Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/3fgaOhXfUotdSWtyNnpqhlDzp4c.roa
File: 3fgaOhXfUotdSWtyNnpqhlDzp4c.roa (raw, json)
Hash identifier: eyd9QrSqosiV2gaC9MJAN+1hmScBoXqJjKw/JU3YPoI=
Subject key identifier: DD:F8:1A:3A:15:DF:52:8B:5D:49:6B:72:36:7A:6A:86:50:F3:A7:87
Certificate issuer: /CN=f324581e4368825d5e13f4f2a0d6ff8e484c95e6
Certificate serial: 0199DCC4A2D9A87629FDED18EF6D72BC05C3
Authority key identifier: F3:24:58:1E:43:68:82:5D:5E:13:F4:F2:A0:D6:FF:8E:48:4C:95:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/3fgaOhXfUotdSWtyNnpqhlDzp4c.roa
Signing time: Mon 13 Oct 2025 08:51:38 +0000
ROA not before: Mon 13 Oct 2025 08:51:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61138
IP address blocks: 2a01:fb05:3000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:dc:c4:a2:d9:a8:76:29:fd:ed:18:ef:6d:72:bc:05:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f324581e4368825d5e13f4f2a0d6ff8e484c95e6
Validity
Not Before: Oct 13 08:51:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ddf81a3a15df528b5d496b72367a6a8650f3a787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:af:f7:cc:75:12:48:f4:97:5e:1f:b7:6c:db:
ea:ae:86:de:cb:61:d0:ed:cf:74:86:73:5d:04:9b:
b3:60:d1:f1:0a:08:93:1e:8f:4f:6c:10:c2:d9:f4:
d7:22:4b:a6:84:86:34:38:fe:f3:f1:71:3f:f0:45:
39:3c:10:91:c6:9b:c2:82:e8:8f:af:1a:64:b7:ad:
44:13:b6:46:c3:d9:46:d4:71:52:bd:6d:9a:35:5f:
42:62:b8:0f:f0:2d:37:62:e1:af:44:8a:ce:51:29:
d3:49:8f:12:9c:5e:ce:4a:76:03:30:83:21:3d:0c:
bc:94:4c:2d:99:9f:19:f9:5f:f5:bf:00:b4:ed:ea:
5e:f3:c4:ec:56:cf:b6:07:6d:c9:07:5f:e9:c0:df:
30:d5:87:63:ee:a5:57:ff:84:7d:89:10:6a:c9:fa:
95:a9:67:2a:af:86:1e:2b:9f:9e:87:37:11:b0:23:
75:44:a4:3e:bc:31:38:73:e9:00:f9:9e:60:0d:2b:
d0:26:98:f4:f8:29:a4:ac:31:d3:14:c4:5c:f4:d2:
0f:6d:ca:14:94:67:02:23:be:e6:af:32:cd:3e:cc:
1c:08:ec:43:7c:1f:30:71:72:fc:aa:fd:12:71:b0:
b9:3b:62:8b:a9:a8:e2:e2:8a:aa:bd:20:d4:a9:f3:
72:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:F8:1A:3A:15:DF:52:8B:5D:49:6B:72:36:7A:6A:86:50:F3:A7:87
X509v3 Authority Key Identifier:
keyid:F3:24:58:1E:43:68:82:5D:5E:13:F4:F2:A0:D6:FF:8E:48:4C:95:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/3fgaOhXfUotdSWtyNnpqhlDzp4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:fb05:3000::/36
Signature Algorithm: sha256WithRSAEncryption
89:1b:74:d8:e7:b1:40:1d:f3:aa:26:70:11:92:16:83:c7:06:
6c:ae:4a:13:17:d5:22:a3:22:75:97:a6:d0:75:df:94:5d:66:
63:7a:f1:04:e2:fa:38:49:8a:d8:eb:04:58:0e:26:58:47:a1:
2c:a8:36:d3:d2:1f:6c:d5:a8:27:5e:84:1b:84:a4:58:c1:f9:
da:4f:61:44:9f:c9:3b:cb:d8:59:7c:49:ff:ee:40:45:31:5d:
97:36:33:e4:bb:a8:33:48:da:ee:c4:47:9f:39:a5:15:6c:8f:
72:f8:aa:75:17:85:5c:1c:c9:ea:23:59:a3:f5:01:1d:c2:fc:
ab:8f:2f:9f:52:d8:e3:e2:95:fa:9e:2f:29:c4:b8:75:0c:d4:
9e:4f:24:cd:92:86:0a:3f:fb:c0:2e:6d:98:f5:71:65:95:09:
a9:33:28:27:dc:8d:e8:af:b5:35:54:0c:92:b3:ed:97:e6:89:
23:32:99:b8:90:7c:52:3f:97:60:e5:89:5e:ad:9d:34:6b:8f:
74:ad:76:a9:44:db:a5:22:30:48:4f:d3:77:8c:cd:55:5f:31:
47:6a:b1:35:d7:f2:d0:76:c5:ca:9c:fd:72:d3:6c:d1:29:8a:
f9:8b:6a:40:9f:de:fd:1e:d2:76:e1:ff:4f:e3:31:21:d7:e2:
79:34:a0:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:07:07 2025 by rpki-client