Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/U6V2FCr3duwrLHYXfMUAwbMQYWE.roa
File: U6V2FCr3duwrLHYXfMUAwbMQYWE.roa (raw, json)
Hash identifier: n65sXgOD4a9BNyNZnLy9ePNv9aeblojwP3q3G8dIAXE=
Subject key identifier: 53:A5:76:14:2A:F7:76:EC:2B:2C:76:17:7C:C5:00:C1:B3:10:61:61
Certificate issuer: /CN=3a4945e46764029d2581d820c3373fa445855539
Certificate serial: 01997113237314291AB7AB5B3A8E262DB7A0
Authority key identifier: 3A:49:45:E4:67:64:02:9D:25:81:D8:20:C3:37:3F:A4:45:85:55:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OklF5GdkAp0lgdggwzc_pEWFVTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/U6V2FCr3duwrLHYXfMUAwbMQYWE.roa
Signing time: Mon 22 Sep 2025 10:58:23 +0000
ROA not before: Mon 22 Sep 2025 10:58:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3320
IP address blocks: 62.244.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/OklF5GdkAp0lgdggwzc_pEWFVTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:71:13:23:73:14:29:1a:b7:ab:5b:3a:8e:26:2d:b7:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a4945e46764029d2581d820c3373fa445855539
Validity
Not Before: Sep 22 10:58:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=53a576142af776ec2b2c76177cc500c1b3106161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:9c:c7:f7:4c:2e:02:49:62:be:bc:54:e0:2a:
73:2c:34:f6:80:1a:d8:0d:83:42:11:15:00:a4:ff:
4d:ba:f6:8f:39:cc:2e:aa:14:b9:6a:1c:61:24:24:
a1:b4:ee:a6:6f:b8:3d:b3:2b:30:44:65:2f:8d:59:
39:4c:68:59:35:cc:54:da:24:4a:32:9a:bf:3f:ec:
e8:01:54:5e:d4:0f:ea:9a:1e:04:79:4d:a3:60:2d:
8b:68:4d:97:f5:cf:8c:70:e9:4b:84:ef:1d:08:0b:
5f:e3:d4:15:15:ba:f0:74:90:5b:fe:09:f6:a8:14:
2f:45:79:a7:74:e8:5b:5d:1a:b5:d4:59:44:e4:ea:
da:d3:be:25:b2:ef:ea:e5:0a:72:f3:76:c8:1c:e9:
7a:e3:1d:4a:e5:2e:b1:17:73:49:73:97:5b:57:3c:
1b:d5:2e:22:19:b6:4f:51:56:5d:35:53:ec:dc:f5:
95:e2:b2:4e:e1:90:44:76:92:d9:58:2e:90:76:3d:
74:40:1c:0d:00:78:31:b2:1c:cd:4f:f7:42:8b:b9:
bd:e4:36:3c:a4:c5:47:31:74:0c:1b:a5:47:40:c5:
4d:d8:13:66:d8:4c:e4:bc:74:21:79:de:eb:df:6c:
65:cc:0b:27:3c:d0:b2:52:37:f4:8f:30:cb:4d:3f:
b7:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:A5:76:14:2A:F7:76:EC:2B:2C:76:17:7C:C5:00:C1:B3:10:61:61
X509v3 Authority Key Identifier:
keyid:3A:49:45:E4:67:64:02:9D:25:81:D8:20:C3:37:3F:A4:45:85:55:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OklF5GdkAp0lgdggwzc_pEWFVTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/U6V2FCr3duwrLHYXfMUAwbMQYWE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.244.46.0/24
Signature Algorithm: sha256WithRSAEncryption
07:ff:e4:10:db:c1:21:a8:4e:ab:4c:fe:87:45:22:3d:b6:8a:
e4:63:1c:fc:8d:4b:46:de:a2:cf:a7:b3:27:44:fc:7c:57:f7:
df:a1:5e:78:d6:fc:3a:6a:8e:38:fb:06:67:29:5b:21:f1:e9:
51:2f:ea:12:b3:3d:e9:ac:44:c1:f5:6b:d7:0e:a4:20:1e:b9:
8d:95:bc:e6:ca:86:e1:30:0e:12:e2:1a:ae:b9:c9:2c:bd:65:
1a:3c:ed:da:c3:8c:ba:a4:68:4a:8e:7c:de:69:60:9f:70:0d:
83:35:1f:01:12:ff:9b:44:4f:88:a8:a6:f1:e6:02:78:9c:c3:
1f:e3:77:c8:a6:c6:65:ed:8a:4b:3e:20:8c:d7:5d:21:6d:72:
cd:5e:60:13:0d:4e:11:1e:a0:9a:e5:b4:d6:af:6c:6f:7c:09:
46:95:76:85:82:e0:e0:34:a1:b2:4c:06:42:c0:e1:91:86:4a:
3f:8d:dc:6a:cc:74:21:06:c6:65:d1:6e:c8:0d:f0:f4:ad:2f:
3f:de:2e:4e:a2:00:46:f0:17:dc:d4:3b:19:5d:7c:bb:12:3c:
60:51:b0:9f:f3:6b:23:42:b4:1e:46:80:06:35:de:55:26:28:
12:48:66:5f:f1:b7:d0:52:e6:92:65:e1:2f:f4:6f:47:72:47:
14:90:e7:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:55:38 2025 by rpki-client