Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/pxGAGz3bHfM8oQ7kGvW0MRJadi0.roa
File: pxGAGz3bHfM8oQ7kGvW0MRJadi0.roa (raw, json)
Hash identifier: XAdEeu5OLBswh4qoEwR2gRieAbGZvbIeO4USyFz/RhA=
Subject key identifier: A7:11:80:1B:3D:DB:1D:F3:3C:A1:0E:E4:1A:F5:B4:31:12:5A:76:2D
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019A0BCD20410AFA78F3A663090F5827D18A
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/pxGAGz3bHfM8oQ7kGvW0MRJadi0.roa
Signing time: Wed 22 Oct 2025 12:03:03 +0000
ROA not before: Wed 22 Oct 2025 12:03:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57043
IP address blocks: 45.12.255.0/24 maxlen: 24
87.121.58.0/24 maxlen: 24
94.103.127.0/24 maxlen: 24
94.156.79.0/24 maxlen: 24
141.98.4.0/24 maxlen: 24
147.78.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0b:cd:20:41:0a:fa:78:f3:a6:63:09:0f:58:27:d1:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 22 12:03:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a711801b3ddb1df33ca10ee41af5b431125a762d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:07:a7:50:d6:5a:21:8f:89:46:a5:83:02:7b:
0f:10:21:87:51:4a:f1:52:ad:c8:ff:40:b2:bc:a4:
56:7e:92:ef:90:ec:52:0b:74:82:fa:6e:c1:4c:3f:
46:65:f9:53:7d:ce:b1:66:2f:f5:e4:87:17:18:0d:
0e:ec:8f:58:ba:32:a3:8b:86:b8:a8:4b:b5:83:a1:
c4:c1:2e:5f:d2:73:81:79:5b:b7:aa:8e:39:51:ee:
d8:47:0b:ca:e6:08:b3:c7:8f:3f:af:41:1d:91:39:
3e:28:af:fa:3a:f4:9e:9a:34:93:36:27:8b:ec:c4:
2f:c9:a5:7b:b2:9a:b8:0c:29:19:1c:fd:ec:64:18:
37:f8:4e:ed:86:35:7b:22:7a:ba:1c:7f:ee:b6:37:
5e:30:e8:73:d8:cc:35:d5:cc:29:7b:00:7a:49:46:
4e:d4:af:7f:ec:d8:75:6b:a4:53:81:28:f5:0e:bf:
41:b6:85:ab:71:7c:f6:e4:20:da:fb:4d:32:0b:5a:
6d:ee:45:95:79:b7:b0:50:a1:55:bc:1b:51:94:09:
4f:e0:1c:56:b0:b2:af:c1:75:71:4d:00:f3:a3:cb:
43:ff:d9:c3:fa:62:20:e2:ff:7e:e8:9d:db:e6:12:
1f:ce:e3:38:12:5b:4e:8e:eb:a2:6a:8f:3c:b4:43:
3c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:11:80:1B:3D:DB:1D:F3:3C:A1:0E:E4:1A:F5:B4:31:12:5A:76:2D
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/pxGAGz3bHfM8oQ7kGvW0MRJadi0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.255.0/24
87.121.58.0/24
94.103.127.0/24
94.156.79.0/24
141.98.4.0/24
147.78.100.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:5c:81:1d:b0:77:14:29:98:bc:45:c2:f8:a9:72:a8:eb:72:
ed:7a:8a:df:d4:d1:2e:be:ea:aa:fe:65:2c:2d:93:7e:cb:a3:
cf:0d:d3:97:37:5e:ad:00:14:92:d0:4f:af:96:eb:5a:d1:90:
70:ca:f3:74:46:c7:03:9c:47:34:eb:b0:59:7a:52:77:66:4a:
b6:92:e1:3d:a8:ab:d2:83:fc:6d:54:8a:7c:2e:69:97:1f:c3:
48:56:c1:2f:e1:51:5e:c9:a5:06:7b:e9:bf:3b:23:d3:c8:0e:
78:3d:38:65:fa:f8:16:fc:f4:96:f7:02:8e:c5:d1:b2:9d:09:
ea:02:2f:c7:81:0f:ba:03:7c:bb:ef:94:28:db:e1:44:8b:5f:
03:00:4a:9e:82:49:e0:f8:71:cf:31:1f:59:9d:91:a7:8d:06:
64:15:7d:c6:68:43:a5:0f:6d:c5:08:47:a1:41:86:84:00:58:
0f:d4:c7:a6:85:5c:86:d5:8b:08:40:47:3a:9d:ec:1c:01:2a:
88:f9:51:39:94:a4:ee:a8:8d:5a:f4:09:33:07:bd:28:53:8b:
87:79:b7:6c:67:b4:b7:13:34:c4:fe:c8:9b:be:89:44:e6:74:
8f:3c:2b:7f:38:77:6a:5b:61:3a:56:d8:64:eb:c5:61:62:ce:
08:c6:3c:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 13:23:06 2025 by rpki-client