Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/xCUsg-otD6jAA0bUb5iOvXv16dA.roa
File: xCUsg-otD6jAA0bUb5iOvXv16dA.roa (raw, json)
Hash identifier: 6IGz0tjpksr1Ron9oNFmR65l6d0k0BhOPhn61utxemw=
Subject key identifier: C4:25:2C:83:EA:2D:0F:A8:C0:03:46:D4:6F:98:8E:BD:7B:F5:E9:D0
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 0199144AB7FAF497E7B3F39CBAA82DD6F472
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/xCUsg-otD6jAA0bUb5iOvXv16dA.roa
Signing time: Thu 04 Sep 2025 10:34:24 +0000
ROA not before: Thu 04 Sep 2025 10:34:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206150
IP address blocks: 45.130.140.0/24 maxlen: 24
2a0f:f40::/32 maxlen: 48
2a0f:f41::/32 maxlen: 48
2a0f:f43::/32 maxlen: 48
2a0f:e386::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 13:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:14:4a:b7:fa:f4:97:e7:b3:f3:9c:ba:a8:2d:d6:f4:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Sep 4 10:34:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c4252c83ea2d0fa8c00346d46f988ebd7bf5e9d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:86:43:bc:d5:31:42:58:46:58:2e:fc:8b:44:
36:01:11:a9:e7:85:bf:ae:64:88:6c:4e:d4:7b:6d:
b0:99:d6:37:58:49:ac:08:94:00:cc:e3:da:06:8a:
bd:e0:bc:1d:e4:fc:40:f9:d2:05:ec:7d:80:b7:d3:
29:3b:82:24:bf:a0:51:58:a3:d7:29:2a:20:e0:7a:
d0:be:24:18:ae:cb:5e:42:8a:37:7f:c2:62:24:c5:
cc:92:d0:5a:22:85:5e:f6:dc:a7:29:9f:39:58:2e:
cb:b9:bf:82:e6:0e:56:16:45:0a:db:13:86:13:f6:
36:d4:05:9c:84:15:54:d6:53:27:31:ac:b4:c9:3c:
fb:6f:fb:e3:f8:98:2b:ae:b5:14:76:8d:7f:5f:62:
08:d1:7a:69:57:62:30:33:c4:09:1e:b6:79:da:3a:
78:34:8f:dd:ed:a1:a1:20:42:79:ea:8e:4c:c4:1e:
9b:d9:9b:c6:49:da:c7:cb:7b:0c:cd:a7:83:86:b0:
81:23:d0:ac:f6:be:39:c7:9c:62:69:e5:dc:70:e1:
55:0e:1a:c1:70:af:96:35:eb:8a:d4:f1:6c:3d:f4:
5e:95:a6:a1:a8:6d:be:36:cf:40:8a:ce:f7:8c:56:
bc:0c:07:9e:f4:a5:5f:75:cd:22:63:c7:42:49:f6:
b4:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:25:2C:83:EA:2D:0F:A8:C0:03:46:D4:6F:98:8E:BD:7B:F5:E9:D0
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/xCUsg-otD6jAA0bUb5iOvXv16dA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.140.0/24
IPv6:
2a0f:f40::/31
2a0f:f43::/32
2a0f:e386::/32
Signature Algorithm: sha256WithRSAEncryption
b6:18:c0:ba:a0:b0:5d:50:16:3e:93:4f:9f:d7:77:f4:0e:7c:
f6:f1:20:fb:89:da:f9:a7:39:4d:07:21:0e:19:9a:e7:23:ae:
33:dd:bd:ae:39:89:3e:ca:d1:3b:9a:5e:c0:69:dc:46:6a:e6:
8f:cb:3e:7f:96:bb:83:db:0b:14:b7:83:53:5d:2c:ce:99:ef:
16:41:fb:05:ba:c4:68:d8:7c:46:39:13:94:f7:dd:02:0d:3a:
c1:af:b2:4e:d8:a3:e8:5b:24:85:1a:39:d3:da:66:b1:80:70:
6f:4c:44:cd:2e:3f:d8:de:53:df:b3:5e:3c:04:c0:75:79:bf:
ce:ee:b5:a6:81:08:b8:7a:3c:34:9a:3b:64:c8:37:ab:53:2c:
09:31:17:da:d9:4d:24:87:61:a9:6d:12:cf:13:ca:26:6b:f7:
6d:7a:d0:8e:28:57:24:ee:8d:11:bd:9d:6f:9c:41:30:c2:e5:
11:c3:af:9a:8e:16:85:a3:41:a4:8f:48:3e:bf:aa:d6:c1:6e:
9d:e1:03:71:00:9a:5b:86:9b:47:94:d2:e1:a8:e0:b1:88:3d:
66:f0:b2:7d:79:c8:07:47:8a:75:72:bb:4f:c6:e8:cb:12:f7:
43:9c:1a:bb:96:52:93:d2:32:45:e9:6b:b7:4b:3a:55:6a:4e:
6d:46:96:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 22:13:04 2025 by rpki-client