Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/3NfU7mC4iQvU5R9bXdfX2sEvs8c.roa
File: 3NfU7mC4iQvU5R9bXdfX2sEvs8c.roa (raw, json)
Hash identifier: TG1MP6wYt9t2MftQG66JPCVdEsPTci5w7P6XLoTCJqw=
Subject key identifier: DC:D7:D4:EE:60:B8:89:0B:D4:E5:1F:5B:5D:D7:D7:DA:C1:2F:B3:C7
Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Certificate serial: 019A4A8EC9D5CB6F51C9F7F24A66F6207A10
Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/3NfU7mC4iQvU5R9bXdfX2sEvs8c.roa
Signing time: Mon 03 Nov 2025 16:31:03 +0000
ROA not before: Mon 03 Nov 2025 16:31:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 135402
IP address blocks: 93.88.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4a:8e:c9:d5:cb:6f:51:c9:f7:f2:4a:66:f6:20:7a:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Validity
Not Before: Nov 3 16:31:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dcd7d4ee60b8890bd4e51f5b5dd7d7dac12fb3c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:7f:dc:4a:98:23:10:1c:df:32:f9:2d:f0:be:
1b:5c:3f:3b:2b:91:1a:0f:b3:10:f0:b7:c0:06:fa:
ef:9b:2d:ff:3e:39:0c:59:5a:ba:fe:d0:26:87:72:
1b:ae:2b:12:25:c9:b9:a6:cd:51:b1:6d:07:2c:3c:
56:b7:7c:db:d7:18:3e:2a:06:87:b0:f7:d8:2e:d3:
a2:50:32:0c:11:73:d3:8d:c7:7c:75:46:6a:b3:6a:
5f:bb:2e:4a:d2:e1:2d:8c:85:b1:1b:18:13:8b:de:
91:c3:b5:d2:90:87:83:6a:73:95:28:8c:ac:56:8f:
c6:c0:41:25:26:62:bf:76:d2:87:23:ae:86:5b:5d:
65:ef:13:da:d0:4f:ad:13:a4:72:4c:37:3b:88:7a:
a1:6a:74:93:4f:76:b9:26:2e:55:08:97:d1:72:61:
8d:99:45:0e:fd:60:69:59:00:33:ee:fc:96:75:f5:
28:7b:4b:01:64:94:5f:dd:03:5e:cc:a7:ba:e4:ce:
a4:8f:f9:c6:b0:4c:a1:7e:eb:d9:1e:e9:24:62:77:
76:b3:ba:db:89:bc:8e:36:35:f6:7d:68:af:4b:30:
c9:e9:ed:3f:1f:7f:06:62:ff:b8:e6:d5:ff:5a:31:
20:94:69:53:a2:58:92:6b:44:7d:68:ee:ca:0e:c7:
bf:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:D7:D4:EE:60:B8:89:0B:D4:E5:1F:5B:5D:D7:D7:DA:C1:2F:B3:C7
X509v3 Authority Key Identifier:
keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/3NfU7mC4iQvU5R9bXdfX2sEvs8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.88.155.0/24
Signature Algorithm: sha256WithRSAEncryption
31:94:18:39:bd:8f:3b:84:1d:9d:43:b8:32:2e:67:95:0a:4b:
ed:84:3f:67:1f:11:8b:82:19:c5:c1:22:5e:b8:bf:25:7c:43:
2f:2e:aa:fa:63:e3:84:3d:84:1c:25:3b:c4:af:42:13:a9:bd:
f2:1e:33:df:57:11:42:bf:a4:f5:74:5c:e5:13:5a:a0:07:0f:
39:08:c9:81:9f:dd:6b:68:6b:9f:2c:b0:6b:cc:55:7b:9a:96:
82:ea:be:b5:1a:3b:92:d3:d6:43:2a:8c:e6:3b:e6:2d:c0:31:
6a:98:60:aa:f9:ac:11:f4:23:50:cd:e9:37:4c:95:b7:b7:e2:
9c:2e:bd:d1:4c:cd:12:9c:61:bc:ca:f1:27:57:5c:84:40:2b:
df:07:59:97:a0:3c:b9:e7:6d:5d:51:cd:5d:be:d3:50:8d:56:
30:42:fa:db:94:a7:9a:37:44:df:08:e6:1d:a0:de:b2:a4:e2:
c7:dc:48:84:12:13:d3:85:07:81:b9:c5:e8:2d:be:0b:f1:ee:
04:4c:f9:9b:7f:f7:56:53:3a:03:fc:28:f4:1c:97:4b:e3:be:
59:a4:14:5a:25:b4:70:71:fe:8d:1f:15:f3:41:e0:72:7b:0a:
55:a2:3e:2b:84:e5:e4:39:85:34:5f:99:4e:76:c2:9a:3f:49:
0c:24:88:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:37:46 2025 by rpki-client