Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/T1D9x5sZuRac2c7oz4I264aKmE4.roa
File: T1D9x5sZuRac2c7oz4I264aKmE4.roa (raw, json)
Hash identifier: VNf45yATZxYkt7RFt2PCJKaQr4WutYjzNtIvrBF3RC8=
Subject key identifier: 4F:50:FD:C7:9B:19:B9:16:9C:D9:CE:E8:CF:82:36:EB:86:8A:98:4E
Certificate issuer: /CN=cec5afe769b94346e1cd362eb85f875b23b17277
Certificate serial: 01981A82A4583EF472C193661A47EB0988FD
Authority key identifier: CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/T1D9x5sZuRac2c7oz4I264aKmE4.roa
Signing time: Thu 17 Jul 2025 22:30:26 +0000
ROA not before: Thu 17 Jul 2025 22:30:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 142561
IP address blocks: 45.145.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:1a:82:a4:58:3e:f4:72:c1:93:66:1a:47:eb:09:88:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec5afe769b94346e1cd362eb85f875b23b17277
Validity
Not Before: Jul 17 22:30:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4f50fdc79b19b9169cd9cee8cf8236eb868a984e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:27:52:84:e6:82:f5:d2:17:a2:44:92:32:e7:
78:58:bb:91:da:b6:d6:65:fb:6b:61:32:0a:83:79:
4e:b3:aa:99:53:5f:eb:64:b4:9a:e9:d8:aa:a0:b5:
62:57:6b:e7:b2:5c:27:f2:74:b4:90:e0:a6:e9:00:
d4:51:dc:f3:5c:3c:2e:70:33:0c:f6:7b:93:a7:32:
1b:ac:74:d1:91:0f:24:87:e3:f3:71:ed:60:0d:45:
95:0f:47:2e:92:c9:b2:0d:6c:6b:55:43:3f:b6:a7:
a8:fc:5d:45:52:52:58:91:bf:b7:bf:ee:f7:ee:9f:
94:ea:74:ef:dd:7f:c7:47:be:82:fd:a2:4b:4c:8c:
30:cd:e2:66:c9:b3:3b:45:e6:1c:ea:e3:30:9b:7c:
d0:c5:fb:f6:aa:a8:4c:0d:23:a0:61:75:7a:d9:39:
85:f2:e7:d6:dc:25:3f:e7:b4:a5:29:22:e5:75:95:
d7:58:55:50:b4:ab:99:48:0b:1a:fd:b2:96:32:9f:
00:8a:40:e3:bc:d7:1c:80:52:0a:2e:39:c6:02:af:
73:60:2d:be:0b:69:2d:29:d7:17:46:09:22:1f:f5:
fd:be:09:1c:05:10:9f:9d:15:27:be:f4:62:cd:81:
98:b5:df:9b:74:0b:c6:4e:b4:bc:19:4a:a9:be:a4:
27:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:50:FD:C7:9B:19:B9:16:9C:D9:CE:E8:CF:82:36:EB:86:8A:98:4E
X509v3 Authority Key Identifier:
keyid:CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/T1D9x5sZuRac2c7oz4I264aKmE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.153.0/24
Signature Algorithm: sha256WithRSAEncryption
26:77:f3:a8:8f:2c:c7:58:95:2b:78:9c:e3:c6:1a:72:f7:d0:
b7:4f:64:c8:a5:0a:49:15:7b:83:35:40:4a:2f:83:dc:7b:2e:
17:8b:b7:78:fb:b8:e8:13:df:75:d1:c4:5b:6f:4d:ae:e1:39:
e2:85:56:b4:3d:cf:30:f9:a7:c8:f6:1c:a1:0f:b2:0d:26:13:
bf:b6:c2:6f:0e:f3:85:c5:90:98:97:08:b1:5b:84:aa:9d:63:
4a:7b:a8:50:93:d8:f9:57:fb:f7:39:d1:86:65:7e:97:f7:a1:
0f:ea:64:12:49:ba:62:30:aa:3e:37:e0:36:48:13:ac:fa:a3:
9a:d7:95:6d:ef:64:3b:5d:09:0d:24:bb:05:42:b9:6d:fe:5f:
4b:6c:a5:69:26:b6:b4:17:7b:1e:b6:dc:cd:84:64:45:e5:04:
f9:91:d8:f4:9d:3c:5c:c4:d2:c2:3b:9e:89:5f:58:78:d6:9a:
73:33:b7:29:7b:81:c3:ce:78:2b:63:26:55:de:4a:83:1b:c4:
22:60:0a:a1:62:4c:e5:29:eb:4e:8a:05:78:d5:00:25:90:34:
4e:6c:97:87:93:93:13:2d:31:29:94:81:71:47:17:19:d3:34:
40:ca:86:e6:76:e6:e7:48:9d:86:0d:f8:44:5c:c2:ff:91:e4:
2b:ea:ff:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 20:59:00 2025 by rpki-client