Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/kpV7wzqDbRyoGArgb9N6OOBoK-k.roa
File: kpV7wzqDbRyoGArgb9N6OOBoK-k.roa (raw, json)
Hash identifier: 8p4dKjzaaBMEM3D4CNwtu3zPX6tpWKHyUzB6bvQBE/I=
Subject key identifier: 92:95:7B:C3:3A:83:6D:1C:A8:18:0A:E0:6F:D3:7A:38:E0:68:2B:E9
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 0199E6520319203B454CCC179B6905E5932B
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/kpV7wzqDbRyoGArgb9N6OOBoK-k.roa
Signing time: Wed 15 Oct 2025 05:22:38 +0000
ROA not before: Wed 15 Oct 2025 05:22:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200636
IP address blocks: 45.155.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e6:52:03:19:20:3b:45:4c:cc:17:9b:69:05:e5:93:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Oct 15 05:22:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=92957bc33a836d1ca8180ae06fd37a38e0682be9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:70:02:be:e6:17:1e:fa:72:43:f2:3b:74:53:
f0:5b:aa:9b:80:c5:95:0a:4d:e9:33:40:b9:ba:e9:
43:d2:8f:f3:58:11:b5:d3:09:5d:c9:12:46:cf:21:
9a:be:f0:77:32:3c:f0:41:99:23:9a:a7:46:2a:05:
a7:e1:aa:80:a2:45:a0:b3:3b:7e:91:17:36:46:23:
c6:ea:e7:6a:6c:ee:33:cc:ae:15:d4:1a:13:5e:29:
31:bd:29:0b:98:2f:c6:57:b6:db:1a:42:9e:ca:53:
f1:4e:ad:73:1d:ef:e2:32:83:ac:09:77:2a:66:94:
b6:81:73:d7:b7:5d:3e:47:80:d0:ac:92:6f:29:fb:
51:01:da:01:82:c2:98:5c:12:0f:1f:9c:21:9f:fa:
80:13:94:61:c1:24:51:01:2f:99:d6:1e:87:2c:b7:
0f:8a:15:14:06:cb:45:d4:ce:33:79:29:79:5a:62:
76:3b:d3:07:35:18:3b:9a:bf:48:e5:21:b0:01:e9:
01:c0:8d:fb:9a:0d:4c:b4:7b:4a:02:4d:c9:63:04:
80:35:8d:95:24:4d:e1:49:45:3c:a9:a1:8f:a6:d9:
98:70:f5:f0:93:ee:c7:c7:e5:7e:19:14:b5:93:f5:
03:14:dc:a6:64:ea:a2:19:b1:34:3b:13:be:fa:08:
c3:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:95:7B:C3:3A:83:6D:1C:A8:18:0A:E0:6F:D3:7A:38:E0:68:2B:E9
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/kpV7wzqDbRyoGArgb9N6OOBoK-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.64.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:fb:a3:e3:9a:7e:09:f8:e6:46:c3:8d:4b:56:c3:c0:f9:e2:
02:96:9a:e8:a3:dc:4b:32:6f:11:55:24:c8:1b:c7:24:c9:2b:
0c:0c:5d:1b:b1:0d:3f:73:e3:5a:cf:c4:aa:86:b0:95:31:85:
c7:ad:2c:96:05:12:3c:74:c9:b6:e4:9a:f8:b9:96:ab:c4:ea:
fb:a7:9e:02:dd:6a:78:56:29:40:b3:79:dd:82:f1:74:8e:87:
e6:64:32:0d:e6:cf:67:30:1f:ad:2e:82:2b:60:d4:1b:84:b1:
f5:85:91:a7:eb:ba:be:9d:a6:32:1d:63:2d:8c:29:99:c9:57:
fa:e9:33:cd:b6:7a:cc:0f:7a:53:98:ec:73:4d:82:69:a6:53:
aa:3d:da:ea:2c:02:b0:c0:2e:7c:43:01:9c:5f:ff:01:60:11:
eb:f6:f1:36:95:2c:b5:11:ae:9b:fc:02:30:4f:02:0e:e3:bc:
8e:6c:31:51:77:9c:8d:57:82:fc:88:a1:6e:02:ae:23:b2:82:
02:35:73:89:36:08:01:5c:02:4e:a0:f5:a1:26:21:dc:fe:93:
b3:ed:07:a1:d2:12:f3:eb:05:a5:01:f1:0a:db:3d:bb:0e:a1:
e8:2b:0b:30:b1:40:c1:84:94:5f:04:7c:c2:5a:f6:1e:80:4a:
3f:d6:a4:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:25:00 2025 by rpki-client