Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/_9T_S-kr42TO8YpZQ1p1cNkCs8k.roa
File: _9T_S-kr42TO8YpZQ1p1cNkCs8k.roa (raw, json)
Hash identifier: DCwl+cJRNegCixrl6T1943uL08w3GonOBX/1cFtnPHo=
Subject key identifier: FF:D4:FF:4B:E9:2B:E3:64:CE:F1:8A:59:43:5A:75:70:D9:02:B3:C9
Certificate issuer: /CN=3d0483538737453e2f57ffb57499c3922e83636d
Certificate serial: 0197E446EC76740F59C3EB37604ACE67D9EE
Authority key identifier: 3D:04:83:53:87:37:45:3E:2F:57:FF:B5:74:99:C3:92:2E:83:63:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PQSDU4c3RT4vV_-1dJnDki6DY20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/_9T_S-kr42TO8YpZQ1p1cNkCs8k.roa
Signing time: Mon 07 Jul 2025 09:45:42 +0000
ROA not before: Mon 07 Jul 2025 09:45:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44592
IP address blocks: 45.156.86.0/24 maxlen: 24
2a07:6d40::/29 maxlen: 29
2a07:6d40:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.mft
rsync://rpki.ripe.net/repository/DEFAULT/PQSDU4c3RT4vV_-1dJnDki6DY20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 14:17:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:e4:46:ec:76:74:0f:59:c3:eb:37:60:4a:ce:67:d9:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d0483538737453e2f57ffb57499c3922e83636d
Validity
Not Before: Jul 7 09:45:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ffd4ff4be92be364cef18a59435a7570d902b3c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3c:70:48:9d:31:86:2d:a9:c1:b8:a4:19:f0:
ff:76:95:bb:76:ea:62:9c:cd:5f:ac:19:33:39:0c:
f3:2d:12:8f:70:3f:a9:8a:ff:ce:93:24:e4:44:e4:
ec:f1:d2:fc:57:83:a7:80:f1:f9:ef:fb:cc:85:13:
4a:19:0a:33:c1:dc:c3:37:f1:14:21:6a:e2:dc:51:
cb:7b:5e:30:05:e7:cd:aa:db:79:8a:17:26:62:9b:
d9:99:05:8e:fe:d8:8d:cb:20:ce:9b:8f:c4:61:f5:
0b:41:43:31:54:22:78:de:99:77:2c:28:d0:97:6e:
2e:ed:a2:3e:ab:83:94:8f:9e:11:1b:40:99:89:df:
cf:b0:a9:09:19:c4:06:82:4b:50:a9:a8:12:a0:06:
86:44:6f:35:33:17:35:43:6e:02:c9:86:64:58:14:
cf:48:35:a3:e1:99:71:3b:7a:be:26:35:0e:b3:00:
27:88:33:7e:8b:52:8e:cd:72:60:e7:26:81:a5:44:
c7:ff:ad:cc:fc:ef:98:73:35:f2:0e:15:1e:c5:17:
5f:35:13:9e:11:d5:88:68:4d:32:f9:28:51:da:53:
85:90:2f:74:aa:cc:10:7e:86:79:2c:02:6e:e0:c4:
f7:b2:f2:f7:49:81:12:71:3a:26:ed:9e:f2:4a:e1:
ea:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:D4:FF:4B:E9:2B:E3:64:CE:F1:8A:59:43:5A:75:70:D9:02:B3:C9
X509v3 Authority Key Identifier:
keyid:3D:04:83:53:87:37:45:3E:2F:57:FF:B5:74:99:C3:92:2E:83:63:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PQSDU4c3RT4vV_-1dJnDki6DY20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/_9T_S-kr42TO8YpZQ1p1cNkCs8k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.86.0/24
IPv6:
2a07:6d40::/29
Signature Algorithm: sha256WithRSAEncryption
18:15:29:de:39:5d:64:35:71:c6:65:df:92:84:a2:ab:c4:e8:
b9:f9:1f:39:f4:84:6f:9a:6a:ac:e6:0b:f7:ed:ca:6e:c0:3b:
c2:96:4d:60:ee:45:01:47:1f:8e:f3:39:19:88:a9:74:69:5c:
d2:5d:5d:da:1f:5f:7e:01:e3:58:64:9b:5c:59:f2:2a:c7:4d:
b7:e3:34:ef:52:c8:c7:a7:46:7f:12:c8:31:6e:1f:ed:89:99:
aa:c6:74:ea:7e:57:49:65:fa:b9:05:9c:ac:2e:b0:9f:36:ad:
cf:bd:10:27:91:5d:eb:93:f7:c6:5c:7c:69:a8:ad:85:e5:52:
b0:8f:2a:69:c7:0d:0c:b7:53:1c:bf:56:aa:57:79:f3:20:c6:
ff:17:d6:0b:3f:a4:61:ae:f2:5c:56:80:da:29:84:4a:3c:af:
37:e9:6f:30:c4:03:60:87:38:87:5b:25:eb:a1:7f:25:12:b9:
86:d5:d8:38:e9:d5:a1:e0:28:dc:cc:16:cd:c3:9d:e6:46:d7:
dc:9c:c8:05:42:b6:2a:e9:97:29:aa:3c:cb:2e:43:0f:4b:b2:
5d:5f:fa:bc:ba:98:34:3e:98:cb:0c:90:a5:ec:a3:02:4b:bb:
ed:1f:01:ee:66:f8:98:77:fd:c6:10:ad:6e:80:e3:28:78:69:
17:3a:e6:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 18:10:02 2025 by rpki-client