Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/RcsSaq0_BpL6lHW1LC0kjz4bYBo.roa
File: RcsSaq0_BpL6lHW1LC0kjz4bYBo.roa (raw, json)
Hash identifier: NRK1tkj307QIWrwEzdrVKBHZ1usXN/uxhPlhLwB47SM=
Subject key identifier: 45:CB:12:6A:AD:3F:06:92:FA:94:75:B5:2C:2D:24:8F:3E:1B:60:1A
Certificate issuer: /CN=cd108c225f2478cd4230179890d07284be1636cd
Certificate serial: 0199F1E4F9FB9B9A902D60B6650DF128BA20
Authority key identifier: CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/RcsSaq0_BpL6lHW1LC0kjz4bYBo.roa
Signing time: Fri 17 Oct 2025 11:18:59 +0000
ROA not before: Fri 17 Oct 2025 11:18:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 136038
IP address blocks: 2.59.152.0/22 maxlen: 22
2.59.152.0/24 maxlen: 24
2.59.154.0/24 maxlen: 24
2.59.155.0/24 maxlen: 24
45.91.226.0/24 maxlen: 24
45.91.227.0/24 maxlen: 24
45.142.152.0/24 maxlen: 24
45.142.155.0/24 maxlen: 24
185.202.103.0/24 maxlen: 24
193.239.150.0/24 maxlen: 24
193.239.154.0/24 maxlen: 24
194.126.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft
rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:f1:e4:f9:fb:9b:9a:90:2d:60:b6:65:0d:f1:28:ba:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd108c225f2478cd4230179890d07284be1636cd
Validity
Not Before: Oct 17 11:18:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=45cb126aad3f0692fa9475b52c2d248f3e1b601a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:86:80:27:ef:7f:a9:49:96:a2:4a:df:82:69:
40:0f:b0:ff:fa:95:f4:62:ce:c9:6e:da:80:55:30:
38:e9:08:fd:72:ef:0a:2e:aa:8a:c8:03:93:e5:ec:
90:9d:0c:c4:07:92:73:20:71:4a:dd:c8:1a:4a:11:
4b:f4:54:c4:ec:5c:c5:14:6e:33:58:e0:02:8b:36:
d2:82:47:e8:63:c5:29:e0:ca:8b:b0:4c:66:f6:6b:
07:15:59:5e:96:b8:81:20:aa:a9:92:b9:fe:b6:d4:
6b:2f:1d:ff:e5:69:ec:c3:7a:a4:17:60:4a:5b:d8:
01:ed:49:85:6c:29:be:24:bb:43:28:a0:e7:59:27:
45:d2:f3:0d:d6:5e:29:19:f1:a6:f9:3e:e7:76:08:
d7:41:00:fd:9e:ba:e8:e7:8a:94:bc:31:1e:80:59:
50:d3:21:73:d0:be:c9:e6:d4:b4:31:e0:3c:79:2f:
c9:08:9e:c0:4d:0b:af:b8:7b:8a:e9:05:06:22:4b:
67:b2:35:02:d8:45:78:f9:f6:e2:62:13:e3:e8:e4:
5a:be:15:f0:e7:73:58:b4:a4:36:bf:cc:67:f5:7e:
05:a0:09:6b:d8:05:b2:8a:98:98:3f:ff:76:5d:db:
29:fe:ca:51:15:10:58:08:b9:90:54:8f:a5:48:96:
b6:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:CB:12:6A:AD:3F:06:92:FA:94:75:B5:2C:2D:24:8F:3E:1B:60:1A
X509v3 Authority Key Identifier:
keyid:CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/RcsSaq0_BpL6lHW1LC0kjz4bYBo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.152.0/22
45.91.226.0/23
45.142.152.0/24
45.142.155.0/24
185.202.103.0/24
193.239.150.0/24
193.239.154.0/24
194.126.202.0/24
Signature Algorithm: sha256WithRSAEncryption
76:f0:66:43:41:0a:86:9a:b0:a8:c1:c5:88:4c:0a:a0:a4:c0:
d7:5d:2e:ac:f9:31:c4:91:fe:56:1f:fb:81:c4:e7:b5:0e:0f:
6c:b1:06:a4:61:51:7a:79:92:45:d0:15:d3:84:17:13:2a:38:
11:77:0c:ac:90:87:ca:7d:f1:a7:aa:39:96:e5:f2:2b:55:a2:
4a:f6:9a:24:21:eb:37:6d:3a:22:36:7e:5e:f6:a9:e2:de:25:
63:1c:a4:e6:9c:da:79:8a:ae:6f:2a:c8:67:1d:b6:fe:37:d7:
b7:ee:01:8a:21:35:a2:6e:b9:87:7b:40:7f:52:62:86:00:da:
ab:49:31:68:18:82:c0:a2:54:d4:53:69:08:97:f4:51:5e:cf:
e7:0f:0f:b9:8c:55:e2:fa:64:6b:bb:74:d0:c8:90:d0:ae:6e:
a7:ce:42:e7:d5:92:66:d0:40:7e:ff:b0:34:32:42:9b:91:41:
3a:3a:e7:c2:67:b7:6a:6a:f2:88:4a:db:56:1a:58:34:42:34:
f3:81:38:bd:a5:d3:6c:4e:f0:d8:20:e9:79:dc:1f:8a:6d:e3:
c4:bf:23:51:84:b9:e2:1e:f4:43:92:c2:f5:2c:14:59:74:09:
19:2b:e8:6c:69:02:9d:f8:bf:5d:1d:69:4b:e1:48:d3:c2:aa:
46:dc:6b:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:04:41 2025 by rpki-client