Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/ameJNP10EZEcQ0qvPVwWfCw-Q0s.roa
File: ameJNP10EZEcQ0qvPVwWfCw-Q0s.roa (raw, json)
Hash identifier: TlBUUK1PGuhEdvfSZ2lXjiT1xzgbZXKlLQS+IOtWMrc=
Subject key identifier: 6A:67:89:34:FD:74:11:91:1C:43:4A:AF:3D:5C:16:7C:2C:3E:43:4B
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 0198FD0CE133FA9B2FAD95E895FFA1B0A0E2
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/ameJNP10EZEcQ0qvPVwWfCw-Q0s.roa
Signing time: Sat 30 Aug 2025 22:15:36 +0000
ROA not before: Sat 30 Aug 2025 22:15:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 45.141.204.0/23 maxlen: 24
213.185.92.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft
rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 11:14:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:fd:0c:e1:33:fa:9b:2f:ad:95:e8:95:ff:a1:b0:a0:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Aug 30 22:15:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6a678934fd7411911c434aaf3d5c167c2c3e434b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5f:7c:c4:3a:41:c4:80:dc:41:d4:ca:fa:92:
0b:0f:76:ef:b5:0d:3e:bf:67:8a:21:44:17:ac:74:
b6:b0:ec:43:fa:17:05:50:c0:5e:5e:d7:82:73:93:
2d:08:69:f3:f2:2e:95:45:5e:09:fb:4f:f9:ea:ca:
db:66:8d:a3:f8:9e:26:02:96:e2:a7:ae:09:36:0d:
22:b3:6a:6e:ce:78:23:cf:12:4c:bf:9e:b3:3d:58:
49:ef:27:59:7e:0e:55:3f:83:d0:25:d1:86:95:c5:
63:21:99:69:8b:cc:17:f9:2e:4b:c5:a3:94:69:63:
96:2e:45:00:dc:f5:63:bc:5c:4d:82:ad:28:47:65:
68:56:51:9c:46:38:e0:56:a8:d8:2b:d3:4e:e2:1a:
22:2b:f8:f0:e3:d1:34:b6:7d:3b:c3:4f:95:2e:30:
d5:db:93:d6:27:2b:44:5d:fd:39:01:27:df:b9:de:
bd:b6:72:b6:59:43:9a:46:a7:49:63:62:fb:77:ed:
0a:43:d9:ae:7e:53:63:88:f2:1e:39:33:28:25:01:
07:3c:c5:8b:47:3d:fa:c1:60:5b:a1:74:65:f3:5b:
e3:db:87:f7:bc:f8:bc:13:85:3b:86:a6:b5:07:77:
0c:30:56:59:7b:e0:69:a6:5a:62:36:59:db:f1:de:
24:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:67:89:34:FD:74:11:91:1C:43:4A:AF:3D:5C:16:7C:2C:3E:43:4B
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/ameJNP10EZEcQ0qvPVwWfCw-Q0s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.204.0/23
213.185.92.0/22
Signature Algorithm: sha256WithRSAEncryption
b0:cf:0c:73:8a:d8:3c:85:b5:c9:83:ef:5b:74:f5:0f:71:39:
9b:de:d2:f4:46:69:00:87:c1:1c:be:13:ff:ea:16:2c:1d:ba:
8f:ae:15:21:59:59:4e:ff:4f:b3:57:bc:4d:7b:d2:e1:09:4a:
96:88:cb:ef:1a:d0:c6:59:4c:35:65:76:d8:6d:90:73:32:80:
b9:9d:8a:69:c9:9a:4d:d2:55:b0:75:5c:24:d6:4f:c5:5a:fc:
ff:55:d3:80:f4:da:92:9e:7a:dd:e0:b5:fa:ad:96:0b:5c:94:
00:c4:43:e9:7b:ad:68:2a:d6:f4:aa:1d:a3:bf:79:e2:31:ef:
4b:5c:ab:9d:6f:4a:b3:bf:40:4e:6d:d8:b0:03:39:64:0a:13:
1b:dc:f6:08:60:7b:56:69:ca:21:a1:b2:ec:98:8c:0b:9c:a2:
bb:1c:c1:d2:54:72:7f:4e:22:7b:6b:89:dd:9a:43:d6:9c:27:
3f:da:28:b6:78:bd:a2:0f:e6:f7:19:af:2a:d3:38:94:82:4e:
f6:00:53:e1:1f:1c:88:7c:05:6b:6f:50:02:1b:e9:72:22:af:
a1:37:d0:0f:93:d4:7e:8b:cc:11:32:cb:c0:9b:a5:ac:ac:26:
7e:08:eb:c5:cc:63:16:cb:14:34:f3:25:a4:31:a4:e4:51:d2:
38:5e:d1:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 15:48:52 2025 by rpki-client