Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/ITMiKn1RDRzuhbzYC8Zgfi0OQ-k.roa
File: ITMiKn1RDRzuhbzYC8Zgfi0OQ-k.roa (raw, json)
Hash identifier: MF4B+TSZE3aY5ZF370Am+bJNupyNzZsvjNgb8A6jshQ=
Subject key identifier: 21:33:22:2A:7D:51:0D:1C:EE:85:BC:D8:0B:C6:60:7E:2D:0E:43:E9
Certificate issuer: /CN=6cd98c2c54b0cbea134e27a981cfdde73236e055
Certificate serial: 01991A2397F6126EE352E095A7258860A3CA
Authority key identifier: 6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/ITMiKn1RDRzuhbzYC8Zgfi0OQ-k.roa
Signing time: Fri 05 Sep 2025 13:49:24 +0000
ROA not before: Fri 05 Sep 2025 13:49:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 45.140.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 13:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1a:23:97:f6:12:6e:e3:52:e0:95:a7:25:88:60:a3:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cd98c2c54b0cbea134e27a981cfdde73236e055
Validity
Not Before: Sep 5 13:49:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2133222a7d510d1cee85bcd80bc6607e2d0e43e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:aa:09:a5:42:47:c2:05:11:74:48:37:00:3f:
ce:95:3d:6a:62:da:d6:42:a9:4b:b1:9a:46:99:73:
97:7b:7c:11:6d:fa:e4:c5:ce:3a:75:ad:a0:2e:f6:
49:71:ba:43:00:8e:ed:8a:f1:92:a2:3a:f8:54:5f:
7a:48:49:7b:68:ec:60:9c:03:e6:e8:e1:f6:e2:f2:
ea:17:6c:d2:3b:d0:2b:6f:bb:8f:4f:9a:d0:2b:16:
61:d5:b8:14:ce:56:4c:de:37:bc:9b:c2:64:ae:a5:
9e:93:f2:ea:ec:a9:14:26:fa:f7:fd:3f:09:44:6f:
dd:ed:07:91:03:28:69:ee:5c:90:37:ed:ee:bf:a8:
2e:67:8a:66:af:45:0d:f1:6c:08:96:c3:29:87:ec:
e8:93:bc:1d:3c:7b:06:8f:0a:c9:c9:cb:32:49:15:
5a:f5:60:7a:59:6a:2b:0e:53:0d:d3:82:92:5b:1c:
9e:b1:e8:54:17:cf:20:3d:27:d4:10:5f:20:66:3f:
62:4a:7b:21:16:01:8e:60:d8:d4:21:89:f3:30:f4:
3f:27:ed:5b:2f:f0:e1:57:9a:c2:51:32:fc:2a:5a:
77:5c:81:15:41:c9:58:9c:55:6c:80:4d:70:b3:1d:
7e:b8:d9:f4:0b:3a:cc:18:f0:e4:de:c0:5d:69:65:
6a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:33:22:2A:7D:51:0D:1C:EE:85:BC:D8:0B:C6:60:7E:2D:0E:43:E9
X509v3 Authority Key Identifier:
keyid:6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/ITMiKn1RDRzuhbzYC8Zgfi0OQ-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.194.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:a6:b2:5f:0d:4e:2c:46:b6:38:f5:8c:d4:82:63:14:c5:16:
8a:05:f9:64:00:33:4b:ad:3b:ab:84:f6:4c:22:d5:e5:8b:86:
a5:36:ec:ea:d8:24:79:71:66:0d:d7:08:f6:a8:33:c3:aa:37:
