Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/1-t-p-2vAGI8XzdVIGKTjQY6vkRc.roa
File: 1-t-p-2vAGI8XzdVIGKTjQY6vkRc.roa (raw, json)
Hash identifier: Kd9bjRzd8RjLzTNaJJt0WwExTzzY9wLuuIO7FKDAktI=
Subject key identifier: FA:DF:A9:FB:6B:C0:18:8F:17:CD:D5:48:18:A4:E3:41:8E:AF:91:17
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 0199469A368C6269792B6AE678F363E84EC0
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/1-t-p-2vAGI8XzdVIGKTjQY6vkRc.roa
Signing time: Sun 14 Sep 2025 05:02:15 +0000
ROA not before: Sun 14 Sep 2025 05:02:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207350
IP address blocks: 45.159.148.0/24 maxlen: 24
2a05:9080:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Sep 2025 13:46:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:46:9a:36:8c:62:69:79:2b:6a:e6:78:f3:63:e8:4e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: Sep 14 05:02:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fadfa9fb6bc0188f17cdd54818a4e3418eaf9117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:26:0b:e9:d9:01:6e:fc:3f:32:f6:82:36:fe:
3c:9d:29:d8:60:76:d0:2d:f0:f1:5c:f5:9a:1f:9b:
d1:c3:46:d4:d4:39:22:3c:d7:6e:24:e6:4e:2b:b6:
ae:73:8e:40:6a:cb:3b:aa:69:9d:8e:08:57:91:ef:
9c:51:1a:41:51:e0:07:af:08:74:4b:a4:41:f2:4c:
60:99:e1:ec:ff:3a:85:ed:6d:d3:29:86:28:44:e1:
16:97:e0:f0:1c:48:09:4c:35:5e:8b:83:1b:51:fa:
d2:58:cd:c9:dd:a8:99:8b:38:5a:56:7c:61:c1:56:
14:e5:35:1a:6f:96:8b:04:b1:22:64:ae:78:f4:80:
9f:d2:73:46:22:4b:4d:ad:e5:b9:70:9a:7c:24:24:
12:ae:50:35:66:76:81:f5:75:8a:35:be:98:94:33:
a3:80:08:0a:54:b4:62:19:c1:84:d3:79:65:80:22:
87:5c:e7:27:36:e1:d5:ed:71:2e:e0:f6:99:62:7f:
f3:90:4a:e5:72:cf:e8:a6:c0:a3:28:fb:d9:37:f6:
53:78:f2:cc:23:8d:84:66:5c:25:31:49:e3:95:16:
d9:3e:4b:58:2f:09:53:58:d0:cf:b8:8f:bd:f1:81:
4b:e6:2a:c9:2c:3b:84:47:19:93:a9:05:91:6f:be:
0d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:DF:A9:FB:6B:C0:18:8F:17:CD:D5:48:18:A4:E3:41:8E:AF:91:17
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/1-t-p-2vAGI8XzdVIGKTjQY6vkRc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.148.0/24
IPv6:
2a05:9080:1::/48
Signature Algorithm: sha256WithRSAEncryption
5e:9a:0f:8f:0e:b3:7c:1b:04:ca:4e:2e:a7:fc:e9:d0:2d:3e:
4c:c5:e0:b4:a3:24:32:83:6b:2c:3c:c1:51:57:d3:d4:1b:9b:
fc:f2:03:6d:84:bf:c4:6c:02:b9:01:46:71:44:3b:39:44:20:
65:bd:05:e3:ea:d5:25:7b:b5:30:2d:22:64:bb:27:f2:8b:e7:
94:da:c9:c0:bc:58:41:60:10:68:07:20:5c:50:9a:bf:8a:c6:
a7:58:ec:f7:50:c5:56:42:41:fe:a0:40:a4:ad:88:4e:41:34:
4b:24:9d:35:4f:e1:67:71:47:d9:c9:f4:79:fe:87:c2:29:ff:
f6:3b:dd:57:23:3f:9b:93:38:dd:4e:bf:b4:83:bf:c9:74:99:
81:f0:3a:10:60:54:a8:c8:9a:ad:26:f4:3c:65:45:8c:c5:e5:
60:aa:cd:3f:30:6f:50:b6:69:b8:ee:87:e4:57:ac:c3:17:c2:
fc:d1:d6:ce:8e:81:26:f6:70:68:2d:11:05:fa:f0:ec:c5:cd:
1e:e5:0b:bb:67:b4:fb:99:11:5e:0b:b8:4c:a8:47:b9:18:fa:
2f:b4:26:d7:7d:5d:7b:63:f7:19:c0:72:d1:d8:8c:7d:1a:97:
81:94:cf:bf:45:09:68:59:2c:3c:54:95:de:7e:41:f4:f7:71:
bc:02:39:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 22:28:34 2025 by rpki-client