Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/3BwQGvtGG9EzTodyzZ_T_NlKH8c.roa
File: 3BwQGvtGG9EzTodyzZ_T_NlKH8c.roa (raw, json)
Hash identifier: 3YVq+Q3Pxf3bX0RyqLEPepY9xeWnJNOauq8KUa99lAY=
Subject key identifier: DC:1C:10:1A:FB:46:1B:D1:33:4E:87:72:CD:9F:D3:FC:D9:4A:1F:C7
Certificate issuer: /CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
Certificate serial: 0198842DEFC0FAA6D827B2E2E1E4CD1D92C0
Authority key identifier: 1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/3BwQGvtGG9EzTodyzZ_T_NlKH8c.roa
Signing time: Thu 07 Aug 2025 10:57:39 +0000
ROA not before: Thu 07 Aug 2025 10:57:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202736
IP address blocks: 45.156.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:84:2d:ef:c0:fa:a6:d8:27:b2:e2:e1:e4:cd:1d:92:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
Validity
Not Before: Aug 7 10:57:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dc1c101afb461bd1334e8772cd9fd3fcd94a1fc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:72:5d:8c:c1:33:a6:c8:13:48:f1:a8:75:a4:
2b:ea:a9:35:08:ea:7f:5f:03:21:e8:25:7a:14:87:
b3:d1:21:34:68:04:08:4c:94:e1:ec:ad:84:d3:d2:
7f:3f:46:cf:87:40:3a:07:b8:32:a4:fb:47:f6:38:
9a:8b:d4:61:66:23:9c:96:8a:fc:11:2f:df:2e:1f:
a6:10:87:70:fd:62:7f:d9:82:58:53:26:5e:f3:1a:
49:b5:6c:c9:67:81:57:c1:42:ef:48:2f:e2:d4:28:
88:29:2a:72:c2:cd:41:2e:28:43:82:0c:2c:98:08:
30:f3:04:a5:0a:71:5b:e0:31:26:92:fc:c8:47:d4:
04:3c:3e:e8:ff:4c:e2:a9:8c:0b:78:27:73:92:17:
67:9c:ad:24:20:15:82:05:17:5f:1d:8c:e0:b2:de:
56:f6:a4:53:3f:15:fd:68:53:e1:5b:23:14:88:f5:
5f:f1:6e:8c:15:7a:42:f1:ad:6f:ef:20:3d:17:a4:
0e:99:a2:3d:bf:34:4c:c3:22:34:b9:77:02:b5:ad:
90:6d:e8:15:0f:bc:04:e0:1a:45:a2:d5:4b:33:fd:
e4:d2:59:4a:54:50:d5:4f:cf:62:a8:1f:c7:42:32:
51:5b:f7:dd:3e:09:35:30:f3:00:6e:14:2b:c4:f0:
1b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:1C:10:1A:FB:46:1B:D1:33:4E:87:72:CD:9F:D3:FC:D9:4A:1F:C7
X509v3 Authority Key Identifier:
keyid:1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/3BwQGvtGG9EzTodyzZ_T_NlKH8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.147.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:b6:a3:4f:03:90:2c:16:b0:52:a3:5f:9a:0e:2b:c3:3b:09:
0f:11:cf:07:e9:e9:3d:7b:09:b9:d7:4d:a3:24:97:8d:76:bc:
78:7b:18:46:07:44:1b:25:d4:53:28:90:b6:a2:72:99:5c:2b:
1a:a4:90:d5:e4:d5:29:55:c2:a1:60:69:fd:c8:13:39:60:4a:
8c:86:69:e1:e9:7a:38:5f:b4:cd:fd:7c:50:99:eb:97:90:7d:
da:e1:84:40:d3:a5:98:6c:5b:5f:87:3c:71:62:fb:e0:ff:e1:
7b:f3:96:2b:dd:52:05:4b:60:49:bf:66:b4:ba:88:fb:3b:14:
63:6f:f7:a2:b9:8c:f1:1c:0e:1b:d4:99:e6:fc:33:8f:dc:5a:
24:7f:30:11:58:7d:36:42:c1:f7:4d:c5:e3:72:1f:89:c8:1e:
ab:38:3a:d7:ad:33:35:ea:5e:6c:74:50:a8:19:46:98:3c:51:
16:5e:33:b1:ee:43:79:6b:65:9b:d1:c6:ea:d2:48:2d:27:b9:
83:cd:58:a1:5a:48:dd:f8:91:56:c9:93:48:80:c8:7e:39:de:
68:39:c5:9a:c7:fd:39:b3:38:ad:80:d4:63:68:b0:d2:4f:cd:
f9:87:f3:52:12:2d:ac:24:2f:b6:74:96:27:b7:e6:ba:fc:77:
a4:f9:03:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:16:42 2025 by rpki-client