Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/zFxs4h0V_Rl4A1-jLdzyjSfOQaE.roa
File: zFxs4h0V_Rl4A1-jLdzyjSfOQaE.roa (raw, json)
Hash identifier: v2Zftl7daGnd+rcmRQ7CoeYYAaY7hbHYMG3pUDiLtQM=
Subject key identifier: CC:5C:6C:E2:1D:15:FD:19:78:03:5F:A3:2D:DC:F2:8D:27:CE:41:A1
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 0199DC6A004A31364CBEE395A60CDEA43FCF
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/zFxs4h0V_Rl4A1-jLdzyjSfOQaE.roa
Signing time: Mon 13 Oct 2025 07:12:38 +0000
ROA not before: Mon 13 Oct 2025 07:12:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 133219
IP address blocks: 45.135.149.0/24 maxlen: 24
45.147.6.0/24 maxlen: 24
194.15.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft
rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Oct 2025 09:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:dc:6a:00:4a:31:36:4c:be:e3:95:a6:0c:de:a4:3f:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Oct 13 07:12:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cc5c6ce21d15fd1978035fa32ddcf28d27ce41a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:70:ba:a7:e4:ec:cc:95:0f:74:fa:f6:88:06:
a7:3b:8e:b9:7a:fb:25:d8:3c:7b:b5:23:20:2a:f4:
fd:32:ad:e7:b0:ae:9b:f2:3d:7c:2a:d4:7c:b5:92:
7f:bc:96:8a:2f:c4:a7:d7:a9:17:f1:58:c3:92:fb:
05:4a:40:12:40:c9:94:9e:66:2c:51:fa:d7:98:b5:
ea:c1:ba:45:f2:a5:bb:c3:42:eb:fa:21:d0:64:ab:
b6:6f:ba:39:c5:82:d6:f3:21:7a:99:79:45:a4:2f:
af:8a:78:6a:f8:3a:74:63:16:f5:05:84:c8:7b:e2:
95:62:d9:92:44:15:14:0e:47:6c:64:87:e6:8e:70:
14:d6:c0:2a:91:dd:9f:e3:58:45:8a:55:e5:46:ca:
24:50:40:b8:2d:71:f5:8c:fd:bd:b7:78:05:f2:d6:
92:98:b0:37:56:03:ed:77:85:02:70:ac:67:23:95:
ec:98:d0:d1:df:c2:7c:7a:d0:c4:7b:64:39:e9:ac:
a4:69:b3:b6:6a:a8:e4:2b:85:2a:40:93:0e:41:47:
dc:0b:8b:02:01:4c:4a:11:3e:2f:23:df:4b:18:6f:
c1:21:ce:1e:7d:97:8c:3d:f6:8c:b7:18:43:d9:a4:
b2:05:35:a3:6b:40:94:bb:98:64:62:f1:8c:8a:74:
bc:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:5C:6C:E2:1D:15:FD:19:78:03:5F:A3:2D:DC:F2:8D:27:CE:41:A1
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/zFxs4h0V_Rl4A1-jLdzyjSfOQaE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.149.0/24
45.147.6.0/24
194.15.39.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:1c:59:04:d5:92:91:7f:be:8c:69:7a:0f:9d:a1:d9:8e:89:
bc:63:e8:e0:bf:75:93:7d:01:e2:88:53:a4:97:a5:93:c8:e2:
78:5d:18:a6:71:a9:b3:0b:18:64:35:da:b6:8c:f0:82:72:07:
8a:c4:04:b5:18:4c:54:3a:5d:fd:1f:5d:11:e4:e1:cd:48:ab:
b6:12:d9:37:3a:20:92:18:78:cd:4e:dc:c8:2c:a5:9b:b9:7e:
db:41:32:b0:b3:f5:8d:01:8f:f1:cd:23:66:45:fe:0c:be:60:
af:35:21:93:32:14:66:42:1d:a0:db:a4:0b:cc:5f:71:67:67:
e2:bc:27:d9:46:62:fc:5b:ea:da:1f:40:0b:c0:0f:ea:10:b7:
13:3a:b2:73:74:7a:28:8e:e7:fb:37:f6:80:b2:c7:32:b0:1c:
0f:62:ad:f6:95:95:b3:bb:f1:dd:16:c9:fb:2d:a5:62:76:ca:
2e:b7:7d:b2:b9:03:80:f7:ef:33:37:af:06:7d:32:d4:c9:87:
44:44:70:b1:8d:22:60:f1:38:2a:c7:c8:a3:7a:d3:f2:7b:8f:
27:24:82:0d:38:f9:ae:15:a8:06:19:6e:81:9b:c6:95:d1:a6:
7a:13:8e:41:3c:aa:e0:19:ac:15:b6:6d:62:e3:2d:78:3f:8f:
22:0e:8c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 18 18:37:31 2025 by rpki-client