Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/3HuHUrTrBGgznmI_GcD88Rj5VXg.roa
File: 3HuHUrTrBGgznmI_GcD88Rj5VXg.roa (raw, json)
Hash identifier: TkShOiSOfyqFhq5I7lfBkCTGVq6hkbaPqXjh3R/yVYo=
Subject key identifier: DC:7B:87:52:B4:EB:04:68:33:9E:62:3F:19:C0:FC:F1:18:F9:55:78
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0199E487544E8BD30F593834903DA325F7E5
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/3HuHUrTrBGgznmI_GcD88Rj5VXg.roa
Signing time: Tue 14 Oct 2025 21:01:38 +0000
ROA not before: Tue 14 Oct 2025 21:01:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211593
IP address blocks: 45.87.251.0/24 maxlen: 24
185.126.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e4:87:54:4e:8b:d3:0f:59:38:34:90:3d:a3:25:f7:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Oct 14 21:01:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dc7b8752b4eb0468339e623f19c0fcf118f95578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:66:67:8a:92:8b:58:a9:24:5d:b5:62:17:b4:
67:7b:c1:cd:88:2d:68:2f:a9:a4:c9:9f:fd:ef:ff:
f5:7d:7f:f8:13:e9:b3:bb:25:26:87:81:c1:a9:01:
75:9c:05:7f:dd:ef:44:3c:66:db:8f:63:93:d3:f4:
84:6a:eb:e2:91:d9:cf:92:1e:08:df:87:22:d7:39:
32:70:db:82:65:5b:6f:6b:7a:73:1e:29:78:ec:54:
b5:8d:68:9e:3b:69:12:f2:2d:dc:d5:5e:75:19:57:
9f:74:28:3f:c3:8e:05:2e:fe:6a:6f:f1:c4:90:e1:
21:d6:3f:96:7c:92:49:3f:50:1d:18:b4:01:9f:59:
7d:be:a4:f2:4d:ef:22:5a:c9:3f:73:d0:c0:c5:3c:
a7:27:9b:09:2a:7f:9c:e2:1d:af:28:64:6b:02:e9:
2a:a8:fd:f1:c8:f9:97:32:bd:62:67:43:05:c0:49:
f0:74:9b:47:7a:6d:0b:2a:dc:5d:5b:62:b6:ba:3a:
6a:04:25:36:cd:03:ab:9b:b9:95:aa:59:1e:34:90:
b4:3f:ee:9b:cf:27:2f:81:4e:b8:0c:61:d0:4b:64:
57:9a:83:a0:3f:af:19:c5:03:a3:73:02:93:5d:c5:
88:ec:e4:74:9d:1e:38:a2:33:f8:84:3b:91:fe:2b:
0c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:7B:87:52:B4:EB:04:68:33:9E:62:3F:19:C0:FC:F1:18:F9:55:78
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/3HuHUrTrBGgznmI_GcD88Rj5VXg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.251.0/24
185.126.65.0/24
Signature Algorithm: sha256WithRSAEncryption
36:69:b0:e7:11:f5:5c:16:24:c8:af:33:ef:2c:8f:08:16:1c:
8a:bf:54:89:ef:15:9f:47:7d:4a:3d:32:9e:b5:31:08:c0:b7:
34:e9:19:56:55:a7:9a:7e:6a:07:f9:02:24:8b:b1:7c:19:a5:
a4:41:78:74:5d:38:fd:dd:04:05:db:02:92:d2:26:93:9d:19:
06:97:52:a0:d3:bc:23:90:5c:d4:25:99:6b:d6:90:ad:0b:29:
67:20:a4:75:32:02:3f:32:eb:ae:34:83:1f:b9:2e:93:2a:68:
72:49:15:58:98:70:9b:29:e5:53:3b:01:0b:ea:b2:c5:bc:2f:
d0:51:fb:ff:5f:2b:ae:69:4b:06:ed:08:ca:73:6b:54:3b:fe:
a7:da:51:3a:f2:83:2a:b0:3b:70:aa:9a:47:13:f1:73:58:5a:
61:1b:32:41:ba:ce:33:1d:dc:b1:81:3c:82:0c:af:75:17:2b:
7a:9b:47:e8:34:30:bb:4c:39:b5:47:54:09:e1:bb:c7:c4:50:
fa:2c:64:79:93:30:c8:3d:a6:db:50:3c:e4:6d:5d:02:88:f6:
8f:06:c1:4f:25:9f:1e:28:62:4f:2c:74:d1:21:c4:63:f5:bc:
50:28:21:60:f4:83:37:2e:ac:3c:30:76:28:e8:4e:db:bc:30:
75:2a:30:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:50:02 2025 by rpki-client