Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/cCfaLzRMHlU0R-0fDzYcsiLXNDs.roa
File: cCfaLzRMHlU0R-0fDzYcsiLXNDs.roa (raw, json)
Hash identifier: algSutAD2+Qqydqr9NIMxqgFJyx7cGjxYNbn3pouYJk=
Subject key identifier: 70:27:DA:2F:34:4C:1E:55:34:47:ED:1F:0F:36:1C:B2:22:D7:34:3B
Certificate issuer: /CN=55fad96dd05af8c2d26192c841131f2f97459fed
Certificate serial: 0199048654049495FA7D198AE278682CC12F
Authority key identifier: 55:FA:D9:6D:D0:5A:F8:C2:D2:61:92:C8:41:13:1F:2F:97:45:9F:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/cCfaLzRMHlU0R-0fDzYcsiLXNDs.roa
Signing time: Mon 01 Sep 2025 09:05:36 +0000
ROA not before: Mon 01 Sep 2025 09:05:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44996
IP address blocks: 45.10.90.0/24 maxlen: 24
185.175.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:04:86:54:04:94:95:fa:7d:19:8a:e2:78:68:2c:c1:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55fad96dd05af8c2d26192c841131f2f97459fed
Validity
Not Before: Sep 1 09:05:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7027da2f344c1e553447ed1f0f361cb222d7343b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a7:1d:7c:9f:a7:95:09:61:91:8f:93:dc:6e:
11:78:6b:01:4b:80:47:aa:7b:29:92:97:b2:89:e9:
10:27:74:d5:f6:b5:02:08:d2:11:83:18:3b:29:d4:
a2:8f:0d:ed:58:3f:9d:e4:7a:7d:14:77:59:c1:40:
40:0f:d2:19:4a:d2:70:2d:3d:0f:9f:fb:7f:9b:8e:
42:fb:7b:72:de:9a:c7:ee:18:77:0e:73:ed:03:45:
48:33:f8:8c:f3:0f:74:3e:e1:1a:38:de:59:48:f5:
14:bd:9b:b0:48:23:ec:1a:51:93:f1:8e:b3:28:64:
7b:0f:b9:8a:31:7d:4c:04:74:90:ca:a9:11:e2:e2:
45:af:d0:c4:3c:b5:d8:cb:b6:ec:a0:79:07:08:30:
13:ce:95:68:82:62:e4:06:c8:9e:e6:6f:b5:c0:6e:
62:f7:6c:6b:34:66:33:a8:7a:1c:75:ae:79:ea:57:
c5:5f:45:11:e1:3e:8d:04:04:b5:56:fd:fd:11:96:
02:3c:95:f6:f8:9b:10:b9:46:2c:ee:18:73:6d:2d:
3a:bc:4c:13:21:20:1f:10:83:57:4d:43:40:49:7a:
79:1b:a2:42:9f:7e:0f:9c:a4:18:02:c3:81:49:73:
32:55:04:15:0b:e9:3f:90:64:d5:58:48:77:b6:53:
f6:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:27:DA:2F:34:4C:1E:55:34:47:ED:1F:0F:36:1C:B2:22:D7:34:3B
X509v3 Authority Key Identifier:
keyid:55:FA:D9:6D:D0:5A:F8:C2:D2:61:92:C8:41:13:1F:2F:97:45:9F:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/cCfaLzRMHlU0R-0fDzYcsiLXNDs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.90.0/24
185.175.94.0/24
Signature Algorithm: sha256WithRSAEncryption
13:a8:9d:99:db:cb:d2:9f:d7:8e:52:5e:6e:a6:38:fc:c2:d0:
d1:74:4a:73:fd:12:f1:3b:e0:ea:91:ca:0d:e9:04:8b:7c:3d:
