Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/8ugftUXGOYARk8hNtz_dZIPLHoY.roa
File: 8ugftUXGOYARk8hNtz_dZIPLHoY.roa (raw, json)
Hash identifier: fXuh9GYhE6qY7sn2WSDIqQCBrlOo2zt5TZUsfH3qCOk=
Subject key identifier: F2:E8:1F:B5:45:C6:39:80:11:93:C8:4D:B7:3F:DD:64:83:CB:1E:86
Certificate issuer: /CN=c8d5e37178d8524c72660a1d796165999e586622
Certificate serial: 0197E515D545EC8B40D3AB07F66DEFD8E6F8
Authority key identifier: C8:D5:E3:71:78:D8:52:4C:72:66:0A:1D:79:61:65:99:9E:58:66:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yNXjcXjYUkxyZgodeWFlmZ5YZiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/8ugftUXGOYARk8hNtz_dZIPLHoY.roa
Signing time: Mon 07 Jul 2025 13:31:42 +0000
ROA not before: Mon 07 Jul 2025 13:31:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198521
IP address blocks: 45.15.52.0/24 maxlen: 32
45.15.53.0/24 maxlen: 32
45.15.54.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yNXjcXjYUkxyZgodeWFlmZ5YZiI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:e5:15:d5:45:ec:8b:40:d3:ab:07:f6:6d:ef:d8:e6:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8d5e37178d8524c72660a1d796165999e586622
Validity
Not Before: Jul 7 13:31:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f2e81fb545c639801193c84db73fdd6483cb1e86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:14:71:a0:ce:33:f4:0c:34:30:6c:ad:15:59:
00:b5:33:29:f5:87:2e:14:e6:c6:6b:ce:e2:a5:6e:
ca:f9:6a:ff:24:18:30:bf:ed:52:be:f7:d6:9f:c4:
e1:ac:fb:a9:d7:c9:8f:bf:5d:8c:00:46:99:40:c7:
6c:ac:03:66:65:4b:4d:88:82:b4:42:d9:f6:1e:9d:
91:c8:aa:3c:97:70:f4:fa:ac:6e:67:a9:b6:94:20:
7d:a2:8b:51:1a:db:47:c4:e2:46:15:47:a0:05:ad:
4a:96:f4:18:30:7a:d3:20:a7:fd:0a:69:a9:46:c7:
22:56:65:4d:6a:14:00:79:d9:96:7f:cc:2a:30:e7:
37:1b:41:ea:a4:05:55:1b:fb:c0:31:1b:82:b3:37:
7c:11:d0:9c:d6:17:2e:a5:4d:2b:5d:ce:bc:49:8c:
f4:18:92:70:4b:31:1d:62:58:0a:bc:22:fa:d6:f6:
53:51:30:5e:8d:0b:59:6b:b1:e4:90:de:e2:a8:be:
fa:72:e9:39:e3:79:91:ff:a6:d2:ef:16:ef:75:d1:
d8:6a:f4:f5:c4:4e:90:73:14:40:b6:8b:e4:21:89:
45:6c:ff:b6:37:1b:aa:c6:88:fc:2b:d7:5c:e7:6e:
92:97:e1:89:12:09:73:da:fa:76:ce:1e:f8:b3:b4:
27:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:E8:1F:B5:45:C6:39:80:11:93:C8:4D:B7:3F:DD:64:83:CB:1E:86
X509v3 Authority Key Identifier:
keyid:C8:D5:E3:71:78:D8:52:4C:72:66:0A:1D:79:61:65:99:9E:58:66:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNXjcXjYUkxyZgodeWFlmZ5YZiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/8ugftUXGOYARk8hNtz_dZIPLHoY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.52.0/22
