Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/AltteTXtcv5U_8clSc_w75MOCG4.roa
File: AltteTXtcv5U_8clSc_w75MOCG4.roa (raw, json)
Hash identifier: sOKIpMBS8xIr+CDbR+EiGDDXqZjPbDrfbb4OxsHSF1U=
Subject key identifier: 02:5B:6D:79:35:ED:72:FE:54:FF:C7:25:49:CF:F0:EF:93:0E:08:6E
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0199B33FB4D9124C5DEFD2467E3DC9CC4E7A
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/AltteTXtcv5U_8clSc_w75MOCG4.roa
Signing time: Sun 05 Oct 2025 07:22:00 +0000
ROA not before: Sun 05 Oct 2025 07:22:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13335
IP address blocks: 45.141.24.0/24 maxlen: 24
45.144.225.0/24 maxlen: 24
89.31.216.0/24 maxlen: 24
178.239.199.0/24 maxlen: 24
203.159.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:b3:3f:b4:d9:12:4c:5d:ef:d2:46:7e:3d:c9:cc:4e:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Oct 5 07:22:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=025b6d7935ed72fe54ffc72549cff0ef930e086e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f1:9b:f2:cd:78:63:76:9c:30:0d:ab:7e:bb:
ff:54:2f:8d:a0:93:9d:7c:bc:60:2b:9c:48:67:da:
b8:ac:e7:f9:6d:77:8f:5b:b2:ea:26:a3:f3:5a:53:
21:7a:03:6c:b0:be:f3:73:53:d8:48:de:bc:93:b4:
93:e6:1b:c5:44:95:df:ed:cd:68:d7:2f:37:76:8b:
b8:4c:a5:ab:f5:16:b1:bb:88:30:3a:02:4f:61:64:
f9:93:9f:68:b8:88:bc:7b:86:be:ea:0b:7d:ce:45:
87:7f:24:d9:e1:f0:cb:ba:c8:48:39:de:f4:73:5d:
e3:52:26:47:29:f2:ce:04:52:c2:46:60:29:93:8c:
22:61:66:22:09:43:7f:08:32:7d:15:24:2a:cb:e8:
d2:96:38:38:88:3d:6a:6d:72:ff:68:71:0d:3f:b3:
82:48:6c:72:dc:b1:9a:a8:74:88:80:fb:59:57:62:
28:f8:c0:0a:08:00:33:3b:a5:d3:11:f2:9c:c5:0b:
58:b2:d9:3e:b3:2e:e0:08:76:d5:5c:81:3b:61:f0:
d5:c0:04:6e:f9:c0:1e:e4:1c:be:e8:0f:1f:0e:f0:
0f:8e:e2:0c:5e:02:bd:74:6e:fd:fa:a3:dd:fa:08:
e3:1f:b9:39:18:13:ba:12:15:71:49:02:52:2a:6a:
9c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:5B:6D:79:35:ED:72:FE:54:FF:C7:25:49:CF:F0:EF:93:0E:08:6E
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/AltteTXtcv5U_8clSc_w75MOCG4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.24.0/24
45.144.225.0/24
89.31.216.0/24
178.239.199.0/24
203.159.80.0/24
Signature Algorithm: sha256WithRSAEncryption
42:07:07:8c:b7:8f:7a:2b:2f:7e:07:27:42:42:26:ec:bc:98:
cf:45:d8:e9:3e:fc:43:e0:6b:12:07:77:0e:dd:80:5f:cf:26:
0b:54:ca:63:81:fd:c2:f3:ce:90:e6:ed:9e:ce:b8:0d:e4:09:
04:f6:ca:aa:70:bf:37:11:c5:36:f3:17:98:13:11:e3:f0:8f:
ba:2c:77:d8:cb:f7:83:38:dc:bc:7e:13:7d:b4:26:85:e0:d8:
fb:37:04:7c:f9:ef:ec:77:73:15:46:99:0e:3d:e2:4d:7d:e0:
e7:95:c0:b0:d6:2c:2a:28:5e:17:99:11:f4:54:d5:0e:0e:7f:
55:0e:05:af:2c:82:21:b9:ca:53:82:b9:31:a5:99:3d:e5:77:
be:c5:f8:a3:2c:e9:32:91:8d:1c:c8:4b:e6:02:2c:3e:cc:b6:
6a:6b:1c:bf:94:2d:69:ac:ce:84:82:1f:f4:6d:76:e7:9b:dc:
8d:a4:33:02:f7:19:0c:2d:aa:95:af:a8:82:17:ef:88:5b:6a:
6a:0d:d1:b9:6d:09:ef:69:e0:08:8a:85:29:ad:bf:e0:e9:1b:
b4:08:12:75:55:29:30:80:82:b2:80:6b:ec:e1:45:e7:4a:48:
04:3f:9f:23:f3:e7:a1:39:11:75:a4:f0:f2:00:d2:2b:69:68:
0f:10:f3:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 19:03:02 2025 by rpki-client