Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/CIfkNcs_dPG1243KuyQzPUhrSqE.roa
File: CIfkNcs_dPG1243KuyQzPUhrSqE.roa (raw, json)
Hash identifier: vq82qZoa17x2oFYdWbGJVFocqNvpvLo719jmFST2KLk=
Subject key identifier: 08:87:E4:35:CB:3F:74:F1:B5:DB:8D:CA:BB:24:33:3D:48:6B:4A:A1
Certificate issuer: /CN=4638bf68b6675e2a5a3a7922f6477d2afb357fac
Certificate serial: 01982D38AC8A57C30CCE46ECF1FCED320ECF
Authority key identifier: 46:38:BF:68:B6:67:5E:2A:5A:3A:79:22:F6:47:7D:2A:FB:35:7F:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rji_aLZnXipaOnki9kd9Kvs1f6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/CIfkNcs_dPG1243KuyQzPUhrSqE.roa
Signing time: Mon 21 Jul 2025 13:42:25 +0000
ROA not before: Mon 21 Jul 2025 13:42:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3303
IP address blocks: 45.157.49.0/24 maxlen: 24
45.157.50.0/24 maxlen: 24
45.157.51.0/24 maxlen: 24
185.156.8.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rji_aLZnXipaOnki9kd9Kvs1f6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:2d:38:ac:8a:57:c3:0c:ce:46:ec:f1:fc:ed:32:0e:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4638bf68b6675e2a5a3a7922f6477d2afb357fac
Validity
Not Before: Jul 21 13:42:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0887e435cb3f74f1b5db8dcabb24333d486b4aa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:4b:a4:ae:c8:82:c7:4a:f2:02:67:4e:8c:66:
48:5f:02:45:f5:88:af:b3:94:18:c1:2c:82:3a:a0:
f8:9a:37:08:1d:3a:a3:57:d7:6c:68:27:8c:50:6d:
1b:09:38:c5:05:59:4a:d2:9d:d6:ea:ab:92:e1:fe:
57:b0:e7:c7:a2:79:f7:61:49:46:81:07:cf:d7:e8:
ea:ae:ec:f3:62:35:75:ca:6a:a4:c8:b3:d7:38:0c:
ef:56:b7:13:4b:72:95:bf:35:37:50:67:ed:5e:7c:
a2:ba:db:23:e5:43:91:5f:f3:b0:46:18:13:56:75:
9c:86:28:54:21:7d:48:03:e9:97:2d:9e:13:ae:b3:
ff:e3:1e:15:2c:47:7c:8c:d7:1a:ed:4a:1f:2a:9a:
83:98:e7:83:b5:24:62:15:4c:10:eb:0c:6b:64:b6:
17:2d:ad:a4:be:13:da:49:2e:69:41:6d:92:47:af:
ae:fd:f2:0a:f9:c6:15:cc:f6:3d:1e:e5:28:76:29:
a6:6e:9a:5b:af:40:fd:6f:77:86:22:57:31:88:0b:
34:60:4f:99:43:7c:85:4c:20:90:ae:a0:18:e5:1d:
f2:be:c1:11:39:38:72:f9:d4:75:36:95:69:f6:28:
19:21:93:1e:b4:f1:c4:17:f8:30:9e:32:7c:24:35:
b0:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:87:E4:35:CB:3F:74:F1:B5:DB:8D:CA:BB:24:33:3D:48:6B:4A:A1
X509v3 Authority Key Identifier:
keyid:46:38:BF:68:B6:67:5E:2A:5A:3A:79:22:F6:47:7D:2A:FB:35:7F:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rji_aLZnXipaOnki9kd9Kvs1f6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/CIfkNcs_dPG1243KuyQzPUhrSqE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.49.0-45.157.51.255
185.156.8.0/22
Signature Algorithm: sha256WithRSAEncryption
36:8d:f9:31:4b:eb:3c:af:6d:cb:c9:f2:1b:db:13:82:54:ea:
07:1c:fb:d7:3e:d1:a5:d5:74:2a:db:3c:2a:53:0b:23:ee:44:
28:65:a6:fd:5e:72:e4:0b:1c:66:58:18:f8:24:80:ff:de:1f:
e1:56:d5:e4:c4:0d:09:88:f3:37:74:62:44:3a:9e:02:72:80:
73:7a:79:ec:28:d1:bb:2e:87:9f:74:43:d2:08:29:82:7b:ce:
15:40:ad:a4:38:4d:86:42:da:6e:c9:55:c3:ca:f9:d7:6f:d8:
0c:62:7a:f4:d4:57:d3:3a:eb:7a:4a:db:0f:8e:ed:74:ac:30:
ce:90:df:47:be:34:a6:de:b7:77:3e:ba:ad:f1:7f:95:cc:96:
ee:2e:29:17:d2:7c:a5:bc:27:d8:a8:6c:aa:42:ba:80:4b:1d:
ce:78:71:c8:9d:58:76:72:b2:4b:3c:62:83:20:89:09:e6:c8:
59:0e:54:85:08:5f:44:27:61:58:db:7c:cf:ed:a1:b1:f6:3a:
b0:55:fd:36:99:65:6a:33:1b:89:24:4b:c2:d9:06:35:3c:54:
b3:8a:27:3a:e3:8e:d8:e5:78:3c:1e:fe:4a:c3:91:92:b5:0d:
11:4e:bb:70:c5:a4:ae:bd:60:0e:b9:84:1b:71:6c:25:54:51:
bd:99:dd:ae
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jul 26 20:30:50 2025 by rpki-client