Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/s6pQCimJUotoF0CleIbiG4PQ4Ok.roa
File: s6pQCimJUotoF0CleIbiG4PQ4Ok.roa (raw, json)
Hash identifier: tyX1CNipJbAsoQFfCfnxw5O1QOVON13Yi7BruydaHIg=
Subject key identifier: B3:AA:50:0A:29:89:52:8B:68:17:40:A5:78:86:E2:1B:83:D0:E0:E9
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 0199380FB482A9103EFCFDB92AB2465AC9DA
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/s6pQCimJUotoF0CleIbiG4PQ4Ok.roa
Signing time: Thu 11 Sep 2025 09:16:17 +0000
ROA not before: Thu 11 Sep 2025 09:16:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 401951
IP address blocks: 45.13.236.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft
rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Sep 2025 22:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:38:0f:b4:82:a9:10:3e:fc:fd:b9:2a:b2:46:5a:c9:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Sep 11 09:16:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b3aa500a2989528b681740a57886e21b83d0e0e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:cf:eb:33:72:ce:89:c9:b9:23:e7:7b:8e:e3:
f5:ce:42:72:5a:f1:0f:87:aa:eb:b6:9b:32:ce:9e:
61:fe:ec:18:f4:6e:06:57:70:74:ef:ed:69:7b:07:
d7:0f:80:c2:3f:c0:c4:05:27:2c:ba:c9:a0:50:d7:
3c:b2:55:d1:c7:04:4c:93:88:bc:43:82:2e:c8:b3:
a3:44:6a:56:bc:e9:e6:7d:51:3c:05:7e:83:1b:39:
07:97:bf:d1:4a:e2:0a:09:47:a3:58:6b:cd:c2:cb:
30:89:ed:03:44:e8:28:c6:a9:10:0e:4c:a0:b8:7d:
02:7e:89:36:12:e9:d2:5b:a5:89:e3:a5:0a:17:95:
f9:56:2f:50:03:74:58:68:c3:d9:5b:3f:27:58:89:
10:1b:12:85:5f:dc:8d:d2:ab:0c:67:0c:1c:5d:ed:
bd:f3:0e:3b:12:1d:1f:61:ad:8c:9f:52:01:80:38:
7c:b7:e4:3c:aa:67:b9:85:2b:17:05:ac:93:91:da:
05:a3:10:f2:fb:6d:eb:dd:30:d3:27:59:30:0b:fd:
96:0d:c0:6e:23:eb:95:11:37:f0:c6:62:36:6d:90:
00:62:5c:20:f4:19:4b:ec:8c:ed:9a:0f:a7:cc:1b:
ea:18:d7:af:f8:5c:de:a1:2b:aa:9a:ef:f0:a4:eb:
d0:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:AA:50:0A:29:89:52:8B:68:17:40:A5:78:86:E2:1B:83:D0:E0:E9
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/s6pQCimJUotoF0CleIbiG4PQ4Ok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.236.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:4e:93:ba:2a:32:50:cc:5b:2c:64:4d:10:e3:e4:3b:40:d1:
13:dd:4a:3b:eb:a7:25:68:69:3a:d1:cc:9e:51:1b:9d:cc:8b:
8d:90:43:da:c3:13:bf:5b:66:0e:90:8c:5b:b2:e4:18:dd:46:
fe:de:e2:f7:5e:89:06:c6:e1:7f:07:d2:47:74:ad:2b:d7:04:
ed:e0:7b:43:3c:f6:9f:2f:2b:50:76:ec:20:f8:e5:89:b5:dc:
11:d2:1d:c5:71:af:1c:9c:d3:43:54:d0:67:d6:3f:2a:cc:f7:
14:e7:c1:3b:7e:50:ba:7b:9f:01:cc:db:e9:ea:66:eb:52:0f:
71:f3:15:2f:d5:4a:ff:3f:aa:43:60:2f:78:91:8b:36:83:35:
b1:e5:ce:6c:fc:80:2c:32:6c:ca:86:10:d5:bf:d6:48:db:0a:
66:11:9d:7a:ce:3c:e9:87:cf:0e:61:e3:63:52:4a:fd:de:70:
71:a9:47:2a:ca:3f:80:62:45:42:80:78:85:34:5b:df:12:49:
bd:60:af:d4:b8:b4:0b:9b:a4:ca:fe:95:13:cd:88:68:0a:a9:
4c:19:81:d9:df:9f:f7:eb:f7:f4:30:f6:fa:a9:14:1a:c2:70:
10:51:bb:6f:08:93:c8:4f:95:ec:bf:7c:f2:49:8b:da:be:52:
4e:fd:72:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 06:02:12 2025 by rpki-client