Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/A_9f9I_3b-WkwSIFr6U0ozOcgrI.roa
File: A_9f9I_3b-WkwSIFr6U0ozOcgrI.roa (raw, json)
Hash identifier: ldoqGlxkskwlUGFcvsBCWW2juWo6FhsFHoXDckpMuNw=
Subject key identifier: 03:FF:5F:F4:8F:F7:6F:E5:A4:C1:22:05:AF:A5:34:A3:33:9C:82:B2
Certificate issuer: /CN=4638bf68b6675e2a5a3a7922f6477d2afb357fac
Certificate serial: 0198318AA157777027D5E702EB43F7F2908F
Authority key identifier: 46:38:BF:68:B6:67:5E:2A:5A:3A:79:22:F6:47:7D:2A:FB:35:7F:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rji_aLZnXipaOnki9kd9Kvs1f6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/A_9f9I_3b-WkwSIFr6U0ozOcgrI.roa
Signing time: Tue 22 Jul 2025 09:50:25 +0000
ROA not before: Tue 22 Jul 2025 09:50:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215044
IP address blocks: 45.157.48.0/24 maxlen: 24
2a07:9840::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rji_aLZnXipaOnki9kd9Kvs1f6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:31:8a:a1:57:77:70:27:d5:e7:02:eb:43:f7:f2:90:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4638bf68b6675e2a5a3a7922f6477d2afb357fac
Validity
Not Before: Jul 22 09:50:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=03ff5ff48ff76fe5a4c12205afa534a3339c82b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2c:67:66:47:cf:db:d2:bf:40:22:ce:da:b5:
c8:21:c2:80:78:0b:d7:d9:9f:3d:27:13:72:6d:08:
9d:b1:ca:63:ce:8b:5b:08:7d:c5:91:19:a2:09:75:
7d:75:a8:d6:2a:2a:58:c2:f9:12:ed:17:2e:54:14:
02:32:47:6a:1f:bd:d5:79:79:fe:fb:cb:d4:04:bd:
83:8c:ea:5f:57:73:78:e3:44:9f:d9:83:70:b4:f2:
e4:e4:65:66:fb:87:2e:84:09:f1:87:d4:f7:e0:1a:
ec:d5:e4:e6:69:18:f0:0a:ad:83:d6:3c:a6:a1:d1:
6f:c7:12:7b:3c:5e:db:af:56:44:a5:3d:f6:e0:ff:
8e:6b:73:26:bb:58:c2:63:1a:b8:e2:76:51:bc:ef:
18:e4:0b:5b:ac:17:be:f1:2e:63:32:3f:7b:25:1d:
5e:5f:e4:f7:b9:84:94:70:c3:cd:c6:69:a4:96:e6:
4c:8a:3f:a0:22:7c:6d:be:d1:e8:1e:f3:79:73:05:
36:cc:c5:6a:dc:73:78:7f:57:30:20:31:74:87:90:
47:73:cd:4e:2f:37:59:06:49:7c:2f:3a:76:76:ae:
0c:33:45:a3:1c:e4:90:a0:93:38:91:cb:b8:e7:95:
65:c4:bf:ad:dc:fb:2a:14:c8:e5:b1:46:ac:1f:15:
fa:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:FF:5F:F4:8F:F7:6F:E5:A4:C1:22:05:AF:A5:34:A3:33:9C:82:B2
X509v3 Authority Key Identifier:
keyid:46:38:BF:68:B6:67:5E:2A:5A:3A:79:22:F6:47:7D:2A:FB:35:7F:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rji_aLZnXipaOnki9kd9Kvs1f6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/A_9f9I_3b-WkwSIFr6U0ozOcgrI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.48.0/24
IPv6:
2a07:9840::/29
Signature Algorithm: sha256WithRSAEncryption
77:9b:08:8a:a3:05:8e:be:d3:23:df:28:df:37:22:8b:45:82:
65:2d:93:f9:25:58:db:a7:58:7b:e5:01:14:26:d8:3a:4b:c7:
84:60:2d:35:d2:fa:8b:74:57:d2:2d:04:fd:5e:ff:68:a2:90:
5d:d7:87:87:83:b2:2f:54:67:24:9b:dc:7a:81:54:50:20:8a:
86:fb:29:bc:85:99:78:3e:e1:75:04:bc:ac:56:71:ec:42:1f:
36:03:0a:0f:27:7e:30:40:84:df:52:ca:6e:d5:6e:c4:45:3d:
08:96:7c:37:ea:7e:9e:15:6d:c4:67:5b:83:7a:29:d4:88:63:
9d:62:fc:96:1e:13:af:42:24:f0:7a:9f:de:12:a1:db:9e:ca:
de:71:09:90:dd:88:fd:28:74:65:db:ba:79:47:e2:d0:e5:12:
e0:dc:82:06:13:1f:2f:9d:e5:89:ff:b9:23:e9:66:63:e6:0d:
db:79:72:68:0f:4e:a4:93:85:5f:c5:ba:eb:e8:f6:99:0b:84:
bd:cd:69:1d:d7:10:a6:f5:e5:23:64:84:5a:bb:03:17:15:48:
21:b7:e2:ec:18:8c:6d:4b:63:38:06:56:18:c9:69:a5:ee:ce:
d2:8c:6e:7d:bb:2b:d2:35:9a:bb:61:84:2d:23:b2:e2:b8:8e:
97:34:2d:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:31:40 2025 by rpki-client