36:7e:d5:74:fb:83:3f:86:b2:e8:77:13:9d:db:01:90:d5:a9:
db:b7:25:92:a6:55:5e:1a:98:51:c5:45:43:73:bf:f5:2c:c6:
03:73:43:4b:b9:69:f8:26:9f:ab:91:f9:da:8a:62:63:83:1a:
12:1b:86:ff:27:e4:c0:ef:83:f5:aa:17:82:53:70:d4:a7:12:
e3:bd:03:a2:83:72:ba:ed:35:fd:ef:de:58:85:d4:f0:d2:52:
5c:5d:16:9a:2b:71:f2:c2:5d:f8:45:ec:5d:26:0a:06:72:32:
68:55:0a:b8:58:c1:df:78:3b:8b:19:fd:6d:27:c3:92:4b:cf:
c9:1a:0e:bd:d8:21:c6:a4:ec:4e:ed:87:24:83:d6:26:6a:c6:
d7:77:10:1b:37:b9:26:0e:c7:b0:44:99:1f:71:09:72:de:db:
01:ce:91:a3:ec:aa:d9:54:8e:89:a3:fc:22:f7:71:4b:41:7b:
3b:55:61:27:ad:a4:14:e6:df:5e:cd:58:10:95:7d:20:f0:f4:
9b:84:11:45
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZkaI5f2Em7jUuCVpyWIYKPKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjZDk4YzJjNTRiMGNiZWExMzRlMjdhOTgxY2ZkZGU3MzIz
NmUwNTUwHhcNMjUwOTA1MTM0OTI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMTMzMjIyYTdkNTEwZDFjZWU4NWJjZDgwYmM2NjA3ZTJkMGU0M2U5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwaoJpUJHwgURdEg3AD/OlT1qYtrW
QqlLsZpGmXOXe3wRbfrkxc46da2gLvZJcbpDAI7tivGSojr4VF96SEl7aOxgnAPm
6OH24vLqF2zSO9Arb7uPT5rQKxZh1bgUzlZM3je8m8JkrqWek/Lq7KkUJvr3/T8J
RG/d7QeRAyhp7lyQN+3uv6guZ4pmr0UN8WwIlsMph+zok7wdPHsGjwrJycsySRVa
9WB6WWorDlMN04KSWxyesehUF88gPSfUEF8gZj9iSnshFgGOYNjUIYnzMPQ/J+1b
L/DhV5rCUTL8Klp3XIEVQclYnFVsgE1wsx1+uNn0CzrMGPDk3sBdaWVqBQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCEzIip9UQ0c7oW82AvGYH4tDkPpMB8GA1UdIwQY
MBaAFGzZjCxUsMvqE04nqYHP3ecyNuBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYk5tTUxGU3d5LW9UVGllcGdjX2Q1ekkyNEZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8wMTYzOGMtNmNiOS00NTg5LTkwOWIt
ZDM3ZGY2MzRhOTI5LzEvSVRNaUtuMVJEUnp1aGJ6WUM4WmdmaTBPUS1rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS8wMTYzOGMtNmNiOS00NTg5LTkwOWItZDM3ZGY2MzRhOTI5
LzEvYk5tTUxGU3d5LW9UVGllcGdjX2Q1ekkyNEZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYzCMA0G
CSqGSIb3DQEBCwUAA4IBAQAaprJfDU4sRrY49YzUgmMUxRaKBflkADNLrTurhPZM
ItXli4alNuzq2CR5cWYN1wj2qDPDqjc2ftV0+4M/hrLodxOd2wGQ1anbtyWSplVe
GphRxUVDc7/1LMYDc0NLuWn4Jp+rkfnaimJjgxoSG4b/J+TA74P1qheCU3DUpxLj
vQOig3K67TX9795YhdTw0lJcXRaaK3Hywl34RexdJgoGcjJoVQq4WMHfeDuLGf1t
J8OSS8/JGg692CHGpOxO7Yckg9YmasbXdxAbN7kmDsewRJkfcQly3tsBzpGj7KrZ
VI6Jo/wi93FLQXs7VWEnraQU5t9ezVgQlX0g8PSbhBFF
-----END CERTIFICATE-----
Generated at Sat Sep 6 22:45:37 2025 by rpki-client