Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/P0-q-BdDXYrwKYDCUC5gegtCTZE.roa
File: P0-q-BdDXYrwKYDCUC5gegtCTZE.roa (raw, json)
Hash identifier: oO/hx6p/KCHt0e0eW15T8NOjsXnklfDaMDxz69ADiuE=
Subject key identifier: 3F:4F:AA:F8:17:43:5D:8A:F0:29:80:C2:50:2E:60:7A:0B:42:4D:91
Certificate issuer: /CN=3de2681dda00702a7597a71257e14f7a725e890e
Certificate serial: 0198096FA6444D5E48578ADE346A16023811
Authority key identifier: 3D:E2:68:1D:DA:00:70:2A:75:97:A7:12:57:E1:4F:7A:72:5E:89:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeJoHdoAcCp1l6cSV-FPenJeiQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/P0-q-BdDXYrwKYDCUC5gegtCTZE.roa
Signing time: Mon 14 Jul 2025 14:56:08 +0000
ROA not before: Mon 14 Jul 2025 14:56:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3257
IP address blocks: 145.43.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/PeJoHdoAcCp1l6cSV-FPenJeiQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/PeJoHdoAcCp1l6cSV-FPenJeiQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeJoHdoAcCp1l6cSV-FPenJeiQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 05:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:09:6f:a6:44:4d:5e:48:57:8a:de:34:6a:16:02:38:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de2681dda00702a7597a71257e14f7a725e890e
Validity
Not Before: Jul 14 14:56:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3f4faaf817435d8af02980c2502e607a0b424d91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a2:35:53:6e:1c:c4:aa:b8:d4:20:d2:2f:df:
94:07:61:e2:61:2c:2f:33:75:7a:96:32:68:aa:fc:
e1:bd:df:1e:59:3b:0b:c9:e0:f2:34:69:af:b8:1a:
4b:03:71:f7:92:fb:95:00:62:1f:c4:96:57:97:4a:
c7:a3:3e:9f:23:7c:01:c4:3c:35:60:47:32:80:5c:
e0:48:e8:82:1e:9f:a1:ce:b3:a1:b2:3f:b6:93:c6:
1d:27:f8:cc:c6:e5:5f:7f:bf:3a:1a:d9:ad:d2:56:
94:f4:f4:cf:2c:2c:d1:b0:cb:75:8f:4f:99:7e:e9:
5e:90:27:a6:af:d8:f4:b6:e9:36:6a:dd:c9:26:8e:
16:a7:52:02:ba:aa:2f:9e:e5:2e:ae:71:3e:8f:ca:
7d:b3:55:35:e0:11:a3:2f:bb:41:63:3e:32:12:fb:
ab:e6:00:50:20:32:cc:4f:73:26:44:0b:29:91:a7:
66:a1:18:e4:7b:59:1a:24:8a:44:c5:02:cc:d3:ac:
93:05:a4:94:4b:79:71:13:22:f5:29:55:b2:fa:3c:
7e:1a:17:69:c2:60:0e:c0:af:c4:9f:1a:da:0e:60:
cf:28:fd:38:5b:46:fa:c0:6c:2b:57:53:e2:68:28:
af:02:7d:f9:8f:50:d6:b6:fc:ca:2f:e5:e6:96:b7:
81:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:4F:AA:F8:17:43:5D:8A:F0:29:80:C2:50:2E:60:7A:0B:42:4D:91
X509v3 Authority Key Identifier:
keyid:3D:E2:68:1D:DA:00:70:2A:75:97:A7:12:57:E1:4F:7A:72:5E:89:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeJoHdoAcCp1l6cSV-FPenJeiQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/P0-q-BdDXYrwKYDCUC5gegtCTZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/PeJoHdoAcCp1l6cSV-FPenJeiQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.43.251.0/24
Signature Algorithm: sha256WithRSAEncryption
67:b5:50:6e:dd:95:3a:c1:01:d6:ef:19:56:e4:84:9f:20:b3:
f6:ee:47:b1:0b:e2:45:35:be:95:b1:ee:dc:82:7c:3b:34:94:
ef:7e:37:29:b3:f9:55:ed:40:98:c7:b7:77:b1:17:fb:8b:e7:
16:59:cc:d1:dd:90:15:f0:a6:f5:f7:b3:da:9e:08:df:1b:fb:
78:21:21:d8:68:22:7a:8f:68:ff:c5:5a:91:a7:48:53:70:72:
3a:9c:5b:80:95:c6:08:ad:82:ee:d1:a5:c4:40:ef:63:4e:ad:
00:c8:d6:9c:81:52:e6:4c:72:96:57:f7:b0:27:ff:b5:31:e8:
3b:06:0b:7f:c4:4f:b1:e0:6c:fc:45:dc:fa:b7:14:bd:68:d7:
34:bf:83:28:fe:46:5a:41:9d:32:2e:a8:3a:45:fe:e6:bb:07:
a6:9f:05:4e:36:07:fe:18:0c:32:07:43:0d:c5:c6:c2:b9:42:
d0:f9:52:6b:a6:6f:02:ee:aa:ed:d0:2f:d8:de:da:81:0b:42:
8c:63:26:6e:d6:1b:5a:21:1d:29:cd:44:32:e2:00:a4:60:5b:
d8:51:ac:86:90:f2:a0:12:ad:84:f6:d8:8c:33:95:de:a6:10:
aa:07:11:12:3a:15:98:ac:e3:f7:61:74:87:01:e0:73:88:e1:
ad:76:91:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:53:48 2025 by rpki-client