Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/FU1FELFX7SjHw7VAqQjC9m5g80k.roa
File: FU1FELFX7SjHw7VAqQjC9m5g80k.roa (raw, json)
Hash identifier: D6s1stTJWf/hHLaUNMBy00LBR5pf9MJp3AS0Caeu7UM=
Subject key identifier: 15:4D:45:10:B1:57:ED:28:C7:C3:B5:40:A9:08:C2:F6:6E:60:F3:49
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 0198BF3F2B046747D05D0D1A28D8F86D03F1
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/FU1FELFX7SjHw7VAqQjC9m5g80k.roa
Signing time: Mon 18 Aug 2025 22:14:04 +0000
ROA not before: Mon 18 Aug 2025 22:14:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215242
IP address blocks: 45.94.169.0/24 maxlen: 24
45.138.180.0/24 maxlen: 24
45.151.3.0/24 maxlen: 24
77.83.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:bf:3f:2b:04:67:47:d0:5d:0d:1a:28:d8:f8:6d:03:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Aug 18 22:14:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=154d4510b157ed28c7c3b540a908c2f66e60f349
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:fe:e5:d6:b0:99:50:c5:4b:70:f9:a5:19:4f:
27:6e:3b:a2:ab:a1:6c:7a:ae:fe:24:c4:71:e3:d3:
50:09:c3:ba:03:db:08:d4:8e:d3:bc:b8:18:6a:0d:
8f:f9:63:f3:33:25:ce:e7:b4:d5:fd:c4:1d:52:5e:
94:35:d2:d0:4f:27:13:8f:dd:51:88:9d:b8:52:37:
5b:5d:3a:e9:aa:13:92:88:85:63:57:eb:b2:9a:4c:
77:3d:48:a0:1c:6c:cc:06:76:0a:f3:6b:5a:ac:76:
e7:06:87:45:97:57:96:11:b8:14:b1:60:c8:41:b1:
f2:40:ec:2a:b0:d0:26:0f:41:f9:87:c2:c1:26:a7:
38:53:d1:9b:5f:f8:c0:3d:09:76:f8:97:0b:24:e3:
9b:b8:09:3b:e3:cd:91:53:9f:ea:48:80:ea:5b:8f:
72:1a:a3:3f:85:28:8a:48:65:01:89:08:a2:1f:6e:
36:cb:fb:50:87:6c:b5:c8:01:36:89:1e:86:6b:35:
7f:87:d2:57:4a:96:6f:b8:ef:ea:21:ac:4d:f2:75:
eb:3c:d0:e1:88:c0:9c:07:3f:b2:49:d7:d9:7b:4f:
fc:13:20:5a:27:46:22:ed:70:b5:62:60:0f:b0:22:
07:75:d0:1e:e9:c0:eb:a8:98:ef:69:ef:0d:2c:5f:
ea:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:4D:45:10:B1:57:ED:28:C7:C3:B5:40:A9:08:C2:F6:6E:60:F3:49
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/FU1FELFX7SjHw7VAqQjC9m5g80k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.169.0/24
45.138.180.0/24
45.151.3.0/24
77.83.37.0/24
Signature Algorithm: sha256WithRSAEncryption
90:dc:49:36:60:88:b6:cc:f6:ef:12:8f:62:03:2c:a0:e8:22:
30:46:07:7f:1a:eb:8b:11:55:37:c7:c6:f6:e8:5b:a2:a1:01:
02:fe:67:da:50:1c:19:ba:de:ba:b5:f1:77:be:e6:2f:a4:54:
ca:98:3e:56:3a:c8:aa:df:a2:15:7e:6c:fc:fd:4e:af:ce:45:
08:0f:f8:55:8d:6d:3b:45:4b:c1:6a:6b:58:a2:61:ed:cd:96:
ed:1f:2f:41:62:98:03:db:f8:65:ad:a0:64:31:47:e1:d8:75:
db:a8:b5:04:c0:af:51:fc:4a:d6:95:8f:5c:4d:b1:78:c5:fc:
7e:58:5c:c1:54:36:eb:0b:40:33:14:82:80:5f:b6:3b:cb:b4:
33:23:ca:84:53:f6:e8:3c:ed:57:df:03:c7:80:7e:aa:7f:ea:
52:65:5c:c6:b0:44:0e:ad:bf:73:4b:ff:cc:9a:0e:a8:67:ba:
dc:c0:eb:ac:aa:da:90:6e:f9:7e:80:fc:f9:09:f0:74:46:e7:
aa:61:5b:84:d7:73:e7:5e:9c:b8:0c:98:41:ea:0d:c8:65:b0:
12:6f:a9:b3:ab:84:bf:96:a9:e2:d6:c8:10:cd:42:b8:70:d0:
40:80:65:f7:cf:51:c3:d2:12:6f:d0:00:1f:64:b8:81:06:34:
b9:34:e0:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:40:34 2025 by rpki-client