Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/92P5-kaBViEnxpiZuidmZUt_42s.roa
File: 92P5-kaBViEnxpiZuidmZUt_42s.roa (raw, json)
Hash identifier: B5+3lTH2mr6ImGDyWW54ahK6vocvjZf4UhC+uYPF1EM=
Subject key identifier: F7:63:F9:FA:46:81:56:21:27:C6:98:99:BA:27:66:65:4B:7F:E3:6B
Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial: 0199094C8FC8260500BF84612E1AECD4CB64
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/92P5-kaBViEnxpiZuidmZUt_42s.roa
Signing time: Tue 02 Sep 2025 07:20:36 +0000
ROA not before: Tue 02 Sep 2025 07:20:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 45.151.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 10:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:09:4c:8f:c8:26:05:00:bf:84:61:2e:1a:ec:d4:cb:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
Validity
Not Before: Sep 2 07:20:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f763f9fa4681562127c69899ba2766654b7fe36b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:04:36:0d:bf:60:ea:77:95:76:70:2b:57:3d:
5a:3b:6b:fa:d9:b9:0b:26:03:6c:1b:8e:1c:24:26:
7b:f0:4b:6f:5f:73:04:dc:d5:09:07:36:c8:f7:94:
4b:46:aa:33:c3:84:60:e0:05:65:9b:8d:08:e2:19:
0b:90:00:83:2a:bb:87:54:5e:36:de:db:33:b5:82:
61:20:e2:d6:3a:2a:6f:5a:a4:9f:26:42:7f:04:a5:
e6:35:51:76:bf:af:d4:90:a3:91:96:89:5c:68:fe:
04:7a:90:6f:40:0c:d5:a3:6e:54:57:71:43:a4:b5:
9b:8e:39:db:03:ba:bc:c7:93:23:b3:4a:53:d5:8a:
58:24:e7:e5:cb:34:04:29:7e:3c:32:0e:65:a6:d7:
20:5c:a9:6b:49:19:1c:37:41:bb:03:4f:2b:9d:0c:
c7:09:9d:46:9f:3f:2b:14:b4:ef:8a:01:c5:bf:00:
e1:5f:89:74:98:3c:f6:f1:4b:e0:cd:a4:50:41:7a:
05:5b:27:08:d0:a0:cf:d9:69:4c:ad:34:e5:c0:c3:
df:2c:ae:ef:9c:30:ba:31:87:55:60:4b:3d:f3:95:
bf:76:44:df:9e:6c:75:44:b5:96:fd:7b:7e:1c:50:
b6:8c:18:23:86:2d:38:1d:1c:d1:75:36:2c:cd:b0:
f8:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:63:F9:FA:46:81:56:21:27:C6:98:99:BA:27:66:65:4B:7F:E3:6B
X509v3 Authority Key Identifier:
keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/92P5-kaBViEnxpiZuidmZUt_42s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.233.0/24
Signature Algorithm: sha256WithRSAEncryption
28:59:9a:dd:db:39:76:2e:b6:e6:60:45:1b:53:e4:0e:1e:87:
b1:3f:dc:56:d0:f5:f5:7d:d0:e3:d0:70:48:f0:f2:42:cd:8c:
e8:ea:9d:3e:01:f2:9c:f0:b8:3f:79:2a:77:55:71:ed:e6:cb:
da:f5:72:b8:44:31:1a:7b:06:33:a3:30:48:42:c9:0e:b9:d3:
69:e3:1d:fb:5b:cb:75:0d:53:20:4b:ca:5e:d8:2b:9d:e7:ed:
a1:3c:9a:03:8a:c2:67:50:3e:e9:34:0c:a3:3c:f7:4c:b7:0c:
d9:e1:e8:a9:61:a1:35:15:d4:0c:96:bb:70:54:b5:05:2f:b0:
c4:b2:fa:dd:ec:7b:94:f6:da:9e:ae:d5:eb:0e:50:ad:dd:8f:
cf:a7:af:0f:22:a2:50:13:e4:e0:d0:ab:54:70:6d:d0:88:fa:
b7:ec:74:0a:6d:8d:e5:0c:61:c9:70:2c:ea:6f:6c:10:d1:ba:
65:ab:24:7a:2e:c8:d7:55:4a:12:1b:96:f3:8a:48:66:5f:26:
aa:0c:29:85:85:56:74:eb:4c:53:27:75:dd:13:d9:7a:ce:22:
ef:be:c0:bc:e6:dd:41:f7:bb:22:44:4e:d9:c4:47:df:e7:b9:
d1:93:f7:87:5a:6f:54:80:8a:cf:fb:2f:f5:11:ba:d2:c0:98:
1e:0b:3c:f8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZkJTI/IJgUAv4RhLhrs1MtkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhZWUxNWMzM2RlMzU4OTM4ZDY5MDBhMWIzYzE0NDgwYTM4
OWU4NWIwHhcNMjUwOTAyMDcyMDM2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNzYzZjlmYTQ2ODE1NjIxMjdjNjk4OTliYTI3NjY2NTRiN2ZlMzZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgQ2Db9g6neVdnArVz1aO2v62bkL
JgNsG44cJCZ78EtvX3ME3NUJBzbI95RLRqozw4Rg4AVlm40I4hkLkACDKruHVF42
3tsztYJhIOLWOipvWqSfJkJ/BKXmNVF2v6/UkKORlolcaP4EepBvQAzVo25UV3FD
pLWbjjnbA7q8x5Mjs0pT1YpYJOflyzQEKX48Mg5lptcgXKlrSRkcN0G7A08rnQzH
CZ1Gnz8rFLTvigHFvwDhX4l0mDz28UvgzaRQQXoFWycI0KDP2WlMrTTlwMPfLK7v
nDC6MYdVYEs985W/dkTfnmx1RLWW/Xt+HFC2jBgjhi04HRzRdTYszbD4tQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPdj+fpGgVYhJ8aYmbonZmVLf+NrMB8GA1UdIwQY
MBaAFJruFcM941iTjWkAobPBRICjiehbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXU0Vnd6M2pXSk9OYVFDaHM4RkVnS09KNkZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS83MmY3N2YtNzZhYi00ZTc5LWEwNjIt
NmVlNTM0ZDkyZTUyLzEvOTJQNS1rYUJWaUVueHBpWnVpZG1aVXRfNDJzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS83MmY3N2YtNzZhYi00ZTc5LWEwNjItNmVlNTM0ZDkyZTUy
LzEvbXU0Vnd6M2pXSk9OYVFDaHM4RkVnS09KNkZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZfpMA0G
CSqGSIb3DQEBCwUAA4IBAQAoWZrd2zl2LrbmYEUbU+QOHoexP9xW0PX1fdDj0HBI
8PJCzYzo6p0+AfKc8Lg/eSp3VXHt5sva9XK4RDEaewYzozBIQskOudNp4x37W8t1
DVMgS8pe2Cud5+2hPJoDisJnUD7pNAyjPPdMtwzZ4eipYaE1FdQMlrtwVLUFL7DE
svrd7HuU9tqertXrDlCt3Y/Pp68PIqJQE+Tg0KtUcG3QiPq37HQKbY3lDGHJcCzq
b2wQ0bplqyR6LsjXVUoSG5bzikhmXyaqDCmFhVZ060xTJ3XdE9l6ziLvvsC85t1B
97siRE7ZxEff57nRk/eHWm9UgIrP+y/1EbrSwJgeCzz4
-----END CERTIFICATE-----
Generated at Sat Sep 6 16:40:05 2025 by rpki-client