Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/dNAWbsFoIAa7vbufcHS0hoyCsWg.roa
File: dNAWbsFoIAa7vbufcHS0hoyCsWg.roa (raw, json)
Hash identifier: wscCbu3aT6nDlnhH6Y0eApXWMaH2Q/Fw0Qs8zp46iAc=
Subject key identifier: 74:D0:16:6E:C1:68:20:06:BB:BD:BB:9F:70:74:B4:86:8C:82:B1:68
Certificate issuer: /CN=cec5afe769b94346e1cd362eb85f875b23b17277
Certificate serial: 019987A94A00C4901CD27B1DDA67A9C3508D
Authority key identifier: CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/dNAWbsFoIAa7vbufcHS0hoyCsWg.roa
Signing time: Fri 26 Sep 2025 20:14:02 +0000
ROA not before: Fri 26 Sep 2025 20:14:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 45.145.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 01:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:87:a9:4a:00:c4:90:1c:d2:7b:1d:da:67:a9:c3:50:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec5afe769b94346e1cd362eb85f875b23b17277
Validity
Not Before: Sep 26 20:14:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=74d0166ec1682006bbbdbb9f7074b4868c82b168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:72:c6:e5:2c:1f:d2:03:3e:82:26:5a:b7:d8:
6a:00:10:e7:32:00:d8:32:4e:1c:b3:70:f1:1b:39:
0a:1e:94:da:0e:a8:66:e0:d0:f3:e6:66:6e:ce:e3:
9e:45:81:35:4e:1a:6c:81:aa:60:38:78:e1:d7:44:
f6:0f:0e:23:0c:3f:2c:0f:e1:b9:b2:fd:fd:6c:3c:
de:40:4a:54:b4:b1:68:31:c2:bb:52:05:13:0e:aa:
a0:ac:60:b3:e2:74:76:f5:28:6c:a4:10:c3:0a:44:
bf:33:45:17:97:54:77:10:82:46:90:92:44:3e:8f:
97:e0:61:4e:48:52:fa:c3:96:ac:f1:ff:c8:5e:86:
f7:00:ad:d7:01:fb:94:ff:67:b7:b8:1e:6e:cc:5a:
7d:48:1e:8d:d9:33:a9:6a:c5:c9:40:76:74:35:cd:
65:7b:c4:a6:60:e3:11:71:5f:5c:1e:7d:e3:92:60:
47:52:00:e6:64:23:50:f7:32:3c:ab:b4:97:54:08:
2d:eb:6a:38:6e:55:f7:22:0e:62:b1:80:32:85:8f:
d1:81:db:ef:1c:cf:e9:88:a9:62:c9:82:40:7c:0e:
a5:96:7d:a3:20:3d:f1:e9:07:e7:3a:65:8b:9d:39:
c4:04:f1:ca:46:2b:6e:f7:ec:be:63:f7:e9:10:52:
ca:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:D0:16:6E:C1:68:20:06:BB:BD:BB:9F:70:74:B4:86:8C:82:B1:68
X509v3 Authority Key Identifier:
keyid:CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/dNAWbsFoIAa7vbufcHS0hoyCsWg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.155.0/24
Signature Algorithm: sha256WithRSAEncryption
58:00:2f:14:e5:46:af:d1:00:1b:55:11:43:78:61:ff:1b:eb:
4d:03:3f:e4:74:36:35:e5:89:6d:6a:1d:13:60:11:44:a6:ef:
a1:d8:de:09:95:77:0d:75:be:ef:6b:f0:e1:68:87:75:cf:35:
