Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/uSds6b4A3ugi6DIsYb_3dWNiNEs.roa
File: uSds6b4A3ugi6DIsYb_3dWNiNEs.roa (raw, json)
Hash identifier: yRT8HJyCOSty+M33PAxjUyOR0ZiSFhtIqLi0qhNHK+g=
Subject key identifier: B9:27:6C:E9:BE:00:DE:E8:22:E8:32:2C:61:BF:F7:75:63:62:34:4B
Certificate issuer: /CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
Certificate serial: 0199CFB66B525798BAFB93DF3027921A736A
Authority key identifier: 05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/uSds6b4A3ugi6DIsYb_3dWNiNEs.roa
Signing time: Fri 10 Oct 2025 20:01:02 +0000
ROA not before: Fri 10 Oct 2025 20:01:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 45.154.157.0/24 maxlen: 24
188.209.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.mft
rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:cf:b6:6b:52:57:98:ba:fb:93:df:30:27:92:1a:73:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
Validity
Not Before: Oct 10 20:01:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b9276ce9be00dee822e8322c61bff7756362344b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a5:92:e6:72:c6:ff:d2:8f:64:7d:15:83:61:
7a:19:a3:8a:ce:ec:f8:45:8f:06:21:aa:07:63:ce:
ab:23:3c:5e:20:ad:81:2b:52:85:ba:26:74:6a:80:
60:a1:81:63:bb:7e:73:4b:19:b1:f3:48:26:f0:b2:
01:a2:1d:1c:3f:e1:e5:a8:cd:e3:d2:f1:32:51:06:
cd:ed:41:19:8d:36:02:f1:89:db:da:8a:50:e7:53:
7b:08:3f:0d:86:e6:48:26:de:77:f0:f9:79:e6:55:
14:5f:08:6d:a1:c3:44:6d:06:7a:b6:f5:72:50:58:
48:28:04:af:9c:bd:16:5c:16:c1:b9:63:d1:e1:62:
94:cb:53:9d:8e:0a:82:cc:93:ed:88:f9:6d:5e:b8:
77:39:74:f7:5f:2a:b9:4e:b1:0c:7e:10:5b:a0:d3:
c2:17:55:a9:76:db:c5:44:77:ff:69:4a:89:62:7d:
29:fb:85:ba:92:11:5d:de:1d:22:42:ba:2e:78:9d:
e7:43:8c:ec:b0:4a:fe:7f:ce:67:39:21:75:44:e1:
e7:c4:09:40:5a:bd:66:38:f8:00:62:cb:1f:8d:84:
c7:b3:62:0c:69:0f:a7:07:08:84:d9:3f:3c:71:86:
fc:65:9d:75:5e:c5:a2:d5:bb:33:17:f1:71:77:69:
db:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:27:6C:E9:BE:00:DE:E8:22:E8:32:2C:61:BF:F7:75:63:62:34:4B
X509v3 Authority Key Identifier:
keyid:05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/uSds6b4A3ugi6DIsYb_3dWNiNEs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.157.0/24
188.209.140.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:86:44:5f:11:b2:fb:31:80:7c:e5:86:a2:5a:86:e0:d2:19:
88:57:29:17:07:84:99:48:8f:03:d0:35:c6:a2:db:3c:e4:52:
d4:ca:0d:0b:cf:b8:45:c0:0d:6e:84:24:dc:51:f6:c6:da:3f:
c9:ad:c4:dd:3a:29:95:3b:26:0e:49:ea:29:11:4a:3d:f3:66:
c0:0c:4e:12:97:39:bd:0f:e8:92:c9:fe:7e:b8:8a:2f:fa:bb:
b6:17:62:36:62:10:b2:5f:b9:a4:46:70:92:da:9c:cc:84:12:
34:05:0c:29:48:b3:67:85:01:e6:18:aa:22:54:9e:e6:19:16:
3b:d1:8d:f3:b2:97:8e:23:1f:38:ff:99:e3:be:6a:57:cf:7c:
17:27:24:9d:bb:a4:f0:7c:42:c2:9b:60:9f:bd:b0:13:e8:df:
0d:fd:6b:c7:6e:8f:c9:92:b1:62:41:53:2d:03:a9:19:4d:b5:
a6:8b:78:5e:1a:25:ba:6f:bc:6c:95:2f:07:24:df:14:89:0c:
57:44:1f:e6:3d:00:7b:c2:76:4f:f8:4c:72:8d:9c:5a:2a:04:
12:95:30:1a:f9:10:d0:9e:ee:69:6b:27:5f:19:19:63:8f:bf:
5c:80:8c:5a:90:12:df:46:7c:6c:5f:c2:02:f6:29:96:e2:dc:
a7:6b:89:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:53:12 2025 by rpki-client