Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/0AAn3llxCcbl8stwuSFJ2MvQ2gY.roa
File: 0AAn3llxCcbl8stwuSFJ2MvQ2gY.roa (raw, json)
Hash identifier: 3bkhfAAiYAhb7qdEJOkeD/JnCkQjoYFRgKNN1lNI4YU=
Subject key identifier: D0:00:27:DE:59:71:09:C6:E5:F2:CB:70:B9:21:49:D8:CB:D0:DA:06
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 019A3AEFC3ED28F3FFED7A22D63C670AA3E1
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/0AAn3llxCcbl8stwuSFJ2MvQ2gY.roa
Signing time: Fri 31 Oct 2025 15:43:03 +0000
ROA not before: Fri 31 Oct 2025 15:43:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 77.246.220.0/24 maxlen: 24
88.80.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:3a:ef:c3:ed:28:f3:ff:ed:7a:22:d6:3c:67:0a:a3:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Oct 31 15:43:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d00027de597109c6e5f2cb70b92149d8cbd0da06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ea:ba:e5:41:a2:4b:95:15:fe:4a:44:1c:d5:
e3:f5:12:2f:8b:d7:9a:b9:b4:86:fc:e3:49:dc:a7:
db:29:24:4c:d7:f9:58:6b:99:34:d6:8f:7a:07:b4:
45:de:71:0a:9f:d2:21:33:e6:88:7b:e6:dd:8d:5e:
29:01:0e:80:c7:2d:d4:f7:0b:db:20:ea:e3:f1:5e:
9d:d8:a3:da:a9:54:ae:c6:64:c0:f7:a9:0a:f7:22:
f8:4d:43:32:2f:b3:6e:19:71:82:d6:92:7f:e1:ef:
09:8a:9f:1a:0e:5c:60:3c:55:ac:a5:af:4e:c2:a9:
66:90:59:9d:48:bb:8f:a7:dc:aa:3a:cd:43:29:a7:
68:0a:a7:1a:c6:59:c0:d5:63:ab:93:d9:0e:57:c0:
ec:b2:7f:77:1a:3c:bd:ca:62:42:10:d8:fb:8f:87:
f0:7f:71:17:b2:37:c8:5b:69:08:9e:78:50:ae:4d:
6f:f2:72:54:9f:bb:68:7c:5c:5d:ba:3d:42:e8:eb:
24:75:1c:40:3c:41:6c:36:75:cf:4c:98:e4:f4:e5:
84:fe:b9:2a:89:a3:2d:db:81:d6:cf:e8:6e:06:a3:
a9:89:04:42:59:f2:45:28:db:5f:ae:c1:54:1f:22:
8c:34:e5:14:96:79:7d:8c:10:2c:d8:40:cc:9c:7d:
7d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:00:27:DE:59:71:09:C6:E5:F2:CB:70:B9:21:49:D8:CB:D0:DA:06
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/0AAn3llxCcbl8stwuSFJ2MvQ2gY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.246.220.0/24
88.80.137.0/24
Signature Algorithm: sha256WithRSAEncryption
87:4a:52:f2:4e:47:2d:0f:c2:6f:78:9b:ef:b7:19:e4:63:fd:
31:fd:ce:8d:24:8f:d8:e1:9c:0f:9a:f7:48:e0:f3:da:72:1b:
ff:38:39:87:24:0b:8a:fe:6e:6d:95:15:fd:6f:c5:c5:34:22:
53:b8:3c:51:ff:df:04:8b:ce:31:f6:d1:fe:84:36:07:1b:b5:
7f:81:0a:d4:e3:f2:64:bc:8f:fb:fa:f9:6c:2a:bd:30:dd:29:
5b:a9:0b:b3:94:79:aa:ce:e3:56:43:3e:45:5d:67:27:49:8c:
ea:11:3f:dc:ce:1a:d0:8c:55:89:1b:bf:16:cf:c4:1e:e1:95:
ae:7f:c9:7f:7b:d4:48:06:f8:c8:51:18:8f:c3:18:d8:40:e7:
49:c4:65:3f:5c:14:00:2b:b6:17:45:f2:57:7a:05:de:83:79:
03:0b:6b:64:0f:55:5a:d8:a7:18:de:64:0a:de:f3:f4:ae:04:
39:9d:0b:65:f3:8b:e0:3e:2a:8e:ba:8f:14:1e:a4:7c:46:f9:
27:42:86:fe:b8:85:c6:f4:7c:16:2f:41:61:9a:af:c1:92:53:
ae:1b:a3:2e:36:a1:13:fc:08:a3:da:78:b8:16:58:35:39:14:
3e:47:49:39:c6:82:5c:f6:b8:46:c2:c2:25:17:7f:6c:03:b1:
90:66:d4:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:39:59 2025 by rpki-client