Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/pKg9Eulzznq_Xmusn2tCljsUFm0.roa
File: pKg9Eulzznq_Xmusn2tCljsUFm0.roa (raw, json)
Hash identifier: ZV91D/vMdBvdabbs6xfKbOYCwCqfj4mEA5NzU3QNIzA=
Subject key identifier: A4:A8:3D:12:E9:73:CE:7A:BF:5E:6B:AC:9F:6B:42:96:3B:14:16:6D
Certificate issuer: /CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Certificate serial: 01993F7B656725C3DFB5EE89D37A1516EF5F
Authority key identifier: FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/pKg9Eulzznq_Xmusn2tCljsUFm0.roa
Signing time: Fri 12 Sep 2025 19:51:15 +0000
ROA not before: Fri 12 Sep 2025 19:51:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 22773
IP address blocks: 45.139.68.0/23 maxlen: 24
45.150.80.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft
rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Sep 2025 09:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:3f:7b:65:67:25:c3:df:b5:ee:89:d3:7a:15:16:ef:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Validity
Not Before: Sep 12 19:51:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a4a83d12e973ce7abf5e6bac9f6b42963b14166d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:29:94:ab:1a:35:82:bf:7d:29:a8:23:7e:00:
62:51:8e:bc:e7:df:23:df:97:f7:6e:6d:7e:6c:9f:
a2:d5:7c:fa:c2:0b:12:e6:b3:1f:83:24:69:8f:17:
c7:63:62:1a:52:8e:95:bc:2d:a4:54:e0:72:10:72:
68:43:e8:34:a2:cf:8d:f6:84:91:34:ec:88:e6:db:
2d:e1:0e:d7:42:85:16:e5:23:28:e7:a3:dc:9d:07:
a0:ea:d8:f0:66:5d:13:1d:1d:4b:d2:8e:37:13:26:
29:3f:78:f2:37:04:4c:a6:63:5e:2b:90:e6:8d:03:
b6:d9:15:08:30:21:2d:11:6e:3f:a8:e0:aa:04:1b:
dd:ce:36:78:17:39:c4:4f:9c:a5:5c:8a:d8:8b:34:
04:ac:c3:52:9d:ed:cf:f8:48:c6:2d:18:c3:54:a9:
d7:8c:4d:3c:b9:12:4a:83:71:16:ef:7b:76:cc:9d:
ff:dc:29:a5:43:6e:31:3e:d4:31:75:1f:e5:a1:44:
90:93:31:19:c0:71:3b:8c:e1:29:10:d2:0d:35:f1:
cb:b6:2c:e4:0b:e3:28:84:d9:d8:04:27:ec:7a:e7:
9e:75:96:61:50:c3:9b:08:21:82:69:72:c7:34:66:
d2:b7:af:df:93:4c:b3:b9:35:49:c5:a8:de:11:97:
b6:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:A8:3D:12:E9:73:CE:7A:BF:5E:6B:AC:9F:6B:42:96:3B:14:16:6D
X509v3 Authority Key Identifier:
keyid:FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/pKg9Eulzznq_Xmusn2tCljsUFm0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.68.0/23
45.150.80.0/23
Signature Algorithm: sha256WithRSAEncryption
dd:24:c1:66:fd:78:ad:81:90:15:69:2c:7a:22:08:c3:6b:60:
0d:24:9e:0f:0e:2e:4c:f8:eb:db:50:b8:3e:20:be:7e:02:a5:
0b:39:8d:0f:9b:a5:01:fb:51:90:7e:96:c6:d6:19:bc:15:30:
55:cc:ba:1d:7b:90:ef:1b:6c:1f:11:3b:d7:cb:b5:59:a5:eb:
01:ba:b0:4f:ab:62:d7:13:cd:68:7f:85:e1:ca:64:c5:6d:6c:
c4:3b:5f:51:21:55:d7:01:7b:9a:72:6a:41:2c:e6:8a:7d:01:
39:06:c0:1c:8f:49:2f:17:d0:b5:01:b9:ad:d1:6c:cd:a0:9c:
de:cf:6a:70:d6:5a:42:42:d0:92:36:54:df:84:6d:e9:c2:03:
21:e9:55:3e:cb:5c:b9:87:f4:03:3c:02:ad:6d:21:f2:84:18:
7d:0b:6c:58:0b:42:8e:c6:bf:b5:8c:c5:07:29:22:a0:1f:4d:
76:55:a4:af:37:bf:55:c1:58:37:60:e3:e7:b1:98:d8:00:0d:
4c:e8:78:49:0d:8e:30:1b:c7:09:76:21:4a:05:7d:b5:d3:eb:
91:d7:ce:a5:72:95:25:48:f9:7b:0c:3c:ab:5e:ea:8c:20:38:
b8:2f:d4:20:4b:fb:b0:6e:b9:82:1c:fe:c1:fb:a3:7a:da:a3:
fa:8b:39:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 12:20:42 2025 by rpki-client