Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/xUq9qOG79JGDF3yYojFXG049pf4.roa
File: xUq9qOG79JGDF3yYojFXG049pf4.roa (raw, json)
Hash identifier: 832Q0g/HTzuyiBB7tZKGzXQgOS4aozvA8zN9rX5XMPY=
Subject key identifier: C5:4A:BD:A8:E1:BB:F4:91:83:17:7C:98:A2:31:57:1B:4E:3D:A5:FE
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 0198FD0CE1C3C55F5FBE4D90A73DFF2F08C8
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/xUq9qOG79JGDF3yYojFXG049pf4.roa
Signing time: Sat 30 Aug 2025 22:15:36 +0000
ROA not before: Sat 30 Aug 2025 22:15:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 45.141.204.0/23 maxlen: 24
213.185.92.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft
rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 11:14:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:fd:0c:e1:c3:c5:5f:5f:be:4d:90:a7:3d:ff:2f:08:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Aug 30 22:15:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c54abda8e1bbf49183177c98a231571b4e3da5fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4f:c4:7f:9e:4e:4a:fa:c1:8b:82:5f:78:66:
d4:cd:26:f4:69:be:fc:49:dc:a2:6f:4e:e0:9e:db:
8a:44:fa:6f:b9:ad:a8:eb:89:8f:ac:26:e4:b8:28:
b3:a6:33:61:db:04:0c:87:d9:58:b8:af:2b:06:26:
b3:84:11:19:c9:86:f2:bb:72:d6:cc:61:2c:44:6a:
9f:b2:de:4a:b7:f9:0a:03:7d:11:d4:90:74:e1:55:
d0:58:92:9f:ba:27:c2:61:02:67:6e:80:96:fa:ce:
f7:15:bd:f3:ec:82:f7:9b:7f:64:8c:24:1f:09:19:
43:c7:c0:7f:95:7e:d0:40:2c:37:58:b5:5c:44:0e:
e4:a0:8c:63:1b:e3:a7:fe:6e:d5:7b:09:ae:b0:1f:
f8:b1:e9:3d:de:24:cf:6b:b7:7f:be:cf:ca:cb:d1:
8d:5d:dd:b2:f5:72:42:c5:09:bf:20:f9:0e:bf:e0:
9c:49:c1:2a:4e:b6:3f:76:0f:7d:fe:fd:28:93:1e:
89:ae:54:18:81:be:8d:13:f6:8d:a1:5b:a8:7e:6a:
6b:e1:50:c8:18:e9:3f:e4:52:ef:a1:d6:3d:fb:5e:
d9:f6:97:bc:31:c7:81:d6:73:cd:5a:93:ed:da:55:
db:e2:96:37:3f:00:7f:ae:d2:d4:79:4c:1b:7a:f3:
1e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:4A:BD:A8:E1:BB:F4:91:83:17:7C:98:A2:31:57:1B:4E:3D:A5:FE
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/xUq9qOG79JGDF3yYojFXG049pf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.204.0/23
213.185.92.0/22
Signature Algorithm: sha256WithRSAEncryption
30:ba:c9:02:15:11:a5:80:32:40:36:f5:13:c3:5f:f8:f5:b9:
49:6c:40:63:0f:b4:81:fc:6f:ba:bc:d7:32:d7:81:3b:d4:f9:
ce:c0:ad:39:e8:12:ce:03:bf:0c:c4:e9:c8:89:16:c0:7e:ab:
e6:6b:05:e0:25:18:23:a5:4f:00:2f:f4:1d:e6:80:9a:28:40:
eb:bc:eb:e1:ea:d0:92:1d:4f:e7:8a:c8:d5:c1:74:e2:3f:59:
58:fd:a4:8e:72:b7:be:b9:2b:5f:82:7d:f2:ba:74:d7:7a:a4:
65:d6:a6:55:61:25:06:1e:89:1b:cf:24:ec:32:9a:07:42:35:
94:76:45:42:d2:22:e0:64:80:92:ab:f8:63:21:bf:e3:8e:53:
f8:6a:26:11:87:15:05:11:23:f9:99:7e:08:e7:d9:8b:ad:03:
f7:dd:76:79:a9:7f:d5:ab:ce:99:67:63:e8:8e:78:c1:4b:79:
1a:ab:8e:47:0a:d9:b6:2e:61:8e:d7:42:2f:24:f8:48:6e:39:
9d:e0:59:0e:12:4c:65:84:3b:16:74:22:09:96:e7:9e:53:10:
66:08:13:44:c1:66:b5:fc:ee:aa:e3:e7:a6:3b:66:d3:83:df:
d5:67:4b:be:15:91:c1:b1:c0:f1:db:d7:bb:1b:4d:cd:ed:b8:
d7:74:bd:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 15:48:54 2025 by rpki-client