Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/xEqqXsYbNZoaeb1j-5HleNNIZTs.roa
File: xEqqXsYbNZoaeb1j-5HleNNIZTs.roa (raw, json)
Hash identifier: DriMeptRhAZWNYYwFItNxlYBiBVqZaoh9EMF2d4ArFA=
Subject key identifier: C4:4A:AA:5E:C6:1B:35:9A:1A:79:BD:63:FB:91:E5:78:D3:48:65:3B
Certificate issuer: /CN=3bfa6636fe6440acf293b75705a7a1dcada8420b
Certificate serial: 019910E7DB6D19BFB04C4EB272565B5E5451
Authority key identifier: 3B:FA:66:36:FE:64:40:AC:F2:93:B7:57:05:A7:A1:DC:AD:A8:42:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O_pmNv5kQKzyk7dXBaeh3K2oQgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/xEqqXsYbNZoaeb1j-5HleNNIZTs.roa
Signing time: Wed 03 Sep 2025 18:47:34 +0000
ROA not before: Wed 03 Sep 2025 18:47:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209640
IP address blocks: 149.3.189.0/24 maxlen: 24
149.3.190.0/24 maxlen: 24
149.3.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/O_pmNv5kQKzyk7dXBaeh3K2oQgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:10:e7:db:6d:19:bf:b0:4c:4e:b2:72:56:5b:5e:54:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bfa6636fe6440acf293b75705a7a1dcada8420b
Validity
Not Before: Sep 3 18:47:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c44aaa5ec61b359a1a79bd63fb91e578d348653b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:06:a7:75:b1:7d:e4:8f:b5:92:dd:8a:b3:25:
80:9d:8a:02:dc:38:d5:ca:f1:3a:cc:f0:5d:47:a8:
04:8f:b6:35:4c:df:70:8c:65:dc:3f:97:f5:6d:30:
0e:d3:d2:f2:75:4b:06:45:6f:5a:0a:cd:b6:da:da:
53:de:05:f1:83:1a:ac:fc:d7:c9:3d:28:6f:7a:bd:
27:63:f0:62:c6:2d:65:ed:2f:5c:00:c1:0a:0b:9d:
f1:3a:a4:ba:5b:7c:67:e0:21:f0:29:79:6d:c5:8d:
ae:c6:cf:da:56:6c:82:b6:d2:c7:21:9f:67:cf:63:
b0:20:43:73:85:b0:e5:15:78:eb:60:ca:08:f5:df:
1e:cf:ac:a1:12:2b:88:bc:cc:1c:a0:13:9d:6f:18:
af:a3:23:e2:48:14:62:4a:5c:45:95:34:fe:4a:52:
4e:45:d9:3c:ea:92:3d:31:36:bc:66:b9:90:d5:71:
93:23:ae:32:93:d8:83:e9:d7:27:d9:6d:97:76:04:
c5:b8:0d:76:7c:c8:5f:35:41:50:70:ec:0b:c5:1c:
83:68:e3:34:17:2d:38:a1:de:66:50:28:4d:bb:ef:
cd:cc:e1:f8:03:d5:89:18:0a:84:95:c6:a5:a0:b6:
10:2b:4e:a7:e5:08:c1:e8:59:38:55:23:60:96:02:
ad:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:4A:AA:5E:C6:1B:35:9A:1A:79:BD:63:FB:91:E5:78:D3:48:65:3B
X509v3 Authority Key Identifier:
keyid:3B:FA:66:36:FE:64:40:AC:F2:93:B7:57:05:A7:A1:DC:AD:A8:42:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O_pmNv5kQKzyk7dXBaeh3K2oQgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/xEqqXsYbNZoaeb1j-5HleNNIZTs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.3.189.0-149.3.191.255
Signature Algorithm: sha256WithRSAEncryption
96:90:b8:f4:5c:7b:17:d7:74:10:be:51:78:40:22:6e:be:57:
e3:49:94:bb:d6:f1:23:e3:70:da:48:96:8b:b7:4f:8b:36:52:
5e:f3:d5:64:41:06:26:79:16:47:99:d4:60:e2:3d:a2:b6:82:
ae:c2:8e:41:a8:53:d9:56:50:1b:b7:bb:27:e0:76:74:7d:7f:
20:43:29:d6:a0:a4:8a:32:21:ef:0a:95:ec:81:cd:ed:36:91:
0b:d3:d5:df:79:59:d8:d6:68:2a:c9:f2:d6:d0:b4:45:7e:25:
b1:3c:e2:e2:37:61:c4:40:92:13:8a:0e:1a:46:7f:54:92:f1:
e7:10:ff:33:dd:5f:fe:95:7e:e2:f9:a9:fc:cd:60:fe:71:88:
96:39:c9:9c:47:ff:3e:97:53:3c:71:43:db:5f:f0:e8:c4:be:
c8:4d:7f:b0:74:43:73:1c:67:2d:e3:a3:37:ca:51:3b:69:2a:
f4:6c:37:4f:a1:5c:45:6f:10:9d:20:1e:d8:a0:77:62:c3:6f:
f0:dd:4d:02:99:81:fd:6f:87:72:cf:7f:60:4e:7c:d5:fa:1a:
cd:36:8a:cf:bf:36:a5:16:61:d6:8d:40:69:78:ff:c6:3d:06:
b3:3e:bf:f4:99:d3:52:8f:ac:8e:8e:69:db:95:46:db:7d:f3:
8e:f6:66:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:09:05 2025 by rpki-client