Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/K1JkMhXm-CD7ZmdVu4I_mcWSGTI.roa
File: K1JkMhXm-CD7ZmdVu4I_mcWSGTI.roa (raw, json)
Hash identifier: pVXvstT5ZynKhxi4PUGl7BooPLpJGaOmCiDDrBPO1vo=
Subject key identifier: 2B:52:64:32:15:E6:F8:20:FB:66:67:55:BB:82:3F:99:C5:92:19:32
Certificate issuer: /CN=a87090c275c34c05c306f3b36063893a0d72782a
Certificate serial: 019809B628F52E426D2D5861D53B48B05E68
Authority key identifier: A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/K1JkMhXm-CD7ZmdVu4I_mcWSGTI.roa
Signing time: Mon 14 Jul 2025 16:13:09 +0000
ROA not before: Mon 14 Jul 2025 16:13:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210720
IP address blocks: 45.8.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 12:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:09:b6:28:f5:2e:42:6d:2d:58:61:d5:3b:48:b0:5e:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a87090c275c34c05c306f3b36063893a0d72782a
Validity
Not Before: Jul 14 16:13:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2b52643215e6f820fb666755bb823f99c5921932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:f5:48:fd:58:2f:ab:6a:68:a2:ab:42:50:f3:
bc:38:f5:4c:37:5c:46:b6:d7:96:7d:9e:0f:f4:dd:
53:1f:98:ce:00:80:96:19:c8:b5:90:4a:00:89:08:
e0:5e:8f:c7:03:84:e4:1e:93:03:49:46:52:15:17:
c6:ea:55:eb:54:78:16:20:c7:4e:59:a6:6b:42:d8:
4c:83:6a:83:d4:8a:78:ce:33:75:36:7b:83:3a:e2:
ce:5f:35:2b:db:22:a7:70:38:08:48:04:13:6f:23:
e8:5d:c5:d1:c7:30:b7:dc:7f:f9:8c:3a:e4:6a:74:
d5:cf:3f:e8:36:1b:fc:3f:e6:c1:6d:67:67:18:de:
b4:d2:5e:8b:51:d2:ad:dd:4f:d5:03:18:94:48:c0:
cb:33:57:8f:d9:70:77:c5:3d:28:c8:67:d6:26:56:
3b:6a:9e:25:c2:c1:3a:83:22:d4:de:c2:93:fc:76:
65:55:8c:f7:80:ee:c1:b3:3b:91:a5:1a:8f:42:36:
33:9a:8e:2f:cd:2d:51:66:4d:09:f3:87:0f:3b:03:
9c:99:9a:43:f3:1e:16:a5:96:1a:cc:43:68:6f:8f:
fe:ef:41:91:0f:66:37:26:30:8f:e6:85:ff:be:e4:
5f:02:2d:74:74:e3:87:5d:02:bf:14:e3:c3:bd:5b:
50:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:52:64:32:15:E6:F8:20:FB:66:67:55:BB:82:3F:99:C5:92:19:32
X509v3 Authority Key Identifier:
keyid:A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/K1JkMhXm-CD7ZmdVu4I_mcWSGTI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.209.0/24
Signature Algorithm: sha256WithRSAEncryption
29:77:9d:95:9c:1b:70:00:04:d1:e8:4f:7c:bd:ba:7c:16:65:
74:08:c8:c1:37:11:f5:c1:79:eb:6a:35:03:ac:97:cd:87:a8:
04:f2:e5:5a:6f:d8:d9:84:7a:d3:0b:9e:49:21:b4:23:09:40:
81:12:0c:8b:13:23:69:35:20:59:87:e1:a8:75:f2:a3:17:ee:
42:ac:7d:9f:7b:d8:ca:09:35:33:20:5c:f6:bf:df:07:43:e0:
4a:c6:85:64:30:f9:67:d4:14:f6:35:da:40:29:a1:cb:5e:22:
47:b8:83:35:a3:6a:e8:21:65:c9:6d:d3:28:d9:bc:2b:d5:0a:
05:ea:70:1d:ef:99:d7:d0:7b:a7:29:ca:35:f1:30:6c:48:41:
4e:91:35:d2:b6:1b:5b:37:af:04:05:ab:55:b2:8a:14:e7:9d:
97:10:58:8a:7d:c9:83:bd:b9:f8:02:e7:ec:3d:ff:59:e6:8b:
52:3d:43:7c:4d:d8:83:38:fc:1c:df:1a:8d:1f:80:53:a9:de:
a7:29:aa:69:f7:59:88:4b:33:06:50:db:9a:f2:44:75:ae:e8:
c8:ee:90:a2:f7:ab:d1:3a:c8:8a:1e:e3:be:71:28:67:fd:a0:
99:5b:c1:39:dd:6e:d3:b9:ee:1e:d7:b7:b9:c1:c2:bd:49:89:
b0:31:6e:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 18:19:10 2025 by rpki-client