Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/cdIEqH2ECoJknn2Dwm-AK6ENZ1c.roa
File: cdIEqH2ECoJknn2Dwm-AK6ENZ1c.roa (raw, json)
Hash identifier: 55hEQC/Pl+kK1y64PkueK4W2nW93/Bu5OL6Vz4Pqh+I=
Subject key identifier: 71:D2:04:A8:7D:84:0A:82:64:9E:7D:83:C2:6F:80:2B:A1:0D:67:57
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 0198A4F918857319F6E2D57D334D39DC45B8
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/cdIEqH2ECoJknn2Dwm-AK6ENZ1c.roa
Signing time: Wed 13 Aug 2025 19:47:24 +0000
ROA not before: Wed 13 Aug 2025 19:47:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211507
IP address blocks: 45.67.138.0/24 maxlen: 24
185.132.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft
rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a4:f9:18:85:73:19:f6:e2:d5:7d:33:4d:39:dc:45:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Aug 13 19:47:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=71d204a87d840a82649e7d83c26f802ba10d6757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d1:0b:46:26:f1:b6:ff:cf:7f:a7:85:94:03:
25:da:ec:73:c5:88:ca:9c:7a:85:46:56:29:c4:aa:
ab:77:af:28:d1:fd:76:74:f3:53:3e:1c:3a:57:8a:
43:36:59:c3:c1:76:80:37:ac:15:7a:5b:b0:03:1e:
54:7c:8f:b1:fc:af:69:69:0a:5b:1e:d4:83:64:a1:
02:a7:1f:95:c2:17:a4:35:87:25:09:a9:cc:5d:c1:
fa:a2:d3:e4:fa:6a:d3:0a:91:5c:19:0f:bd:9b:4a:
ad:1c:c9:e6:5e:ed:4a:a0:b0:63:88:a8:09:02:25:
61:68:64:f5:3f:ab:db:c9:ce:6b:04:9c:ad:25:db:
5b:4c:02:75:07:c5:2c:ef:c5:3d:68:d7:a3:f9:68:
7b:2c:82:9b:ef:7e:94:07:c5:3b:6c:d2:07:c0:2b:
da:69:bd:5f:8e:13:fc:de:2c:ab:08:ec:34:a5:6b:
96:12:d3:3d:9f:e9:50:6d:40:9a:10:80:c3:18:a7:
25:4a:58:e2:a7:7d:25:da:b5:c9:7d:c1:63:2e:cd:
83:87:bb:6a:85:df:67:13:6b:f5:91:66:a9:8b:8c:
c2:90:26:db:57:09:2f:7b:8c:b5:bc:f8:02:4c:6a:
66:96:9b:f4:b2:a2:93:99:a7:fe:5e:e5:22:0a:b5:
90:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:D2:04:A8:7D:84:0A:82:64:9E:7D:83:C2:6F:80:2B:A1:0D:67:57
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/cdIEqH2ECoJknn2Dwm-AK6ENZ1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.138.0/24
185.132.53.0/24
Signature Algorithm: sha256WithRSAEncryption
12:77:b8:8a:98:e5:88:79:6a:fc:17:a7:87:5e:85:8a:56:a3:
7b:67:b4:55:be:d2:ab:18:7b:a2:f6:fd:be:f9:f0:a7:1d:c7:
09:66:60:63:f3:36:34:ad:87:e8:99:4b:51:70:1e:fd:3f:5c:
2a:31:cf:ca:dc:e1:66:26:3b:40:7b:08:dc:0b:6e:da:7b:9a:
02:a0:01:2a:72:37:20:22:5c:e9:4e:75:6c:89:0e:dd:3c:28:
81:39:22:e8:b5:a8:2a:e0:05:bc:19:d2:cc:49:90:09:a6:d9:
16:c4:63:c1:ce:95:fb:30:c0:bf:6f:bc:4c:62:b8:29:4a:ee:
94:d7:a7:c2:8a:40:5f:1d:ed:97:0d:52:a9:8f:9d:c1:e7:04:
d3:11:4b:33:15:ab:ae:07:71:c1:4b:55:96:a2:41:6c:3b:b5:
98:c3:2a:55:78:84:42:30:11:25:6b:db:24:29:63:32:db:df:
fb:ce:43:6f:18:ea:cb:64:78:99:da:f7:fa:76:31:00:eb:7b:
92:97:b9:5a:bd:0a:00:b0:3e:8f:d2:19:45:25:a2:b2:01:e9:
95:cb:10:c9:c3:cf:fe:69:36:cc:31:95:bf:8e:89:20:1f:ad:
7b:03:12:2d:c1:8d:93:ae:49:fd:61:ee:bb:8c:f4:0a:ce:44:
61:b8:7a:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:47:56 2025 by rpki-client