Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/clXh4GjL3AqRBOYFq0hFReTbk3s.roa
File: clXh4GjL3AqRBOYFq0hFReTbk3s.roa (raw, json)
Hash identifier: +UmbZ1TeAzCh6DaUc17beutH6WFbDLepJdfk4/siRsA=
Subject key identifier: 72:55:E1:E0:68:CB:DC:0A:91:04:E6:05:AB:48:45:45:E4:DB:93:7B
Certificate issuer: /CN=5fc90518df70b13d706bfe237aa5a76926a576d1
Certificate serial: 0199055ABADF08C57A9AB6C47EF73F66074D
Authority key identifier: 5F:C9:05:18:DF:70:B1:3D:70:6B:FE:23:7A:A5:A7:69:26:A5:76:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/clXh4GjL3AqRBOYFq0hFReTbk3s.roa
Signing time: Mon 01 Sep 2025 12:57:36 +0000
ROA not before: Mon 01 Sep 2025 12:57:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48014
IP address blocks: 31.41.33.0/24 maxlen: 24
45.88.89.0/24 maxlen: 24
2001:3783::/32 maxlen: 32
2001:3787::/32 maxlen: 32
2a12:4040::/29 maxlen: 29
2a12:4045::/32 maxlen: 32
2a12:4047::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:05:5a:ba:df:08:c5:7a:9a:b6:c4:7e:f7:3f:66:07:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fc90518df70b13d706bfe237aa5a76926a576d1
Validity
Not Before: Sep 1 12:57:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7255e1e068cbdc0a9104e605ab484545e4db937b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:90:6f:e7:0a:e9:e6:4a:a8:7e:44:ba:05:9b:
3c:18:b2:04:c8:84:ce:9f:20:f0:55:52:2c:24:f7:
b2:ea:dd:0d:88:bc:44:49:a5:61:0a:a9:12:c5:fd:
e7:66:3d:5b:80:c0:c6:55:89:5c:d7:cc:6e:0a:5d:
dc:6c:cd:59:16:51:a2:f0:c0:26:7c:69:2b:01:c4:
eb:25:e9:ec:9f:fd:ff:e0:b6:c6:c0:ae:c2:40:02:
99:58:f1:15:65:c7:d7:70:8b:c8:a6:f4:e1:b0:28:
1a:ce:ec:73:ac:7a:0c:e6:1c:49:4a:26:bc:65:26:
ce:a1:0c:4d:ac:44:71:5c:ca:00:61:dd:b3:b6:5b:
c1:e0:1c:76:06:25:79:23:5f:ce:5a:3b:4b:e4:20:
6a:36:2a:4b:0a:c0:a6:3a:e8:a5:70:a0:2f:7c:53:
d6:eb:5e:a5:2b:8b:3d:01:eb:ff:c7:0d:d6:9f:d8:
e0:84:04:7c:51:25:50:b1:51:9d:7a:35:71:1c:c7:
a3:c2:0d:57:07:e8:ef:00:89:a6:61:53:e2:4a:99:
21:4e:ca:e8:d7:c0:8e:38:40:a5:e9:19:04:a3:8c:
26:cc:d8:41:f3:1a:cc:86:74:2d:84:e3:c9:f6:a5:
07:93:59:dd:9b:cd:e6:38:e3:fc:2b:aa:79:fb:ae:
46:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:55:E1:E0:68:CB:DC:0A:91:04:E6:05:AB:48:45:45:E4:DB:93:7B
X509v3 Authority Key Identifier:
keyid:5F:C9:05:18:DF:70:B1:3D:70:6B:FE:23:7A:A5:A7:69:26:A5:76:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/clXh4GjL3AqRBOYFq0hFReTbk3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.41.33.0/24
45.88.89.0/24
IPv6:
2001:3783::/32
2001:3787::/32
2a12:4040::/29
Signature Algorithm: sha256WithRSAEncryption
6b:31:b2:8a:7b:0c:7e:f8:2b:dd:4b:f5:c9:58:3d:3b:a7:a2:
17:ac:d5:25:e9:1f:48:03:6a:06:16:73:1e:79:87:93:b4:fd:
3b:66:75:d1:ad:7a:42:b5:91:bc:19:ba:88:f6:23:8a:fd:c2:
79:ca:f5:eb:52:e5:3b:df:9c:a5:24:9c:bc:24:71:f5:67:61:
75:83:fd:48:6e:fc:7a:5a:6a:09:6e:e7:6f:5c:c1:c9:c9:2c:
a8:2b:07:bf:3a:af:d3:7c:e7:c1:7c:e3:c5:0b:d3:d7:9c:b3:
5d:58:b4:89:da:47:72:c6:cd:05:e6:a6:ec:b4:35:db:9e:55:
82:81:66:40:7e:73:fa:ce:95:f8:cd:7e:e3:8d:19:1c:04:1e:
10:5f:95:da:aa:a1:a0:78:e7:6f:c0:1f:57:97:4b:2d:e8:7d:
1d:ec:a6:69:a8:01:d4:68:a0:ef:12:ed:81:7b:12:f6:bf:b4:
5f:bd:27:b1:71:cf:d9:71:a2:80:2e:f1:7b:f4:7c:95:2f:ff:
a7:a7:33:44:2e:c6:19:78:90:71:c7:66:4c:9f:f2:20:b5:8b:
bc:45:2d:79:14:fd:7a:53:ae:de:8b:0f:6c:98:6f:cc:42:c9:
b0:8c:dc:5f:40:c3:d2:ab:e6:9f:b2:6a:9d:6a:d5:29:97:8d:
48:d8:93:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 01:20:07 2025 by rpki-client