Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/t2Q7utGVSdVWZfJFxT779hqJMtY.roa
File: t2Q7utGVSdVWZfJFxT779hqJMtY.roa (raw, json)
Hash identifier: VHf2fK/qR+4uJNSb7F1DPyjXul42FNeD4kIFYAij9pE=
Subject key identifier: B7:64:3B:BA:D1:95:49:D5:56:65:F2:45:C5:3E:FB:F6:1A:89:32:D6
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 019919F227452D4FA35A858607C7DDB6B818
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/t2Q7utGVSdVWZfJFxT779hqJMtY.roa
Signing time: Fri 05 Sep 2025 12:55:24 +0000
ROA not before: Fri 05 Sep 2025 12:55:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29802
IP address blocks: 45.132.15.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Sep 2025 12:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:19:f2:27:45:2d:4f:a3:5a:85:86:07:c7:dd:b6:b8:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Sep 5 12:55:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b7643bbad19549d55665f245c53efbf61a8932d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e5:cd:ab:81:25:13:9c:52:6c:2f:6a:31:8d:
84:12:fe:6b:b7:b1:a2:87:a3:42:9a:55:f9:95:df:
f2:eb:47:f6:ff:24:51:95:40:97:b8:9f:15:75:3e:
d6:8c:ed:d8:c9:65:40:e9:34:27:a6:06:fd:44:66:
c9:a0:59:63:aa:6c:65:8a:73:3c:be:cf:e6:3b:bd:
54:ae:9f:91:c1:d8:e6:93:74:c7:b3:2f:ce:43:39:
bb:60:94:d1:b5:c2:c9:4d:35:b9:6e:f0:73:4b:74:
d6:04:28:a4:b2:d4:cb:29:bc:69:6b:c0:2f:8b:c8:
12:91:8e:26:a6:10:9c:f6:36:ea:f8:66:8f:06:92:
58:0b:6c:cf:4b:52:ba:15:b0:56:83:ec:75:4b:60:
4b:17:13:e0:27:26:3a:cc:d3:c7:77:86:d1:b9:e5:
a4:f7:e2:d5:c2:42:1c:e4:20:d8:13:91:d1:bd:6c:
a2:ff:93:a3:40:03:26:8c:c9:94:2b:75:86:e7:bd:
4c:ae:ee:03:49:ea:23:c5:89:b4:15:6a:73:9b:a5:
14:ba:80:71:c3:86:13:67:20:55:8f:9f:32:23:f8:
f4:6b:37:53:42:fe:ac:6e:37:16:18:1d:0e:51:1c:
2d:f0:81:9c:6c:4e:68:78:ed:62:42:43:23:61:be:
5d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:64:3B:BA:D1:95:49:D5:56:65:F2:45:C5:3E:FB:F6:1A:89:32:D6
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/t2Q7utGVSdVWZfJFxT779hqJMtY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.15.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:4b:33:79:fe:be:bf:57:af:57:01:bb:6b:0e:c8:59:a0:10:
d6:62:67:39:a0:9b:82:f2:06:bf:c4:27:da:a4:ef:b1:cc:54:
d0:8b:95:c5:42:86:b8:9f:59:1b:06:1a:2b:51:a9:8f:08:9e:
89:17:e8:72:b1:ee:bd:d0:c2:59:b3:53:12:e3:7e:6e:0b:6c:
4d:ee:1d:d8:f0:6c:12:b8:07:eb:80:dd:30:57:04:60:94:09:
e7:0b:8f:59:62:ef:06:3d:6b:f8:e4:17:df:89:cd:0d:81:61:
df:00:17:2c:ea:e7:c4:b1:e2:28:d0:ae:e9:76:95:25:b3:45:
5a:e0:c1:eb:a2:3b:55:c3:4f:70:c7:95:7f:90:99:19:fd:bc:
f0:e0:b0:3e:b9:66:96:d8:e1:26:c6:57:43:e7:cc:35:32:52:
23:b9:f8:89:40:f7:f7:e2:48:ba:9b:df:04:ee:d8:ab:a0:da:
46:30:e7:a2:50:19:63:e4:ad:97:3a:13:66:6c:ea:59:a4:e6:
63:9f:0d:9f:c0:f7:19:f5:fd:96:f3:78:0a:c1:31:f2:0d:22:
e7:1b:9f:a8:8a:66:86:9a:13:3d:0c:0a:9b:64:9b:4c:e8:f3:
4c:d5:51:a7:df:a4:f0:9c:f5:93:8e:37:9d:89:33:e5:63:6e:
53:85:f3:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 14:21:26 2025 by rpki-client