Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/3eC8nP2y0M7Dk50w-cz0uqTipws.roa
File: 3eC8nP2y0M7Dk50w-cz0uqTipws.roa (raw, json)
Hash identifier: oL1pIlz/bhILnljMZOEBWQ6dy5AQHNGyWJuSJLm2sWA=
Subject key identifier: DD:E0:BC:9C:FD:B2:D0:CE:C3:93:9D:30:F9:CC:F4:BA:A4:E2:A7:0B
Certificate issuer: /CN=ba8861e17ebed57950ff32c7b377fc430413dbe4
Certificate serial: 019818926C0A7051322BC569D542D11AE6E1
Authority key identifier: BA:88:61:E1:7E:BE:D5:79:50:FF:32:C7:B3:77:FC:43:04:13:DB:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/3eC8nP2y0M7Dk50w-cz0uqTipws.roa
Signing time: Thu 17 Jul 2025 13:28:25 +0000
ROA not before: Thu 17 Jul 2025 13:28:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 193.164.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:18:92:6c:0a:70:51:32:2b:c5:69:d5:42:d1:1a:e6:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba8861e17ebed57950ff32c7b377fc430413dbe4
Validity
Not Before: Jul 17 13:28:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dde0bc9cfdb2d0cec3939d30f9ccf4baa4e2a70b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f8:d3:2e:10:92:c7:eb:51:f0:ce:1d:18:b0:
e4:1f:e9:40:b6:3e:ca:fc:d8:af:d2:fa:86:71:6e:
52:ff:4d:74:58:67:82:13:41:93:65:5d:59:3b:eb:
90:c9:16:1a:56:f7:f5:f6:1f:ec:83:86:e0:d2:f9:
11:a7:7c:f3:9a:ba:6e:76:0a:d0:d6:01:01:ec:ee:
5a:e3:2a:38:b7:5f:2a:d7:88:f9:8c:29:63:d2:2e:
eb:f3:66:71:ee:4c:a1:c3:39:50:15:93:df:d3:15:
56:01:11:9c:74:6b:d6:b1:6c:2a:10:e2:30:3e:f2:
08:92:af:31:da:1b:99:82:dc:3e:8d:2d:c8:12:fb:
f5:bd:b5:16:73:13:40:5a:a1:6d:ba:bb:05:aa:3f:
48:ab:87:a9:03:40:50:d7:8c:61:d2:7c:4f:e3:42:
34:8b:00:c7:a5:f0:58:60:d0:d7:f0:00:68:7c:30:
97:99:79:3f:0f:d9:db:7a:0f:a3:f7:3d:f1:82:a8:
a7:d7:eb:28:c6:33:5a:6b:ae:3e:94:4d:c1:91:aa:
db:01:04:62:60:36:d7:ed:59:eb:c5:58:e8:1d:0e:
50:6c:7c:ff:d3:e0:85:11:60:47:da:f8:51:11:1c:
51:22:5f:fe:a8:d1:50:82:c3:a4:55:01:14:4f:01:
aa:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:E0:BC:9C:FD:B2:D0:CE:C3:93:9D:30:F9:CC:F4:BA:A4:E2:A7:0B
X509v3 Authority Key Identifier:
keyid:BA:88:61:E1:7E:BE:D5:79:50:FF:32:C7:B3:77:FC:43:04:13:DB:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/3eC8nP2y0M7Dk50w-cz0uqTipws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.164.197.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:e3:3c:8e:d0:a0:c1:9f:de:0e:26:a2:e4:0f:30:aa:24:5f:
6b:b3:28:ce:56:05:56:0e:87:f0:bd:91:8e:0a:3f:fe:e7:f9:
17:59:f1:75:71:1a:2d:e5:a3:55:ca:51:77:46:cf:30:38:e1:
62:70:5d:9f:44:74:2f:61:4c:52:cb:27:1c:da:23:72:d4:12:
9a:69:58:d6:f9:b0:61:a9:f1:f0:56:f7:cb:95:b2:40:9d:d2:
cd:23:a4:d3:3c:91:2c:ae:24:43:4b:c5:6a:9e:5d:54:f9:5f:
48:7a:2c:8b:bd:34:02:a2:0d:cc:96:6d:db:7e:99:40:0e:83:
38:65:2b:ad:a4:59:cd:23:64:92:dc:34:f8:13:3d:c8:1f:92:
d8:bf:8b:26:65:18:b9:f1:92:e5:29:50:af:b0:a4:45:24:53:
1d:e4:87:bf:89:10:64:9e:2e:a4:de:38:87:0c:af:6f:ce:68:
6c:db:89:70:c0:96:3b:bd:40:62:a4:a8:62:89:37:a4:20:11:
2d:ae:ac:39:4c:f7:aa:8e:a3:6f:5a:bc:b9:5c:e3:f8:dd:cc:
68:56:42:3f:f3:29:cd:b6:ba:35:7c:23:d0:7c:6a:22:11:24:
67:98:1d:d5:eb:ad:f9:0b:56:a8:56:26:b1:ae:1a:9e:07:fd:
02:40:28:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:39:58 2025 by rpki-client