Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/47LP3M4DnpAhDBPc8Xe1KqevZ2c.roa
File: 47LP3M4DnpAhDBPc8Xe1KqevZ2c.roa (raw, json)
Hash identifier: mk2gBXTfAFrg1QI3/EfLEXfTmlSexo0wvcwH/k20wTk=
Subject key identifier: E3:B2:CF:DC:CE:03:9E:90:21:0C:13:DC:F1:77:B5:2A:A7:AF:67:67
Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial: 01999AE4FFD6FFACA82EA9703A38FF18DD17
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/47LP3M4DnpAhDBPc8Xe1KqevZ2c.roa
Signing time: Tue 30 Sep 2025 13:52:02 +0000
ROA not before: Tue 30 Sep 2025 13:52:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 33659
IP address blocks: 31.132.54.0/23 maxlen: 23
45.248.54.0/24 maxlen: 24
63.246.150.0/24 maxlen: 24
78.31.205.0/24 maxlen: 24
185.205.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:9a:e4:ff:d6:ff:ac:a8:2e:a9:70:3a:38:ff:18:dd:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Validity
Not Before: Sep 30 13:52:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e3b2cfdcce039e90210c13dcf177b52aa7af6767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:6a:04:bf:36:78:4a:2b:93:b9:a6:ac:55:08:
8f:48:9c:df:ca:f9:b9:61:66:d9:8d:a6:21:9e:74:
ce:fd:ea:1d:24:4c:0b:8e:d4:b7:38:26:6b:74:a5:
25:1e:0c:c8:ec:69:60:78:15:b9:54:4a:ee:c3:9c:
a4:32:3e:f9:3a:d4:f3:70:08:59:7e:91:dd:3a:5c:
c6:87:43:a2:83:77:20:0d:94:de:b4:5d:4b:8a:a0:
04:89:4f:fc:d4:11:8f:2f:6f:c6:7b:32:5a:1e:54:
a5:ae:80:b8:95:f8:e6:08:d1:4b:ec:ee:1d:41:5c:
7a:c2:27:f1:e7:00:61:a1:d0:f5:9a:9f:d0:08:80:
a8:51:91:c7:70:b0:c3:f1:8c:a3:fc:9b:4f:53:3d:
aa:7e:b4:82:96:96:e5:d5:de:0e:96:e6:f8:99:4c:
44:80:e2:b3:17:57:3d:84:d2:49:ef:d6:8f:a9:42:
99:cf:a4:59:2f:b3:b7:f4:eb:9c:92:85:80:d5:e5:
23:47:7a:8f:30:00:79:be:53:08:93:6a:e3:96:66:
21:7c:60:26:b4:fb:0d:84:47:5c:25:7e:6d:07:36:
fb:18:02:99:02:50:91:41:62:f4:6a:37:bc:2f:4e:
21:1e:da:b0:15:7a:5e:29:a7:89:9c:42:0f:4d:e5:
a1:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:B2:CF:DC:CE:03:9E:90:21:0C:13:DC:F1:77:B5:2A:A7:AF:67:67
X509v3 Authority Key Identifier:
keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/47LP3M4DnpAhDBPc8Xe1KqevZ2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.132.54.0/23
45.248.54.0/24
63.246.150.0/24
78.31.205.0/24
185.205.204.0/24
Signature Algorithm: sha256WithRSAEncryption
31:9c:5f:89:ff:e4:aa:d7:58:8c:0f:cd:45:7d:84:e8:94:c6:
57:ec:e1:e8:27:01:6e:3a:04:e7:29:ac:01:d6:ab:17:00:9c:
c0:5b:b7:eb:fd:a9:c9:b1:22:5b:61:96:39:c1:75:fe:44:a7:
cc:d4:98:cf:db:95:2e:e7:2b:86:3b:33:6c:ba:7a:0d:88:6a:
be:97:f4:34:c9:1f:f0:87:8f:f5:26:6f:d4:1b:62:a0:a6:14:
dd:78:02:a5:1d:2a:cc:9c:d3:74:08:2a:e7:50:cd:e8:4f:16:
92:3f:96:af:db:c0:95:7c:b3:50:96:f2:ab:01:13:81:c7:eb:
2c:cf:36:cc:b3:e1:4e:b7:8e:51:e7:45:51:d6:87:7d:0e:4b:
1b:0e:ab:f3:6e:58:0d:4d:44:c6:41:08:fa:39:f5:95:ef:15:
5a:8e:2c:5e:41:57:f0:22:9d:95:a7:d0:28:48:d3:2b:0f:98:
f3:47:f6:2d:03:1e:97:d8:48:39:63:ef:e9:48:0c:bb:65:76:
70:ea:54:28:fc:28:e5:7b:ac:c2:b7:58:c1:db:88:d0:cb:ff:
b6:3e:d0:7b:92:b5:4d:b8:10:59:9d:36:6d:a5:d8:7b:19:ba:
2d:54:b2:a0:d3:ba:3c:27:f5:24:92:f0:38:eb:60:44:49:58:
bd:39:38:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:09:40 2025 by rpki-client