Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/0Kc8SG7RPyFlCayNS7Iagqlo93U.roa
File: 0Kc8SG7RPyFlCayNS7Iagqlo93U.roa (raw, json)
Hash identifier: eacRvjpaEx02FFJhdGYEqnShrm24pPFv1uJJLeo9e88=
Subject key identifier: D0:A7:3C:48:6E:D1:3F:21:65:09:AC:8D:4B:B2:1A:82:A9:68:F7:75
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01994D06845D53BF0C608A3E45AA628703DA
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/0Kc8SG7RPyFlCayNS7Iagqlo93U.roa
Signing time: Mon 15 Sep 2025 10:58:16 +0000
ROA not before: Mon 15 Sep 2025 10:58:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209101
IP address blocks: 45.151.91.0/24 maxlen: 24
94.154.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Sep 2025 17:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:4d:06:84:5d:53:bf:0c:60:8a:3e:45:aa:62:87:03:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 15 10:58:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d0a73c486ed13f216509ac8d4bb21a82a968f775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7b:d7:92:41:9b:21:7c:0e:02:32:25:54:3f:
44:20:38:f0:fb:69:ed:95:c7:92:f6:c5:18:e9:56:
5a:eb:ff:ef:d9:56:d4:c1:ab:b2:46:ed:01:41:5c:
26:ef:6f:91:82:62:ef:56:f5:71:9b:8e:75:b5:ed:
ba:7e:e8:6d:24:82:01:a0:89:4f:dd:31:b7:3a:72:
63:30:ea:8a:b0:b9:44:e9:bc:43:9f:0e:77:3b:af:
fc:12:e2:c4:59:b9:cb:ae:62:5c:26:b1:c1:9d:60:
de:a4:65:c6:98:05:c5:02:bd:23:14:69:5e:cb:e2:
8a:33:38:8e:be:9a:70:be:21:e0:b5:a2:23:c4:6f:
95:cb:db:c6:d2:77:03:64:b1:07:cf:3d:72:04:3b:
5a:99:0f:2f:74:c4:a3:96:5a:51:fd:93:d2:fc:c0:
44:28:8c:b0:dd:29:2c:d0:13:8e:06:dd:35:db:ae:
68:aa:7a:f8:a9:1b:9d:ae:a2:16:37:03:ed:d1:4f:
d5:5e:26:c5:f5:84:ea:83:c2:3a:64:fc:d3:8a:c3:
8e:32:d0:f0:d9:5a:4c:ed:cd:99:e1:02:a0:d8:c9:
14:d2:79:d4:d5:61:92:e4:5d:7d:7b:ef:fd:64:52:
3c:8a:ef:d9:62:7e:50:1d:95:94:49:58:4d:8b:07:
40:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:A7:3C:48:6E:D1:3F:21:65:09:AC:8D:4B:B2:1A:82:A9:68:F7:75
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/0Kc8SG7RPyFlCayNS7Iagqlo93U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.91.0/24
94.154.172.0/24
Signature Algorithm: sha256WithRSAEncryption
16:a4:67:d0:7f:b0:e7:a7:ff:d6:25:e7:a4:e5:0d:df:c9:14:
6d:b9:fd:ad:7f:91:49:22:1b:2f:d0:58:55:49:69:e3:02:2e:
01:7f:dc:8a:9d:c9:6a:9f:06:4c:c7:4c:ad:64:fa:9b:cf:e6:
38:ca:e0:d4:a5:6f:5e:66:4d:97:c9:a3:a9:c7:60:72:de:6a:
05:6e:c2:5a:99:34:ae:cf:5c:c8:41:1f:c8:78:9c:62:08:30:
a6:13:30:61:7b:28:d4:fe:e0:e8:1b:9f:fe:45:ca:95:82:a6:
a5:98:60:bd:28:6e:22:f5:57:83:2c:a2:c5:1c:5a:f4:a0:bc:
36:6a:47:d5:4d:13:02:7a:7d:8a:c2:90:ca:13:1e:08:d6:2f:
1f:f1:eb:5d:81:d5:2a:68:9d:6f:a8:5a:df:b7:d6:76:6b:9b:
48:a5:65:2c:37:13:50:ba:26:82:b8:20:60:09:93:68:77:ba:
85:54:d8:ad:fd:04:91:df:a6:74:38:2f:11:d1:c3:30:9f:9c:
a1:60:7b:7d:4b:bc:f7:ec:94:61:2f:2f:c5:d7:1b:93:9d:3c:
21:c1:e6:f9:22:16:ca:50:66:a8:51:44:64:6b:7a:95:e1:8d:
14:c5:7b:1c:b2:b3:87:f9:9a:dd:a4:90:50:c4:56:63:f6:c0:
98:4b:30:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 01:37:53 2025 by rpki-client