Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/bvT0XxpWvjhSrsyJnY-pHBlHicQ.roa
File: bvT0XxpWvjhSrsyJnY-pHBlHicQ.roa (raw, json)
Hash identifier: jO921Nm2+NbwqmtR+BTndgCkDUsWuQ/tZNnxs0Ah0nM=
Subject key identifier: 6E:F4:F4:5F:1A:56:BE:38:52:AE:CC:89:9D:8F:A9:1C:19:47:89:C4
Certificate issuer: /CN=91d0c78c309a3e99dc9ab74f2cdc0484859e7530
Certificate serial: 01999FA98C1488544822E22CAC398BB34032
Authority key identifier: 91:D0:C7:8C:30:9A:3E:99:DC:9A:B7:4F:2C:DC:04:84:85:9E:75:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kdDHjDCaPpncmrdPLNwEhIWedTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/bvT0XxpWvjhSrsyJnY-pHBlHicQ.roa
Signing time: Wed 01 Oct 2025 12:05:12 +0000
ROA not before: Wed 01 Oct 2025 12:05:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205899
IP address blocks: 45.135.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/kdDHjDCaPpncmrdPLNwEhIWedTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/kdDHjDCaPpncmrdPLNwEhIWedTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kdDHjDCaPpncmrdPLNwEhIWedTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:9f:a9:8c:14:88:54:48:22:e2:2c:ac:39:8b:b3:40:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91d0c78c309a3e99dc9ab74f2cdc0484859e7530
Validity
Not Before: Oct 1 12:05:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6ef4f45f1a56be3852aecc899d8fa91c194789c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:5f:b0:61:0f:a0:61:e2:10:54:99:4b:6e:b2:
ce:1d:94:e1:65:5f:5b:7f:0f:49:cb:77:fa:5f:2d:
18:82:af:a2:6b:3d:1d:97:99:01:3f:01:59:00:de:
d6:a4:86:ae:47:35:39:9d:e7:70:68:29:b0:4c:82:
d1:87:ea:c9:5a:9b:ca:73:b0:30:c2:24:55:50:66:
80:c7:08:a0:c0:7b:08:3f:23:c1:c6:b0:ed:5e:b4:
11:12:c5:e6:c3:9d:c6:b0:36:27:7b:2a:9b:1e:7f:
01:e2:1f:97:e8:5e:30:4e:b9:7b:fb:f9:b3:51:f3:
c2:7e:86:76:7a:c3:0b:06:62:fa:34:bb:41:5a:e6:
31:36:87:69:b6:64:08:c6:1e:49:4a:08:7e:5a:be:
aa:41:19:71:04:07:c5:89:30:2f:88:02:3a:31:98:
92:14:98:fc:4d:8a:fd:10:94:69:66:fa:a4:73:e0:
ed:dc:99:48:29:0d:9d:ed:1d:3d:b8:ae:7d:6d:d6:
b3:73:e8:b5:86:64:5e:b4:78:ed:28:ec:79:1a:ea:
eb:25:3f:09:47:9f:93:61:9f:45:24:22:16:1c:eb:
28:3d:e7:fc:9f:e7:0a:bd:a1:ff:65:c6:e2:fd:2a:
64:da:c4:85:8e:df:53:7f:d2:f0:82:62:3d:63:d2:
e5:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:F4:F4:5F:1A:56:BE:38:52:AE:CC:89:9D:8F:A9:1C:19:47:89:C4
X509v3 Authority Key Identifier:
keyid:91:D0:C7:8C:30:9A:3E:99:DC:9A:B7:4F:2C:DC:04:84:85:9E:75:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kdDHjDCaPpncmrdPLNwEhIWedTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/bvT0XxpWvjhSrsyJnY-pHBlHicQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/kdDHjDCaPpncmrdPLNwEhIWedTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.195.0/24
Signature Algorithm: sha256WithRSAEncryption
70:fe:41:21:4e:45:17:e1:be:63:71:5c:87:97:6b:1a:b4:a2:
67:62:d5:f0:50:24:c1:bd:12:e5:de:59:2f:e0:9a:8b:39:a0:
93:4b:ba:99:9a:a0:f9:13:e3:75:41:b3:bf:13:67:bd:ea:48:
89:36:b1:7c:8e:50:39:67:80:9c:65:81:be:7b:f5:87:74:7f:
e8:5d:8d:06:2c:eb:e1:34:c0:8f:e3:d4:1e:0a:3b:23:c5:13:
69:0f:81:13:35:37:62:cc:ff:ea:17:f8:f7:65:27:b6:43:dc:
6c:ae:23:af:f1:23:cf:a5:e4:cb:f3:0a:02:7b:54:c1:1f:fa:
d3:1a:8d:9e:3a:e2:33:4f:ce:ea:ff:6e:c2:8e:91:73:ab:c0:
d5:20:e2:f0:e2:07:36:7e:66:88:10:f2:11:8f:bd:d4:fd:93:
91:5d:e9:ef:c6:91:f1:22:5f:af:e5:2f:45:13:10:72:ac:4a:
ef:64:40:57:da:a7:bc:5d:6c:d1:be:96:77:b8:22:95:27:2e:
bc:6c:a2:6a:7c:2a:1f:fb:91:a3:f2:d0:16:fe:39:86:b1:be:
2e:90:f9:38:5e:f1:94:2c:0a:7a:59:3d:5b:32:6a:2a:6a:f3:
09:4c:46:1e:ae:ce:6a:19:33:9e:26:39:c3:43:69:74:7a:57:
d6:14:b0:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:36:03 2025 by rpki-client