Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/CAPtrPNnBdBiOUsFIZ1KMxmmZso.roa
File: CAPtrPNnBdBiOUsFIZ1KMxmmZso.roa (raw, json)
Hash identifier: 9jgYa3vRUAb8QbrmXxskhHH0R6D/iCZRnkTtWpWyrOU=
Subject key identifier: 08:03:ED:AC:F3:67:05:D0:62:39:4B:05:21:9D:4A:33:19:A6:66:CA
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 019932DD348D9D230BA806D064D247B105C7
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/CAPtrPNnBdBiOUsFIZ1KMxmmZso.roa
Signing time: Wed 10 Sep 2025 09:03:01 +0000
ROA not before: Wed 10 Sep 2025 09:03:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 52000
IP address blocks: 45.150.65.0/24 maxlen: 24
138.124.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Sep 2025 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:32:dd:34:8d:9d:23:0b:a8:06:d0:64:d2:47:b1:05:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Sep 10 09:03:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0803edacf36705d062394b05219d4a3319a666ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d2:40:e8:cd:36:14:8f:99:87:10:48:99:d2:
ab:83:9e:06:a3:7a:c9:0c:17:5f:81:15:c5:d6:92:
20:b8:94:a0:18:85:54:4a:26:90:4e:a2:8b:96:09:
58:08:c0:59:1c:1c:bc:ae:b9:67:7c:c3:85:76:ee:
0f:99:f3:32:7f:85:78:24:55:d3:70:a8:75:04:a2:
48:9d:d4:88:ed:e1:68:60:f6:a0:db:7c:27:cf:16:
57:41:7d:05:05:33:df:0a:8c:21:01:41:03:cc:62:
d0:48:6b:31:00:71:09:94:38:ca:cf:b6:25:84:61:
7d:14:22:6c:a1:69:13:c7:a3:85:33:b6:85:34:74:
b0:28:ce:b2:72:bd:e8:c4:50:fc:71:4a:a1:ff:e7:
0e:5c:3d:f5:a1:91:f7:18:80:48:21:60:48:5c:2a:
3d:bc:aa:0f:34:68:a7:00:5d:32:3b:74:61:ff:4f:
b3:3a:03:c1:15:04:59:ba:d0:39:85:c7:13:89:4f:
e8:8d:42:f7:19:2e:38:1c:76:3f:ef:02:d2:78:ee:
27:17:23:8c:f6:70:ba:bc:37:0d:4c:7a:bf:72:59:
b8:10:73:e6:e4:e5:9c:dd:b6:d6:de:57:7a:08:e6:
f6:65:70:d1:3e:2b:cf:34:38:03:e7:6e:d9:34:5a:
8e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:03:ED:AC:F3:67:05:D0:62:39:4B:05:21:9D:4A:33:19:A6:66:CA
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/CAPtrPNnBdBiOUsFIZ1KMxmmZso.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.65.0/24
138.124.187.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:ac:3b:89:95:b3:30:37:07:cb:ed:9f:99:1e:29:72:b0:54:
ef:03:09:35:1b:01:7a:a7:24:63:0e:d3:c0:16:55:15:2e:e6:
4e:70:8c:6c:d2:93:6b:2a:ea:a4:4a:f1:a9:7c:69:8b:92:4a:
29:89:b5:11:88:a6:a6:f8:25:01:06:76:86:51:63:6f:a7:0e:
01:74:bd:75:7a:f8:21:48:9c:1b:1d:70:2e:f7:06:1d:e6:44:
09:c0:69:16:23:d4:8d:53:87:42:6e:22:ec:f6:d4:97:50:6a:
4f:19:7f:1c:f3:4e:a1:cb:af:23:d7:9d:72:36:fe:48:3f:4b:
26:06:c8:be:94:d8:e9:79:af:67:25:24:81:4e:53:19:a7:e9:
c8:d4:14:be:4e:50:10:04:67:6c:d8:7e:35:64:0b:f6:b7:37:
8b:1a:59:b2:1c:2d:b9:a8:2e:d9:e8:8c:0a:34:3d:02:c5:dc:
bf:6c:26:14:73:57:44:e7:32:9f:c6:3f:ea:c7:9f:43:26:f8:
3f:4b:c7:6e:a5:44:e3:b6:f8:ff:d7:fd:b3:39:bc:d6:99:35:
b1:e8:9c:e2:3a:71:aa:7d:2c:f8:e4:9e:52:75:3a:df:43:70:
6e:77:5f:9d:bf:f1:52:fd:1b:7b:b3:33:a5:c6:63:41:0b:b3:
55:15:6d:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 09:21:21 2025 by rpki-client