Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/3MSuooCKHgIIUe741NoPew7fM6U.roa
File: 3MSuooCKHgIIUe741NoPew7fM6U.roa (raw, json)
Hash identifier: XKzD8YwrOGRcbqdlpu8IePXtpBqyVK3W7mHC5tD4SHY=
Subject key identifier: DC:C4:AE:A2:80:8A:1E:02:08:51:EE:F8:D4:DA:0F:7B:0E:DF:33:A5
Certificate issuer: /CN=47ddbcce2628bf09fae6bf044218c657e8bd3c6e
Certificate serial: 01999EA7274E34B1A0A277DD4F055C75FBF3
Authority key identifier: 47:DD:BC:CE:26:28:BF:09:FA:E6:BF:04:42:18:C6:57:E8:BD:3C:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R928ziYovwn65r8EQhjGV-i9PG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/3MSuooCKHgIIUe741NoPew7fM6U.roa
Signing time: Wed 01 Oct 2025 07:22:58 +0000
ROA not before: Wed 01 Oct 2025 07:22:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215239
IP address blocks: 45.143.0.0/22 maxlen: 24
176.118.178.0/24 maxlen: 24
2a14:2d40::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/R928ziYovwn65r8EQhjGV-i9PG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:9e:a7:27:4e:34:b1:a0:a2:77:dd:4f:05:5c:75:fb:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47ddbcce2628bf09fae6bf044218c657e8bd3c6e
Validity
Not Before: Oct 1 07:22:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dcc4aea2808a1e020851eef8d4da0f7b0edf33a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:66:68:cf:cb:66:b1:34:52:c5:a1:81:fc:28:
27:a9:4a:16:01:f7:b9:47:b5:6f:20:f4:de:43:40:
4c:b1:55:77:cf:c3:0b:24:3d:e0:60:09:33:75:90:
39:80:b4:e6:ec:3d:c7:fc:cb:06:b6:ec:78:4a:85:
3a:75:86:ec:ce:6a:13:20:2d:37:23:3a:16:f6:04:
ce:ad:f1:a6:e8:56:7c:29:58:e9:56:46:aa:47:34:
f4:55:c0:2a:ac:39:dd:92:e0:0b:5b:f6:6b:e9:af:
b3:c0:f2:fe:3d:d9:90:b3:eb:32:10:44:ee:c7:2e:
ff:b7:44:6a:f4:c4:6c:dc:7a:74:b1:72:33:1d:8d:
60:12:9f:ce:21:65:57:01:ce:88:94:63:9a:9d:b9:
1b:e2:b7:db:b3:8a:62:cc:38:a1:1b:1a:f3:18:3d:
45:bc:2a:92:00:10:9d:aa:0c:f9:b5:ea:bc:6f:37:
e1:86:04:f6:6c:00:52:8b:e8:0e:42:0e:76:d8:a3:
e4:3c:ab:ee:7c:f5:e5:d2:37:19:ec:b7:f3:91:c6:
a5:f9:66:74:75:f3:e5:09:6c:c1:65:db:3a:0a:fa:
c2:99:0f:d8:d9:02:34:2e:4a:b2:63:56:7d:c7:59:
c5:ec:b4:cb:69:cd:af:74:1d:bd:9f:25:ca:1f:49:
0d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:C4:AE:A2:80:8A:1E:02:08:51:EE:F8:D4:DA:0F:7B:0E:DF:33:A5
X509v3 Authority Key Identifier:
keyid:47:DD:BC:CE:26:28:BF:09:FA:E6:BF:04:42:18:C6:57:E8:BD:3C:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R928ziYovwn65r8EQhjGV-i9PG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/3MSuooCKHgIIUe741NoPew7fM6U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.0.0/22
176.118.178.0/24
IPv6:
2a14:2d40::/29
Signature Algorithm: sha256WithRSAEncryption
87:1e:92:b8:4e:8a:04:c8:88:f2:13:e9:a6:54:a6:70:f2:b4:
37:08:dd:b5:74:68:2c:24:a0:d6:bc:f7:f5:91:db:34:71:b8:
50:bc:cf:f5:19:c1:4a:d5:ac:f5:7e:c9:fe:bd:d3:77:fb:11:
13:61:47:ce:9a:b0:e3:4e:d4:88:7b:2d:b1:11:ff:d6:2a:0d:
61:91:e0:28:fa:41:18:9a:ed:33:bc:74:6c:64:2b:97:83:3e:
b9:e2:57:94:49:c8:64:bf:36:53:8f:f5:e2:35:52:26:a1:15:
36:81:4b:31:2d:0e:55:d6:4f:ec:7d:71:bb:11:a1:fb:47:48:
33:90:60:0c:52:30:b5:31:02:d3:ba:a0:11:a6:74:e2:0f:4b:
b3:2c:2f:e0:f4:3d:56:35:38:f6:c2:01:20:66:1b:11:42:6c:
da:39:2c:f3:0f:cf:36:85:23:d3:ae:74:1f:28:0e:a7:14:5d:
44:2d:02:06:69:b0:cd:00:d3:6e:d9:85:1a:4f:32:e3:13:21:
16:d5:57:8f:92:2d:fa:fc:24:38:d2:5d:c6:44:45:00:66:93:
17:22:24:b7:a0:5f:5d:24:1d:73:8e:81:52:53:53:3d:d9:48:
d4:f5:d9:49:a2:42:d2:62:1c:3d:e6:96:f0:13:47:fa:b5:06:
c8:e9:2e:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:34:11 2025 by rpki-client