Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/agUI1vHmqHIc2nUx-x5wLY_TV_A.roa
File: agUI1vHmqHIc2nUx-x5wLY_TV_A.roa (raw, json)
Hash identifier: FA12851IZb0A3QT14G2l2dek6vgakWfjtEihLLMc5Fo=
Subject key identifier: 6A:05:08:D6:F1:E6:A8:72:1C:DA:75:31:FB:1E:70:2D:8F:D3:57:F0
Certificate issuer: /CN=ab27ed1cea4321c49c3ca10f3affafdbdad532c2
Certificate serial: 0199534E2A255FFF7DD1109BF1807FD8F1CF
Authority key identifier: AB:27:ED:1C:EA:43:21:C4:9C:3C:A1:0F:3A:FF:AF:DB:DA:D5:32:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qyftHOpDIcScPKEPOv-v29rVMsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/agUI1vHmqHIc2nUx-x5wLY_TV_A.roa
Signing time: Tue 16 Sep 2025 16:14:15 +0000
ROA not before: Tue 16 Sep 2025 16:14:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25255
IP address blocks: 45.3.56.0/24 maxlen: 24
2a07:7e82::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/qyftHOpDIcScPKEPOv-v29rVMsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:53:4e:2a:25:5f:ff:7d:d1:10:9b:f1:80:7f:d8:f1:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab27ed1cea4321c49c3ca10f3affafdbdad532c2
Validity
Not Before: Sep 16 16:14:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6a0508d6f1e6a8721cda7531fb1e702d8fd357f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7f:29:6c:a3:b7:a3:e5:71:1c:42:ff:34:c9:
6e:f5:87:76:1a:42:ea:8a:05:2b:9a:20:e9:e8:a9:
be:3e:4b:bb:77:ff:b8:01:7c:6d:cd:c3:e8:a4:82:
a4:5e:b1:87:5a:fd:16:ad:b4:d6:27:11:51:e6:50:
22:d6:62:9e:02:db:9c:b2:ef:3a:08:e0:f0:a9:36:
01:01:03:2b:2b:6f:e0:56:df:49:0c:c7:1e:6d:d4:
96:1e:5f:e7:e3:a0:c3:e0:ef:b2:f1:b3:6b:5c:21:
36:5e:79:f0:5d:60:b8:43:a6:c9:7c:96:bc:9a:9c:
f9:3a:a6:6e:c1:50:1a:a3:81:14:cb:fa:cd:0e:92:
b7:64:38:8a:68:1e:a4:ee:ba:c9:5d:86:a7:65:af:
fb:9a:fa:5a:39:86:c7:fd:4a:24:f0:dc:70:fa:16:
36:d0:0c:51:0f:b6:4a:c9:36:af:2f:be:3b:43:d9:
b3:26:e6:03:46:ee:77:c2:9c:8a:e7:f2:d8:7a:05:
a4:30:61:ec:66:80:57:e7:ec:c9:80:97:20:71:9a:
45:9a:05:bd:b0:0a:60:da:d0:6f:e5:2e:d7:7d:c0:
bf:47:73:ca:6f:c8:73:eb:79:d1:44:f0:b6:1e:70:
45:58:3d:15:0a:79:98:76:90:2b:72:b8:75:a3:b6:
81:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:05:08:D6:F1:E6:A8:72:1C:DA:75:31:FB:1E:70:2D:8F:D3:57:F0
X509v3 Authority Key Identifier:
keyid:AB:27:ED:1C:EA:43:21:C4:9C:3C:A1:0F:3A:FF:AF:DB:DA:D5:32:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qyftHOpDIcScPKEPOv-v29rVMsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/agUI1vHmqHIc2nUx-x5wLY_TV_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.3.56.0/24
IPv6:
2a07:7e82::/40
Signature Algorithm: sha256WithRSAEncryption
97:15:3e:bd:9e:c5:2c:5a:58:de:9c:3f:97:f8:ac:4c:ac:0c:
a8:97:b8:61:91:b5:9a:b2:8c:4e:3f:ec:b0:de:d2:77:dc:17:
46:fa:f3:7a:80:e7:15:8c:a7:ab:f6:cd:ad:76:ee:c4:dd:cc:
ae:18:e6:76:b3:45:56:83:12:5d:42:2a:12:77:53:6c:2a:f7:
cd:9f:45:11:d4:72:9c:12:7b:74:69:6c:ad:37:6a:c7:dc:0f:
7e:bb:9b:a4:4d:21:54:11:c4:e7:cf:f7:d2:f6:09:8b:ad:6a:
c5:e4:74:1e:68:fb:b3:68:c8:58:08:df:aa:d3:5a:82:dc:57:
86:4b:4c:37:db:b2:49:68:bb:b2:cb:01:9e:6d:26:a4:14:c4:
59:af:aa:56:97:47:15:00:ab:f0:44:cd:05:bd:03:c8:2e:04:
cd:be:ca:b6:59:ce:d3:53:46:ca:0a:43:0b:7a:9b:e8:7e:c8:
aa:da:18:2d:98:91:62:36:53:a3:5e:65:a2:8b:2b:c0:18:88:
34:cd:c0:8b:06:7f:0c:9a:12:a5:48:3d:8f:19:2f:f4:21:ca:
c2:07:a9:35:d9:14:f2:fa:aa:67:04:e0:fe:f2:aa:a7:6d:2f:
24:19:ac:2f:16:b8:e7:af:c9:d7:68:1b:8b:af:1a:91:19:04:
2b:49:dd:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:25:14 2025 by rpki-client