Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/EKlx1rADZuyg4kkyJL1W_FoZslE.roa
File: EKlx1rADZuyg4kkyJL1W_FoZslE.roa (raw, json)
Hash identifier: gnSA4UoMY65ycXDPhcYc7WaEaKvIIPSZcAUwOI0jUxA=
Subject key identifier: 10:A9:71:D6:B0:03:66:EC:A0:E2:49:32:24:BD:56:FC:5A:19:B2:51
Certificate issuer: /CN=878abb29977a65b140cacb6e72ab24ceddd4e8c5
Certificate serial: 01984251F8C2C2E089156F8CC45B47B809C9
Authority key identifier: 87:8A:BB:29:97:7A:65:B1:40:CA:CB:6E:72:AB:24:CE:DD:D4:E8:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h4q7KZd6ZbFAystucqskzt3U6MU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/EKlx1rADZuyg4kkyJL1W_FoZslE.roa
Signing time: Fri 25 Jul 2025 16:02:04 +0000
ROA not before: Fri 25 Jul 2025 16:02:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 138888
IP address blocks: 45.8.28.0/24 maxlen: 24
45.8.31.0/24 maxlen: 24
45.9.109.0/24 maxlen: 24
45.10.211.0/24 maxlen: 24
45.80.112.0/24 maxlen: 24
193.108.47.0/24 maxlen: 24
193.164.222.0/24 maxlen: 24
193.164.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/h4q7KZd6ZbFAystucqskzt3U6MU.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/h4q7KZd6ZbFAystucqskzt3U6MU.mft
rsync://rpki.ripe.net/repository/DEFAULT/h4q7KZd6ZbFAystucqskzt3U6MU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:42:51:f8:c2:c2:e0:89:15:6f:8c:c4:5b:47:b8:09:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=878abb29977a65b140cacb6e72ab24ceddd4e8c5
Validity
Not Before: Jul 25 16:02:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=10a971d6b00366eca0e2493224bd56fc5a19b251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5d:93:64:df:4a:87:d1:1f:30:f0:bb:38:24:
ca:80:a8:fc:44:f1:ba:19:db:65:dc:b9:2d:de:6b:
ca:fd:e7:1d:af:55:e9:eb:18:82:1e:9d:cf:12:a1:
73:75:79:42:6b:93:93:7e:c3:43:50:8d:15:44:6b:
4b:20:35:ef:f3:e3:f0:5c:32:1d:8e:88:96:c3:94:
9c:9b:35:b5:20:3c:cd:eb:6c:49:e7:4c:cd:b9:6e:
70:f8:0f:64:c9:17:b7:fc:e5:1a:0f:d7:1a:23:31:
ab:fd:b8:97:70:f6:e4:f8:c1:ff:18:2d:3d:be:62:
e7:81:8d:55:df:28:7d:73:28:62:2a:3d:39:4a:0b:
aa:75:e5:4f:55:5e:ba:67:07:1d:c4:65:b8:b0:cb:
15:73:ba:de:74:ba:cd:54:3f:60:30:d9:92:76:08:
75:9d:ca:97:13:2d:a7:ff:3b:4c:f3:35:8c:73:c1:
bb:af:ff:8d:b3:15:8d:ed:e8:a1:74:3a:66:7d:ec:
3d:8e:69:3e:6a:3e:cb:a4:ab:d7:d1:f4:95:12:3a:
cd:bb:7e:fb:72:00:e5:a0:fa:89:0f:9a:06:60:d4:
d9:af:3c:4b:42:cd:71:2a:55:b6:96:f8:a5:22:bc:
3f:fa:5c:d5:9d:f6:82:0b:1a:a9:54:f2:b1:31:74:
f0:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:A9:71:D6:B0:03:66:EC:A0:E2:49:32:24:BD:56:FC:5A:19:B2:51
X509v3 Authority Key Identifier:
keyid:87:8A:BB:29:97:7A:65:B1:40:CA:CB:6E:72:AB:24:CE:DD:D4:E8:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h4q7KZd6ZbFAystucqskzt3U6MU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/EKlx1rADZuyg4kkyJL1W_FoZslE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/h4q7KZd6ZbFAystucqskzt3U6MU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.28.0/24
45.8.31.0/24
45.9.109.0/24
45.10.211.0/24
45.80.112.0/24
193.108.47.0/24
193.164.222.0/23
Signature Algorithm: sha256WithRSAEncryption
1d:a3:79:b1:a0:c0:c5:36:2d:6f:71:5e:f4:59:73:b5:48:0c:
0f:4e:2a:b7:80:3b:a3:d4:9b:23:27:e5:36:5b:81:dd:98:b2:
0c:a7:03:36:d6:3d:49:fb:7e:f6:b0:67:67:dc:c2:29:7b:28:
68:8a:92:81:6b:5a:64:20:63:65:8c:a0:6b:59:17:cc:cf:86:
5b:32:4c:05:95:e8:b5:3c:43:cf:19:7c:c9:26:78:d6:d5:35:
00:7e:fa:44:06:59:73:7a:b1:01:15:79:e9:43:94:2a:0d:64:
c6:ae:ee:57:59:21:fd:ea:e2:83:66:0c:1e:b6:09:a3:45:69:
7f:5c:2e:3c:27:d4:53:3f:5f:8a:10:e8:77:95:f5:52:bb:67:
bc:6c:c9:4d:7a:a9:29:53:d4:69:a8:92:2d:77:61:dc:1d:19:
a0:61:37:04:26:ba:38:07:d3:05:ef:07:85:d4:bf:d3:f4:84:
00:2c:e9:dd:a9:0c:6b:dd:e9:02:4e:97:eb:e8:a7:e4:b0:aa:
16:0b:46:d4:24:b0:fa:61:7a:8e:d2:72:1c:32:71:35:6d:c3:
7b:9f:6e:30:f3:fa:26:a6:92:31:58:c0:4d:f3:a6:50:53:cc:
a2:48:e8:c9:83:b2:3f:59:6d:d0:b4:ef:e0:99:c5:12:7b:ae:
33:9b:e8:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:51:39 2025 by rpki-client