Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/7f7d8f-0dc8-45a2-bc16-80add9ea3e5c/1/9GR2dHkwSLVkeTC97SQWtO-Ou6s.roa
File: 9GR2dHkwSLVkeTC97SQWtO-Ou6s.roa (raw, json)
Hash identifier: 8dva46ddaCVAVhuRS29XVF0xv3mbOQXR/o6u4dePeK4=
Subject key identifier: F4:64:76:74:79:30:48:B5:64:79:30:BD:ED:24:16:B4:EF:8E:BB:AB
Certificate issuer: /CN=e0c5bb3da53435bf41e17f7dec47d4484e7f3129
Certificate serial: 0198AE3B18D83C25B2FD8EF5FF45078ED040
Authority key identifier: E0:C5:BB:3D:A5:34:35:BF:41:E1:7F:7D:EC:47:D4:48:4E:7F:31:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4MW7PaU0Nb9B4X997EfUSE5_MSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/7f7d8f-0dc8-45a2-bc16-80add9ea3e5c/1/9GR2dHkwSLVkeTC97SQWtO-Ou6s.roa
Signing time: Fri 15 Aug 2025 14:56:05 +0000
ROA not before: Fri 15 Aug 2025 14:56:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209242
IP address blocks: 45.159.216.0/22 maxlen: 22
195.13.44.0/23 maxlen: 23
195.13.54.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/7f7d8f-0dc8-45a2-bc16-80add9ea3e5c/1/4MW7PaU0Nb9B4X997EfUSE5_MSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/7f7d8f-0dc8-45a2-bc16-80add9ea3e5c/1/4MW7PaU0Nb9B4X997EfUSE5_MSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4MW7PaU0Nb9B4X997EfUSE5_MSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 19:03:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:ae:3b:18:d8:3c:25:b2:fd:8e:f5:ff:45:07:8e:d0:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0c5bb3da53435bf41e17f7dec47d4484e7f3129
Validity
Not Before: Aug 15 14:56:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f4647674793048b5647930bded2416b4ef8ebbab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:7c:59:ea:89:2b:61:a4:fa:69:5f:51:6a:e1:
80:f7:3a:24:f9:f1:4d:1c:b6:13:dd:45:d6:ac:13:
ed:ff:df:0f:38:7f:39:83:50:48:d4:c7:be:95:6f:
b5:1d:9a:75:b1:db:e1:58:74:01:b2:58:ec:98:8f:
34:57:87:64:5f:f2:9b:53:5b:b6:06:5c:a0:7e:85:
aa:cc:32:4f:14:6e:89:e3:d9:78:62:d9:f5:e2:e6:
9f:16:b4:4a:b4:64:be:90:e6:b1:ec:eb:09:23:5d:
c9:1e:9e:bf:97:79:39:14:78:97:27:3a:ee:84:2f:
cc:c5:00:b0:e4:75:8d:0d:95:ec:92:6c:9b:5f:86:
43:84:98:3b:37:f8:79:6c:56:22:f5:dc:d2:56:55:
ca:7d:ef:b4:11:57:aa:5d:e1:8b:aa:08:74:e7:4b:
a5:89:cb:bb:bb:be:8d:3c:01:5b:8c:bb:6d:1e:95:
d4:eb:b2:4d:b2:da:c8:27:7f:87:a6:b0:26:fe:28:
5d:f3:13:4b:3e:eb:fc:5d:3e:4b:a5:c4:9b:05:89:
a4:5d:47:94:50:70:7d:d9:5e:5c:fa:5a:3e:86:56:
13:be:31:d9:97:6b:7c:5b:c9:28:a4:b0:ec:1d:ed:
ec:fe:b0:33:30:a6:c0:7c:54:8e:8a:0d:9d:8d:8a:
30:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:64:76:74:79:30:48:B5:64:79:30:BD:ED:24:16:B4:EF:8E:BB:AB
X509v3 Authority Key Identifier:
keyid:E0:C5:BB:3D:A5:34:35:BF:41:E1:7F:7D:EC:47:D4:48:4E:7F:31:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4MW7PaU0Nb9B4X997EfUSE5_MSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7f7d8f-0dc8-45a2-bc16-80add9ea3e5c/1/9GR2dHkwSLVkeTC97SQWtO-Ou6s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7f7d8f-0dc8-45a2-bc16-80add9ea3e5c/1/4MW7PaU0Nb9B4X997EfUSE5_MSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.216.0/22
195.13.44.0/23
195.13.54.0/23
Signature Algorithm: sha256WithRSAEncryption
06:8e:77:77:e0:25:c1:1d:e2:be:1b:a9:8c:2c:5d:48:be:00:
74:73:f1:83:3c:82:6b:c4:a6:e9:8d:c5:41:76:12:9c:df:06:
e3:c5:18:a2:66:78:67:a6:3f:02:86:ba:02:fc:3c:a8:11:ce:
35:ab:3a:f8:0d:6e:bd:cf:f0:06:4c:36:72:7c:ee:ef:2a:1f:
72:fb:ba:de:3c:a0:ca:bf:ca:45:5d:85:db:25:65:49:f1:6f:
7b:b1:ab:eb:14:f9:50:7f:ce:0e:e7:42:62:ad:1b:d5:87:de:
d5:c8:d6:17:27:33:3b:ef:ed:cc:58:98:15:fd:7d:a4:9f:8d:
65:76:36:51:31:1b:57:ff:78:2a:99:0e:1c:ab:ea:e6:9b:06:
b7:ce:e9:96:45:fb:19:d1:bb:c1:27:ac:aa:6f:e7:c1:bf:41:
d6:9b:6c:83:87:21:80:94:89:ac:d9:fb:b9:87:74:12:29:22:
d3:45:f8:07:72:c3:1e:21:61:e3:4e:6b:34:b3:7d:84:33:7a:
c6:b9:bd:ed:41:6c:a6:75:6d:84:24:b9:ad:f4:19:6f:e8:79:
80:74:a3:b2:ca:8b:49:66:2c:21:42:c3:65:99:7a:d2:38:71:
0d:9d:10:25:3f:22:f6:75:ff:cd:c6:60:7e:e5:03:68:80:8a:
12:c5:0f:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 01:35:19 2025 by rpki-client