c-6635debc395c/1/YXJS67szSErc7HQFrepN4IoK-wQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/YXJS67szSErc7HQFrepN4IoK-wQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e8:18:6e:ae:94:a3:c5:4e:f6:11:58:0d:f1:9a:17:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=617252ebbb33484adcec7405adea4de08a0afb04
Validity
Not Before: Oct 15 13:38:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bb73cdd379c5e5544a113bb167d86b201a775913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:2a:aa:5f:cd:b5:54:75:fe:e9:3a:43:e8:f7:
6a:30:bf:b8:4a:40:73:be:f8:f2:41:72:a3:85:e2:
36:98:6a:30:6f:bf:e5:c5:b7:f9:e1:54:c4:e3:eb:
50:93:80:17:72:dd:f8:23:45:22:68:83:13:44:3c:
c5:19:6a:75:be:1b:37:cf:7a:1d:df:4d:cc:70:a9:
57:c0:7e:e6:b6:ab:87:a8:50:d1:8f:42:8b:05:dc:
e3:c8:18:6c:b5:18:09:24:76:c9:5b:ec:01:e7:ba:
e8:10:7b:8c:6d:a9:6a:a8:33:cd:b0:1a:48:26:7d:
75:a0:26:76:d4:9a:05:8b:d7:d4:a6:b4:0d:6c:14:
04:f4:2e:39:98:45:b3:db:37:6b:20:92:ab:9a:53:
f4:2a:7a:66:54:84:81:47:08:fd:55:ec:07:de:4e:
86:6d:47:f1:d4:ac:14:04:09:89:28:e9:1e:72:d2:
b8:f2:f7:c3:f4:0d:9a:0a:8e:99:4a:87:b2:4b:80:
8a:18:24:66:79:23:df:3f:09:5f:b4:f1:b0:71:4e:
da:10:1e:22:58:a1:44:cb:06:88:bc:da:7a:bc:37:
de:f5:19:80:d5:8f:ed:24:a0:ba:c3:90:96:ee:7e:
31:eb:de:28:90:2c:e5:a8:0b:6e:3a:58:5e:48:88:
a7:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:73:CD:D3:79:C5:E5:54:4A:11:3B:B1:67:D8:6B:20:1A:77:59:13
X509v3 Authority Key Identifier:
keyid:61:72:52:EB:BB:33:48:4A:DC:EC:74:05:AD:EA:4D:E0:8A:0A:FB:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YXJS67szSErc7HQFrepN4IoK-wQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/37a93b-87b5-4995-9e8c-6635debc395c/1/u3PN03nF5VRKETuxZ9hrIBp3WRM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/37a93b-87b5-4995-9e8c-6635debc395c/1/YXJS67szSErc7HQFrepN4IoK-wQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.149.119.0/24
IPv6:
2a0b:8bc7::/32
Signature Algorithm: sha256WithRSAEncryption
36:04:f0:58:ff:3b:55:cd:44:d0:6f:5e:84:b6:f1:39:a8:7b:
b7:67:26:7a:f1:df:55:8e:7c:28:c8:19:10:5f:10:a4:71:be:
91:f5:75:88:74:0c:fd:a4:58:1f:92:11:58:19:bd:25:26:6d:
dc:90:2a:5a:b7:c1:40:e7:0a:1a:e6:4c:9d:b8:a0:54:ad:77:
de:e3:57:00:96:93:79:33:11:32:75:5e:d6:a4:f1:35:cc:45:
7c:84:22:70:94:0d:15:46:02:35:c0:7b:50:66:1b:22:4f:43:
6d:e5:d7:29:72:9f:e1:14:79:6a:36:56:41:cd:75:a6:b2:0a:
2d:4e:bc:80:cd:c9:71:db:27:7e:5b:3c:da:7a:0c:25:9e:1b:
c7:3c:66:94:32:b0:1d:c1:03:5e:e2:34:70:1c:ee:b2:a1:3b:
a6:07:5f:80:35:b2:3a:71:4f:e6:c8:6b:ff:11:a9:3c:50:c4:
06:8f:74:e5:e0:b3:b3:46:22:c0:10:99:f0:ff:ef:03:97:05:
31:cc:70:0b:0c:88:29:82:d1:6c:55:12:2b:28:93:b4:9c:c1:
28:51:2a:0d:19:71:5c:72:a7:e6:8b:20:69:56:01:88:c8:55:
e1:af:b3:c9:10:a9:b0:5d:9c:f4:e7:69:1e:0f:46:5f:1e:c8:
55:33:76:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:31:02 2025 by rpki-client