Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/3fYim0ijqP_BPvrPAf718jkZRmQ.roa
File: 3fYim0ijqP_BPvrPAf718jkZRmQ.roa (raw, json)
Hash identifier: V0lFAiOFRTLCuEx4SmU/vGh5hARSPW9ZgXZlfAsOVf8=
Subject key identifier: DD:F6:22:9B:48:A3:A8:FF:C1:3E:FA:CF:01:FE:F5:F2:39:19:46:64
Certificate issuer: /CN=2415bf9c61c85db7c99ac4cdf79257e7997ab77c
Certificate serial: 0199CE8701FD90AD00A52595CA88E893CDB4
Authority key identifier: 24:15:BF:9C:61:C8:5D:B7:C9:9A:C4:CD:F7:92:57:E7:99:7A:B7:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JBW_nGHIXbfJmsTN95JX55l6t3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/3fYim0ijqP_BPvrPAf718jkZRmQ.roa
Signing time: Fri 10 Oct 2025 14:29:38 +0000
ROA not before: Fri 10 Oct 2025 14:29:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 397630
IP address blocks: 37.153.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/JBW_nGHIXbfJmsTN95JX55l6t3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/JBW_nGHIXbfJmsTN95JX55l6t3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/JBW_nGHIXbfJmsTN95JX55l6t3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ce:87:01:fd:90:ad:00:a5:25:95:ca:88:e8:93:cd:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2415bf9c61c85db7c99ac4cdf79257e7997ab77c
Validity
Not Before: Oct 10 14:29:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ddf6229b48a3a8ffc13efacf01fef5f239194664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6f:b8:5e:c2:26:ba:21:63:a6:da:cc:ac:b5:
56:d7:c4:bd:7b:09:f2:20:f3:99:6b:6b:1b:67:08:
26:bf:1a:9a:56:30:c3:1d:cd:f2:cd:fb:1b:88:30:
ee:b8:af:03:e7:ee:c0:4f:9a:b5:c7:5a:3d:9a:f5:
cd:03:74:23:60:87:bb:16:5c:45:4a:62:9d:48:16:
45:f2:7e:6e:9e:92:87:0e:43:98:21:c8:42:f3:53:
11:d4:f6:fe:7f:55:42:64:02:41:20:0b:15:5a:a5:
40:84:ad:47:65:34:3f:92:5b:33:cc:1b:f7:d1:9d:
1c:7e:a7:dd:85:45:0d:9b:9b:71:25:83:2b:56:08:
3d:7a:cf:5c:f1:17:d8:46:84:05:ce:1f:d0:18:8c:
a1:60:bb:f9:55:d1:92:6f:c5:6a:9c:dd:15:1b:fc:
f8:41:2e:4f:ea:7a:b8:22:f1:ad:a2:f1:9d:86:82:
f1:a2:dd:de:77:03:0a:a5:f6:f2:5c:d4:5f:e3:77:
d5:f5:b4:8b:66:06:f9:91:31:c7:d4:41:9b:13:0b:
42:89:f8:c1:2b:9c:fe:13:2b:a5:fc:e2:47:be:a1:
41:d6:89:77:98:cf:a3:1b:b5:d6:94:4d:1a:81:92:
58:e5:56:bf:63:57:7d:b9:9b:6a:27:5d:ba:3c:ca:
9b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:F6:22:9B:48:A3:A8:FF:C1:3E:FA:CF:01:FE:F5:F2:39:19:46:64
X509v3 Authority Key Identifier:
keyid:24:15:BF:9C:61:C8:5D:B7:C9:9A:C4:CD:F7:92:57:E7:99:7A:B7:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JBW_nGHIXbfJmsTN95JX55l6t3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/3fYim0ijqP_BPvrPAf718jkZRmQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/JBW_nGHIXbfJmsTN95JX55l6t3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.153.155.0/24
Signature Algorithm: sha256WithRSAEncryption
af:83:2e:a0:35:99:99:f1:e9:8f:5a:7f:86:e4:d6:07:b8:f6:
0a:b5:28:82:bd:10:91:a9:b8:91:25:bd:01:15:b0:8b:bb:25:
14:a8:7f:2c:aa:26:26:2e:aa:f7:3a:5b:bd:e5:c3:e7:db:85:
14:b9:d8:14:da:ff:60:17:f2:27:62:d8:ca:ee:0b:93:aa:6b:
c4:40:cb:d4:91:c3:05:3a:19:bd:d3:8b:bb:cb:bd:18:7e:24:
a9:a2:47:df:d6:f5:34:57:fd:a5:9b:d0:8a:0e:f9:db:9e:e0:
30:e2:99:9a:f5:e7:45:8b:6b:f1:8c:75:2f:2b:c5:e5:4c:6f:
3e:05:a7:e4:0d:0a:8e:5a:35:28:a3:9d:a9:de:a9:87:bc:8d:
7f:eb:c7:e8:98:cc:ce:b7:61:b4:1f:50:c1:9b:5e:f5:fe:e9:
95:92:62:ef:c8:35:b2:55:5f:3c:a3:08:80:87:6c:42:0b:5d:
6b:e7:19:e1:a8:e1:80:31:29:d1:30:3e:c4:f1:f2:77:63:d7:
69:aa:b2:f1:46:aa:f7:5e:95:0d:0a:a8:28:fe:a8:a8:ef:b2:
43:f5:d0:3c:57:e5:de:e5:d7:17:03:39:a1:fb:58:40:dc:2b:
f6:f7:46:5c:27:e6:0a:d8:94:fb:01:1a:95:b5:ae:f4:c0:a3:
30:42:9c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:58:08 2025 by rpki-client