Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/48lDGC9bYCTuSM8HwQhmLCbmZus.roa
File: 48lDGC9bYCTuSM8HwQhmLCbmZus.roa (raw, json)
Hash identifier: NHmuOU8Cy9kJ9mGcVBS8Mv1uoHjoSm8ONFcGWnM3sBI=
Subject key identifier: E3:C9:43:18:2F:5B:60:24:EE:48:CF:07:C1:08:66:2C:26:E6:66:EB
Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Certificate serial: 01995CA94F24633F7FF9EDE1B8F6F44ECC47
Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/48lDGC9bYCTuSM8HwQhmLCbmZus.roa
Signing time: Thu 18 Sep 2025 11:50:23 +0000
ROA not before: Thu 18 Sep 2025 11:50:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42831
IP address blocks: 93.88.152.0/24 maxlen: 24
93.88.159.0/24 maxlen: 24
152.89.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:5c:a9:4f:24:63:3f:7f:f9:ed:e1:b8:f6:f4:4e:cc:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Validity
Not Before: Sep 18 11:50:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e3c943182f5b6024ee48cf07c108662c26e666eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8f:7d:8d:86:57:dd:d4:38:30:fc:fe:de:13:
1c:55:cb:79:e5:50:1d:ff:9b:70:92:87:5a:0f:74:
96:4c:44:63:d2:34:e9:a7:32:62:5c:d8:f6:17:f1:
f7:91:f3:4b:de:fa:92:32:f9:ac:0d:8b:56:9e:72:
b0:29:86:6e:5f:b1:a3:a9:84:76:45:4d:67:29:97:
0a:9c:47:76:84:26:0f:78:3a:8a:ef:bf:42:bb:5d:
4e:ca:1a:af:ac:d0:47:f2:2c:80:b8:12:d5:73:45:
8e:af:35:c3:97:85:42:51:96:0e:1e:dd:52:1d:f1:
04:9c:0f:c5:af:48:d7:34:a0:58:83:b9:54:70:8f:
8c:07:73:43:01:cf:6c:b7:a3:34:b0:49:cc:e6:8d:
24:8b:e8:fd:c8:56:62:b8:ae:5d:80:a0:33:c4:27:
80:6e:d0:c2:1a:57:40:53:7a:9a:3c:25:7a:7f:6d:
ec:ef:e4:3c:39:ee:5f:cf:6e:18:60:9a:41:2e:56:
02:12:fa:9d:a2:a1:5b:26:cf:42:f6:f5:5a:fa:34:
3e:da:a7:9d:6a:24:37:3b:34:fb:f0:65:79:66:6f:
f1:8c:77:ee:f5:07:f7:9d:f1:fa:1f:86:5f:50:35:
b2:67:9f:64:19:e4:fb:a8:bd:11:27:10:22:71:04:
67:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:C9:43:18:2F:5B:60:24:EE:48:CF:07:C1:08:66:2C:26:E6:66:EB
X509v3 Authority Key Identifier:
keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/48lDGC9bYCTuSM8HwQhmLCbmZus.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.88.152.0/24
93.88.159.0/24
152.89.85.0/24
Signature Algorithm: sha256WithRSAEncryption
47:c3:4d:9d:33:30:85:76:34:62:b9:0d:ee:d4:1f:c6:f1:9f:
ae:df:20:b3:fe:fb:96:ed:8f:6d:53:94:3b:be:b0:83:43:e9:
d8:7f:bb:25:3a:00:e6:95:7c:32:45:8f:8c:15:dc:11:f7:62:
ac:a8:35:9d:d9:77:34:c6:05:04:cb:02:e0:85:ea:f1:32:f5:
f2:2c:6b:14:9c:62:52:44:03:a9:68:26:80:f3:60:24:34:b4:
1d:a2:09:5d:ac:65:d9:a1:10:bc:62:e4:a4:67:3b:3b:74:60:
20:45:a9:de:80:23:72:43:d3:4e:cd:e4:c9:33:4c:0c:5f:9d:
35:2d:91:ae:9e:07:8a:9a:a1:8e:1a:66:a4:c7:0c:cc:a2:7d:
71:20:69:1c:f3:58:e6:cd:77:77:2b:56:e0:53:b2:22:f3:e4:
a1:2a:1f:22:fe:12:84:32:ec:aa:9f:f9:2a:e6:2c:e3:36:5a:
38:4e:24:06:3d:28:55:d9:5b:3b:a9:01:9f:28:de:d7:63:d1:
61:09:93:e7:1f:01:88:a1:61:ce:f8:14:fc:03:7e:c2:c0:66:
e2:8e:06:a0:20:71:ec:71:15:68:e8:48:0e:67:63:00:0a:57:
a7:1f:4b:d1:af:9b:0d:d0:1c:7c:f7:96:35:ba:6f:8c:62:59:
b5:12:91:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:58:48 2025 by rpki-client