Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/nUEnNXIahqZOaIJ72C--DCuqSSg.roa
File: nUEnNXIahqZOaIJ72C--DCuqSSg.roa (raw, json)
Hash identifier: hBSheco3VMK/61U5mmEhaj2EVhxbSX5tEDVU5yirpD0=
Subject key identifier: 9D:41:27:35:72:1A:86:A6:4E:68:82:7B:D8:2F:BE:0C:2B:AA:49:28
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 01999430D7A9B3E5A73186F62AE920E4A34C
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/nUEnNXIahqZOaIJ72C--DCuqSSg.roa
Signing time: Mon 29 Sep 2025 06:37:32 +0000
ROA not before: Mon 29 Sep 2025 06:37:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 265770
IP address blocks: 45.15.244.0/22 maxlen: 24
45.151.196.0/22 maxlen: 22
89.32.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft
rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:94:30:d7:a9:b3:e5:a7:31:86:f6:2a:e9:20:e4:a3:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Sep 29 06:37:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9d412735721a86a64e68827bd82fbe0c2baa4928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:04:54:87:c8:ea:9a:a2:e2:56:8a:a6:09:0b:
f2:79:0d:87:97:6c:fa:42:25:6e:91:73:20:18:6b:
dc:78:93:55:6d:d4:1b:09:b2:ce:3f:7a:87:7d:db:
ab:de:9e:b6:d7:5d:f6:8b:9a:51:86:c9:0d:93:c9:
eb:b2:df:f5:0b:68:5b:b7:4d:4f:e8:d7:ff:57:c1:
cb:65:2b:5d:07:ba:99:2d:07:c1:3f:00:ab:b8:f8:
24:41:40:4a:26:cc:69:09:28:6f:d7:2e:44:db:74:
29:2a:9c:d9:2c:60:8e:71:a9:64:21:a9:7d:39:f4:
69:83:e5:08:de:f5:ce:83:bc:73:cf:31:d5:c4:97:
e7:d3:fc:0f:a6:45:bf:8e:5a:be:75:28:cc:cf:97:
33:d2:29:e3:3d:23:bc:44:5e:d0:22:02:bc:92:08:
5f:d5:a5:91:16:0e:89:ce:31:dc:ee:58:29:9c:85:
af:99:00:ee:71:70:98:74:60:4e:5d:94:44:4f:1c:
8a:2c:41:ac:ef:34:42:8c:0b:d3:6a:2b:e8:fc:f8:
66:06:3d:e5:c5:af:86:83:e7:9c:80:11:cf:0f:b7:
b6:5e:76:05:70:3a:df:c3:7e:c8:51:53:43:ef:af:
37:de:72:78:58:c2:82:0b:4b:25:91:7d:b1:bb:6d:
89:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:41:27:35:72:1A:86:A6:4E:68:82:7B:D8:2F:BE:0C:2B:AA:49:28
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/nUEnNXIahqZOaIJ72C--DCuqSSg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.244.0/22
45.151.196.0/22
89.32.126.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:18:63:af:64:c5:b2:b2:94:43:e8:e5:98:7a:99:32:70:03:
da:2c:af:88:dd:1f:fb:67:54:35:2e:55:60:91:0c:53:e2:b7:
de:7d:87:bd:a8:77:79:57:f1:f5:4e:86:22:1f:f4:b7:71:06:
a4:cf:64:f3:da:de:f4:0d:b2:2f:48:89:2f:61:86:0e:4d:cb:
ac:06:5e:eb:24:f9:ef:5d:76:34:38:07:1c:d2:54:97:6c:0d:
dc:04:fa:e0:bf:1c:a6:fe:71:03:00:ab:16:3f:3d:2a:98:83:
ae:56:72:1b:ee:1b:22:a7:79:e9:66:68:23:fa:d3:2a:a8:50:
aa:de:58:9f:0a:c2:f9:30:b5:f6:da:a9:3c:03:7f:7d:c6:b7:
f2:04:de:25:88:08:8e:83:98:6b:e8:4a:2e:65:f0:64:d0:47:
76:38:08:47:b3:99:0a:7b:20:1c:8e:57:b0:34:70:b0:2f:a7:
fc:d4:d1:dd:f8:44:12:aa:9a:23:16:f8:17:4e:84:18:88:ce:
c5:e0:b2:7a:a9:f7:39:ed:36:6e:f4:28:cb:73:9f:c8:3c:93:
e8:e5:1a:50:72:8d:42:12:ce:8b:f8:f0:08:8e:4a:91:44:90:
f3:0f:8e:b1:49:16:39:98:5c:1f:49:3b:5f:17:5b:33:18:60:
eb:d6:79:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:08:03 2025 by rpki-client