Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/AEk4t1mqQHdHzuvnZ8F04P17d44.roa
File: AEk4t1mqQHdHzuvnZ8F04P17d44.roa (raw, json)
Hash identifier: 7D43zZS2UD0q0VGySwNpiUk+9PmD8nPWUlHBvAE5epk=
Subject key identifier: 00:49:38:B7:59:AA:40:77:47:CE:EB:E7:67:C1:74:E0:FD:7B:77:8E
Certificate issuer: /CN=8a1ce1d135bf2cf8e8c13f33ec11c8523703dc75
Certificate serial: 01994E32CAA32F6FE67B39231AEED959E37F
Authority key identifier: 8A:1C:E1:D1:35:BF:2C:F8:E8:C1:3F:33:EC:11:C8:52:37:03:DC:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ihzh0TW_LPjowT8z7BHIUjcD3HU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/AEk4t1mqQHdHzuvnZ8F04P17d44.roa
Signing time: Mon 15 Sep 2025 16:26:15 +0000
ROA not before: Mon 15 Sep 2025 16:26:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214903
IP address blocks: 45.133.102.0/23 maxlen: 23
45.133.102.0/24 maxlen: 24
45.133.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/ihzh0TW_LPjowT8z7BHIUjcD3HU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/ihzh0TW_LPjowT8z7BHIUjcD3HU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ihzh0TW_LPjowT8z7BHIUjcD3HU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:4e:32:ca:a3:2f:6f:e6:7b:39:23:1a:ee:d9:59:e3:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a1ce1d135bf2cf8e8c13f33ec11c8523703dc75
Validity
Not Before: Sep 15 16:26:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=004938b759aa407747ceebe767c174e0fd7b778e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f1:11:f7:28:e9:8d:44:7a:53:7a:79:d4:e7:
3b:82:d6:5e:bc:af:0c:3d:a4:8a:37:38:84:95:ae:
24:d6:2a:98:73:e5:b6:c4:1a:d0:47:5b:64:cf:89:
b9:fc:3c:d6:41:e5:e1:b9:e9:be:66:0c:49:71:d9:
aa:2e:f5:44:e9:30:16:f8:c5:41:49:b8:dc:ff:b3:
15:e3:49:17:f5:cf:5f:01:25:24:cc:a7:c7:58:ee:
2f:21:1d:73:1f:51:72:cd:49:06:5f:60:39:12:63:
54:d4:5b:11:30:e0:e5:c7:91:8c:4c:a7:5e:fc:62:
56:46:c2:fe:f2:fa:f2:82:0d:21:cb:c9:8d:29:95:
7d:3c:fc:79:66:1f:54:12:89:97:61:68:a3:68:0f:
0b:ac:8e:3e:d2:d6:33:53:ec:1b:0d:7d:3f:1a:10:
3a:12:44:15:4f:8b:2b:1f:a8:66:be:d1:38:8d:e0:
c0:3d:1d:7f:cd:1e:a6:06:45:42:e7:d2:53:03:47:
3e:c5:2d:ce:92:78:b3:ab:a7:9f:b5:03:ee:0b:36:
dc:e8:f8:41:91:d1:2b:e9:97:20:1e:e5:33:5a:66:
ca:72:ff:54:31:34:95:1f:44:6f:f6:8b:e0:c9:40:
e3:22:66:5a:b9:bb:ba:6e:7c:72:da:75:22:8c:38:
fb:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:49:38:B7:59:AA:40:77:47:CE:EB:E7:67:C1:74:E0:FD:7B:77:8E
X509v3 Authority Key Identifier:
keyid:8A:1C:E1:D1:35:BF:2C:F8:E8:C1:3F:33:EC:11:C8:52:37:03:DC:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ihzh0TW_LPjowT8z7BHIUjcD3HU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/AEk4t1mqQHdHzuvnZ8F04P17d44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/ihzh0TW_LPjowT8z7BHIUjcD3HU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.102.0/23
Signature Algorithm: sha256WithRSAEncryption
79:8c:86:92:c2:2c:12:00:07:18:5a:37:86:65:90:66:e1:00:
f9:82:1c:74:9d:ab:40:a5:44:30:80:5f:bc:b8:82:ef:a7:b1:
bc:64:0b:2c:d1:5c:f9:a5:60:55:a8:5d:7b:e6:a0:f8:7d:ce:
8e:71:69:5e:32:4e:40:8d:bc:a1:e6:c5:83:57:1e:a4:f1:0f:
b4:ea:21:df:8e:26:65:9c:00:c4:73:0d:3f:4b:83:8e:d5:b5:
77:50:7c:80:bc:04:37:89:ee:a0:bc:a0:e9:9f:df:03:ad:4e:
f9:d2:35:48:38:2a:83:0c:44:97:a3:70:62:b2:f2:5a:c7:b2:
e1:6d:d7:af:4f:ab:b9:ab:cd:b2:ae:b5:28:7c:e0:aa:2f:7b:
d0:ef:a5:7d:c6:e5:46:71:61:51:72:d8:a7:65:a1:9e:e3:23:
f7:01:39:ac:0c:79:a6:60:40:29:44:d4:b2:85:58:8a:b6:40:
e9:16:f7:e7:20:f6:69:88:f1:39:72:fd:dc:48:2b:d3:0b:14:
65:b2:ee:1f:07:12:fc:2c:97:0e:6e:d2:28:7b:ff:20:5f:b2:
81:d1:2a:a0:a5:b9:06:03:da:4f:70:5b:af:40:70:32:93:24:
48:61:84:ed:04:e4:29:69:23:f6:98:cf:66:ea:d6:b0:91:b6:
52:99:64:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:10:41 2025 by rpki-client