Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/U2EmPKjYSf-kIV0lUz-2yjNWzaU.roa
File: U2EmPKjYSf-kIV0lUz-2yjNWzaU.roa (raw, json)
Hash identifier: oFsoZtSPj1G7kWSIIUSAI4+oXI6Zv6kZTHWYg/i6uRA=
Subject key identifier: 53:61:26:3C:A8:D8:49:FF:A4:21:5D:25:53:3F:B6:CA:33:56:CD:A5
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 0199BDDD02786012B5DECBCC6778A9000D87
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/U2EmPKjYSf-kIV0lUz-2yjNWzaU.roa
Signing time: Tue 07 Oct 2025 08:50:01 +0000
ROA not before: Tue 07 Oct 2025 08:50:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 45.67.136.0/24 maxlen: 24
45.92.218.0/24 maxlen: 24
45.134.36.0/24 maxlen: 24
45.137.202.0/24 maxlen: 24
45.141.116.0/22 maxlen: 22
45.142.105.0/24 maxlen: 24
45.151.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft
rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 07:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:bd:dd:02:78:60:12:b5:de:cb:cc:67:78:a9:00:0d:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Oct 7 08:50:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5361263ca8d849ffa4215d25533fb6ca3356cda5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:22:52:5e:79:91:2a:d2:1a:01:78:d8:4f:2f:
7e:5a:f5:70:0c:94:4c:c3:bb:d0:14:08:9d:87:0d:
b4:53:3b:38:5d:e3:98:21:ea:ec:44:b9:a0:eb:16:
dc:d0:dc:28:b2:6e:16:93:83:67:f9:06:9d:aa:1b:
51:c8:15:08:c8:24:c7:99:ae:c7:de:88:f0:58:85:
00:55:29:c4:ba:4c:7f:c2:5d:14:73:0f:06:72:1e:
51:7b:ee:24:9a:24:fe:ae:4c:91:9e:ec:6d:9a:3a:
c9:f3:bf:df:a7:a4:56:1b:34:b4:40:c0:13:3b:47:
40:5d:d9:a7:e6:4b:fd:82:0c:e3:ea:3a:a3:13:75:
d1:33:bc:4b:d2:27:59:f1:73:7b:f8:b7:16:d9:4f:
bf:11:cf:a5:a8:dc:75:85:4c:16:6a:e6:fa:93:88:
e9:d2:ce:a4:bc:84:ea:1b:15:f2:37:af:1a:6a:23:
a2:51:2f:8d:eb:36:c9:76:11:d8:ef:f0:cf:71:dd:
f0:87:be:92:ba:6e:3b:85:bd:f0:3a:f5:9a:64:ff:
0d:5b:19:f1:52:f2:6c:19:6d:3f:77:88:be:7d:18:
74:fc:8b:dd:96:fd:fb:83:8b:90:dd:61:55:21:77:
4d:98:6c:a8:6a:81:f5:65:7d:26:2e:74:64:cc:8e:
99:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:61:26:3C:A8:D8:49:FF:A4:21:5D:25:53:3F:B6:CA:33:56:CD:A5
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/U2EmPKjYSf-kIV0lUz-2yjNWzaU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.136.0/24
45.92.218.0/24
45.134.36.0/24
45.137.202.0/24
45.141.116.0/22
45.142.105.0/24
45.151.56.0/24
Signature Algorithm: sha256WithRSAEncryption
51:f9:f8:92:b6:73:70:83:69:8f:e7:94:dd:cd:14:ef:8b:84:
73:7f:6f:29:20:22:18:2a:15:9f:d9:64:32:7a:d6:be:43:cb:
7a:20:b6:29:b6:ed:94:2c:bf:9e:d9:a6:77:4a:c9:1a:d3:ea:
4f:f6:97:7a:f4:1b:ee:a0:32:71:fc:17:a3:67:3d:09:22:d9:
20:67:27:85:09:6a:25:40:81:43:3c:a0:94:45:4f:80:05:3c:
54:73:42:75:8c:0a:0c:7f:4b:7f:57:b0:f0:29:fd:90:15:da:
d9:4c:88:f9:8d:18:64:2a:51:f6:48:5a:0f:94:3b:4f:85:d4:
fc:fb:8d:a9:2b:10:87:b9:09:7a:0a:fd:22:da:46:1e:00:7b:
47:99:9c:36:72:77:81:7d:9b:89:97:8d:91:28:b9:2e:00:59:
d3:0e:d9:44:18:b3:8a:ce:0a:63:23:1e:28:af:07:ad:8a:0b:
b8:b7:02:61:fb:c4:3a:9e:41:ee:83:4c:4b:5c:f1:d7:a6:d3:
6c:93:bf:1a:43:fd:2a:63:56:74:01:40:9c:c1:9b:2d:c1:8f:
c5:b3:79:0d:98:5b:e7:be:00:00:de:8c:55:c4:30:71:5f:36:
de:e4:40:e9:fb:38:64:41:67:1a:17:49:49:b7:92:57:eb:13:
23:97:65:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 14:01:46 2025 by rpki-client