Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/rlqm6m8UHz9MDjdSwkuvaa8oTyw.roa
File: rlqm6m8UHz9MDjdSwkuvaa8oTyw.roa (raw, json)
Hash identifier: 0dd2f5zeEyQY8iSWdXnCx7L/KJ79uJRAWhg2o7RRsBo=
Subject key identifier: AE:5A:A6:EA:6F:14:1F:3F:4C:0E:37:52:C2:4B:AF:69:AF:28:4F:2C
Certificate issuer: /CN=7d5695786f8450d1041dc88ad892cbb570d5972b
Certificate serial: 0198BF57E114BE904D788B3D3EF20162F379
Authority key identifier: 7D:56:95:78:6F:84:50:D1:04:1D:C8:8A:D8:92:CB:B5:70:D5:97:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVaVeG-EUNEEHciK2JLLtXDVlys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/rlqm6m8UHz9MDjdSwkuvaa8oTyw.roa
Signing time: Mon 18 Aug 2025 22:41:04 +0000
ROA not before: Mon 18 Aug 2025 22:41:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 45.11.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/fVaVeG-EUNEEHciK2JLLtXDVlys.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/fVaVeG-EUNEEHciK2JLLtXDVlys.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVaVeG-EUNEEHciK2JLLtXDVlys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:bf:57:e1:14:be:90:4d:78:8b:3d:3e:f2:01:62:f3:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d5695786f8450d1041dc88ad892cbb570d5972b
Validity
Not Before: Aug 18 22:41:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ae5aa6ea6f141f3f4c0e3752c24baf69af284f2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:70:66:2a:f7:f6:01:71:fd:42:b7:54:b1:d7:
f1:1e:d9:cd:e8:39:c1:4c:f7:fe:81:53:44:01:f2:
3a:c2:14:d2:18:a3:f0:75:5b:32:0e:21:4b:e9:7b:
cc:b7:34:40:cf:69:c3:12:9c:eb:1e:77:c8:cf:09:
63:15:7e:5f:54:92:52:d3:67:15:5a:84:2b:31:f1:
e2:8b:5a:f1:b0:3c:10:ee:94:d4:12:65:c3:dc:26:
39:b7:e0:d6:c0:4e:cc:69:21:14:10:f8:f1:8e:61:
9b:98:12:3c:12:02:42:0d:90:54:9c:cd:1c:47:0d:
3b:c9:a4:1c:7d:f2:f8:2d:6a:83:1f:fc:97:1f:7f:
cd:af:51:39:a5:ce:52:2a:41:62:01:eb:66:1f:e2:
1f:c3:a9:df:98:d2:cf:9d:b3:05:4f:77:0e:28:df:
f6:a5:fa:a6:e4:68:8a:c5:96:59:cd:be:7d:e6:f1:
93:77:33:b0:ef:83:59:37:1c:96:6d:66:d1:d7:d5:
e5:18:7b:b8:2a:3f:c7:68:7b:a8:c2:4d:30:09:10:
10:b2:a8:d1:76:05:56:13:79:cb:41:e6:42:10:e6:
67:49:bc:16:5d:d5:dd:e7:2b:d5:1e:60:54:71:92:
3b:15:10:e7:82:88:8d:90:b0:ef:b2:36:d2:f3:8b:
d5:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:5A:A6:EA:6F:14:1F:3F:4C:0E:37:52:C2:4B:AF:69:AF:28:4F:2C
X509v3 Authority Key Identifier:
keyid:7D:56:95:78:6F:84:50:D1:04:1D:C8:8A:D8:92:CB:B5:70:D5:97:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVaVeG-EUNEEHciK2JLLtXDVlys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/rlqm6m8UHz9MDjdSwkuvaa8oTyw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/fVaVeG-EUNEEHciK2JLLtXDVlys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.173.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:d5:da:cd:14:9c:73:b6:a5:f8:fc:cc:4e:51:f4:83:a0:68:
96:0c:a1:49:0a:9c:31:82:b1:6f:c5:9c:b0:6c:51:07:fd:f3:
c0:99:b3:3d:73:71:4c:2f:3b:07:ab:c9:01:77:07:66:13:ab:
5b:e4:82:e2:43:76:d2:df:33:31:24:08:bd:d3:8b:86:e0:e4:
81:3e:35:79:94:f6:ce:b3:86:21:30:e1:39:7c:23:ac:4d:12:
fc:6b:1d:d4:ed:99:77:92:34:cc:38:93:58:1f:a2:3c:18:d6:
84:c4:e2:e4:e6:ab:a2:f9:e0:bf:01:99:95:99:47:30:8a:d2:
ae:66:5e:66:7e:67:e8:4b:07:a3:fb:39:18:0c:19:fe:ba:1a:
42:b2:2b:9b:1b:a9:87:b5:b9:25:d4:6b:2c:6e:60:dd:54:9c:
90:bc:ac:3f:9b:94:cc:be:7d:0c:30:a6:18:ec:4b:25:ae:22:
b0:ac:fd:38:b5:e6:ac:b0:29:f6:76:64:82:c6:90:7f:ca:52:
2c:70:dd:0b:66:67:e2:95:ca:f9:f6:0e:a3:57:e0:ad:d6:28:
79:bc:fb:d1:44:ad:9c:18:1e:9f:86:b8:88:3f:1e:37:91:f7:
5c:02:e0:34:52:7b:64:34:85:d7:50:39:b3:f1:c5:71:ca:29:
7e:f0:27:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:01:56 2025 by rpki-client