Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/47aa2f-6b6f-4ef5-9b99-bc9ecc2adb43/1/TjHy4ulEjJA8xpiOl0d0n0t-qZM.roa
File: TjHy4ulEjJA8xpiOl0d0n0t-qZM.roa (raw, json)
Hash identifier: guL/zUqcF8RpE1MCIVixAjYcS9Inm0bcZt3sQXZZ4XA=
Subject key identifier: 4E:31:F2:E2:E9:44:8C:90:3C:C6:98:8E:97:47:74:9F:4B:7E:A9:93
Certificate issuer: /CN=4413bdf4dc7435faf51ba934d65570f71c21731a
Certificate serial: 0199103D9211B95162C125653E3F4704C69E
Authority key identifier: 44:13:BD:F4:DC:74:35:FA:F5:1B:A9:34:D6:55:70:F7:1C:21:73:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RBO99Nx0Nfr1G6k01lVw9xwhcxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/47aa2f-6b6f-4ef5-9b99-bc9ecc2adb43/1/TjHy4ulEjJA8xpiOl0d0n0t-qZM.roa
Signing time: Wed 03 Sep 2025 15:41:34 +0000
ROA not before: Wed 03 Sep 2025 15:41:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208516
IP address blocks: 45.131.236.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/47aa2f-6b6f-4ef5-9b99-bc9ecc2adb43/1/RBO99Nx0Nfr1G6k01lVw9xwhcxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/47aa2f-6b6f-4ef5-9b99-bc9ecc2adb43/1/RBO99Nx0Nfr1G6k01lVw9xwhcxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/RBO99Nx0Nfr1G6k01lVw9xwhcxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 15:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:10:3d:92:11:b9:51:62:c1:25:65:3e:3f:47:04:c6:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4413bdf4dc7435faf51ba934d65570f71c21731a
Validity
Not Before: Sep 3 15:41:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4e31f2e2e9448c903cc6988e9747749f4b7ea993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5f:f3:07:76:f7:24:90:82:df:6e:ab:bb:f1:
88:f0:d4:20:af:ac:db:05:a0:3a:4b:08:33:dc:65:
df:d3:a5:ad:63:10:36:f6:7f:26:37:fb:69:c2:60:
87:9d:bd:cc:e4:27:51:b2:15:be:a2:ba:f3:75:b1:
b9:b6:b7:8d:ee:e0:bb:26:3c:22:f6:35:23:24:e0:
a5:c1:9f:9a:ba:e7:0d:cd:07:2f:29:6c:85:49:09:
a1:46:9e:46:71:aa:0a:e0:8c:67:68:50:4b:cb:b7:
4e:89:30:e7:df:09:87:db:b2:be:37:78:f3:32:74:
a4:32:46:24:a0:2d:14:27:45:0e:92:be:60:28:fa:
8b:0a:1b:ca:e8:1f:a1:db:1d:9a:17:ea:c8:72:e4:
ef:2c:3d:b7:9b:cf:6a:f4:87:cb:1c:c1:70:5b:03:
4b:26:4a:43:55:02:98:15:b1:af:96:3c:4e:3d:9d:
ba:1e:32:36:b0:05:10:07:31:e0:ea:73:71:6e:48:
56:f9:7d:65:ce:59:25:62:cc:0d:45:3b:01:4f:c3:
75:c0:2a:25:e3:32:a6:1e:2b:43:c9:d2:1f:91:6e:
18:63:20:ea:50:19:3e:05:3f:a8:07:f2:cf:44:e1:
44:3f:25:a0:62:cd:8e:a2:a7:3a:b9:60:80:34:0c:
b9:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:31:F2:E2:E9:44:8C:90:3C:C6:98:8E:97:47:74:9F:4B:7E:A9:93
X509v3 Authority Key Identifier:
keyid:44:13:BD:F4:DC:74:35:FA:F5:1B:A9:34:D6:55:70:F7:1C:21:73:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RBO99Nx0Nfr1G6k01lVw9xwhcxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/47aa2f-6b6f-4ef5-9b99-bc9ecc2adb43/1/TjHy4ulEjJA8xpiOl0d0n0t-qZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/47aa2f-6b6f-4ef5-9b99-bc9ecc2adb43/1/RBO99Nx0Nfr1G6k01lVw9xwhcxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.236.0/23
Signature Algorithm: sha256WithRSAEncryption
3f:8d:57:bc:54:a4:15:f6:4e:ae:a9:2b:61:43:67:50:62:55:
3f:64:97:9a:c2:b8:7c:86:87:c8:4e:b7:68:9b:10:ce:c2:73:
83:d0:13:74:36:58:01:00:92:f1:4f:9a:da:0e:22:fd:23:32:
78:c4:6d:03:7a:e9:c2:ab:18:3f:2e:4f:0c:d4:fa:df:1d:2d:
d3:ed:78:77:55:d4:7f:e4:04:02:3c:d0:7a:09:23:d6:2f:06:
84:1f:8c:63:2c:22:4b:ad:03:04:4f:d4:9a:c5:36:91:1b:fd:
ef:c3:eb:ab:e8:00:d0:ec:df:9b:c9:e1:78:9a:51:0a:71:4f:
7d:a7:69:24:e7:15:40:ec:72:15:3e:0f:1e:23:78:76:64:e4:
59:4e:8c:4d:9c:31:b8:0e:59:52:e7:35:34:17:82:60:de:09:
f1:85:d2:4e:5d:58:6c:c7:7a:18:c6:97:9d:73:fe:24:36:d3:
d3:2c:cf:79:95:69:8b:3c:35:52:7b:61:99:22:e3:96:64:0f:
d9:b1:29:19:12:2c:79:6e:da:60:46:99:ec:ae:6c:6d:56:93:
3d:4f:f4:7c:20:38:e6:a5:51:c3:76:ee:b9:8e:1b:c1:25:4e:
7f:5b:19:7d:45:04:91:4a:dc:2e:7a:bb:a4:40:71:f7:11:ec:
2b:95:a5:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 20:03:30 2025 by rpki-client