Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/5RUXM7Ux5HIq1uDuI2UFlpXiuaI.roa
File: 5RUXM7Ux5HIq1uDuI2UFlpXiuaI.roa (raw, json)
Hash identifier: 146vkE/yWU5/sWC5AaWRfDg+v+/iGEWuFzTQXre/DhE=
Subject key identifier: E5:15:17:33:B5:31:E4:72:2A:D6:E0:EE:23:65:05:96:95:E2:B9:A2
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 01989EAB0028ED72CCEA2AF406F848507661
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/5RUXM7Ux5HIq1uDuI2UFlpXiuaI.roa
Signing time: Tue 12 Aug 2025 14:24:23 +0000
ROA not before: Tue 12 Aug 2025 14:24:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49443
IP address blocks: 45.86.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft
rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 13:02:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9e:ab:00:28:ed:72:cc:ea:2a:f4:06:f8:48:50:76:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Aug 12 14:24:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e5151733b531e4722ad6e0ee2365059695e2b9a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:09:c6:21:77:41:c5:ba:e8:15:63:c6:8f:2e:
b7:56:43:f0:b8:c5:40:56:cc:9d:1f:78:31:2a:28:
a0:f1:ee:32:a0:99:9a:66:12:73:7b:57:99:f6:4d:
c1:71:31:a0:bf:92:5a:a0:44:36:62:33:17:8e:1a:
f6:6d:5b:d7:e1:32:c7:c1:07:cc:5b:14:0c:f0:46:
5a:01:6d:a6:33:ed:bc:35:50:83:2f:68:b0:7e:b8:
18:58:77:94:d5:4e:f2:43:33:a3:41:41:57:11:83:
0f:5c:1d:64:1a:bc:c0:64:23:50:6b:8b:9e:b7:ee:
f9:60:57:ba:7f:d0:57:59:5e:b6:75:28:3f:be:12:
4d:76:22:c5:ab:02:a3:a8:f9:5b:43:86:77:91:ec:
ab:7b:f7:52:8a:4b:03:cd:ca:4c:0c:f0:40:4f:92:
92:58:e7:80:5a:24:ca:17:08:02:9e:4a:f8:12:7d:
72:ae:da:46:ac:b7:59:4d:78:f9:68:40:bf:77:d5:
91:eb:6d:28:85:d7:04:44:2b:cd:83:69:e5:91:00:
13:2a:3b:88:ce:f9:f3:39:a4:67:90:a6:6b:a5:69:
20:73:4f:f7:5b:cc:f6:32:d6:df:52:96:a5:fb:b0:
b6:48:4b:f0:df:2b:0a:84:9d:65:62:b5:37:8b:bc:
f7:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:15:17:33:B5:31:E4:72:2A:D6:E0:EE:23:65:05:96:95:E2:B9:A2
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/5RUXM7Ux5HIq1uDuI2UFlpXiuaI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.19.0/24
Signature Algorithm: sha256WithRSAEncryption
73:3c:ad:4f:ac:0b:e1:99:23:90:94:6f:74:c5:73:a1:2c:ec:
93:ff:5b:17:d2:a3:6e:de:35:21:ef:8d:fe:d5:6f:9c:2c:dd:
ee:25:5a:ce:8e:ff:ca:4b:74:16:c4:da:d7:b4:b7:04:c4:2b:
8a:eb:70:7c:35:2d:79:49:f1:ac:58:96:5a:6f:cf:06:69:6e:
ce:12:86:7d:bc:29:1e:28:b3:42:78:d5:c2:f0:bd:c0:4b:eb:
38:41:01:2b:d5:23:d8:58:f1:9a:c8:d3:44:50:38:33:a4:65:
5f:e0:61:d2:7c:6a:51:3a:62:6c:c3:6f:4d:e7:8d:98:72:57:
ad:23:94:3d:e5:1a:cb:2b:85:79:18:5a:3c:d4:b0:0f:6a:a9:
f1:bc:d6:55:c0:61:e0:f0:2a:75:ce:d3:01:28:df:f9:c3:5a:
bc:74:04:57:07:ef:14:69:4d:0c:a8:97:4e:01:b5:2a:ba:57:
05:6f:23:bd:2a:70:db:97:70:9d:1d:b1:4d:ce:47:d5:bb:cd:
06:2f:f0:18:36:11:07:16:0e:10:fe:16:5a:96:cf:44:f8:a5:
10:3e:67:f3:3a:4b:5d:49:50:26:80:e7:41:a2:a0:b4:2e:56:
9c:b1:aa:22:21:fc:8d:f6:fb:97:cd:96:d4:8e:25:7d:c1:36:
1d:31:cd:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:58:10 2025 by rpki-client