Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/3_exLez2c6RtEvnfTNzKi4Hkk5s.roa
File: 3_exLez2c6RtEvnfTNzKi4Hkk5s.roa (raw, json)
Hash identifier: My7qt21+jNuMKjyzC8y2c2BBa1kohFZiD1+qyo1M/9o=
Subject key identifier: DF:F7:B1:2D:EC:F6:73:A4:6D:12:F9:DF:4C:DC:CA:8B:81:E4:93:9B
Certificate issuer: /CN=1e234242957bb1be129681721f9c2cd08df07baa
Certificate serial: 019A2FAA734734849F1C89D864C6C188F01E
Authority key identifier: 1E:23:42:42:95:7B:B1:BE:12:96:81:72:1F:9C:2C:D0:8D:F0:7B:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HiNCQpV7sb4SloFyH5ws0I3we6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/3_exLez2c6RtEvnfTNzKi4Hkk5s.roa
Signing time: Wed 29 Oct 2025 11:11:31 +0000
ROA not before: Wed 29 Oct 2025 11:11:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199484
IP address blocks: 2a01:4c20::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/HiNCQpV7sb4SloFyH5ws0I3we6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/HiNCQpV7sb4SloFyH5ws0I3we6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/HiNCQpV7sb4SloFyH5ws0I3we6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2f:aa:73:47:34:84:9f:1c:89:d8:64:c6:c1:88:f0:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e234242957bb1be129681721f9c2cd08df07baa
Validity
Not Before: Oct 29 11:11:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dff7b12decf673a46d12f9df4cdcca8b81e4939b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:4c:4b:fd:dc:b7:9c:76:1e:fa:e7:ba:3c:9f:
09:9e:db:f0:65:b0:eb:65:5a:2f:70:ea:77:15:7f:
c9:6f:65:4b:b5:1d:7b:a2:3b:c1:37:e4:9f:ee:da:
c6:d5:a7:33:57:b6:f3:52:aa:3f:99:62:3b:f5:86:
96:ff:f8:45:17:8f:f3:6c:3b:9a:82:45:d3:5b:a1:
44:6b:d0:d3:e1:ed:6f:94:b3:52:e2:cb:b4:cc:ba:
28:d0:f0:9a:6b:a3:a7:12:90:25:b8:bc:63:24:73:
35:e3:91:da:50:82:5f:6d:61:da:05:ab:80:51:ea:
54:c6:81:54:2f:b4:d7:ca:c3:95:e7:77:fb:ef:59:
7f:6f:34:b9:e0:6f:13:a1:fd:0f:70:23:d0:60:22:
f6:d3:d9:6d:0e:b9:b0:69:58:19:f6:86:fa:0f:3f:
28:24:0d:06:8a:79:e6:00:60:8b:0e:64:89:cf:22:
e7:a2:27:a3:23:8c:18:98:06:8f:8e:6e:e6:24:84:
01:5a:fd:b4:d3:60:ec:49:b4:4c:ee:19:fb:7d:36:
3e:fa:7c:88:2e:74:09:03:b1:64:10:64:ec:1c:b0:
07:f4:83:22:96:3a:54:f4:c6:89:3e:08:10:cd:e3:
05:30:5c:d2:04:29:8a:e7:6b:8b:41:ec:6c:a2:34:
46:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:F7:B1:2D:EC:F6:73:A4:6D:12:F9:DF:4C:DC:CA:8B:81:E4:93:9B
X509v3 Authority Key Identifier:
keyid:1E:23:42:42:95:7B:B1:BE:12:96:81:72:1F:9C:2C:D0:8D:F0:7B:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HiNCQpV7sb4SloFyH5ws0I3we6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/3_exLez2c6RtEvnfTNzKi4Hkk5s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/HiNCQpV7sb4SloFyH5ws0I3we6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:4c20::/29
Signature Algorithm: sha256WithRSAEncryption
85:49:3b:b9:f2:9b:fe:1e:9d:7a:5a:19:b3:0c:8b:76:00:24:
be:f3:b2:a6:21:01:97:95:ed:6c:c2:d7:9d:33:d7:2c:0c:5e:
be:4c:87:53:9e:6e:2a:01:88:12:a8:ab:58:b4:07:8b:68:f6:
6d:22:82:5e:c9:b5:a8:95:84:91:63:6c:98:60:91:e8:97:7e:
29:05:34:8f:ec:48:6b:b0:b8:59:ee:17:f2:bb:b3:e1:f6:5b:
9c:76:49:a6:27:28:85:0b:a1:8d:5d:f8:96:81:9b:c3:a0:ae:
07:a4:1e:8a:2c:b6:9a:dd:9d:16:21:34:2b:33:51:9d:d8:dd:
d8:04:da:b9:11:a3:28:10:d8:70:6c:79:cf:ab:84:ea:4b:08:
39:b7:fa:b7:48:a7:b8:b9:b8:11:ea:13:e6:84:7c:3b:90:64:
3c:73:72:86:57:9a:61:7b:f0:f9:16:96:02:eb:0e:91:35:d8:
5e:10:45:93:c3:81:86:b8:d0:06:c2:9d:8b:09:9d:7f:01:5d:
3f:10:8d:79:b0:fa:3d:92:7b:5d:b9:c6:8f:96:e2:08:8c:a5:
37:37:28:19:f0:e8:72:7e:b8:69:bf:fd:87:e7:4b:12:52:cb:
a1:04:69:bb:55:83:d6:b3:fb:0a:16:01:76:98:f5:d1:70:d7:
14:02:d0:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:01:57 2025 by rpki-client