2b:b3:8d:46:37:3c:94:8f:7e:60:2b:b9:88:ab:92:e7:09:68:
8d:bc:dd:14:c8:c2:11:8b:45:ee:38:9a:34:c2:9a:7f:4b:88:
2d:93:44:97:c6:97:0d:53:f4:2e:89:6f:2d:60:1d:70:37:8d:
7b:f4:11:73:50:eb:d5:e7:0e:63:91:38:81:47:ca:22:ba:ca:
bc:f7:4e:5e:a7:25:be:c1:3b:2b:07:6b:d4:45:66:80:6a:bc:
8b:6d:33:f5:5b:1e:d7:d0:4c:dd:06:af:8a:8d:1d:a1:bb:f9:
47:94:9b:38:09:e5:30:47:fd:01:f7:d2:a5:f2:d8:10:b2:d7:
54:f9:3c:15:e0:d0:fd:92:96:5f:f0:a2:35:f8:90:dc:c9:9b:
4b:95:f9:c1:a9:e3:d5:35:d5:d0:e8:63:2f:55:42:3a:b3:7e:
1e:cf:22:77:a4:6d:0f:67:ef:11:6e:1a:9f:a1:e5:52:1f:c4:
2a:48:a7:29:fc:39:06:8d:b9:04:12:cf:5d:8c:9f:b3:73:c0:
61:74:2c:2f:53:be:d9:a0:ad:20:7f:7d:37:89:25:8c:1f:0a:
61:72:3f:f4
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZkEhlQElJX6fRmK4nhoLMEvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1ZmFkOTZkZDA1YWY4YzJkMjYxOTJjODQxMTMxZjJmOTc0
NTlmZWQwHhcNMjUwOTAxMDkwNTM2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MDI3ZGEyZjM0NGMxZTU1MzQ0N2VkMWYwZjM2MWNiMjIyZDczNDNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKcdfJ+nlQlhkY+T3G4ReGsBS4BH
qnspkpeyiekQJ3TV9rUCCNIRgxg7KdSijw3tWD+d5Hp9FHdZwUBAD9IZStJwLT0P
n/t/m45C+3ty3prH7hh3DnPtA0VIM/iM8w90PuEaON5ZSPUUvZuwSCPsGlGT8Y6z
KGR7D7mKMX1MBHSQyqkR4uJFr9DEPLXYy7bsoHkHCDATzpVogmLkBsie5m+1wG5i
92xrNGYzqHocda556lfFX0UR4T6NBAS1Vv39EZYCPJX2+JsQuUYs7hhzbS06vEwT
ISAfEINXTUNASXp5G6JCn34PnKQYAsOBSXMyVQQVC+k/kGTVWEh3tlP2vwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHAn2i80TB5VNEftHw82HLIi1zQ7MB8GA1UdIwQY
MBaAFFX62W3QWvjC0mGSyEETHy+XRZ/tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmZyWmJkQmEtTUxTWVpMSVFSTWZMNWRGbi0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8zMGU1ODItNDQ0OC00OTUyLTk0YTAt
MzBmZjJjODNmMDAxLzEvY0NmYUx6Uk1IbFUwUi0wZkR6WWNzaUxYTkRzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi8zMGU1ODItNDQ0OC00OTUyLTk0YTAtMzBmZjJjODNmMDAx
LzEvVmZyWmJkQmEtTUxTWVpMSVFSTWZMNWRGbi0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALQpaAwQA
ua9eMA0GCSqGSIb3DQEBCwUAA4IBAQATqJ2Z28vSn9eOUl5upjj8wtDRdEpz/RLx
O+DqkcoN6QSLfD0rs41GNzyUj35gK7mIq5LnCWiNvN0UyMIRi0XuOJo0wpp/S4gt
k0SXxpcNU/QuiW8tYB1wN4179BFzUOvV5w5jkTiBR8oiusq8905epyW+wTsrB2vU
RWaAaryLbTP1Wx7X0EzdBq+KjR2hu/lHlJs4CeUwR/0B99Kl8tgQstdU+TwV4ND9
kpZf8KI1+JDcyZtLlfnBqePVNdXQ6GMvVUI6s34ezyJ3pG0PZ+8RbhqfoeVSH8Qq
SKcp/DkGjbkEEs9djJ+zc8BhdCwvU77ZoK0gf303iSWMHwphcj/0
-----END CERTIFICATE-----
Generated at Thu Sep 11 01:09:05 2025 by rpki-client