Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/iUA_IwEqfJ8BhVVMkLta3FBDcJI.roa
File: iUA_IwEqfJ8BhVVMkLta3FBDcJI.roa (raw, json)
Hash identifier: g9DJpEgCtRPJxvNkDJtIioFWz51zGoXhXWCOUZKMHlI=
Subject key identifier: 89:40:3F:23:01:2A:7C:9F:01:85:55:4C:90:BB:5A:DC:50:43:70:92
Certificate issuer: /CN=e1ac0322b3eab6572ece2a0ac5abf164a5bbff20
Certificate serial: 0199096AC64E46CA74676AEA453CBCD70472
Authority key identifier: E1:AC:03:22:B3:EA:B6:57:2E:CE:2A:0A:C5:AB:F1:64:A5:BB:FF:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4awDIrPqtlcuzioKxavxZKW7_yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/iUA_IwEqfJ8BhVVMkLta3FBDcJI.roa
Signing time: Tue 02 Sep 2025 07:53:36 +0000
ROA not before: Tue 02 Sep 2025 07:53:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212707
IP address blocks: 46.31.180.0/28 maxlen: 28
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/4awDIrPqtlcuzioKxavxZKW7_yA.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/4awDIrPqtlcuzioKxavxZKW7_yA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4awDIrPqtlcuzioKxavxZKW7_yA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 08:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:09:6a:c6:4e:46:ca:74:67:6a:ea:45:3c:bc:d7:04:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1ac0322b3eab6572ece2a0ac5abf164a5bbff20
Validity
Not Before: Sep 2 07:53:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=89403f23012a7c9f0185554c90bb5adc50437092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:94:3b:70:c3:2d:e2:72:e7:58:2c:fb:15:24:
78:7e:30:02:84:3b:a6:7c:bb:7d:29:0b:b0:a4:b4:
c9:c3:1a:3d:84:96:73:f0:66:f5:66:58:30:27:3c:
c8:a5:b4:cc:d2:26:72:1b:e8:c2:f4:70:dc:85:1f:
f0:98:40:86:3f:cd:40:96:39:d7:d6:40:87:ab:aa:
0a:7b:7e:96:20:e4:44:ee:0d:2f:73:45:30:08:37:
e8:ef:24:8b:2f:32:1a:22:7e:45:8d:72:7d:b7:ef:
94:52:17:c2:d6:fc:da:b5:25:2c:88:14:5d:9f:0b:
90:b6:86:e3:b8:51:8f:c5:49:7b:b4:aa:2c:a3:26:
8d:cf:07:c3:b4:6f:67:65:25:1b:c0:69:88:7d:67:
09:67:52:14:07:0e:e0:7d:f3:e5:20:c1:39:c3:83:
08:af:42:b7:f3:57:97:cc:d7:1d:c0:49:18:7d:f8:
11:54:8d:ce:de:2d:61:c3:a6:fd:eb:c2:53:ba:94:
30:95:cf:e8:1b:3d:e4:4b:cc:f2:b7:f0:ae:fb:0f:
0b:54:3a:27:03:d7:9e:68:33:0a:1f:e0:0b:0a:45:
2a:f8:24:fc:78:fb:21:b7:6b:04:f4:e5:c8:b3:dc:
38:f4:e4:49:fa:7f:f2:93:90:7c:7d:ef:94:13:ae:
db:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:40:3F:23:01:2A:7C:9F:01:85:55:4C:90:BB:5A:DC:50:43:70:92
X509v3 Authority Key Identifier:
keyid:E1:AC:03:22:B3:EA:B6:57:2E:CE:2A:0A:C5:AB:F1:64:A5:BB:FF:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4awDIrPqtlcuzioKxavxZKW7_yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/iUA_IwEqfJ8BhVVMkLta3FBDcJI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/4awDIrPqtlcuzioKxavxZKW7_yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.31.180.0/28
Signature Algorithm: sha256WithRSAEncryption
73:3d:90:45:06:29:a1:1c:bc:d1:15:36:7c:4d:78:ba:3b:52:
66:a6:f7:2d:ac:2a:59:e2:bf:bf:3d:c8:06:b8:3e:53:42:20:
b8:22:10:b8:12:63:4f:32:51:60:62:96:7e:38:38:44:a1:bd:
80:72:14:85:e5:61:98:c8:98:b0:7a:b1:cc:a4:33:bd:73:30:
86:7f:09:6f:87:27:54:34:c6:ac:e8:fe:8d:35:8f:84:1c:0d:
3d:14:9e:08:57:d8:8b:02:63:e9:cc:f2:a0:9f:6c:dd:27:31:
47:66:b1:7d:c4:19:95:d3:1e:8f:03:bf:72:10:d2:e4:a8:6e:
72:61:ad:e2:b4:50:d0:54:ab:3e:1c:2b:d8:19:54:ef:4b:df:
13:84:75:92:79:75:ae:31:bc:b9:6e:ad:99:b2:73:65:b1:18:
df:c7:0f:78:86:ab:44:04:a5:5d:58:10:6b:2d:0c:3a:53:02:
a6:a6:65:06:bf:25:ea:c0:cb:ea:6f:a5:29:42:23:12:c6:6e:
27:34:6f:0c:7e:84:54:68:9c:64:98:f9:9e:7d:e9:2f:f0:4d:
1e:79:62:62:42:1e:28:6e:95:6b:23:f8:30:16:14:33:d7:56:
1a:90:25:25:71:4b:fd:0f:3b:77:89:3b:98:39:00:1d:c7:78:
76:d3:07:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 12:45:54 2025 by rpki-client