Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/1yRED3DLRuGHiDRGq2BJfqb4Zqo.roa
File: 1yRED3DLRuGHiDRGq2BJfqb4Zqo.roa (raw, json)
Hash identifier: A0EcYSNMbodN6e0h1ex8R5EJse986btPlyr9ZhoJg/Q=
Subject key identifier: D7:24:44:0F:70:CB:46:E1:87:88:34:46:AB:60:49:7E:A6:F8:66:AA
Certificate issuer: /CN=b1cdc26d44eaf85654481e9581043e14887765b4
Certificate serial: 0199D8FEC031A20546DF64322606031CF21E
Authority key identifier: B1:CD:C2:6D:44:EA:F8:56:54:48:1E:95:81:04:3E:14:88:77:65:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/1yRED3DLRuGHiDRGq2BJfqb4Zqo.roa
Signing time: Sun 12 Oct 2025 15:16:38 +0000
ROA not before: Sun 12 Oct 2025 15:16:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208854
IP address blocks: 45.140.180.0/22 maxlen: 22
45.140.180.0/24 maxlen: 24
45.140.181.0/24 maxlen: 24
45.140.182.0/24 maxlen: 24
2a0e:c5c0::/29 maxlen: 29
2a0e:c5c0::/32 maxlen: 32
2a0e:c5c1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:d8:fe:c0:31:a2:05:46:df:64:32:26:06:03:1c:f2:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1cdc26d44eaf85654481e9581043e14887765b4
Validity
Not Before: Oct 12 15:16:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d724440f70cb46e187883446ab60497ea6f866aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:8d:76:4e:a6:e2:c5:08:ac:99:4d:2f:53:26:
a6:bf:c0:09:b3:e6:c6:45:2e:21:06:36:2e:05:79:
eb:99:3d:23:58:ec:51:1f:24:09:0b:20:9f:df:db:
fd:c1:3d:cc:26:26:f7:1c:0f:6b:9c:ff:d2:e4:b9:
91:29:98:bf:ce:68:be:f9:22:e4:05:f9:ba:6d:b3:
fb:09:5c:49:4c:bf:ea:e3:73:d3:5e:92:ba:32:fb:
a0:29:27:70:d4:d2:31:dc:1a:d3:fb:62:5b:c6:ee:
50:ca:61:70:72:77:eb:06:0d:26:01:a8:88:c0:d6:
8a:47:36:55:eb:27:6c:32:33:10:8f:0c:0e:25:8c:
26:37:7b:14:c2:4a:70:03:54:97:23:94:38:de:67:
2f:49:4f:62:d1:1a:f7:eb:36:e1:65:69:ce:59:a0:
94:63:b7:67:4e:3f:36:1e:12:75:25:88:07:39:c0:
62:fc:df:0b:7b:35:86:cf:70:23:0a:f0:e0:29:28:
48:b5:2c:79:6c:43:9c:27:62:ce:41:e6:46:a6:a9:
51:3c:54:54:bc:71:ab:6d:f9:55:02:f3:5e:9a:41:
e4:7a:3e:19:a6:69:71:25:f3:21:38:40:e4:2e:34:
09:32:ad:c1:c6:50:11:1c:d0:f1:1b:fb:54:7b:45:
41:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:24:44:0F:70:CB:46:E1:87:88:34:46:AB:60:49:7E:A6:F8:66:AA
X509v3 Authority Key Identifier:
keyid:B1:CD:C2:6D:44:EA:F8:56:54:48:1E:95:81:04:3E:14:88:77:65:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/1yRED3DLRuGHiDRGq2BJfqb4Zqo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.180.0/22
IPv6:
2a0e:c5c0::/29
Signature Algorithm: sha256WithRSAEncryption
45:55:06:c7:5a:47:38:e8:c2:be:0d:23:0b:84:d8:e1:a4:44:
92:ac:31:e6:4f:10:07:38:59:2b:ac:30:cc:51:6c:17:29:d5:
ab:c3:11:40:10:0a:05:8a:80:bb:9d:88:35:96:7a:23:a9:b4:
63:a4:4d:cc:7e:83:40:d5:60:cf:76:1b:b8:e3:6a:9a:cd:52:
f9:a8:22:b3:13:16:d6:20:d8:b0:0d:53:5e:b5:67:77:42:2f:
92:d5:f2:13:ca:d4:3f:b2:da:c3:f4:bb:6b:7d:52:0e:97:56:
ff:da:df:00:38:31:7d:bd:c3:a3:58:5c:62:d6:2f:48:a5:75:
ba:77:b2:00:ba:e3:b1:43:ab:14:89:3d:e7:98:9d:2e:fa:43:
c4:09:e5:31:c5:ca:f0:77:50:ee:57:a1:0b:cc:a2:6f:40:30:
43:a8:44:1c:ba:e7:02:71:cd:96:f8:55:c5:52:d4:2a:0d:ca:
56:b0:5b:80:8c:bb:1e:bd:2a:e1:ad:a9:5a:68:a4:0e:67:8d:
da:1f:d3:86:2b:f3:dc:73:8f:d3:c9:09:63:eb:ed:5e:b4:e3:
14:78:98:9e:a3:f9:7a:b8:f8:21:47:92:aa:83:97:9d:56:7e:
9d:3e:01:44:9c:8a:90:65:78:f9:16:f0:b2:18:23:44:a5:ba:
c6:09:eb:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:58:30 2025 by rpki-client