Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/w4fdgcM_VAZQqEjdsKX2MaMiGZs.roa
File: w4fdgcM_VAZQqEjdsKX2MaMiGZs.roa (raw, json)
Hash identifier: YDrr6E1j35eer9d2XxL6nLYIzyCqbmfyxlWv4gXRs3M=
Subject key identifier: C3:87:DD:81:C3:3F:54:06:50:A8:48:DD:B0:A5:F6:31:A3:22:19:9B
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 0199C260F6AE750013CA1139628126933F3F
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/w4fdgcM_VAZQqEjdsKX2MaMiGZs.roa
Signing time: Wed 08 Oct 2025 05:52:38 +0000
ROA not before: Wed 08 Oct 2025 05:52:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213644
IP address blocks: 45.11.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Oct 2025 20:35:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c2:60:f6:ae:75:00:13:ca:11:39:62:81:26:93:3f:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: Oct 8 05:52:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c387dd81c33f540650a848ddb0a5f631a322199b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c8:2e:93:bb:04:0f:b0:85:60:84:20:e7:4f:
ae:0d:5e:c3:06:6c:42:f4:4e:c2:c2:c9:05:64:83:
49:a1:f0:d7:e8:b2:c9:88:7e:02:ed:f1:57:53:26:
5c:fa:15:bd:5c:32:83:18:bd:b1:63:fa:b3:e5:a3:
10:df:cd:14:6e:c9:8f:d3:52:6b:64:77:f6:cd:1f:
a7:62:f8:19:56:d1:41:35:bd:58:ad:6d:39:8a:08:
eb:b5:0d:c9:d6:53:a6:c7:2a:a4:91:fd:75:d8:0d:
de:bd:11:0b:e1:2f:84:ff:b2:2d:bf:89:38:aa:c6:
8b:99:27:47:c9:f0:a0:92:6c:da:39:41:6b:a5:22:
26:a5:28:b1:18:d7:b9:d3:cf:22:ec:dd:e3:ad:ea:
3f:1e:52:a5:aa:b2:df:b1:22:ec:e5:fd:6e:ba:37:
4e:2a:81:13:62:c4:bf:74:7a:8b:9f:28:e2:de:bc:
e8:c5:c7:15:01:d4:d1:10:a8:99:70:9b:25:28:9f:
a2:da:08:6c:9a:d2:4d:8a:f3:ac:63:31:59:ab:51:
b9:6c:65:c4:b6:ba:8e:7b:2b:d9:c1:28:74:ab:43:
cd:c2:f0:69:40:7c:8d:c9:09:41:d6:1a:9e:7f:9e:
54:7e:42:01:20:1c:3a:e0:4f:34:1f:04:81:1f:54:
99:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:87:DD:81:C3:3F:54:06:50:A8:48:DD:B0:A5:F6:31:A3:22:19:9B
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/w4fdgcM_VAZQqEjdsKX2MaMiGZs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.186.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:68:6f:44:d3:7b:60:61:1b:c4:8e:d5:63:e4:11:33:4f:29:
e1:71:c2:76:e3:0a:74:3e:65:db:c7:d3:a5:82:0d:e2:e5:ab:
83:d1:06:25:e2:b2:ca:a5:3a:68:e7:9c:fe:6b:11:58:aa:15:
77:71:ec:f1:1d:6c:f4:02:e5:b8:bc:b9:32:89:35:f0:f1:91:
53:e0:1d:e9:69:5f:11:18:f3:e5:2d:1e:03:7e:14:dc:30:45:
81:4b:17:36:b0:ba:ce:4d:32:2f:89:33:a2:60:04:7f:01:ce:
fc:e0:0b:45:57:a5:51:18:d6:e1:34:19:c5:0f:6e:cd:99:6e:
91:db:92:db:54:7e:59:3c:36:c0:88:7b:ea:e4:4f:88:e5:23:
f4:36:65:f3:d2:aa:bf:4f:c5:13:17:d5:30:3b:b9:38:7f:4e:
82:7d:3a:ef:9e:19:86:c8:0f:9b:7f:5f:57:55:89:f3:ed:73:
e9:5b:ee:ee:3f:cf:0c:9a:b1:4c:96:d5:96:02:32:df:c0:d1:
91:47:bf:de:13:37:78:d4:83:9f:65:c8:af:5f:86:30:43:9f:
8a:43:13:26:65:7e:0d:f6:1b:19:f3:bd:97:8c:cf:c5:e9:23:
51:cb:76:10:55:b2:c6:81:73:fd:f8:dc:ec:ed:9b:cb:01:8f:
76:70:5b:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 18 05:24:01 2025 by rpki-client