Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/7f1275-12fc-4397-9e3b-edf6cad1249d/1/R3ax-Z4NwERn9kiI-gjg5Xya12A.roa
File: R3ax-Z4NwERn9kiI-gjg5Xya12A.roa (raw, json)
Hash identifier: ffTm+IwpNw27nllrwwqn+t+2k278/G5pqNf7iK/QlhI=
Subject key identifier: 47:76:B1:F9:9E:0D:C0:44:67:F6:48:88:FA:08:E0:E5:7C:9A:D7:60
Certificate issuer: /CN=c3831edc0ba07c7e34aba701c3573d8e72af18fe
Certificate serial: 019942B35F73F78744F74F8308435912B762
Authority key identifier: C3:83:1E:DC:0B:A0:7C:7E:34:AB:A7:01:C3:57:3D:8E:72:AF:18:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w4Me3AugfH40q6cBw1c9jnKvGP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/7f1275-12fc-4397-9e3b-edf6cad1249d/1/R3ax-Z4NwERn9kiI-gjg5Xya12A.roa
Signing time: Sat 13 Sep 2025 10:51:15 +0000
ROA not before: Sat 13 Sep 2025 10:51:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208569
IP address blocks: 45.128.8.0/22 maxlen: 22
45.128.8.0/24 maxlen: 24
45.128.9.0/24 maxlen: 24
45.128.10.0/24 maxlen: 24
45.128.11.0/24 maxlen: 24
89.45.241.0/24 maxlen: 24
2a0e:3b40::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/7f1275-12fc-4397-9e3b-edf6cad1249d/1/w4Me3AugfH40q6cBw1c9jnKvGP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/7f1275-12fc-4397-9e3b-edf6cad1249d/1/w4Me3AugfH40q6cBw1c9jnKvGP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/w4Me3AugfH40q6cBw1c9jnKvGP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:42:b3:5f:73:f7:87:44:f7:4f:83:08:43:59:12:b7:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3831edc0ba07c7e34aba701c3573d8e72af18fe
Validity
Not Before: Sep 13 10:51:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4776b1f99e0dc04467f64888fa08e0e57c9ad760
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:f9:7d:dd:cb:9c:4b:e7:f8:98:be:95:e6:db:
20:5d:b6:48:58:cf:75:89:e2:5c:7c:85:ea:fc:cf:
9a:35:29:47:17:e6:29:11:17:52:bc:95:d4:6a:b9:
ad:39:d9:38:19:80:30:e2:f9:67:33:92:8e:cb:98:
32:da:b8:4b:f2:a4:26:f1:f3:8f:82:de:c0:7e:39:
7a:b5:17:b8:eb:e9:3a:68:2b:df:cb:0f:0b:04:a2:
18:71:c7:81:cb:8c:ad:aa:cf:b3:fd:b1:fe:8b:fc:
4a:c2:4d:ef:b8:50:a6:aa:fb:b7:d1:1e:09:9f:fd:
36:ca:d0:4e:7a:0c:81:41:e1:50:7e:77:21:00:31:
98:c4:f1:ac:9b:a5:4a:56:b5:8a:df:25:04:ec:4c:
98:eb:c0:61:53:8c:5b:5d:6e:84:4c:d8:3b:e5:fe:
98:4b:b5:91:b7:13:d7:3b:7f:7f:91:fc:c4:6d:d9:
02:9f:7a:eb:64:ac:23:05:e9:00:8b:5f:3e:c2:85:
07:01:23:91:ce:a9:88:06:8c:21:a6:f2:9a:4b:95:
2f:98:07:28:bd:81:52:66:ca:be:ca:93:03:e3:ee:
b7:80:a3:0d:00:10:31:58:e4:16:76:1b:d1:de:2d:
3b:df:fc:ee:da:ab:66:d1:f3:a2:94:58:5d:e5:94:
b5:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:76:B1:F9:9E:0D:C0:44:67:F6:48:88:FA:08:E0:E5:7C:9A:D7:60
X509v3 Authority Key Identifier:
keyid:C3:83:1E:DC:0B:A0:7C:7E:34:AB:A7:01:C3:57:3D:8E:72:AF:18:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w4Me3AugfH40q6cBw1c9jnKvGP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/7f1275-12fc-4397-9e3b-edf6cad1249d/1/R3ax-Z4NwERn9kiI-gjg5Xya12A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/7f1275-12fc-4397-9e3b-edf6cad1249d/1/w4Me3AugfH40q6cBw1c9jnKvGP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.8.0/22
89.45.241.0/24
IPv6:
2a0e:3b40::/29
Signature Algorithm: sha256WithRSAEncryption
55:9e:9b:17:ad:de:0a:cc:57:9c:78:dc:e6:40:76:f8:7b:13:
eb:23:d3:f7:5f:2c:37:bc:98:b8:b9:18:a5:9c:71:e8:17:17:
a9:1e:a7:a9:44:4d:8a:7c:5d:71:27:35:b3:80:3d:b2:47:98:
53:cc:60:7c:8f:f6:08:e5:22:90:de:82:ba:ad:5d:06:c3:4e:
5f:9e:c3:ed:b4:7e:3c:e8:18:87:d0:f2:ef:7f:3e:fe:fd:db:
0d:78:72:8e:78:b2:e5:ff:73:6e:48:b5:15:99:4b:b8:86:9f:
8c:ee:4b:64:ea:38:bb:f2:27:f9:2e:23:d0:0d:64:30:43:5a:
de:eb:4f:9d:bd:7d:76:57:0b:a1:c9:91:9e:d4:54:0b:91:16:
96:93:0b:a7:dd:47:07:09:2b:df:4d:1b:13:37:e9:ba:75:99:
1b:70:af:a5:9e:08:28:fc:9d:75:51:89:26:81:c0:e8:ec:31:
ad:d6:d9:72:5a:d1:8c:05:5d:10:44:5d:bc:7b:9c:42:c1:8a:
2d:d4:4d:ae:a9:9b:cc:9e:bf:d2:13:df:1c:14:34:fc:cf:8e:
f6:2b:02:fa:26:f6:7b:33:43:60:fa:db:c4:a4:ea:ec:23:76:
41:22:51:09:59:09:c4:4b:0b:5b:f7:9d:8f:aa:45:e1:1b:7f:
8d:fb:9b:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:05:18 2025 by rpki-client