Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/fLde9ARS8o6m8NrcEVjMqIsK6BQ.roa
File: fLde9ARS8o6m8NrcEVjMqIsK6BQ.roa (raw, json)
Hash identifier: 4bBuAEX3JD+PcKBz0gREdyNpo/iSozcE6xvWaWi6DYU=
Subject key identifier: 7C:B7:5E:F4:04:52:F2:8E:A6:F0:DA:DC:11:58:CC:A8:8B:0A:E8:14
Certificate issuer: /CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Certificate serial: 0197CFA53E580009CEB677274F51E25930C8
Authority key identifier: 5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/fLde9ARS8o6m8NrcEVjMqIsK6BQ.roa
Signing time: Thu 03 Jul 2025 09:36:42 +0000
ROA not before: Thu 03 Jul 2025 09:36:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 45.151.69.0/24 maxlen: 24
45.151.70.0/24 maxlen: 24
88.218.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cf:a5:3e:58:00:09:ce:b6:77:27:4f:51:e2:59:30:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Validity
Not Before: Jul 3 09:36:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7cb75ef40452f28ea6f0dadc1158cca88b0ae814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:06:36:0e:1e:ef:c3:68:b7:eb:9f:4f:b8:9a:
05:cc:54:c5:37:51:70:72:25:d8:29:8a:e5:ce:25:
3c:20:a0:6f:ea:6c:9f:6a:b7:93:b5:05:58:3e:e8:
a9:6e:72:dd:21:a6:1d:f3:64:3d:4b:75:4d:1b:86:
1a:de:d9:77:ec:79:ac:9f:46:18:a3:62:0b:11:b5:
9b:3c:47:3b:5f:d9:01:01:9f:01:07:f9:6a:dd:86:
d1:d8:28:ef:eb:12:ce:a1:c9:9d:95:c4:ea:5e:22:
b7:21:f9:79:af:ab:17:4f:34:f0:f6:06:c2:6c:0f:
06:c1:72:01:dc:c2:f9:37:fc:51:0c:09:f1:6e:13:
e3:1f:7b:83:53:24:fa:04:47:b7:87:d6:f1:9f:93:
ff:bf:8f:12:9f:bc:4a:17:92:3d:42:4f:4e:d9:56:
00:fb:92:53:90:da:48:59:fb:0c:43:6f:63:08:23:
9c:1b:96:e3:47:b5:1b:f3:cc:66:9f:2a:9d:5d:93:
bc:cc:65:0c:48:b5:74:6b:e3:c9:9b:50:29:34:2f:
11:cb:c5:76:95:e3:bf:25:43:36:ff:e0:bb:99:26:
22:62:56:87:3c:d1:7c:2f:4c:cd:3c:73:29:ed:35:
e3:6b:bc:b8:f8:a2:9c:22:2b:52:ce:f6:8e:07:d7:
2d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:B7:5E:F4:04:52:F2:8E:A6:F0:DA:DC:11:58:CC:A8:8B:0A:E8:14
X509v3 Authority Key Identifier:
keyid:5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/fLde9ARS8o6m8NrcEVjMqIsK6BQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.69.0-45.151.70.255
88.218.42.0/24
Signature Algorithm: sha256WithRSAEncryption
95:aa:a6:c9:09:19:73:ad:e7:11:7e:68:a6:83:8a:73:ed:98:
1c:88:d1:3a:ef:dd:49:0b:f0:40:1a:80:f3:4f:47:8d:26:ca:
7e:58:bc:df:c6:93:4f:8f:5d:8f:36:04:05:13:60:72:75:a0:
ec:72:6b:1c:75:e7:01:9b:47:4c:9f:01:71:da:e0:f9:40:bd:
c0:a0:1e:ce:1f:e5:df:e3:53:3c:44:d1:b2:7a:28:22:8e:cd:
f2:25:37:43:b4:ad:79:7f:a3:e4:1d:f3:1c:b9:88:cc:0a:9b:
f3:31:e7:03:48:5c:2d:e6:99:59:92:f0:d0:72:31:a0:e0:e0:
c5:69:20:bc:b6:d3:b2:6a:05:fe:7d:df:20:79:3d:c3:8b:fc:
c8:85:92:42:e0:f5:42:8e:f7:6e:9e:6d:84:b7:45:32:df:5d:
06:a3:c4:26:40:6d:ab:f7:28:93:ca:c3:69:4e:35:27:53:eb:
24:d7:1c:a0:06:cc:8e:77:ba:fb:3c:a2:be:4b:0d:79:ce:ed:
d1:0f:41:3a:54:96:1e:21:22:92:59:49:4b:78:4d:fe:9c:01:
f0:0c:d6:e9:6e:52:5b:2a:3b:d9:1d:e5:aa:77:12:48:91:d6:
45:8d:4e:71:30:fd:7d:fa:85:2b:e8:3e:0f:90:5d:32:ed:df:
ae:0b:3e:b2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jul 5 21:04:43 2025 by rpki-client