Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/hUQ9Lp80_RQVHb451vbup9aX2cI.roa
File: hUQ9Lp80_RQVHb451vbup9aX2cI.roa (raw, json)
Hash identifier: uc+cv5S82pYvWnIGc2+0jaYBhmjGkpnFuroEQ5Pa6bA=
Subject key identifier: 85:44:3D:2E:9F:34:FD:14:15:1D:BE:39:D6:F6:EE:A7:D6:97:D9:C2
Certificate issuer: /CN=3ee770f47fd903925d80ac58e05e076f3baa110b
Certificate serial: 019A4886C6368B830F8FF19F9466245BB68B
Authority key identifier: 3E:E7:70:F4:7F:D9:03:92:5D:80:AC:58:E0:5E:07:6F:3B:AA:11:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/hUQ9Lp80_RQVHb451vbup9aX2cI.roa
Signing time: Mon 03 Nov 2025 07:03:03 +0000
ROA not before: Mon 03 Nov 2025 07:03:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 45.136.39.0/24 maxlen: 24
185.38.26.0/24 maxlen: 24
194.31.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:48:86:c6:36:8b:83:0f:8f:f1:9f:94:66:24:5b:b6:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ee770f47fd903925d80ac58e05e076f3baa110b
Validity
Not Before: Nov 3 07:03:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=85443d2e9f34fd14151dbe39d6f6eea7d697d9c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:5f:6e:fc:75:de:0a:f2:d2:3d:31:3d:10:01:
9f:52:e8:e9:3a:01:9d:6a:38:40:53:95:8c:5e:e6:
5b:fb:7f:ca:16:ec:10:a7:21:04:91:9f:21:ab:b9:
e4:f9:e6:c7:68:a1:c8:6a:77:91:ad:dc:a9:6e:0c:
c4:ab:cc:42:a3:17:7e:a6:a9:0c:2e:06:9f:61:29:
46:78:0d:1e:f5:55:ee:ca:af:75:e4:22:40:8a:d8:
11:f6:ce:ab:ef:7a:d6:d4:df:5e:f5:30:aa:f4:bd:
ec:be:66:cf:5c:b7:7e:0e:55:dd:7e:1d:4d:ea:55:
1b:a0:18:42:7c:a1:13:3e:75:c7:43:05:54:40:14:
de:59:87:6b:a2:9a:00:45:52:a2:bb:98:4c:29:f6:
eb:52:67:31:e9:1b:b7:cb:93:ec:a7:03:3d:76:d0:
3f:b6:59:dc:eb:cc:f4:e6:5b:5d:82:1c:40:29:d8:
69:75:79:23:8c:de:95:28:0d:99:d3:96:cf:31:d3:
15:e9:a5:be:eb:cd:41:43:7a:ae:8e:d9:7f:d9:40:
78:61:24:da:da:bb:4a:9e:68:31:31:fd:0a:ad:35:
92:a9:2e:d5:f5:85:99:f5:21:7a:c7:99:fe:e9:3a:
81:18:65:19:c2:36:b9:ce:d1:f4:3c:d8:f5:a6:a9:
5c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:44:3D:2E:9F:34:FD:14:15:1D:BE:39:D6:F6:EE:A7:D6:97:D9:C2
X509v3 Authority Key Identifier:
keyid:3E:E7:70:F4:7F:D9:03:92:5D:80:AC:58:E0:5E:07:6F:3B:AA:11:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/hUQ9Lp80_RQVHb451vbup9aX2cI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.39.0/24
185.38.26.0/24
194.31.165.0/24
Signature Algorithm: sha256WithRSAEncryption
70:f2:80:8f:1a:8e:8e:d4:4f:91:f7:33:7a:32:07:47:be:e7:
e6:99:7b:84:6e:e4:e4:2c:40:7e:35:80:3b:69:9a:d6:b8:1b:
f3:2c:03:2c:67:d9:50:69:5a:50:67:4b:30:c0:64:42:50:59:
bb:b8:4d:71:5d:dd:e8:9f:ce:54:f1:20:21:9a:d4:1b:79:57:
39:77:43:2e:5d:de:e4:6d:d3:d6:7b:80:0a:4e:a9:b3:5b:a8:
fc:0e:b2:80:c4:37:7b:3c:5a:20:00:be:de:78:36:bb:28:4d:
51:ad:b5:7e:15:e6:86:a6:36:05:a5:ae:34:ac:8c:92:16:1c:
5a:00:21:e7:67:c3:15:bc:ea:0c:a6:38:15:87:12:40:f5:4c:
1b:3b:20:1a:b1:7d:6e:04:b2:91:8e:d0:46:ec:4b:f2:c3:04:
7e:77:f2:81:ef:5a:12:da:7c:fe:9a:86:53:d9:47:63:f9:5a:
08:da:8b:c5:5d:2f:e7:7b:b6:5d:3c:73:2e:91:e9:c1:63:3b:
28:5d:34:27:9d:3b:7f:a8:1d:6e:55:b9:6f:5b:26:c3:df:91:
e1:12:e9:0e:24:b2:bc:73:81:6f:2b:56:19:c5:1b:7f:d5:62:
cc:ba:1b:02:34:77:f5:4d:43:17:b2:09:b0:4d:6a:8b:2c:20:
00:8c:5b:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:37:13 2025 by rpki-client