Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/R13ul87vByK-uPBAPgSL-SV4Sg4.roa
File: R13ul87vByK-uPBAPgSL-SV4Sg4.roa (raw, json)
Hash identifier: D/NBJsfWluPQ8UofWxYAzN1vYlz9i0VfXCC3VoS4C5c=
Subject key identifier: 47:5D:EE:97:CE:EF:07:22:BE:B8:F0:40:3E:04:8B:F9:25:78:4A:0E
Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial: 019809D630FF97F94F1CEF00F17FD575804B
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/R13ul87vByK-uPBAPgSL-SV4Sg4.roa
Signing time: Mon 14 Jul 2025 16:48:08 +0000
ROA not before: Mon 14 Jul 2025 16:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209847
IP address blocks: 45.133.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 07:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:09:d6:30:ff:97:f9:4f:1c:ef:00:f1:7f:d5:75:80:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Validity
Not Before: Jul 14 16:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=475dee97ceef0722beb8f0403e048bf925784a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:b4:cb:dc:7e:49:d2:34:38:37:08:9d:c5:1f:
ea:ee:76:80:20:1b:52:d3:ec:0c:6a:bc:17:88:30:
27:f6:81:91:8d:23:65:e2:b4:83:9f:3b:a0:cd:6a:
a1:61:69:f9:fc:fc:b8:d5:88:35:74:38:2f:34:77:
63:c8:0d:dc:50:be:d1:96:ca:0c:68:57:83:a4:4b:
fb:96:a9:5b:83:ae:3d:84:bf:f8:52:e3:44:26:1a:
38:12:24:75:05:d0:6b:2a:df:41:c6:4a:3a:89:72:
68:36:9b:18:75:7c:76:5e:03:07:a7:15:6d:82:ed:
7a:d2:78:3a:a0:00:e3:d2:e1:1f:8f:f8:b1:15:35:
fe:c9:c6:3a:16:34:1d:e8:9a:7c:31:1c:0f:f2:bd:
ee:6b:3c:09:e4:ff:65:fe:0c:31:68:40:57:12:37:
a3:f6:03:90:f3:4f:14:9d:e5:bf:7f:fe:21:1a:41:
1a:2a:20:80:5b:1b:2e:c0:e7:de:c9:15:30:50:2a:
6a:d8:cb:b9:8d:06:03:12:79:30:9f:c7:85:6f:e3:
e9:e9:a1:66:ae:ec:33:57:25:c7:cf:8e:b2:28:a1:
2d:4e:0e:40:7c:9f:15:7d:28:82:d5:42:a7:43:98:
24:78:d2:54:e3:a2:62:27:b1:a3:e2:82:7c:00:ac:
89:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:5D:EE:97:CE:EF:07:22:BE:B8:F0:40:3E:04:8B:F9:25:78:4A:0E
X509v3 Authority Key Identifier:
keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/R13ul87vByK-uPBAPgSL-SV4Sg4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.216.0/24
Signature Algorithm: sha256WithRSAEncryption
92:89:4f:49:a9:53:99:a3:b5:d5:4d:e5:a6:54:84:27:49:1e:
fa:0f:9c:cd:aa:94:b0:ff:cf:cc:be:9c:7a:5f:99:0b:06:0b:
9c:37:68:90:f1:9c:45:3d:7f:f5:d3:b1:b6:ba:92:7c:e0:36:
be:39:7b:99:9f:63:a0:9c:d5:5e:38:0e:90:a7:b4:2f:85:0d:
62:47:97:ac:4a:00:83:fd:83:22:d9:64:fd:0c:37:5e:79:00:
67:21:a9:cd:65:63:d7:5a:d6:cf:c7:f1:1f:b5:0c:f3:d2:4f:
06:3d:eb:d8:48:ef:82:03:cc:e3:ff:df:be:ec:69:5b:40:26:
fc:8d:8e:fd:76:a5:4a:51:c7:cc:dc:e2:b1:b7:86:0d:36:8d:
4c:fe:15:1d:7a:ca:2a:fb:c8:fb:d4:ec:44:6e:28:88:0e:b8:
52:3e:65:b8:58:99:29:1e:56:2d:bd:52:b3:39:71:59:53:35:
56:f6:58:39:f5:68:00:a4:21:29:c8:ab:47:81:d8:7d:3c:6b:
7e:d6:1f:dc:00:df:2d:61:f4:5a:df:0e:df:e6:6d:42:54:b7:
ec:41:8f:b3:9b:0c:06:27:bf:1e:76:2d:bf:4d:a0:7f:a4:48:
f1:7a:67:3d:33:07:c4:fa:d3:55:c4:52:ee:ab:c3:83:ff:6d:
25:75:35:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 12:34:14 2025 by rpki-client