Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/m_n_guLqq0tYW5rCZkO296a5snc.roa
File: m_n_guLqq0tYW5rCZkO296a5snc.roa (raw, json)
Hash identifier: bWXjQ23WKPX4qSBJXJ5pklNRH7pCS+2Y4V8yyzzjUAU=
Subject key identifier: 9B:F9:FF:82:E2:EA:AB:4B:58:5B:9A:C2:66:43:B6:F7:A6:B9:B2:77
Certificate issuer: /CN=2e1164a9b5013d62f051344f6df91f13bc7ecb0f
Certificate serial: 01995D9B2AE472CB0BDF8DAB5A657AF64B1F
Authority key identifier: 2E:11:64:A9:B5:01:3D:62:F0:51:34:4F:6D:F9:1F:13:BC:7E:CB:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/m_n_guLqq0tYW5rCZkO296a5snc.roa
Signing time: Thu 18 Sep 2025 16:14:34 +0000
ROA not before: Thu 18 Sep 2025 16:14:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61317
IP address blocks: 5.181.14.0/24 maxlen: 24
5.181.15.0/24 maxlen: 24
45.150.48.0/24 maxlen: 24
45.150.49.0/24 maxlen: 24
45.150.50.0/24 maxlen: 24
45.150.51.0/24 maxlen: 24
45.159.180.0/24 maxlen: 24
45.159.182.0/24 maxlen: 24
45.159.183.0/24 maxlen: 24
94.199.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 18:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:5d:9b:2a:e4:72:cb:0b:df:8d:ab:5a:65:7a:f6:4b:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e1164a9b5013d62f051344f6df91f13bc7ecb0f
Validity
Not Before: Sep 18 16:14:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9bf9ff82e2eaab4b585b9ac26643b6f7a6b9b277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f1:80:00:cb:f9:47:7c:09:40:1e:57:8c:07:
43:a8:e7:c9:11:23:21:9d:f5:60:57:1a:e8:41:6f:
c6:3a:33:f8:f2:a2:6d:b2:ad:ad:ab:9c:58:de:ad:
1e:48:2b:3d:7a:fe:e0:3a:90:0e:40:70:1c:66:99:
7c:2a:7a:6d:8b:76:ae:82:98:f1:77:ff:54:fc:cf:
93:3e:dd:71:ba:db:6e:b8:ee:54:1c:c6:e9:42:0e:
11:25:be:5c:80:a0:3d:cf:82:0a:63:b8:9f:d1:45:
5d:e7:e5:57:70:b6:54:bd:e0:3a:34:cd:79:1b:13:
e5:2b:5c:05:3c:9c:5a:49:a8:99:b7:03:a8:07:70:
4e:ef:46:3b:d2:34:e8:d3:ad:ef:50:9a:aa:b7:43:
55:ef:da:6d:7d:47:36:ed:99:21:ef:b1:84:55:18:
6e:38:13:3c:bf:a2:99:f8:c4:ce:a5:c4:b2:b4:71:
d1:11:5f:88:71:5e:c9:a9:2f:b3:a8:72:8a:48:94:
26:10:77:87:6f:c6:72:8f:b9:49:81:e6:cd:dc:14:
46:c4:0e:7e:c7:20:26:ad:1e:4c:3a:55:7d:7b:4b:
01:a9:56:b9:3b:0d:6c:37:7b:bc:92:b9:95:9c:8a:
9e:5a:d9:96:15:41:df:5f:97:0d:e9:0f:3e:a1:6d:
96:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:F9:FF:82:E2:EA:AB:4B:58:5B:9A:C2:66:43:B6:F7:A6:B9:B2:77
X509v3 Authority Key Identifier:
keyid:2E:11:64:A9:B5:01:3D:62:F0:51:34:4F:6D:F9:1F:13:BC:7E:CB:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/m_n_guLqq0tYW5rCZkO296a5snc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.14.0/23
45.150.48.0/22
45.159.180.0/24
45.159.182.0/23
94.199.7.0/24
Signature Algorithm: sha256WithRSAEncryption
92:8d:1a:32:52:33:1a:9d:cd:31:b3:23:59:43:de:e7:ad:40:
9e:44:e0:92:6c:91:10:bf:2b:75:50:62:29:e5:c2:a4:a9:86:
68:45:c3:cc:b6:4b:06:a3:ab:cd:97:32:fd:c0:22:1b:e0:60:
85:2e:36:e3:09:0f:41:c4:0f:4b:0a:6f:34:19:5b:68:9e:d5:
6b:40:c9:57:92:7a:ed:d3:2e:6b:99:d6:05:69:88:d5:34:8e:
e6:a6:bc:87:cb:99:db:12:d9:5b:00:b6:e2:15:0a:e2:cc:f0:
41:d5:c8:73:3d:a8:0c:f9:7c:d0:79:66:11:8d:86:b7:0d:32:
38:89:a7:a0:2a:47:36:49:96:c0:99:d0:14:36:03:dd:6a:52:
1f:de:ad:88:78:13:51:bd:91:65:0b:86:fc:1d:97:7d:6b:95:
42:43:c0:66:e7:21:44:3d:45:e8:83:23:d1:b1:e8:ae:64:7d:
1a:22:7f:b3:31:4f:74:28:64:c9:83:da:c3:91:47:ae:b7:d4:
11:c1:08:d2:6b:e6:f3:4b:06:ad:82:21:fb:f8:c7:5b:cb:b3:
51:07:7b:c5:d1:c5:e3:58:34:0b:cd:57:67:94:e7:4b:5c:d9:
5b:7b:35:ff:d7:63:a8:64:a7:3e:f8:db:73:73:01:11:96:cc:
be:65:a7:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 03:44:39 2025 by rpki-client