Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sE6crRfFBIaDECDjUhVMqMaT1ac.roa
File: sE6crRfFBIaDECDjUhVMqMaT1ac.roa (raw, json)
Hash identifier: bEqChfIlQMbTEAXrHWSpZxa7uBLqR2Sei5yfAzGvkec=
Subject key identifier: B0:4E:9C:AD:17:C5:04:86:83:10:20:E3:52:15:4C:A8:C6:93:D5:A7
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 0199144AB723C9930C0608111C4A74F23AFC
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sE6crRfFBIaDECDjUhVMqMaT1ac.roa
Signing time: Thu 04 Sep 2025 10:34:24 +0000
ROA not before: Thu 04 Sep 2025 10:34:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137409
IP address blocks: 45.91.22.0/24 maxlen: 24
45.128.198.0/24 maxlen: 24
45.130.141.0/24 maxlen: 24
2a07:e342::/32 maxlen: 48
2a0f:f47::/32 maxlen: 48
2a0f:2740::/29 maxlen: 48
2a0f:e383::/32 maxlen: 48
2a0f:e384::/32 maxlen: 48
2a0f:e385::/32 maxlen: 48
2a0f:e387::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 13:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:14:4a:b7:23:c9:93:0c:06:08:11:1c:4a:74:f2:3a:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Sep 4 10:34:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b04e9cad17c50486831020e352154ca8c693d5a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:91:90:23:5b:87:f2:b4:eb:00:ae:30:02:cd:
d9:0e:2c:1d:e1:10:8b:30:89:6a:a4:f2:21:4a:ac:
81:95:2e:77:65:e8:d3:0b:93:45:e8:c1:10:7f:dc:
82:83:f4:0d:49:63:5f:93:9a:40:a6:fd:aa:09:3a:
5e:f5:96:2a:11:a6:fa:24:a5:a3:5c:ce:96:cb:39:
9a:56:76:f9:ff:80:1a:dc:bb:78:ef:14:88:97:45:
0b:e3:ee:ad:5e:0d:62:aa:ce:bc:52:4d:3c:0f:fa:
35:0c:c9:6b:71:44:ef:3f:35:57:05:d2:76:ba:f2:
b8:54:65:83:58:b6:51:14:cc:16:2c:1e:4d:a1:7f:
30:9f:33:b6:6d:5d:b0:63:a1:b0:7b:93:ee:03:7b:
d8:52:79:22:f7:34:75:1a:f9:af:32:e1:99:4d:2f:
fb:c2:ce:6c:ad:45:36:25:f2:7f:08:3a:15:39:25:
c9:c1:bf:46:05:90:07:ef:f7:e9:97:df:cb:7e:07:
3c:27:0a:82:0a:e7:5e:12:e6:41:8d:5b:a8:fa:4c:
16:d7:ff:68:27:d4:90:33:61:45:d7:ae:24:d7:83:
72:eb:83:df:6a:47:08:f9:08:1d:22:07:73:e3:5d:
f3:a6:9a:50:f8:1a:6d:f7:64:a9:6d:33:2b:2e:84:
bb:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:4E:9C:AD:17:C5:04:86:83:10:20:E3:52:15:4C:A8:C6:93:D5:A7
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sE6crRfFBIaDECDjUhVMqMaT1ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.22.0/24
45.128.198.0/24
45.130.141.0/24
IPv6:
2a07:e342::/32
2a0f:f47::/32
2a0f:2740::/29
2a0f:e383::-2a0f:e385:ffff:ffff:ffff:ffff:ffff:ffff
2a0f:e387::/32
Signature Algorithm: sha256WithRSAEncryption
4b:c6:00:eb:ba:76:fb:15:d9:dc:78:09:09:e4:ca:3d:51:8f:
eb:58:e8:9b:d0:c8:c3:ea:5a:e9:d5:e9:c8:fb:6b:8a:b6:fa:
a9:5c:30:8a:41:11:f9:b8:d0:71:c8:78:71:40:12:4e:54:07:
3b:71:c4:ad:53:dd:7b:7c:ce:23:cd:c5:d6:19:ed:3c:cb:81:
cf:86:af:65:88:39:6a:02:50:50:a6:2e:6d:8e:c0:ea:0a:cb:
a8:a5:ab:3c:fe:e7:00:f7:8b:c9:fb:cc:bc:0d:44:b2:3c:28:
23:d2:b1:a8:f4:31:0e:a5:7b:38:c0:be:08:3e:4d:f7:ff:87:
82:80:d3:1e:88:31:11:ab:a7:c4:76:c3:5b:f1:f8:f7:b1:94:
4e:f1:09:bb:5c:53:c7:6f:ab:57:36:b2:93:2f:4d:6c:f8:06:
05:0d:ac:b8:84:5f:91:0b:dc:60:d2:82:34:ca:fe:f5:b6:95:
f1:71:de:dd:2c:05:7e:63:20:9a:55:8c:03:32:e6:51:b6:65:
e9:37:da:f3:3c:46:13:8e:f3:a4:ae:e5:7b:94:e4:5c:6a:3c:
c0:55:9c:57:0f:75:49:58:c1:38:7c:04:36:fa:75:30:51:ff:
a0:0d:7a:0d:d4:26:34:6b:fb:64:b8:87:cb:93:9b:67:fd:ba:
ae:e8:b3:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 22:12:08 2025 by rpki-client