Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/3ltCFdZy4V3GyE2PWFgAfClRC2E.roa
File: 3ltCFdZy4V3GyE2PWFgAfClRC2E.roa (raw, json)
Hash identifier: MvKcHOfmLjkCC6ae2mrrpxSjZGHgMZgVcn/g1k0NPNY=
Subject key identifier: DE:5B:42:15:D6:72:E1:5D:C6:C8:4D:8F:58:58:00:7C:29:51:0B:61
Certificate issuer: /CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4
Certificate serial: 0199576586F59853DB090D0F208BB08340C8
Authority key identifier: 95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/3ltCFdZy4V3GyE2PWFgAfClRC2E.roa
Signing time: Wed 17 Sep 2025 11:18:15 +0000
ROA not before: Wed 17 Sep 2025 11:18:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216475
IP address blocks: 45.112.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:57:65:86:f5:98:53:db:09:0d:0f:20:8b:b0:83:40:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4
Validity
Not Before: Sep 17 11:18:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=de5b4215d672e15dc6c84d8f5858007c29510b61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:be:1c:38:b8:3a:55:1c:ab:34:e1:b3:8a:09:
3d:a4:ab:1b:cc:be:c8:73:4d:83:a6:e5:d5:17:87:
2d:8a:8a:d7:9b:a7:c6:7e:d2:d4:be:11:8a:2f:9e:
37:30:cc:07:16:ec:9a:29:66:7b:e0:9c:9b:e3:7a:
d6:3c:30:60:6c:43:53:e4:42:21:37:83:3b:56:7e:
52:b4:86:2a:e1:40:18:78:07:76:9f:95:32:02:14:
04:12:21:71:8a:95:67:7f:12:bf:ae:bb:0e:ce:25:
de:87:68:67:b2:a3:d5:b2:e7:73:37:3e:ad:c7:d2:
d0:2b:6a:55:51:d2:bc:5a:88:72:c6:19:df:f1:f9:
e3:d8:98:72:c3:6c:72:30:26:15:6c:82:d0:98:0a:
12:af:0c:36:2b:2f:d6:38:b4:dd:19:58:a8:0f:c0:
0e:53:d8:f3:81:35:a9:9b:3d:b3:cb:47:1a:f1:e3:
9b:8c:fa:9c:cc:75:9c:fb:43:3f:48:52:01:76:52:
f5:c8:77:25:03:2b:2d:e3:9d:8b:6c:63:f0:86:08:
68:56:18:5e:59:4b:39:10:3f:a1:62:5c:4f:f7:a9:
e8:bc:cf:8e:5e:70:e9:83:2b:89:3a:64:b6:f7:f8:
2e:a6:57:13:6b:7a:35:1b:eb:ec:d3:7d:40:2c:d9:
be:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:5B:42:15:D6:72:E1:5D:C6:C8:4D:8F:58:58:00:7C:29:51:0B:61
X509v3 Authority Key Identifier:
keyid:95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/3ltCFdZy4V3GyE2PWFgAfClRC2E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.112.192.0/24
Signature Algorithm: sha256WithRSAEncryption
14:8a:3b:54:ee:3d:d0:f6:66:1f:75:cd:56:11:3f:1c:19:4c:
65:a4:29:9b:a1:1a:e0:29:9a:77:92:b4:ed:bd:07:15:72:40:
28:29:55:10:21:c3:76:62:66:e4:39:f6:e0:77:25:d2:05:4a:
95:46:be:58:e9:8a:03:69:b5:be:d1:aa:9c:cf:09:38:34:59:
46:e2:94:a9:ce:ad:aa:e8:73:7d:1c:db:e8:96:c8:12:46:b3:
b2:42:2a:ec:c7:2b:d8:f7:1d:4d:ef:c2:3b:f9:ef:bc:11:2c:
06:fa:b4:a5:d3:d8:c5:13:0c:10:7c:11:5b:61:6c:5d:01:06:
d5:9b:5f:fd:9f:69:5e:7f:de:14:2e:4b:14:8c:06:8c:8a:a5:
86:f7:87:9b:08:b4:ff:f7:97:bd:53:57:33:a6:f8:d7:73:59:
7b:27:89:75:6c:d0:c7:eb:3f:bb:18:0d:a2:01:ad:c0:24:af:
36:21:8b:0f:b5:96:38:71:e4:7b:91:43:01:17:38:14:2c:4e:
3c:36:fe:1c:0b:c5:93:e3:39:d7:2b:fc:f8:32:34:b7:d8:88:
fe:cf:68:94:c5:cb:96:ed:dc:37:a3:b3:13:1a:29:76:8d:8b:
14:c6:18:d4:67:3b:c0:78:d9:0c:9a:fd:62:6f:4b:67:73:4a:
c9:2f:1e:eb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZlXZYb1mFPbCQ0PIIuwg0DIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1MjJhYjY3OTIyY2UwMjc1ZThjNjFhYmZhODJkMmE3NTRh
ZjZkYzQwHhcNMjUwOTE3MTExODE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZTViNDIxNWQ2NzJlMTVkYzZjODRkOGY1ODU4MDA3YzI5NTEwYjYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA774cOLg6VRyrNOGzigk9pKsbzL7I
c02DpuXVF4ctiorXm6fGftLUvhGKL543MMwHFuyaKWZ74Jyb43rWPDBgbENT5EIh
N4M7Vn5StIYq4UAYeAd2n5UyAhQEEiFxipVnfxK/rrsOziXeh2hnsqPVsudzNz6t
x9LQK2pVUdK8Wohyxhnf8fnj2Jhyw2xyMCYVbILQmAoSrww2Ky/WOLTdGVioD8AO
U9jzgTWpmz2zy0ca8eObjPqczHWc+0M/SFIBdlL1yHclAyst452LbGPwhghoVhhe
WUs5ED+hYlxP96novM+OXnDpgyuJOmS29/guplcTa3o1G+vs031ALNm+NwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFN5bQhXWcuFdxshNj1hYAHwpUQthMB8GA1UdIwQY
MBaAFJUiq2eSLOAnXoxhq/qC0qdUr23EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFNLclo1SXM0Q2RlakdHci1vTFNwMVN2YmNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy82ODkxOGUtZTlkYS00MDZiLTk5MzEt
ZTUyNmE5NDA5ZmI4LzEvM2x0Q0ZkWnk0VjNHeUUyUFdGZ0FmQ2xSQzJFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy82ODkxOGUtZTlkYS00MDZiLTk5MzEtZTUyNmE5NDA5ZmI4
LzEvbFNLclo1SXM0Q2RlakdHci1vTFNwMVN2YmNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALXDAMA0G
CSqGSIb3DQEBCwUAA4IBAQAUijtU7j3Q9mYfdc1WET8cGUxlpCmboRrgKZp3krTt
vQcVckAoKVUQIcN2YmbkOfbgdyXSBUqVRr5Y6YoDabW+0aqczwk4NFlG4pSpzq2q
6HN9HNvolsgSRrOyQirsxyvY9x1N78I7+e+8ESwG+rSl09jFEwwQfBFbYWxdAQbV
m1/9n2lef94ULksUjAaMiqWG94ebCLT/95e9U1czpvjXc1l7J4l1bNDH6z+7GA2i
Aa3AJK82IYsPtZY4ceR7kUMBFzgULE48Nv4cC8WT4znXK/z4MjS32Ij+z2iUxcuW
7dw3o7MTGil2jYsUxhjUZzvAeNkMmv1ib0tnc0rJLx7r
-----END CERTIFICATE-----
Generated at Mon Oct 20 01:30:39 2025 by rpki-client