Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/nrzzOKbTAnMtwC62Vk6aOiJz8hU.roa
File: nrzzOKbTAnMtwC62Vk6aOiJz8hU.roa (raw, json)
Hash identifier: HdGJj5uTu/AFQn+K30UnY8B5j1PhZQFqIQE1vnpDows=
Subject key identifier: 9E:BC:F3:38:A6:D3:02:73:2D:C0:2E:B6:56:4E:9A:3A:22:73:F2:15
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 0198C894B0F6F6A91D0F6E51C4248F4AE27F
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/nrzzOKbTAnMtwC62Vk6aOiJz8hU.roa
Signing time: Wed 20 Aug 2025 17:44:04 +0000
ROA not before: Wed 20 Aug 2025 17:44:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28753
IP address blocks: 45.132.15.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Aug 2025 02:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c8:94:b0:f6:f6:a9:1d:0f:6e:51:c4:24:8f:4a:e2:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Aug 20 17:44:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9ebcf338a6d302732dc02eb6564e9a3a2273f215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:25:50:7f:c2:92:75:df:96:01:f5:d9:a5:5f:
31:09:24:e7:81:78:9f:98:d4:66:ab:e8:8c:d7:96:
3a:57:28:74:ff:d7:b6:b9:d5:11:3e:b6:ea:aa:56:
ae:14:f7:f9:f2:31:0f:21:69:6f:71:3d:8d:be:19:
29:f8:e9:95:3f:ce:f7:2b:dd:c5:ac:ad:37:cf:29:
bc:db:40:d8:31:1f:79:4f:38:6b:2e:99:58:e5:ad:
fa:0f:e2:db:a4:43:55:c6:c0:0f:40:cd:6c:1a:3b:
af:ce:f4:60:0d:78:bd:a7:1f:9d:96:78:28:4f:69:
3f:fa:57:b4:36:ec:d9:67:01:65:47:cc:38:b3:59:
fd:22:05:94:db:0b:93:9b:37:c6:5b:79:40:0a:e1:
b6:8d:6b:ac:16:ad:f9:ab:92:13:a3:b4:df:ef:5f:
b9:f8:63:09:af:32:0f:29:c6:72:99:d5:42:8d:45:
5a:93:94:74:3c:c1:a0:0f:65:ba:09:bb:56:cc:3a:
82:0d:b0:7a:f7:4b:14:67:6c:3f:61:54:77:a9:87:
4c:d3:d1:95:1f:28:bb:f2:60:cf:ad:ed:3b:80:db:
2d:ad:3d:34:50:2f:ee:3d:1a:0c:e3:3a:13:f7:84:
f2:5d:6a:0c:94:78:26:df:10:72:66:75:15:79:fa:
cc:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:BC:F3:38:A6:D3:02:73:2D:C0:2E:B6:56:4E:9A:3A:22:73:F2:15
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/nrzzOKbTAnMtwC62Vk6aOiJz8hU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.15.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:f3:ab:55:f3:06:88:01:c7:d5:61:38:60:65:8b:a3:d4:6c:
de:69:c5:cb:a2:5f:b1:78:2f:28:e2:8f:9b:66:71:d6:2a:34:
7f:6f:0f:60:24:a2:10:71:b9:31:99:f4:a5:77:1d:35:8d:84:
ed:85:15:10:84:5a:65:00:b6:f0:7f:c2:41:c2:43:c7:71:26:
d9:ca:b9:cf:81:7e:92:24:44:ca:f5:49:cb:77:e7:88:e3:55:
79:7f:50:2e:c8:5b:d4:03:25:c7:1f:78:5d:fa:76:99:23:44:
a4:2f:61:66:4e:e0:29:98:a9:c9:d7:de:17:4f:52:ef:dd:66:
50:a8:d5:7c:5c:d4:b4:76:20:12:50:36:b1:07:22:5f:73:bb:
3d:55:56:8f:cb:14:71:66:a0:2f:31:63:4b:13:9a:83:0a:92:
d2:78:fb:e4:ef:27:44:e0:9c:79:5f:b6:f0:10:c0:d4:ba:e5:
65:40:40:64:fd:56:08:25:8c:84:f1:2f:d5:2e:d7:29:4c:f6:
c9:d4:05:70:10:ba:3d:d3:cb:e9:af:54:6c:60:d5:80:37:57:
3f:25:41:98:dd:f7:a8:42:24:ff:1b:55:c5:18:a4:12:e7:98:
1c:63:69:67:e6:b5:5c:57:30:68:98:23:74:4b:85:d2:94:ed:
39:5a:11:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 12:41:35 2025 by rpki-client