Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/45tL-NSBHodaksRDpK2BnTL6Pg0.roa
File: 45tL-NSBHodaksRDpK2BnTL6Pg0.roa (raw, json)
Hash identifier: 9aD/cGsEDm3tuWSuuFsHXgYn2a7J4uwCri2o7lDx6TU=
Subject key identifier: E3:9B:4B:F8:D4:81:1E:87:5A:92:C4:43:A4:AD:81:9D:32:FA:3E:0D
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 0198E6B084977982E228FA246D0394E35584
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/45tL-NSBHodaksRDpK2BnTL6Pg0.roa
Signing time: Tue 26 Aug 2025 14:03:04 +0000
ROA not before: Tue 26 Aug 2025 14:03:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213908
IP address blocks: 194.62.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 04:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e6:b0:84:97:79:82:e2:28:fa:24:6d:03:94:e3:55:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Aug 26 14:03:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e39b4bf8d4811e875a92c443a4ad819d32fa3e0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4a:db:83:67:6c:78:6b:b7:d8:88:47:59:ed:
eb:24:ed:2c:61:f1:0d:c5:ba:c4:92:19:fb:6a:18:
1e:08:22:74:c6:4f:aa:aa:5b:99:ff:04:f5:7a:32:
32:c9:b4:e5:a8:d3:be:84:48:ba:94:9e:07:2b:44:
e5:20:7c:d8:e4:37:f6:df:e1:e6:c9:35:6c:03:3b:
19:06:11:b4:06:6d:1f:38:0b:4c:0d:68:ee:e6:a8:
b9:cd:fb:20:d0:90:0c:9c:85:bd:99:d5:44:7c:84:
04:ea:99:53:07:6e:eb:1e:b0:db:97:1f:cc:a9:44:
f0:2e:39:71:bb:fa:d2:be:b3:e8:07:b3:8f:1c:41:
60:14:01:27:3d:05:40:f5:e1:2b:1d:2b:ef:d7:eb:
94:39:e8:87:51:9b:c4:02:08:76:ea:e4:5d:75:7e:
35:09:7c:a9:44:b3:48:a7:d0:c7:3b:3b:b9:3a:1d:
c7:e0:c9:29:ec:0c:35:b6:60:1d:f0:1a:e8:bf:2e:
34:ca:54:e6:cf:f2:87:2b:dc:46:4c:cd:a1:83:fd:
07:a3:98:c9:74:02:e1:43:f9:ff:f4:0b:dc:45:27:
af:d5:02:09:b2:71:7b:98:13:32:23:31:8e:b3:db:
54:03:36:ce:ea:b5:d5:4d:b3:be:fb:33:fe:41:a9:
46:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:9B:4B:F8:D4:81:1E:87:5A:92:C4:43:A4:AD:81:9D:32:FA:3E:0D
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/45tL-NSBHodaksRDpK2BnTL6Pg0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.62.53.0/24
Signature Algorithm: sha256WithRSAEncryption
51:7b:a1:ba:0b:4e:ed:81:5d:7f:10:ad:14:95:88:33:b6:b1:
5f:0b:cb:a8:8f:20:a2:a2:9b:4f:af:47:06:45:9e:2a:ef:d5:
7b:7e:5e:1b:54:d8:35:20:11:d4:82:43:18:b0:fc:6a:19:74:
c2:25:8a:4c:10:f7:8a:11:4f:e4:ae:bf:93:11:39:34:ff:36:
f5:27:df:26:75:39:c2:9d:33:23:43:ad:c2:09:1d:46:d4:50:
3a:65:21:44:db:16:cf:ce:7d:b1:06:17:8f:71:91:72:9a:ca:
bb:2f:b9:27:9d:05:66:0a:e4:20:32:4d:f5:a5:4a:1c:95:7e:
63:e6:ed:0b:e7:27:a8:f6:77:8a:90:73:0c:51:48:7a:50:ea:
19:bb:a6:28:6d:3c:6d:0e:b2:d9:4a:d8:b0:b6:c7:f2:31:bd:
33:0c:c1:05:8c:cc:3d:83:7e:91:3e:f4:73:0b:72:a0:89:39:
3a:25:e3:68:fe:06:89:42:b1:81:75:76:fa:82:e6:d8:70:97:
22:71:11:75:2f:0a:7d:97:92:65:d3:3e:18:18:ca:35:2d:2f:
35:ce:84:29:6b:39:26:35:fe:f8:f7:9c:6a:1b:b6:7f:72:e1:
18:f4:98:cf:6a:cb:c7:54:1a:c9:c2:01:6c:a8:1b:69:9b:4b:
59:f5:aa:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 14:22:25 2025 by rpki-client