Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/0_mR_q2PRjMrC6KY1_UxRD8g8so.roa
File: 0_mR_q2PRjMrC6KY1_UxRD8g8so.roa (raw, json)
Hash identifier: y/csCabR2wm0syOrpZHF70QEhjDWUBWGFQAkqx7SNyk=
Subject key identifier: D3:F9:91:FE:AD:8F:46:33:2B:0B:A2:98:D7:F5:31:44:3F:20:F2:CA
Certificate issuer: /CN=6cd98c2c54b0cbea134e27a981cfdde73236e055
Certificate serial: 01991A24811CE6BE8672ED801CFB4480226D
Authority key identifier: 6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/0_mR_q2PRjMrC6KY1_UxRD8g8so.roa
Signing time: Fri 05 Sep 2025 13:50:23 +0000
ROA not before: Fri 05 Sep 2025 13:50:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 45.153.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 13:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1a:24:81:1c:e6:be:86:72:ed:80:1c:fb:44:80:22:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cd98c2c54b0cbea134e27a981cfdde73236e055
Validity
Not Before: Sep 5 13:50:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d3f991fead8f46332b0ba298d7f531443f20f2ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e4:44:a2:b3:0d:9c:35:c4:5b:06:e0:c6:6f:
54:f2:63:f9:e2:ad:2c:a7:ca:e3:6d:26:61:85:eb:
6a:31:da:1e:42:b8:54:e6:16:01:57:03:9d:67:ac:
cb:f2:14:f2:42:98:f1:98:f0:27:bd:57:a1:b5:7a:
6c:36:61:32:ee:ae:92:62:b6:d4:84:bc:c2:45:be:
3c:63:36:91:6d:76:ce:d7:ad:3b:b6:57:ba:e7:36:
b7:74:4c:8f:df:07:90:52:4a:da:63:5d:3a:f0:3c:
c1:f9:df:42:0e:96:76:ac:c6:7b:24:0b:e7:5f:9d:
5c:0c:ae:66:91:a2:05:15:36:ab:57:39:01:c0:eb:
a3:b4:52:e1:68:31:cb:87:cb:1d:1f:0f:04:cd:b7:
a5:ac:f4:3e:03:97:d7:7a:38:37:10:00:b3:67:94:
03:4c:53:7a:45:8f:4e:5c:6e:1f:f3:21:e1:ea:f4:
52:2f:6b:7c:15:85:e7:7f:99:de:a3:2a:e5:da:97:
82:04:54:8a:d9:fa:a5:ef:41:69:2d:49:a8:49:8f:
65:31:f4:84:64:f3:49:8e:13:10:6d:af:cb:c8:f6:
b0:89:9c:ae:7f:eb:9d:77:92:02:0c:9f:1d:40:ea:
d5:8f:cd:bb:59:48:ab:57:ab:68:5d:71:da:e9:7a:
5a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:F9:91:FE:AD:8F:46:33:2B:0B:A2:98:D7:F5:31:44:3F:20:F2:CA
X509v3 Authority Key Identifier:
keyid:6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/0_mR_q2PRjMrC6KY1_UxRD8g8so.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.166.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:cf:9e:49:97:d9:70:72:e1:62:d4:7f:49:fd:36:87:42:71:
c5:0f:64:66:08:1e:32:8b:be:78:01:f0:7d:40:2d:40:45:a5:
ad:68:c3:90:60:04:11:73:7e:58:f4:55:e8:59:be:85:b5:72:
a6:b0:ad:3c:01:1c:fe:2c:23:e3:88:c6:db:d5:a0:62:ea:ad:
98:3b:7a:b8:fb:b7:54:75:6d:18:2d:db:eb:42:f3:fe:fe:d7:
55:33:ac:87:34:2c:2e:b5:12:40:b4:fb:31:10:ed:de:64:cd:
9d:ed:47:9c:2b:07:d7:ed:a8:a8:f1:a4:0a:9c:57:8c:81:2e:
3e:2c:69:33:62:2f:b1:43:7f:2a:42:0e:4e:c1:5b:1d:c8:6d:
39:c6:c3:75:f2:a5:c4:90:66:0d:26:dc:c9:3e:f6:25:61:3d:
fa:b1:6c:c7:ea:d6:14:86:67:5a:a7:ac:fa:99:33:c5:fb:0b:
59:ed:dc:ff:03:71:6f:64:7d:27:15:a3:46:6c:9a:ba:53:78:
7f:c7:a8:4d:ce:e8:55:13:37:de:eb:a3:c0:26:af:a0:5b:86:
8b:c4:bd:e4:28:b6:64:6e:3b:4a:01:ce:0a:e3:50:17:c2:63:
44:1e:59:e1:e8:bb:24:1a:38:57:a6:81:aa:94:13:58:aa:d0:
fd:93:af:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 22:41:52 2025 by rpki-client