Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/RdAiuj0CKwGdWqOPsTysiaxS8RM.roa
File: RdAiuj0CKwGdWqOPsTysiaxS8RM.roa (raw, json)
Hash identifier: RUegU9jus91oC1XvjlC85kvkBYAhgdo3GTaU32XzLRI=
Subject key identifier: 45:D0:22:BA:3D:02:2B:01:9D:5A:A3:8F:B1:3C:AC:89:AC:52:F1:13
Certificate issuer: /CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
Certificate serial: 0197C1F1DC784954E3AB6439E3733AC7DD4F
Authority key identifier: 1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/RdAiuj0CKwGdWqOPsTysiaxS8RM.roa
Signing time: Mon 30 Jun 2025 17:45:42 +0000
ROA not before: Mon 30 Jun 2025 17:45:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210644
IP address blocks: 45.80.228.0/22 maxlen: 24
178.159.92.0/24 maxlen: 24
178.159.94.0/24 maxlen: 24
185.221.196.0/24 maxlen: 24
185.221.199.0/24 maxlen: 24
185.246.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 18:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c1:f1:dc:78:49:54:e3:ab:64:39:e3:73:3a:c7:dd:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
Validity
Not Before: Jun 30 17:45:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=45d022ba3d022b019d5aa38fb13cac89ac52f113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:81:61:15:b6:87:d6:f7:31:9e:cf:59:e9:95:
c6:9e:1f:2a:1a:52:64:b5:4b:25:0d:d8:56:a3:c1:
8a:d8:49:01:57:42:65:43:f2:93:68:fa:c6:3d:57:
7e:6e:f7:57:76:19:be:b1:54:2e:cc:55:2d:bf:15:
75:7f:b9:99:18:41:80:4f:1c:f1:84:ec:76:17:b4:
aa:12:6d:d4:37:2e:f8:14:ec:ff:f2:3c:88:be:23:
9d:c5:d8:56:ef:f3:9f:c8:a1:c2:35:06:e6:a1:f0:
8a:48:7b:48:96:8b:89:ae:fd:91:f7:c9:21:ba:5f:
ec:99:39:aa:27:df:fc:09:6f:54:f4:45:d1:35:49:
c7:55:96:5d:f6:28:89:0e:95:fb:b0:5f:d4:c9:79:
80:a4:08:f2:bc:f6:f9:d8:17:20:2c:64:ab:88:4e:
c7:ed:ed:11:05:90:ef:d8:eb:6f:a3:04:8f:52:6c:
10:bd:b4:0b:a4:54:32:e4:c9:73:1c:8f:80:63:85:
2b:c2:e8:c3:79:11:11:a6:47:18:81:24:82:50:12:
8e:b6:0d:ad:eb:51:f8:60:10:77:a5:78:bd:1c:53:
d8:a4:32:4c:44:89:60:ca:a7:19:dc:e3:66:1a:88:
27:62:28:af:54:d3:a7:78:b9:fa:5f:0a:a8:e7:ea:
d2:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:D0:22:BA:3D:02:2B:01:9D:5A:A3:8F:B1:3C:AC:89:AC:52:F1:13
X509v3 Authority Key Identifier:
keyid:1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/RdAiuj0CKwGdWqOPsTysiaxS8RM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.228.0/22
178.159.92.0/24
178.159.94.0/24
185.221.196.0/24
185.221.199.0/24
185.246.217.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:41:16:e6:8f:91:4d:d3:33:03:b5:50:86:a5:43:46:a9:49:
1a:89:b7:15:70:de:3a:6b:a5:d7:e0:0e:ba:d4:b0:42:c3:f6:
64:bc:0a:8c:ec:0b:e5:e3:1e:75:b5:ae:9e:7c:c9:b2:4a:43:
99:eb:a3:6c:b3:fb:ba:95:06:bb:5a:bb:45:79:93:7f:82:c9:
5a:08:7b:96:b0:71:80:f4:e1:96:7a:76:d0:b1:ae:e1:c3:bc:
c4:c3:e4:e1:6a:43:32:22:26:ed:9a:ba:d9:b1:37:41:50:bd:
66:f7:31:d3:47:a4:7f:3f:14:1d:03:3d:8c:e4:13:1b:18:1e:
86:81:42:30:b5:e2:f3:44:49:c1:87:3b:77:b3:c9:b1:fe:8f:
85:77:d1:37:59:b7:3b:7e:35:8b:34:67:68:b1:fc:24:1a:ce:
d7:ca:5a:bc:7b:17:7d:9d:0f:15:95:8b:77:43:5d:e4:90:55:
6e:f7:c5:3e:08:40:6f:33:b4:be:82:ef:91:30:19:c2:a3:5d:
10:1d:44:e1:04:19:19:03:7a:c9:ea:4a:b2:63:08:9b:7a:0a:
87:54:ab:31:82:58:9f:07:cb:cb:b5:c3:64:70:5d:e3:79:99:
bf:25:9c:13:fa:95:0c:e9:33:01:66:c4:b1:fa:38:1a:cd:73:
ff:f0:6b:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 02:03:21 2025 by rpki-client