Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/M-ojeGybXwIQoh1p9O97lh6oY18.roa
File: M-ojeGybXwIQoh1p9O97lh6oY18.roa (raw, json)
Hash identifier: JWFJYSOW0tho3d67l6qdIRATMTEnu0UKJHzSDeSSyBE=
Subject key identifier: 33:EA:23:78:6C:9B:5F:02:10:A2:1D:69:F4:EF:7B:96:1E:A8:63:5F
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 019A7FB6CCC5C78283E8129F58653E640099
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/M-ojeGybXwIQoh1p9O97lh6oY18.roa
Signing time: Fri 14 Nov 2025 00:14:37 +0000
ROA not before: Fri 14 Nov 2025 00:14:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205886
IP address blocks: 45.155.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Nov 2025 23:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:7f:b6:cc:c5:c7:82:83:e8:12:9f:58:65:3e:64:00:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Nov 14 00:14:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=33ea23786c9b5f0210a21d69f4ef7b961ea8635f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:0d:a8:c1:d5:65:cf:e1:03:50:9b:d1:96:20:
a1:2a:b3:ea:29:f8:84:6a:8a:41:0c:04:86:2f:1b:
0f:92:40:67:a2:a7:00:6c:9e:78:82:44:39:49:63:
77:a5:29:46:2f:45:cc:45:8b:83:9b:7e:c3:9c:6d:
cc:8f:ba:03:2a:56:3d:45:7b:12:c1:5d:bf:26:b6:
61:2b:50:f4:7d:0c:0d:60:ab:aa:4b:d2:ef:7d:a8:
d9:d1:98:bd:fe:9d:7e:25:7c:ac:7f:68:a4:41:fc:
d4:a6:92:6f:cf:17:fc:71:8f:3c:35:42:10:84:03:
51:af:f9:0c:70:69:3e:6d:2f:53:55:2a:80:78:a1:
05:52:36:6c:b2:92:56:7f:44:a3:2a:ec:6f:47:4f:
e9:fb:1c:e5:30:b3:da:e3:ef:1c:c9:40:59:4e:65:
ce:51:17:ae:e5:f6:81:37:b4:3c:15:96:b5:f8:fe:
ed:f8:29:9a:bf:14:c6:20:eb:b2:96:8b:f9:fb:b3:
9f:0d:b7:f8:40:29:b2:ac:18:0d:46:03:cd:d6:73:
46:0a:cc:6e:3f:2c:15:7a:a2:23:31:cb:4a:57:38:
92:44:57:f3:ea:6a:7e:da:b3:74:e3:f2:45:f9:13:
c9:e0:15:93:04:32:f1:db:75:0f:39:5e:a4:cc:92:
2f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:EA:23:78:6C:9B:5F:02:10:A2:1D:69:F4:EF:7B:96:1E:A8:63:5F
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/M-ojeGybXwIQoh1p9O97lh6oY18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.254.0/24
Signature Algorithm: sha256WithRSAEncryption
41:f3:45:e4:97:9c:4c:91:a8:a7:e2:18:c6:87:98:27:df:6b:
b6:6e:f6:26:1e:e7:d6:2b:a2:36:e8:b8:d8:8d:6b:de:30:17:
ac:60:f8:02:2e:19:3d:35:ad:0e:e5:71:35:cf:0a:8f:78:78:
92:27:08:0a:c1:50:df:f1:bf:b4:3f:1a:5f:07:ad:17:ca:76:
0c:ed:30:64:22:51:e2:bd:c2:e8:49:0d:df:c9:10:4f:f2:8e:
36:2f:81:b5:1d:17:e7:44:39:f5:bd:2e:f9:15:2b:7a:f3:16:
65:cc:26:ed:cc:9d:9f:8d:91:05:51:af:bd:4e:31:51:d8:b1:
5a:f3:34:14:36:26:e4:37:6e:67:77:b7:f5:0e:77:12:c9:9a:
7c:cb:c2:5f:ca:35:d1:41:15:e1:d4:62:85:49:36:81:ef:5a:
ac:dd:d4:7f:e4:20:5b:17:fa:f2:c2:a2:a1:fb:04:a2:9d:1d:
1a:31:54:eb:a1:85:1a:98:73:6d:eb:27:54:db:af:a0:8c:2f:
78:b9:d8:19:d6:76:08:38:01:93:90:07:e3:bf:7e:96:22:69:
34:58:5c:a8:00:6b:68:a5:e8:04:f1:1c:0f:6f:ad:7f:be:3e:
f5:42:7f:89:60:eb:2a:47:ed:68:3d:14:36:8b:7e:5d:84:0e:
b4:be:9a:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 17 02:27:41 2025 by rpki-client