Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/a8e04b-0dba-40ec-b126-f457d404ae2f/1/3ClVuGwIZnyzq19yv6OajdRgSck.roa
File: 3ClVuGwIZnyzq19yv6OajdRgSck.roa (raw, json)
Hash identifier: Pc2ZDdCkzUBbz8l3kHlCiGrzO9OmrpmH04akpnWTzRM=
Subject key identifier: DC:29:55:B8:6C:08:66:7C:B3:AB:5F:72:BF:A3:9A:8D:D4:60:49:C9
Certificate issuer: /CN=2c88db81fdfbeccee75f4a9f698a3c1b3a84626e
Certificate serial: 019878D9621E761CC25DAE98863757C1C295
Authority key identifier: 2C:88:DB:81:FD:FB:EC:CE:E7:5F:4A:9F:69:8A:3C:1B:3A:84:62:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LIjbgf377M7nX0qfaYo8GzqEYm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/a8e04b-0dba-40ec-b126-f457d404ae2f/1/3ClVuGwIZnyzq19yv6OajdRgSck.roa
Signing time: Tue 05 Aug 2025 06:09:28 +0000
ROA not before: Tue 05 Aug 2025 06:09:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58096
IP address blocks: 45.93.4.0/22 maxlen: 22
91.213.168.0/24 maxlen: 24
91.220.69.0/24 maxlen: 24
94.141.124.0/22 maxlen: 24
185.33.228.0/22 maxlen: 32
185.154.72.0/22 maxlen: 32
185.216.192.0/23 maxlen: 32
193.105.114.0/24 maxlen: 32
193.160.204.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/a8e04b-0dba-40ec-b126-f457d404ae2f/1/LIjbgf377M7nX0qfaYo8GzqEYm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/a8e04b-0dba-40ec-b126-f457d404ae2f/1/LIjbgf377M7nX0qfaYo8GzqEYm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LIjbgf377M7nX0qfaYo8GzqEYm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:78:d9:62:1e:76:1c:c2:5d:ae:98:86:37:57:c1:c2:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c88db81fdfbeccee75f4a9f698a3c1b3a84626e
Validity
Not Before: Aug 5 06:09:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dc2955b86c08667cb3ab5f72bfa39a8dd46049c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:9f:f6:4d:10:11:10:57:e1:fe:5a:84:33:f6:
ec:a2:c9:cf:29:60:42:b6:0b:77:ee:4f:ac:f9:1e:
8b:b1:e1:f1:f1:4e:34:fb:59:1d:09:a8:22:3f:6c:
95:7c:06:fc:2b:c1:a4:06:59:46:b9:3d:1f:af:a2:
59:63:cc:3f:dc:41:51:c7:d9:35:b7:de:cc:bf:bd:
f1:a2:08:19:1b:73:74:8d:7b:52:05:f3:56:63:3c:
cd:21:b0:b0:43:79:d2:95:6e:b2:0c:e6:30:84:79:
3e:eb:e9:af:8d:8c:b8:c3:d4:2c:a8:c8:ca:a0:6f:
d8:80:a9:12:e4:52:1d:a6:a6:53:b2:63:6c:fa:33:
f7:43:81:42:e9:81:f2:c8:05:e3:b7:09:71:05:22:
59:73:9b:2e:be:0d:b7:90:f5:e3:d3:6d:bb:da:a8:
13:49:dc:80:e9:91:7f:1d:b0:88:00:17:5b:67:7a:
d4:66:16:63:29:93:60:c7:57:63:b4:ee:4c:62:99:
9e:08:0a:ea:fe:f1:5a:3c:bd:80:ef:3a:20:cf:14:
19:47:42:67:61:5b:48:59:98:44:bb:f0:13:84:b0:
74:d4:56:dd:18:94:c6:d5:c3:03:7b:7e:d4:3a:c9:
c1:10:f9:58:de:57:60:ec:2b:b6:20:0a:c6:f1:e9:
d4:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:29:55:B8:6C:08:66:7C:B3:AB:5F:72:BF:A3:9A:8D:D4:60:49:C9
X509v3 Authority Key Identifier:
keyid:2C:88:DB:81:FD:FB:EC:CE:E7:5F:4A:9F:69:8A:3C:1B:3A:84:62:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LIjbgf377M7nX0qfaYo8GzqEYm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a8e04b-0dba-40ec-b126-f457d404ae2f/1/3ClVuGwIZnyzq19yv6OajdRgSck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a8e04b-0dba-40ec-b126-f457d404ae2f/1/LIjbgf377M7nX0qfaYo8GzqEYm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.4.0/22
91.213.168.0/24
91.220.69.0/24
94.141.124.0/22
185.33.228.0/22
185.154.72.0/22
185.216.192.0/23
193.105.114.0/24
193.160.204.0/23
Signature Algorithm: sha256WithRSAEncryption
8b:7f:85:f7:6d:5e:63:42:c3:86:19:ac:d5:3a:4d:88:9e:98:
61:36:1a:d5:3f:f8:c3:8f:50:40:e0:d6:ed:f6:9e:d1:b3:a4:
84:00:16:54:14:e4:f5:31:05:18:15:45:86:5a:84:ac:32:51:
dc:5d:6a:3c:bc:e1:1a:9a:05:b6:6d:ee:f9:61:8a:52:b9:90:
3e:f3:3a:16:9c:30:0f:05:05:32:49:f9:b9:f1:7d:53:32:05:
0c:ab:63:0b:06:f1:44:28:a1:d0:d8:8b:9d:3a:36:a5:d3:44:
15:2c:73:5e:9b:52:d5:d3:4b:70:71:39:31:07:0a:b2:33:1f:
7e:b0:c7:28:01:91:7c:39:e7:d4:c8:e1:e4:a7:d3:43:05:9e:
db:6b:bc:1f:45:cd:d3:6f:f4:27:78:13:de:15:26:b4:54:91:
21:e4:8a:cb:cb:39:51:df:f1:32:75:d3:ff:bb:14:f3:d7:b1:
ff:df:76:14:1b:69:1e:2d:99:34:f8:e9:b1:c9:4b:69:c8:5f:
fe:fd:72:a2:52:19:3d:7c:37:e7:89:74:73:b1:df:38:e7:82:
2b:e3:fb:b9:64:54:d7:e3:d0:56:12:29:ff:b1:c7:34:78:6a:
ca:18:ed:54:7f:a9:d4:44:e0:c4:0b:ed:36:8f:dd:38:1c:a9:
e7:9e:99:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 17:31:02 2025 by rpki-client