8f:25:d3:b8:5f:8b:49:29:a6:75:49:b2:da:41:ef:e5:9e:7a:
9f:a3:ff:66:83:1f:80:f2:6f:c9:6e:f1:57:30:e7:a8:00:fe:
b1:68:e1:88:85:a1:89:a5:5d:e6:a3:2d:f5:12:12:55:b8:c7:
d7:e1:fa:73:1f:bd:9b:db:e6:54:fa:47:4b:0c:84:5d:77:a8:
c4:c9:20:96:b7:13:0c:f9:36:47:b1:45:e5:79:5a:bf:37:b7:
c2:cc:33:38:bc:ee:65:9f:03:f8:90:c5:ea:a5:ab:60:e9:f9:
0a:31:66:8a:22:cf:c4:4c:e3:25:d0:a9:c5:f2:9d:67:e1:d8:
aa:54:8c:d9:c9:b0:cc:25:5d:89:1a:4b:c0:72:23:6b:01:b9:
b6:58:fe:fd:fe:90:2e:47:92:8c:f5:1f:d2:2b:ef:47:2c:a8:
22:5b:27:53:dd:bb:83:d8:d9:b2:a5:0f:0d:e0:2d:b6:23:c5:
b7:1f:5e:d3:49:2b:a8:78:a9:2c:80:68:00:71:fe:13:9c:03:
d0:16:87:67
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZmHqUoAxJAc0nsd2mepw1CNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlYzVhZmU3NjliOTQzNDZlMWNkMzYyZWI4NWY4NzViMjNi
MTcyNzcwHhcNMjUwOTI2MjAxNDAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NGQwMTY2ZWMxNjgyMDA2YmJiZGJiOWY3MDc0YjQ4NjhjODJiMTY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2HLG5Swf0gM+giZat9hqABDnMgDY
Mk4cs3DxGzkKHpTaDqhm4NDz5mZuzuOeRYE1ThpsgapgOHjh10T2Dw4jDD8sD+G5
sv39bDzeQEpUtLFoMcK7UgUTDqqgrGCz4nR29ShspBDDCkS/M0UXl1R3EIJGkJJE
Po+X4GFOSFL6w5as8f/IXob3AK3XAfuU/2e3uB5uzFp9SB6N2TOpasXJQHZ0Nc1l
e8SmYOMRcV9cHn3jkmBHUgDmZCNQ9zI8q7SXVAgt62o4blX3Ig5isYAyhY/Rgdvv
HM/piKliyYJAfA6lln2jID3x6QfnOmWLnTnEBPHKRitu9+y+Y/fpEFLKwwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHTQFm7BaCAGu727n3B0tIaMgrFoMB8GA1UdIwQY
MBaAFM7Fr+dpuUNG4c02Lrhfh1sjsXJ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenNXdjUybTVRMGJoelRZdXVGLUhXeU94Y25jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi8zZDU2OWMtMTkwNy00ZDJjLWFjZWQt
MzMyNDdjOGUxYzFmLzEvZE5BV2JzRm9JQWE3dmJ1ZmNIUzBob3lDc1dnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi8zZDU2OWMtMTkwNy00ZDJjLWFjZWQtMzMyNDdjOGUxYzFm
LzEvenNXdjUybTVRMGJoelRZdXVGLUhXeU94Y25jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZGbMA0G
CSqGSIb3DQEBCwUAA4IBAQBYAC8U5Uav0QAbVRFDeGH/G+tNAz/kdDY15Yltah0T
YBFEpu+h2N4JlXcNdb7va/DhaId1zzWPJdO4X4tJKaZ1SbLaQe/lnnqfo/9mgx+A
8m/JbvFXMOeoAP6xaOGIhaGJpV3moy31EhJVuMfX4fpzH72b2+ZU+kdLDIRdd6jE
ySCWtxMM+TZHsUXleVq/N7fCzDM4vO5lnwP4kMXqpatg6fkKMWaKIs/ETOMl0KnF
8p1n4diqVIzZybDMJV2JGkvAciNrAbm2WP79/pAuR5KM9R/SK+9HLKgiWydT3buD
2NmypQ8N4C22I8W3H17TSSuoeKksgGgAcf4TnAPQFodn
-----END CERTIFICATE-----
Generated at Sun Oct 19 08:19:50 2025 by rpki-client