Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Q8Ow7_PmCj2tmchOm_V8mKfu_ww.roa
File: Q8Ow7_PmCj2tmchOm_V8mKfu_ww.roa (raw, json)
Hash identifier: /ZogQf3Rx/a4BSXge+8Pq3KaBl/4Am8NLvPRfgyN16Q=
Subject key identifier: 43:C3:B0:EF:F3:E6:0A:3D:AD:99:C8:4E:9B:F5:7C:98:A7:EE:FF:0C
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0196C994BE4BE1AB589617BA97BEA669EDCF
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Q8Ow7_PmCj2tmchOm_V8mKfu_ww.roa
Signing time: Tue 13 May 2025 12:18:10 +0000
ROA not before: Tue 13 May 2025 12:18:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43641
IP address blocks: 45.135.180.0/24 maxlen: 24
89.35.131.0/24 maxlen: 24
93.115.172.0/24 maxlen: 24
202.71.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 21:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:94:be:4b:e1:ab:58:96:17:ba:97:be:a6:69:ed:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: May 13 12:18:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=43c3b0eff3e60a3dad99c84e9bf57c98a7eeff0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:21:53:50:55:44:95:ca:9f:f9:af:68:5f:b2:
f6:f4:09:b5:a5:7a:dd:6a:db:3c:1b:31:68:d8:7c:
6e:d7:97:b2:66:ca:06:58:cf:13:54:b0:11:1e:4b:
3b:04:29:c1:a0:70:b9:ac:a9:a9:38:c8:9f:e5:e5:
38:af:73:e9:c1:0f:ff:a6:e3:34:b1:a3:6f:83:ec:
13:16:b3:03:ea:a8:47:1e:58:ba:cd:25:c0:9f:10:
0e:4f:41:09:6d:63:21:33:c1:16:c0:83:f6:35:5d:
ae:9e:30:17:98:ea:d3:09:18:25:67:03:67:ca:ea:
f2:ea:fd:87:2b:f2:ce:65:10:e7:98:81:36:f3:1c:
7c:9a:06:31:d6:41:1b:d3:a1:e6:fa:a5:b7:35:2c:
df:c5:f9:12:ca:a8:07:fb:a6:f0:3e:bb:15:e7:15:
11:f0:9c:71:67:8d:e9:32:19:9d:e6:98:a0:38:da:
db:51:98:24:e9:07:12:c5:5e:96:25:c0:a5:bd:ac:
83:4c:41:67:f4:16:4d:4e:90:e2:50:27:c7:eb:1e:
94:df:be:ef:4d:f6:1a:9b:ba:bb:1a:eb:27:37:cd:
8d:c5:97:25:00:1f:c7:94:dc:c1:be:f2:c9:03:40:
dc:99:28:b6:0a:1e:fd:e9:29:f3:96:c4:cf:aa:68:
02:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:C3:B0:EF:F3:E6:0A:3D:AD:99:C8:4E:9B:F5:7C:98:A7:EE:FF:0C
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Q8Ow7_PmCj2tmchOm_V8mKfu_ww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.180.0/24
89.35.131.0/24
93.115.172.0/24
202.71.14.0/24
Signature Algorithm: sha256WithRSAEncryption
51:5d:da:a9:fc:21:ff:5d:88:fc:01:57:00:55:74:93:3a:7d:
12:06:b1:ae:41:77:cd:19:bb:a2:0b:c6:66:c0:73:19:55:af:
62:80:07:5f:34:7e:21:e3:92:7e:18:dc:35:d9:82:28:5f:06:
61:67:b0:81:8b:3d:bf:18:ef:f9:a0:0e:ca:e9:d9:a3:af:01:
c1:c6:f0:a1:99:34:d7:d5:34:c6:4f:4f:c2:12:02:77:3e:ce:
94:7c:a1:5e:35:4a:b7:8c:99:5f:2b:c8:78:a3:13:a5:01:74:
45:c5:25:7b:ca:ea:02:82:a1:d3:c5:9d:58:6d:68:31:25:a6:
ee:f0:1a:6a:bb:47:dd:cc:1b:b6:e8:ed:97:34:b6:73:4c:f9:
d9:22:b0:57:97:56:d3:10:18:1d:0d:be:25:e4:a3:df:e7:48:
43:10:69:6e:49:16:ac:87:a2:58:7f:8f:db:64:ab:93:96:80:
e3:69:71:24:9e:7c:66:61:4d:26:07:09:48:a7:53:83:40:97:
a5:c2:a7:a6:9f:dd:c1:47:2c:76:07:4e:bd:7a:07:fa:e8:6d:
35:50:e0:9a:80:d9:00:eb:48:a5:c2:9c:55:11:26:1c:7d:bf:
ae:f4:90:e4:fd:17:97:1f:39:1b:a4:39:9c:66:68:3b:db:66:
74:2c:f6:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:00:11 2025 by rpki-client