Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/18c6ba-7b71-4466-bb33-005877da8026/1/XEzXLFWCK81H0mYYJL-WVNmtqGo.roa
File: XEzXLFWCK81H0mYYJL-WVNmtqGo.roa (raw, json)
Hash identifier: qICBsdU+J42/dQHA/dNncrV4zPltBFGJMDpu4ZuboZc=
Subject key identifier: 5C:4C:D7:2C:55:82:2B:CD:47:D2:66:18:24:BF:96:54:D9:AD:A8:6A
Certificate issuer: /CN=72bd83f5275bd09e8d33b429881eb2f96b6d9de1
Certificate serial: 019A0595038001B41839A7767B0BBE07F8B4
Authority key identifier: 72:BD:83:F5:27:5B:D0:9E:8D:33:B4:29:88:1E:B2:F9:6B:6D:9D:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cr2D9Sdb0J6NM7QpiB6y-WttneE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/18c6ba-7b71-4466-bb33-005877da8026/1/XEzXLFWCK81H0mYYJL-WVNmtqGo.roa
Signing time: Tue 21 Oct 2025 07:04:03 +0000
ROA not before: Tue 21 Oct 2025 07:04:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8075
IP address blocks: 185.45.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/18c6ba-7b71-4466-bb33-005877da8026/1/cr2D9Sdb0J6NM7QpiB6y-WttneE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/18c6ba-7b71-4466-bb33-005877da8026/1/cr2D9Sdb0J6NM7QpiB6y-WttneE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cr2D9Sdb0J6NM7QpiB6y-WttneE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 14:12:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:05:95:03:80:01:b4:18:39:a7:76:7b:0b:be:07:f8:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72bd83f5275bd09e8d33b429881eb2f96b6d9de1
Validity
Not Before: Oct 21 07:04:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5c4cd72c55822bcd47d2661824bf9654d9ada86a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b9:4f:0e:f2:2c:46:5b:00:6b:99:90:dc:e7:
10:f7:7d:d1:f2:53:22:59:23:85:ff:88:43:6f:da:
18:09:45:31:61:05:7c:98:8f:44:a2:02:48:38:55:
f1:dc:2b:0b:c8:02:54:01:a2:62:f8:1e:39:57:23:
4f:8a:f7:3d:2e:4a:c5:a0:22:68:53:d7:4f:41:de:
f3:4a:4e:19:6c:00:65:16:3e:cf:61:c0:3d:16:55:
7e:3a:a6:f5:28:32:ae:f7:d2:1e:dd:8f:26:18:0d:
60:a3:d5:c8:51:29:20:4e:02:c1:dd:f8:7b:7e:e9:
2e:16:bb:fd:3a:b2:d5:de:17:16:3d:79:88:d5:ad:
23:6f:88:73:b3:e0:81:8b:f6:d0:5c:4c:3b:74:ec:
7e:de:3c:35:73:51:31:48:2e:6e:37:bd:db:7a:3a:
d0:9f:da:64:96:d4:4d:89:69:ef:a1:2d:ba:95:84:
c6:e1:2d:10:d6:d4:d6:63:46:c5:cc:0e:f8:36:d3:
28:51:3c:61:6b:44:46:49:84:bc:28:44:8e:1d:19:
77:b9:68:4b:6c:2e:01:e6:35:7e:7e:2d:43:f9:60:
4b:6a:93:06:35:44:03:a5:79:0a:19:31:10:a0:38:
e3:6c:78:df:27:57:90:81:d0:64:9f:32:fe:b4:91:
fc:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:4C:D7:2C:55:82:2B:CD:47:D2:66:18:24:BF:96:54:D9:AD:A8:6A
X509v3 Authority Key Identifier:
keyid:72:BD:83:F5:27:5B:D0:9E:8D:33:B4:29:88:1E:B2:F9:6B:6D:9D:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cr2D9Sdb0J6NM7QpiB6y-WttneE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/18c6ba-7b71-4466-bb33-005877da8026/1/XEzXLFWCK81H0mYYJL-WVNmtqGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/18c6ba-7b71-4466-bb33-005877da8026/1/cr2D9Sdb0J6NM7QpiB6y-WttneE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.45.122.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:37:56:b7:5c:08:bd:f3:23:b7:03:75:d7:e4:0a:b1:5e:60:
68:65:63:8f:96:46:18:64:e8:47:27:f4:d4:57:10:fd:3d:8d:
df:75:b7:86:35:80:f9:38:88:ed:ad:bc:d3:b7:10:25:04:9d:
c4:5c:91:01:5c:4e:30:00:1e:09:63:72:7a:82:8b:09:f0:65:
d9:d0:fb:73:6c:6f:17:cf:1e:8f:58:51:3a:2b:94:45:e5:1d:
66:c9:0b:94:e0:cd:e0:de:3b:c6:ca:80:49:ab:48:2d:33:b4:
a7:90:91:53:87:68:66:0f:70:86:80:57:a9:78:d3:90:82:1b:
d4:28:db:3d:bf:75:69:e4:96:fd:7c:1c:97:dc:74:2f:d9:21:
5b:c5:b6:e2:76:1c:5e:98:cf:83:a8:e0:6e:b8:58:5c:7b:43:
97:96:13:0b:91:8f:cf:59:56:e3:e8:d5:48:70:0a:ff:fc:5a:
d7:e5:c1:6e:11:b2:1e:80:f9:cf:de:24:08:ea:c5:f4:71:95:
11:62:19:b5:b0:96:02:6e:02:94:4c:db:cc:a6:58:92:33:c1:
ed:e9:9f:25:49:ee:13:d3:ce:25:9e:68:a2:7c:49:73:8b:c4:
fe:7d:00:ce:cc:80:0f:ff:96:af:95:5f:8a:9c:60:d7:90:3a:
5f:6b:88:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 20:54:36 2025 by rpki-client