Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/eb7037-deed-4a23-b3a4-0458c15cfd0b/1/3AeTUsXDpEDl-IBh12u95RTXsxA.roa
File: 3AeTUsXDpEDl-IBh12u95RTXsxA.roa (raw, json)
Hash identifier: xYJhYHzSW71ucg3KnoWi7bZYFU9f0FjUJ5BTtmWX8vQ=
Subject key identifier: DC:07:93:52:C5:C3:A4:40:E5:F8:80:61:D7:6B:BD:E5:14:D7:B3:10
Certificate issuer: /CN=3f34d48d841a52a4227d49fa3ef85ba5abf22248
Certificate serial: 01993368D8CA989238CE56B469CC79F77B6B
Authority key identifier: 3F:34:D4:8D:84:1A:52:A4:22:7D:49:FA:3E:F8:5B:A5:AB:F2:22:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PzTUjYQaUqQifUn6PvhbpavyIkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/eb7037-deed-4a23-b3a4-0458c15cfd0b/1/3AeTUsXDpEDl-IBh12u95RTXsxA.roa
Signing time: Wed 10 Sep 2025 11:35:33 +0000
ROA not before: Wed 10 Sep 2025 11:35:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207318
IP address blocks: 185.139.6.0/24 maxlen: 24
2a11:d580::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/eb7037-deed-4a23-b3a4-0458c15cfd0b/1/PzTUjYQaUqQifUn6PvhbpavyIkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/eb7037-deed-4a23-b3a4-0458c15cfd0b/1/PzTUjYQaUqQifUn6PvhbpavyIkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/PzTUjYQaUqQifUn6PvhbpavyIkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:68:d8:ca:98:92:38:ce:56:b4:69:cc:79:f7:7b:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f34d48d841a52a4227d49fa3ef85ba5abf22248
Validity
Not Before: Sep 10 11:35:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dc079352c5c3a440e5f88061d76bbde514d7b310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:00:17:45:85:0c:6e:ca:15:f2:a7:7f:ba:5e:
99:ca:63:ba:39:e1:b4:ca:69:df:69:bf:b8:5a:a1:
23:16:5a:68:1e:16:20:73:07:de:68:28:3f:b2:cd:
c5:da:80:a9:2a:6d:1c:22:a1:ac:73:7c:86:0b:8e:
49:7e:1c:a7:29:de:bc:29:47:69:69:75:d4:66:bf:
b1:9c:36:92:79:fd:0f:6c:47:80:eb:f4:9f:9f:5b:
b9:07:32:2e:c7:83:01:5f:a7:b6:01:7c:72:6c:d1:
7d:b3:ba:c0:01:e1:e3:b2:e8:86:12:4b:bb:35:01:
89:c9:92:91:3b:35:dd:51:6f:7e:2d:43:4f:71:d9:
46:f3:2d:23:e6:98:07:62:81:b5:cd:bb:a9:df:f4:
32:ac:56:7f:98:bc:fb:6e:5c:15:f3:25:0f:c2:60:
1b:55:27:2f:73:b0:65:bb:f2:ee:e8:57:fe:c1:78:
44:a7:73:53:58:5f:e1:6d:bf:42:f3:1c:49:1e:14:
77:9a:b8:ef:18:c0:8c:e5:43:07:11:ba:23:4b:93:
3e:0e:2c:71:f4:43:c5:0c:34:ca:e9:32:12:64:75:
20:e7:1f:13:a6:2a:16:2c:f7:4d:fa:80:19:17:f5:
02:a0:c4:04:ef:2d:6f:b4:3d:e0:79:e8:9e:92:e2:
87:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:07:93:52:C5:C3:A4:40:E5:F8:80:61:D7:6B:BD:E5:14:D7:B3:10
X509v3 Authority Key Identifier:
keyid:3F:34:D4:8D:84:1A:52:A4:22:7D:49:FA:3E:F8:5B:A5:AB:F2:22:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PzTUjYQaUqQifUn6PvhbpavyIkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/eb7037-deed-4a23-b3a4-0458c15cfd0b/1/3AeTUsXDpEDl-IBh12u95RTXsxA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/eb7037-deed-4a23-b3a4-0458c15cfd0b/1/PzTUjYQaUqQifUn6PvhbpavyIkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.139.6.0/24
