Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/fc8519-62e4-4289-9917-3e55c49f2d4e/1/AxTL5BScJRGplpNW74DWcKj7QGE.roa
File: AxTL5BScJRGplpNW74DWcKj7QGE.roa (raw, json)
Hash identifier: Tyrri95TWx80Zrp2m4wcSxu+fjugZnCuLxz4W2k0N7E=
Subject key identifier: 03:14:CB:E4:14:9C:25:11:A9:96:93:56:EF:80:D6:70:A8:FB:40:61
Certificate issuer: /CN=a4b707300e869467be5e5273222d90e0b618f924
Certificate serial: 01992A48474F742F13D2B643273E0BBB92A2
Authority key identifier: A4:B7:07:30:0E:86:94:67:BE:5E:52:73:22:2D:90:E0:B6:18:F9:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/fc8519-62e4-4289-9917-3e55c49f2d4e/1/AxTL5BScJRGplpNW74DWcKj7QGE.roa
Signing time: Mon 08 Sep 2025 17:03:23 +0000
ROA not before: Mon 08 Sep 2025 17:03:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 11342
IP address blocks: 45.152.56.0/22 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/fc8519-62e4-4289-9917-3e55c49f2d4e/1/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/fc8519-62e4-4289-9917-3e55c49f2d4e/1/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Oct 2025 02:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2a:48:47:4f:74:2f:13:d2:b6:43:27:3e:0b:bb:92:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4b707300e869467be5e5273222d90e0b618f924
Validity
Not Before: Sep 8 17:03:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0314cbe4149c2511a9969356ef80d670a8fb4061
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:07:72:3c:2b:11:89:ab:b6:cc:54:48:82:65:
54:f2:4f:4d:4e:86:7e:98:9f:3a:1c:6c:d6:43:17:
3f:a6:e5:95:2d:7a:1f:2c:94:df:0b:65:6a:0a:d2:
1f:95:d8:f1:6a:12:ea:11:31:88:37:d9:1b:21:6f:
e5:c4:c3:6d:f5:72:31:40:2f:f0:ae:3d:8b:c3:1a:
06:92:76:76:e3:ac:23:cb:f3:51:8e:2e:11:c8:20:
2e:ed:8b:30:c5:84:0c:0f:79:8e:d6:54:5a:5d:5d:
e2:e8:b5:a3:ba:3f:2a:3e:7a:81:e0:05:b5:15:d1:
87:af:aa:17:a9:a2:0d:59:64:77:95:18:cb:dc:44:
8a:0c:80:0e:4f:65:da:1b:4e:d6:1c:09:4b:8a:32:
80:c9:1c:14:58:bd:73:10:aa:b1:c1:a0:e2:fd:96:
40:a3:88:4c:9b:92:1d:f4:87:7f:6d:ba:7e:ec:6b:
8e:46:31:1c:98:76:15:e6:28:7e:dd:48:f2:0f:42:
d0:61:e3:5d:1a:66:3e:e9:be:ba:f4:0a:5c:d0:db:
8b:e7:94:65:ed:2e:9d:25:25:f1:1c:55:c8:6c:19:
5f:9b:67:14:57:14:13:cb:90:ef:31:e6:80:e6:9f:
ec:2f:e6:2a:8e:88:c3:c8:e3:68:7c:37:28:ad:ca:
b7:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:14:CB:E4:14:9C:25:11:A9:96:93:56:EF:80:D6:70:A8:FB:40:61
X509v3 Authority Key Identifier:
keyid:A4:B7:07:30:0E:86:94:67:BE:5E:52:73:22:2D:90:E0:B6:18:F9:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/fc8519-62e4-4289-9917-3e55c49f2d4e/1/AxTL5BScJRGplpNW74DWcKj7QGE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/fc8519-62e4-4289-9917-3e55c49f2d4e/1/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.56.0/22
Signature Algorithm: sha256WithRSAEncryption
31:ea:c0:22:3b:3c:e6:4c:b6:36:ca:bd:db:97:97:7a:04:62:
ff:2b:f6:1f:6a:f9:8c:dc:51:68:01:99:97:16:be:ad:f1:5e:
bb:32:dc:76:b6:31:96:7d:57:de:28:b9:33:9f:ef:32:15:f0:
08:9b:04:7a:2d:cf:fc:9f:a1:af:57:f5:36:9b:c3:7a:7b:47:
91:b2:ab:8b:29:d8:5f:3a:2d:b9:70:57:12:59:d9:b8:da:53:
1f:53:56:02:bf:41:02:76:fc:ba:e9:97:26:12:03:cd:4c:8e:
72:44:86:1a:05:c7:2b:b1:9f:86:c0:1e:d7:58:92:9a:ca:8f:
25:f4:cd:eb:be:61:5f:38:56:9b:71:dc:ee:ff:f4:0c:d8:8c:
5f:b2:53:2e:3a:8e:5c:39:53:70:cf:26:ae:34:6e:2a:0c:53:
67:c1:fb:64:d7:5b:81:2b:8b:b7:4a:b9:ab:ab:f5:72:55:67:
2b:a7:79:16:32:88:8b:bc:38:68:17:07:3e:69:75:8e:1f:3c:
38:30:80:43:a5:28:fb:ad:db:a1:e9:9a:aa:f9:c4:31:81:b4:
6e:fe:53:80:60:cc:e0:e7:51:30:31:b5:80:8c:ae:b0:f2:d5:
ce:45:cb:88:ce:f2:87:eb:e5:b0:de:b9:ad:83:80:5c:e2:24:
ee:98:44:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 10:00:17 2025 by rpki-client