Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/V6-b82tACcJSQPmZfdS6MUVCsn4.roa
File: V6-b82tACcJSQPmZfdS6MUVCsn4.roa (raw, json)
Hash identifier: aeM9itdZILgZYYtgvrhAEqWyMqC1PN2CLIJGA5xVyKM=
Subject key identifier: 57:AF:9B:F3:6B:40:09:C2:52:40:F9:99:7D:D4:BA:31:45:42:B2:7E
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 0197A1D37AFD81D2DF88A9A88F4F55E09507
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/V6-b82tACcJSQPmZfdS6MUVCsn4.roa
Signing time: Tue 24 Jun 2025 12:04:40 +0000
ROA not before: Tue 24 Jun 2025 12:04:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200019
IP address blocks: 45.90.97.0/24 maxlen: 24
45.152.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft
rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:a1:d3:7a:fd:81:d2:df:88:a9:a8:8f:4f:55:e0:95:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jun 24 12:04:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=57af9bf36b4009c25240f9997dd4ba314542b27e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e1:6a:0d:a6:52:3f:4b:54:ce:19:5a:19:ad:
66:98:05:ed:4e:8b:c3:d0:62:2f:bf:6e:69:df:12:
a5:93:bc:54:4c:e9:5f:c2:ea:72:38:eb:17:d5:58:
a8:0f:ac:b3:c5:68:04:eb:cc:f0:d0:85:5f:89:99:
86:60:60:00:be:6c:6d:a0:67:97:36:7b:07:f1:7c:
3f:1f:76:8f:8b:88:ab:77:b5:28:c0:fe:fe:83:3c:
cd:1c:c7:f5:81:c9:bc:11:a9:0e:9d:3d:81:ba:e8:
f4:c9:ee:2f:52:7a:41:ab:01:5d:68:3a:e0:f5:32:
6a:90:8f:0a:06:2e:df:01:ed:e2:49:4e:4a:af:1b:
be:a8:77:d1:de:d6:d9:b0:d1:0f:5f:a9:23:70:9c:
ef:dc:c9:dc:2d:6e:c1:e8:f5:68:31:ea:47:2e:21:
47:b5:c8:08:bb:aa:a8:d5:2e:1d:fe:3e:fb:e0:92:
cc:6d:ef:32:4b:50:5c:00:d2:68:35:91:1a:51:bb:
e6:80:3a:de:db:fe:db:88:53:41:18:67:84:a4:b3:
cb:b6:a0:ab:b9:ca:2a:bf:9a:7b:9d:ac:44:e6:1c:
4a:31:b3:ff:d7:92:80:ab:8a:de:2f:e1:7d:96:9b:
8c:c0:0b:16:88:8c:f3:44:2e:8d:80:b9:64:c3:c1:
36:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:AF:9B:F3:6B:40:09:C2:52:40:F9:99:7D:D4:BA:31:45:42:B2:7E
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/V6-b82tACcJSQPmZfdS6MUVCsn4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.97.0/24
45.152.162.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:8a:60:4a:59:aa:b7:e0:64:6f:97:b7:e9:26:ec:2a:11:4f:
de:10:12:5a:57:66:93:cf:9c:bf:0d:1f:67:c5:90:9c:b4:65:
94:94:cc:8d:d8:6b:a7:82:26:d4:64:f2:2f:a9:64:c8:24:c1:
72:9a:54:e2:9a:37:cf:10:17:9c:93:d1:7a:9f:37:80:fc:a6:
66:53:f2:42:56:46:57:eb:6d:9b:54:a3:a9:db:a4:43:32:86:
1a:01:82:74:b0:1f:6b:a1:7b:86:d7:ef:28:a6:9b:cf:5c:db:
02:61:72:f3:fc:ae:e2:99:4b:02:39:1c:6f:e3:c8:e9:1b:aa:
74:89:f2:95:da:9a:b7:ca:f4:15:f5:f0:c7:15:ce:f8:c9:a6:
9c:95:ca:93:7b:c8:74:9e:c1:76:9f:f9:81:9b:21:d4:5b:17:
b9:5c:64:9c:a9:eb:59:03:5a:13:c9:d6:51:7d:33:6a:a6:cf:
4a:1e:f9:92:9f:d0:25:bd:08:ac:07:12:18:5b:c6:54:e3:70:
49:06:b5:98:e9:81:75:35:2b:22:12:63:32:9a:1f:6e:9c:96:
e3:67:44:74:34:c0:a2:d6:b9:97:93:ef:9a:b9:c8:bd:e6:d0:
ee:ea:4b:76:2f:e4:9e:94:e1:8a:3b:93:c7:9f:37:03:48:78:
91:3a:78:3d
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZeh03r9gdLfiKmoj09V4JUHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiMDQxNWJmYzQzYjM4ZTljZmQxYTEyOTk1MjAyZTg3NjM3
NTJmZGUwHhcNMjUwNjI0MTIwNDQwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1N2FmOWJmMzZiNDAwOWMyNTI0MGY5OTk3ZGQ0YmEzMTQ1NDJiMjdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+FqDaZSP0tUzhlaGa1mmAXtTovD
0GIvv25p3xKlk7xUTOlfwupyOOsX1VioD6yzxWgE68zw0IVfiZmGYGAAvmxtoGeX
NnsH8Xw/H3aPi4ird7UowP7+gzzNHMf1gcm8EakOnT2Buuj0ye4vUnpBqwFdaDrg
9TJqkI8KBi7fAe3iSU5Krxu+qHfR3tbZsNEPX6kjcJzv3MncLW7B6PVoMepHLiFH
tcgIu6qo1S4d/j774JLMbe8yS1BcANJoNZEaUbvmgDre2/7biFNBGGeEpLPLtqCr
ucoqv5p7naxE5hxKMbP/15KAq4reL+F9lpuMwAsWiIzzRC6NgLlkw8E2hQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFevm/NrQAnCUkD5mX3UujFFQrJ+MB8GA1UdIwQY
MBaAFBsEFb/EOzjpz9GhKZUgLodjdS/eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1Nzgt
YTNjYTBkYjgzMjU0LzEvVjYtYjgydEFDY0pTUVBtWmZkUzZNVVZDc240LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1NzgtYTNjYTBkYjgzMjU0
LzEvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALVphAwQA
LZiiMA0GCSqGSIb3DQEBCwUAA4IBAQCoimBKWaq34GRvl7fpJuwqEU/eEBJaV2aT
z5y/DR9nxZCctGWUlMyN2GungibUZPIvqWTIJMFymlTimjfPEBeck9F6nzeA/KZm
U/JCVkZX622bVKOp26RDMoYaAYJ0sB9roXuG1+8oppvPXNsCYXLz/K7imUsCORxv
48jpG6p0ifKV2pq3yvQV9fDHFc74yaaclcqTe8h0nsF2n/mBmyHUWxe5XGScqetZ
A1oTydZRfTNqps9KHvmSn9AlvQisBxIYW8ZU43BJBrWY6YF1NSsiEmMymh9unJbj
Z0R0NMCi1rmXk++auci95tDu6kt2L+SelOGKO5PHnzcDSHiROng9
-----END CERTIFICATE-----
Generated at Sun Jun 29 00:30:53 2025 by rpki-client