IPv6:
2a11:d580::/29
Signature Algorithm: sha256WithRSAEncryption
39:f1:5f:9a:a9:3d:9b:c7:dd:e1:ad:e0:49:e4:d4:e9:76:b0:
05:d1:56:de:94:05:c7:e2:5b:92:78:a9:25:7a:23:81:f3:93:
6a:b7:94:06:d8:64:4f:bf:7a:ac:cf:ee:9a:68:76:83:1c:ea:
dc:bc:8b:38:09:bd:15:98:45:1b:b6:b8:f2:f2:5f:8d:c5:6c:
5f:de:ef:40:48:64:b1:c7:c3:2b:ff:f3:52:e4:b4:e0:61:dc:
68:8e:83:b4:ae:ed:d2:89:31:87:7d:62:f6:37:6c:52:72:c0:
b3:2b:13:03:e8:f0:04:cb:e2:3d:b8:30:39:d2:c1:1b:80:95:
74:00:ba:88:45:0c:c8:14:f8:fc:16:1e:9c:10:76:d2:80:c8:
c9:9d:96:b1:59:ac:7c:23:49:b5:ff:72:64:b2:76:30:41:d6:
0e:db:92:66:22:c0:9f:51:29:e6:c9:f9:a8:03:7e:e4:59:39:
b1:15:9e:5c:fd:1d:25:94:6b:fb:d4:f7:17:40:87:56:07:88:
7a:d0:3a:c6:9c:6a:4a:f4:cd:30:ad:1b:52:39:0e:5e:eb:7c:
95:f6:61:cb:3b:41:03:57:7f:00:78:97:c5:76:93:6c:69:e3:
57:82:f3:13:51:2a:f6:c9:66:d6:f1:48:ed:c1:1b:1f:e0:9e:
a6:9a:7d:ba
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZkzaNjKmJI4zla0acx593trMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmMzRkNDhkODQxYTUyYTQyMjdkNDlmYTNlZjg1YmE1YWJm
MjIyNDgwHhcNMjUwOTEwMTEzNTMzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYzA3OTM1MmM1YzNhNDQwZTVmODgwNjFkNzZiYmRlNTE0ZDdiMzEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgAXRYUMbsoV8qd/ul6ZymO6OeG0
ymnfab+4WqEjFlpoHhYgcwfeaCg/ss3F2oCpKm0cIqGsc3yGC45JfhynKd68KUdp
aXXUZr+xnDaSef0PbEeA6/Sfn1u5BzIux4MBX6e2AXxybNF9s7rAAeHjsuiGEku7
NQGJyZKROzXdUW9+LUNPcdlG8y0j5pgHYoG1zbup3/QyrFZ/mLz7blwV8yUPwmAb
VScvc7Blu/Lu6Ff+wXhEp3NTWF/hbb9C8xxJHhR3mrjvGMCM5UMHEbojS5M+Dixx
9EPFDDTK6TISZHUg5x8TpioWLPdN+oAZF/UCoMQE7y1vtD3geeiekuKHTwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFNwHk1LFw6RA5fiAYddrveUU17MQMB8GA1UdIwQY
MBaAFD801I2EGlKkIn1J+j74W6Wr8iJIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHpUVWpZUWFVcVFpZlVuNlB2aGJwYXZ5SWtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9lYjcwMzctZGVlZC00YTIzLWIzYTQt
MDQ1OGMxNWNmZDBiLzEvM0FlVFVzWERwRURsLUlCaDEydTk1UlRYc3hBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9lYjcwMzctZGVlZC00YTIzLWIzYTQtMDQ1OGMxNWNmZDBi
LzEvUHpUVWpZUWFVcVFpZlVuNlB2aGJwYXZ5SWtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuYsGMA0E
AgACMAcDBQMqEdWAMA0GCSqGSIb3DQEBCwUAA4IBAQA58V+aqT2bx93hreBJ5NTp
drAF0VbelAXH4luSeKkleiOB85Nqt5QG2GRPv3qsz+6aaHaDHOrcvIs4Cb0VmEUb
trjy8l+NxWxf3u9ASGSxx8Mr//NS5LTgYdxojoO0ru3SiTGHfWL2N2xScsCzKxMD
6PAEy+I9uDA50sEbgJV0ALqIRQzIFPj8Fh6cEHbSgMjJnZaxWax8I0m1/3JksnYw
QdYO25JmIsCfUSnmyfmoA37kWTmxFZ5c/R0llGv71PcXQIdWB4h60DrGnGpK9M0w
rRtSOQ5e63yV9mHLO0EDV38AeJfFdpNsaeNXgvMTUSr2yWbW8UjtwRsf4J6mmn26
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:58:06 2025 by rpki-client