Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/kQg_8-Y9Yx7wfXvKbjCqZGdl7uU.roa
File: kQg_8-Y9Yx7wfXvKbjCqZGdl7uU.roa (raw, json)
Hash identifier: 2m7jP7JosC8+qjZjl0YAhRzJC7F2Mb/nawkcbU9MGBQ=
Subject key identifier: 91:08:3F:F3:E6:3D:63:1E:F0:7D:7B:CA:6E:30:AA:64:67:65:EE:E5
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 01989D584604D736F39894A177BC373D70C5
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/kQg_8-Y9Yx7wfXvKbjCqZGdl7uU.roa
Signing time: Tue 12 Aug 2025 08:14:24 +0000
ROA not before: Tue 12 Aug 2025 08:14:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2914
IP address blocks: 45.155.64.0/24 maxlen: 24
146.19.21.0/24 maxlen: 24
185.254.18.0/24 maxlen: 24
212.46.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 06:54:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9d:58:46:04:d7:36:f3:98:94:a1:77:bc:37:3d:70:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Aug 12 08:14:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=91083ff3e63d631ef07d7bca6e30aa646765eee5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ec:ec:52:d1:20:18:b6:ca:e8:74:1c:3c:8d:
a0:3d:75:e4:46:db:ed:65:b8:0c:b3:76:a8:28:87:
9c:c6:88:0a:de:62:17:56:7f:38:a7:91:c9:98:aa:
6e:6a:3f:51:a6:af:32:ec:9f:1f:29:75:5b:a3:a1:
ad:a8:0b:f6:70:fb:9d:70:87:92:04:25:e4:96:89:
c7:eb:c4:b8:6f:64:6c:13:7b:50:b3:2f:a2:e2:ed:
a2:58:80:49:46:cc:04:c2:d5:cc:8c:ba:a7:75:64:
e0:7b:96:90:83:6b:c0:89:b1:82:5a:e3:52:ed:c8:
8b:42:1d:2f:9a:55:f6:5d:57:4a:7f:ac:87:8e:db:
21:d2:46:2c:6f:4b:98:6a:66:aa:a2:cf:dd:d0:22:
8b:76:59:fd:db:21:8a:00:c8:dc:78:4a:9e:28:ce:
7b:71:8b:08:dc:29:f6:4a:28:ac:7c:20:2a:79:0f:
fa:0c:6a:e2:df:2f:f8:82:65:ea:0f:ab:d3:d5:fe:
d7:fd:18:6f:ca:a1:e8:f8:c1:ed:14:1e:48:41:3c:
e5:54:bc:d9:cb:c3:74:32:2c:54:b4:2f:05:eb:f1:
4e:b0:81:2b:7c:ad:5f:74:e2:a5:0d:26:61:08:ba:
8f:0f:f9:36:1c:1f:03:86:a9:50:4d:de:58:4b:d3:
74:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:08:3F:F3:E6:3D:63:1E:F0:7D:7B:CA:6E:30:AA:64:67:65:EE:E5
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/kQg_8-Y9Yx7wfXvKbjCqZGdl7uU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.64.0/24
146.19.21.0/24
185.254.18.0/24
212.46.37.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:5f:6e:4f:0f:30:f0:43:a9:4d:26:b5:86:56:49:94:56:7e:
d6:8c:c2:10:7a:ff:bc:ee:0c:0a:c0:86:7d:6f:0f:32:39:cf:
c0:ce:6d:62:71:62:95:58:44:2a:c7:82:9d:5d:2c:42:1b:af:
4d:87:8e:f8:9e:82:0f:34:d3:06:5c:ef:d0:9a:97:b4:a3:a9:
60:58:51:ae:87:1e:6d:72:40:00:5f:20:df:87:9a:a1:89:9c:
64:4e:29:75:7f:82:e8:03:4f:10:be:63:0f:a2:55:9c:6c:4a:
48:0f:b7:ab:f9:a6:40:eb:f9:0d:95:af:31:45:c0:b6:bb:24:
c6:db:ec:d3:dc:aa:ca:70:46:fd:56:f8:9b:23:74:2a:7f:0b:
1f:83:bc:79:29:2a:3a:ef:ba:b8:64:77:5a:f0:d0:47:9d:fd:
b6:db:20:08:ee:67:e6:5b:d2:4b:01:b0:4a:cc:7f:37:fb:1e:
d6:eb:29:ec:ca:3e:d4:da:13:6f:4c:3e:f0:d0:0a:21:7b:be:
cf:fe:24:11:c8:5e:3b:e1:11:ad:d9:f1:74:8a:80:e0:51:ac:
e9:9e:f4:c7:af:81:df:c1:65:ee:b1:b6:a5:a8:38:82:8d:3d:
f6:9f:15:91:9d:b4:4d:6f:84:5b:42:9c:a7:87:eb:c3:fe:35:
b4:fa:cc:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 10:48:42 2025 by rpki-client