Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/O_ZkBTX7mX0S4x6P6MGT7svHY5I.roa
File: O_ZkBTX7mX0S4x6P6MGT7svHY5I.roa (raw, json)
Hash identifier: ZQxxJN3x/rPk6enGjlxAux0VdXluv9YV4H/WGXmyMNo=
Subject key identifier: 3B:F6:64:05:35:FB:99:7D:12:E3:1E:8F:E8:C1:93:EE:CB:C7:63:92
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0198F583DE64E3F4F16EC51A4E8076081569
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/O_ZkBTX7mX0S4x6P6MGT7svHY5I.roa
Signing time: Fri 29 Aug 2025 11:08:36 +0000
ROA not before: Fri 29 Aug 2025 11:08:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213790
IP address blocks: 45.146.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 11:14:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:f5:83:de:64:e3:f4:f1:6e:c5:1a:4e:80:76:08:15:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Aug 29 11:08:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3bf6640535fb997d12e31e8fe8c193eecbc76392
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:58:02:f4:41:54:f4:40:c3:9b:c1:e8:13:07:
c4:c0:9a:f4:ec:b4:90:f5:c6:cc:6b:4a:14:24:5f:
ba:60:03:8f:9c:30:fd:fb:9b:c7:32:8c:9d:96:74:
2c:cf:e8:f7:e3:80:02:fd:ff:bf:00:7e:ac:5a:3d:
f8:2f:13:50:0e:38:68:e8:75:ef:e2:56:95:0c:fd:
9a:4b:5b:e3:78:8a:78:5e:67:28:7d:fc:d7:21:46:
11:58:ae:cf:09:75:28:6d:9e:88:b1:08:f7:37:26:
c8:c8:32:25:2a:e4:51:7a:4b:79:88:be:97:40:67:
47:e2:f2:1b:5c:45:2e:39:4f:82:e6:c3:b1:b5:ad:
b3:93:70:54:81:f9:51:c4:d6:2e:7a:f6:18:0d:49:
b5:10:04:6b:cc:f6:2d:91:ed:62:3e:ec:44:c5:18:
66:9f:1f:7c:7f:b2:c1:a5:bd:3a:2a:63:00:5a:6f:
dc:7e:f6:8c:40:c2:03:a6:58:60:72:55:46:2e:47:
6b:28:8c:e8:79:d1:f0:67:55:14:0c:42:29:62:75:
52:6c:e6:06:1d:5b:1a:ba:40:99:84:c9:bf:ca:0c:
a2:f3:82:7f:32:d2:e0:73:67:10:fb:9c:a3:3c:9f:
47:48:5a:18:29:46:9b:7b:19:e8:08:6f:b2:60:50:
dd:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:F6:64:05:35:FB:99:7D:12:E3:1E:8F:E8:C1:93:EE:CB:C7:63:92
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/O_ZkBTX7mX0S4x6P6MGT7svHY5I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.130.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:da:21:f4:50:dc:bc:53:a0:76:72:ba:50:38:46:ca:87:30:
6b:c8:50:61:ce:c2:f7:92:74:d0:e9:75:26:7e:4a:dd:f2:50:
04:55:eb:86:30:97:7b:2d:aa:f8:c6:76:d8:16:6e:5b:3a:9e:
40:cc:42:cc:51:65:c7:97:6f:97:3f:41:53:4d:48:0a:f9:96:
32:4a:d3:c1:9b:18:e6:75:ee:2a:ca:64:c3:fc:07:e9:82:2c:
f0:2d:bb:8b:53:8d:4b:ab:dd:cf:5b:51:57:ef:98:42:6c:ff:
95:88:7a:55:99:e3:35:bf:db:04:56:63:1d:62:39:58:35:3c:
20:b0:54:7e:fa:9f:ef:62:42:e7:e6:7c:f8:fd:96:9b:60:ec:
a1:fe:2d:96:1c:ef:a6:96:bb:f0:2c:a3:e9:32:77:fd:19:68:
7f:48:e0:2b:07:44:4c:15:c1:76:28:54:02:9a:7c:8e:e7:9b:
c5:58:b0:ec:51:d7:d6:11:1b:74:57:4e:00:61:56:23:78:f4:
6a:36:da:3a:f3:11:7e:30:38:0b:a0:89:69:5f:6b:28:a2:04:
70:e2:1b:ac:d8:e4:1d:f1:46:b7:f8:0c:78:bc:d0:8d:51:67:
54:be:fc:cf:28:0a:e7:d6:23:67:a2:b0:69:73:5f:64:94:48:
7d:2a:d2:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 20:56:57 2025 by rpki-client