Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/3dUk2t_pPl5WdUVwPr_SzoQLFsI.roa
File: 3dUk2t_pPl5WdUVwPr_SzoQLFsI.roa (raw, json)
Hash identifier: PH0lnE0uN3wnc8tlGu7b2U0ixCX+3/LdiDburPkYelk=
Subject key identifier: DD:D5:24:DA:DF:E9:3E:5E:56:75:45:70:3E:BF:D2:CE:84:0B:16:C2
Certificate issuer: /CN=8b37183341a2ab6df3c59ec827ed71200b5a6244
Certificate serial: 0198C89CEE85C8AB9AB96A47ACEB84E553B7
Authority key identifier: 8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/3dUk2t_pPl5WdUVwPr_SzoQLFsI.roa
Signing time: Wed 20 Aug 2025 17:53:04 +0000
ROA not before: Wed 20 Aug 2025 17:53:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209242
IP address blocks: 193.162.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c8:9c:ee:85:c8:ab:9a:b9:6a:47:ac:eb:84:e5:53:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b37183341a2ab6df3c59ec827ed71200b5a6244
Validity
Not Before: Aug 20 17:53:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ddd524dadfe93e5e567545703ebfd2ce840b16c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:dd:cd:96:30:0c:60:a8:c5:0b:ed:75:06:dc:
86:60:87:07:72:47:c2:25:34:95:7c:c8:c4:99:3e:
6a:8d:b6:98:27:45:3f:fa:56:72:f0:69:54:1b:c6:
63:4d:fc:ba:3c:08:00:12:fa:7a:08:fd:6e:e7:25:
e3:63:b5:e0:dd:52:82:5c:53:26:2a:b5:50:d2:82:
cf:7d:c1:8b:4c:14:53:2d:a4:e1:64:f7:f5:b6:dc:
95:f8:62:05:4e:2c:43:41:bc:97:a7:37:03:3a:96:
1f:47:9f:6d:60:f5:f8:9e:f4:fb:4f:8d:6f:18:ec:
1b:2a:d9:d0:3d:c6:44:6c:43:fb:f3:de:e3:27:40:
03:c4:17:bb:45:9e:0f:86:e3:c5:03:94:a2:06:36:
f6:04:aa:2c:73:5d:b9:93:df:22:46:19:f4:fe:2e:
22:08:46:1d:c9:f8:c8:9a:17:e1:c6:24:d0:d5:c4:
64:14:50:16:d7:2f:01:56:61:ab:57:3a:ee:8f:e1:
01:c3:65:84:61:cb:8a:bf:4e:af:89:67:07:2e:e4:
92:45:33:6c:d5:63:5a:bd:77:77:17:bb:a9:78:14:
9b:48:1b:93:73:8d:b6:12:36:a1:7d:cb:d0:d7:46:
ee:ea:55:95:2f:f0:83:13:c2:e9:68:3c:ad:bc:5e:
5b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:D5:24:DA:DF:E9:3E:5E:56:75:45:70:3E:BF:D2:CE:84:0B:16:C2
X509v3 Authority Key Identifier:
keyid:8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/3dUk2t_pPl5WdUVwPr_SzoQLFsI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.162.35.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:b3:62:49:1b:6f:e2:31:5d:bd:67:9c:fb:64:9f:42:8e:f5:
75:e5:58:5d:50:2f:2e:31:05:02:10:61:b4:19:46:1e:1c:11:
f7:8e:85:e6:61:77:0a:a2:14:7f:a0:18:23:e1:24:b7:86:37:
73:b4:96:f8:f9:38:09:ab:9f:f4:b6:a7:dd:0e:05:25:ec:cc:
cb:3e:e5:8e:79:bb:ae:ab:54:53:69:e7:da:99:20:ec:06:a0:
d3:df:1d:f5:67:c1:fa:38:c9:21:86:6c:23:f7:4b:2c:fc:45:
7f:91:09:2b:6d:31:83:80:77:3d:ff:52:08:ee:54:18:90:3a:
d0:c0:20:75:19:93:d9:da:d2:30:fd:fa:56:98:53:49:ed:db:
a8:31:70:a3:22:bd:08:a9:a4:1f:c3:35:bc:ae:65:9e:52:3e:
f0:03:3d:52:97:43:f7:bd:03:51:ad:f7:27:a4:2f:2e:41:14:
7a:23:52:48:e5:3d:51:2c:89:eb:ed:cd:1c:e7:30:7c:9d:00:
b8:cf:2d:6e:68:3a:cf:21:f4:50:ec:45:ea:a0:0e:e5:15:09:
0c:d3:d4:6c:39:60:f8:1d:67:f4:aa:c9:47:76:6a:1a:bb:7c:
2e:2a:98:63:db:ac:90:81:fc:5d:dd:c7:38:f5:6e:78:33:79:
3e:b7:49:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:41:30 2025 by rpki-client