Signature Algorithm: sha256WithRSAEncryption
10:8e:15:f2:ab:39:aa:1a:9f:30:cf:e0:2f:df:45:f0:d6:7c:
fa:72:43:75:b8:a1:3f:da:2c:16:12:7f:bc:47:3c:aa:64:c1:
d5:3c:74:16:00:a1:3b:06:19:73:bf:35:fa:3c:b0:00:e9:d9:
34:21:a6:c5:50:03:cb:d9:17:f3:b4:53:53:0a:d2:f0:3f:e0:
4b:28:cc:86:9c:f2:dc:4d:40:75:a7:69:b2:f3:f4:d6:57:37:
42:66:9b:78:8a:57:39:11:9d:12:b3:68:15:45:cc:f9:86:d1:
54:fd:99:3b:1d:aa:a8:fa:53:12:40:de:63:2f:94:9b:e1:9c:
4f:1d:46:de:55:0c:5b:56:ec:3c:db:3a:74:55:8e:15:46:47:
17:04:09:51:93:17:5f:19:87:3f:19:80:bd:88:32:32:9f:b5:
08:ee:1c:1a:95:39:3c:f1:a9:24:94:46:39:14:7f:be:bc:d6:
eb:d5:17:9a:f9:43:52:7c:a9:f9:28:19:d5:84:4b:7d:6c:c7:
d5:37:ef:f5:98:63:97:63:5e:f8:45:8a:73:56:6c:2a:91:c4:
c0:2b:ae:c6:5c:b2:f8:76:08:8f:dd:50:97:57:04:77:5b:4a:
06:89:fe:88:06:a3:ed:85:bc:fe:62:41:89:11:5d:3b:70:b9:
80:f2:0a:1a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZflFdVF7ItA06sH9m3v2Ob4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4ZDVlMzcxNzhkODUyNGM3MjY2MGExZDc5NjE2NTk5OWU1
ODY2MjIwHhcNMjUwNzA3MTMzMTQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMmU4MWZiNTQ1YzYzOTgwMTE5M2M4NGRiNzNmZGQ2NDgzY2IxZTg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthRxoM4z9Aw0MGytFVkAtTMp9Ycu
FObGa87ipW7K+Wr/JBgwv+1SvvfWn8ThrPup18mPv12MAEaZQMdsrANmZUtNiIK0
Qtn2Hp2RyKo8l3D0+qxuZ6m2lCB9ootRGttHxOJGFUegBa1KlvQYMHrTIKf9Cmmp
RsciVmVNahQAedmWf8wqMOc3G0HqpAVVG/vAMRuCszd8EdCc1hcupU0rXc68SYz0
GJJwSzEdYlgKvCL61vZTUTBejQtZa7HkkN7iqL76cuk543mR/6bS7xbvddHYavT1
xE6QcxRAtovkIYlFbP+2Nxuqxoj8K9dc526Sl+GJEglz2vp2zh74s7QnZwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPLoH7VFxjmAEZPITbc/3WSDyx6GMB8GA1UdIwQY
MBaAFMjV43F42FJMcmYKHXlhZZmeWGYiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveU5YamNYallVa3h5WmdvZGVXRmxtWjVZWmlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9iNTRjYTMtNzNkNS00OTg0LTg3ODIt
OWUwYWVkMmZiOGVjLzEvOHVnZnRVWEdPWUFSazhoTnR6X2RaSVBMSG9ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9iNTRjYTMtNzNkNS00OTg0LTg3ODItOWUwYWVkMmZiOGVj
LzEveU5YamNYallVa3h5WmdvZGVXRmxtWjVZWmlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLQ80MA0G
CSqGSIb3DQEBCwUAA4IBAQAQjhXyqzmqGp8wz+Av30Xw1nz6ckN1uKE/2iwWEn+8
RzyqZMHVPHQWAKE7BhlzvzX6PLAA6dk0IabFUAPL2RfztFNTCtLwP+BLKMyGnPLc
TUB1p2my8/TWVzdCZpt4ilc5EZ0Ss2gVRcz5htFU/Zk7Haqo+lMSQN5jL5Sb4ZxP
HUbeVQxbVuw82zp0VY4VRkcXBAlRkxdfGYc/GYC9iDIyn7UI7hwalTk88akklEY5
FH++vNbr1Rea+UNSfKn5KBnVhEt9bMfVN+/1mGOXY174RYpzVmwqkcTAK67GXLL4
dgiP3VCXVwR3W0oGif6IBqPthbz+YkGJEV07cLmA8goa
-----END CERTIFICATE-----
Generated at Mon Jul 21 07:28:12 2025 by rpki-client