Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/I-d3mGhKAHlT8J9wAcisFqLqGFQ.roa
File: I-d3mGhKAHlT8J9wAcisFqLqGFQ.roa (raw, json)
Hash identifier: +t66xrsaCPSb5WzTrykjh+nmEbajrQRTzYzj7itFceY=
Subject key identifier: 23:E7:77:98:68:4A:00:79:53:F0:9F:70:01:C8:AC:16:A2:EA:18:54
Certificate issuer: /CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Certificate serial: 0198A7C8B22FCFF43E6DBA7C26A26CA74B2E
Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/I-d3mGhKAHlT8J9wAcisFqLqGFQ.roa
Signing time: Thu 14 Aug 2025 08:53:24 +0000
ROA not before: Thu 14 Aug 2025 08:53:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57844
IP address blocks: 45.83.180.0/24 maxlen: 24
45.83.181.0/24 maxlen: 24
45.83.182.0/24 maxlen: 24
45.83.183.0/24 maxlen: 24
139.28.72.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 08:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a7:c8:b2:2f:cf:f4:3e:6d:ba:7c:26:a2:6c:a7:4b:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Validity
Not Before: Aug 14 08:53:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=23e77798684a007953f09f7001c8ac16a2ea1854
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ce:3d:80:72:f2:ec:e2:4b:6c:8c:a1:5a:4d:
50:fa:c1:b3:a0:3c:4c:13:dd:46:c0:ed:38:f4:6d:
4c:51:d8:cd:18:6b:8b:22:86:28:35:0b:1a:29:bf:
8b:ac:1c:46:54:e4:3e:56:7b:33:fc:5f:09:09:0e:
b3:50:91:45:76:48:8e:16:d3:b1:84:4d:a9:5f:48:
4a:50:46:00:5e:e6:ec:16:ae:45:7e:37:c4:9f:be:
2b:8e:cd:df:20:89:6a:ba:6d:53:57:7d:ca:dc:89:
fa:12:1e:f4:34:20:c0:fe:87:27:4c:2a:b5:ab:45:
f9:35:ef:b2:2a:29:4f:d2:a0:bf:86:a0:37:64:56:
e5:68:0c:88:5c:7e:7b:6b:c4:27:29:56:2a:81:5d:
4a:c3:59:4d:90:61:f2:83:f4:3f:74:7c:e2:97:0e:
74:83:14:6d:41:50:34:6e:f3:ab:fd:a6:9e:57:b3:
47:e5:79:a8:5c:1d:1d:2f:89:b7:c8:01:d8:ca:69:
cc:32:7d:98:2d:33:b3:d0:52:6d:3f:75:07:0d:cb:
ee:e7:2d:e7:e6:4e:97:ae:d6:2d:1b:dc:04:1a:d2:
a9:bd:b9:b5:7f:97:14:ca:25:30:20:7e:7d:cc:b5:
c4:bd:38:ee:f9:e7:cd:9c:4e:17:26:21:73:4f:d3:
0a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:E7:77:98:68:4A:00:79:53:F0:9F:70:01:C8:AC:16:A2:EA:18:54
X509v3 Authority Key Identifier:
keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/I-d3mGhKAHlT8J9wAcisFqLqGFQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.180.0/22
139.28.72.0/22
Signature Algorithm: sha256WithRSAEncryption
48:5e:c7:fb:0c:57:66:68:9f:c4:25:01:33:f2:4c:89:79:8e:
e9:49:cf:b1:1f:51:0b:fa:77:8c:41:74:22:3f:46:68:61:95:
fd:5c:35:65:2f:7f:4e:f2:36:88:f6:63:20:2b:0f:53:f7:98:
7d:3a:d2:50:04:6d:3a:bf:23:22:97:1e:3b:5f:d8:b9:da:c9:
8c:03:d4:8c:a3:a8:cd:66:09:a7:cb:52:71:89:e2:ef:93:83:
ab:9a:4c:0b:32:97:e9:1d:8d:bb:c9:b9:ac:5c:48:2a:0f:9f:
75:96:91:be:09:1f:44:ba:a1:9f:ae:75:a7:11:ba:24:e9:f1:
ef:d5:c1:62:31:58:8d:70:d1:93:f7:68:10:cb:b8:70:1e:05:
b0:f6:1a:2a:bf:2f:d4:c1:a1:5d:3a:f8:6c:bf:61:22:d3:9f:
c5:e4:68:ad:aa:e3:6a:2d:47:a0:4b:2e:38:52:8d:42:47:f2:
d3:1b:e7:1f:18:0c:58:b3:f6:0d:2b:77:bb:c0:31:71:50:1d:
58:02:d7:03:f5:75:d3:62:14:b3:85:07:a5:7c:f8:9c:3a:07:
82:69:9e:1a:3f:23:a7:80:9d:8a:9a:4b:5f:8f:9a:6a:ae:ec:
31:42:e7:6c:79:60:d8:6d:c7:5a:a5:6d:4d:08:45:5b:03:96:
b8:a8:e0:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:36:44 2025 by rpki-client