Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/453cfd-535c-4d2a-bb27-436b3ee7ed35/1/9JJ19zbpfgmK5cWw4_TivjNeu1c.roa
File: 9JJ19zbpfgmK5cWw4_TivjNeu1c.roa (raw, json)
Hash identifier: nwELuyNPxarY0R8dzJoxHRf1m9BsPwpa7s4U5L6T37U=
Subject key identifier: F4:92:75:F7:36:E9:7E:09:8A:E5:C5:B0:E3:F4:E2:BE:33:5E:BB:57
Certificate issuer: /CN=f457bc193a595948a7b7a096b710bb5262830f41
Certificate serial: 019971E69DC10CA2F59B83291EEFDE8762AC
Authority key identifier: F4:57:BC:19:3A:59:59:48:A7:B7:A0:96:B7:10:BB:52:62:83:0F:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Fe8GTpZWUint6CWtxC7UmKDD0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/453cfd-535c-4d2a-bb27-436b3ee7ed35/1/9JJ19zbpfgmK5cWw4_TivjNeu1c.roa
Signing time: Mon 22 Sep 2025 14:49:23 +0000
ROA not before: Mon 22 Sep 2025 14:49:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208724
IP address blocks: 45.87.96.0/22 maxlen: 22
45.87.96.0/24 maxlen: 24
45.87.97.0/24 maxlen: 24
45.87.98.0/24 maxlen: 24
45.87.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/453cfd-535c-4d2a-bb27-436b3ee7ed35/1/9Fe8GTpZWUint6CWtxC7UmKDD0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/453cfd-535c-4d2a-bb27-436b3ee7ed35/1/9Fe8GTpZWUint6CWtxC7UmKDD0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Fe8GTpZWUint6CWtxC7UmKDD0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:71:e6:9d:c1:0c:a2:f5:9b:83:29:1e:ef:de:87:62:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f457bc193a595948a7b7a096b710bb5262830f41
Validity
Not Before: Sep 22 14:49:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f49275f736e97e098ae5c5b0e3f4e2be335ebb57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:01:65:a3:d5:a3:2e:5f:d2:f8:8d:ef:20:d6:
cf:c7:d0:91:b6:07:82:06:15:a3:13:76:e9:74:1c:
f9:a7:42:00:6e:76:90:c7:59:5b:c4:69:06:d5:eb:
4a:f9:00:2c:95:81:f1:63:3d:a5:a6:8a:b6:a6:cc:
83:89:59:73:8e:95:77:fb:96:3b:ef:5c:ab:b7:c9:
f6:9e:d6:af:56:b0:f7:da:96:68:45:8e:6b:85:fc:
b2:8a:13:e6:ad:b2:a2:e8:ee:84:92:67:11:e2:41:
a5:a5:ef:96:08:ac:a6:0e:a2:cc:21:05:38:f2:60:
04:9a:3d:6d:d1:03:c8:63:00:00:7e:84:3f:50:23:
c7:b5:2a:c1:4a:eb:a2:9f:c8:b8:7c:be:f2:45:a8:
10:22:96:be:a8:89:37:4d:e2:64:84:36:0b:9c:40:
d3:5f:ba:22:8c:49:ee:ea:c2:73:f2:34:f3:7b:f8:
ca:10:01:9f:cc:b5:69:e6:cb:15:7c:fd:cb:99:ba:
65:da:92:4e:e8:2c:ad:9b:53:78:32:ed:f7:76:36:
46:aa:7b:30:ac:53:be:67:96:c2:d9:68:ef:0f:90:
f9:51:79:0b:67:44:ba:67:9d:9c:c2:b2:e4:15:7c:
d8:c3:0d:5f:65:3e:a8:87:aa:eb:6b:59:63:5d:27:
e7:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:92:75:F7:36:E9:7E:09:8A:E5:C5:B0:E3:F4:E2:BE:33:5E:BB:57
X509v3 Authority Key Identifier:
keyid:F4:57:BC:19:3A:59:59:48:A7:B7:A0:96:B7:10:BB:52:62:83:0F:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Fe8GTpZWUint6CWtxC7UmKDD0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/453cfd-535c-4d2a-bb27-436b3ee7ed35/1/9JJ19zbpfgmK5cWw4_TivjNeu1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/453cfd-535c-4d2a-bb27-436b3ee7ed35/1/9Fe8GTpZWUint6CWtxC7UmKDD0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.96.0/22
Signature Algorithm: sha256WithRSAEncryption
04:cb:75:d5:b1:41:b9:8f:2f:12:d7:13:e2:a7:ad:8a:f2:40:
50:fc:7c:b7:c6:44:fe:c7:3e:51:13:de:af:19:b4:c8:ca:8b:
7e:8f:55:8f:83:e1:7e:fa:bb:ed:11:1d:6c:fd:6a:c4:6e:4a:
de:f3:aa:41:dc:2e:3b:e1:33:c7:2c:7c:91:e2:db:8d:34:af:
61:9a:9b:2b:58:b0:e5:69:37:67:84:32:19:72:cb:8b:35:04:
30:23:25:78:37:c6:1c:9f:fc:10:ee:ff:75:b7:e6:ea:b1:fa:
ae:ed:6a:b4:ff:e9:2c:52:94:6d:31:a3:9c:f3:89:2d:db:99:
e3:4c:10:60:07:c4:3c:7a:f0:99:3d:98:8f:52:30:15:2d:42:
ea:e1:14:e5:7e:6f:64:dd:46:30:e4:d2:47:bb:ee:39:71:a8:
d5:59:60:94:2a:5d:d8:17:c6:e0:43:4f:a7:fe:25:a1:0b:13:
c3:22:a1:58:21:f7:a9:52:ad:c2:82:d8:08:53:cc:71:57:cb:
a6:f1:ef:b5:4f:42:f4:fd:02:2a:10:91:35:ef:06:f7:95:b4:
5b:f1:53:1c:d2:a1:9f:eb:af:77:6c:51:b5:53:28:13:eb:7f:
57:c6:40:97:26:d2:e9:f3:47:2b:b5:b4:c4:eb:fd:3a:4b:85:
45:05:16:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:04:35 2025 by rpki-client