Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/1-2fTDaBaMpMuQsK5FY1FA5tIVV4.roa
File: 1-2fTDaBaMpMuQsK5FY1FA5tIVV4.roa (raw, json)
Hash identifier: b9CHtx1sg/fJD/U1e2vZ+jFc1Qo6B4tUdxX3akFkQ7o=
Subject key identifier: FB:67:D3:0D:A0:5A:32:93:2E:42:C2:B9:15:8D:45:03:9B:48:55:5E
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 01997B4638FD3D42B78970710E3540CE5923
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/1-2fTDaBaMpMuQsK5FY1FA5tIVV4.roa
Signing time: Wed 24 Sep 2025 10:30:23 +0000
ROA not before: Wed 24 Sep 2025 10:30:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205457
IP address blocks: 45.89.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:7b:46:38:fd:3d:42:b7:89:70:71:0e:35:40:ce:59:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Sep 24 10:30:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fb67d30da05a32932e42c2b9158d45039b48555e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:06:6f:4f:77:54:a1:b6:c7:2b:82:a3:13:f0:
35:07:e4:b0:72:3f:2e:4e:7d:38:c5:e6:b1:e3:4d:
d5:f7:79:09:d5:d1:66:67:13:3f:43:f2:88:67:e2:
27:53:d8:c8:27:ad:de:6e:38:2a:c6:45:21:d0:ab:
6c:59:a9:4b:e6:2e:9c:59:52:e8:81:49:f5:fd:c8:
e4:49:f7:3d:f4:d9:87:d2:4f:41:d0:38:dc:ed:44:
57:16:11:c7:69:bb:18:90:dd:8e:67:b8:1e:fb:33:
1a:ee:19:2a:54:c0:c3:d6:cc:1d:23:30:54:7c:95:
96:15:b6:86:84:79:55:55:c6:6d:df:0d:dc:1c:7e:
85:73:35:27:1c:b5:c0:7d:62:3a:ea:7a:20:76:29:
48:17:04:e0:26:fa:86:10:3e:4f:b1:5f:6b:32:d7:
ad:99:bd:fa:8e:9a:7d:c1:ed:1d:51:51:f4:6b:68:
e0:a3:47:fc:e4:6b:2e:e1:b2:fc:55:0b:9a:d6:e1:
90:bc:2f:88:76:ea:ab:b4:9d:72:1e:60:48:32:e4:
33:c4:2f:c7:da:25:44:bc:0c:48:59:81:fa:24:0b:
2e:cd:12:d8:42:fb:5a:d4:05:4f:58:a6:8c:89:b0:
82:c8:95:f2:18:b5:6c:ff:ef:c6:00:fd:3b:98:0a:
0a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:67:D3:0D:A0:5A:32:93:2E:42:C2:B9:15:8D:45:03:9B:48:55:5E
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/1-2fTDaBaMpMuQsK5FY1FA5tIVV4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.81.0/24
Signature Algorithm: sha256WithRSAEncryption
81:6b:e1:07:2b:eb:44:7f:fb:2a:3c:6b:5a:b8:e6:f3:aa:1c:
17:cc:26:db:de:01:56:ca:d0:c4:fa:eb:ee:5b:03:a0:8b:be:
08:b5:c2:63:03:b5:03:41:eb:be:fe:e1:5d:0c:bd:6f:67:53:
ad:59:e0:91:f2:5f:f2:9c:90:52:0f:82:aa:3c:0e:b1:c2:71:
e3:25:95:20:79:3d:7d:11:1b:71:db:4c:df:08:af:d4:af:ca:
97:45:d0:61:6a:90:c3:63:46:70:4e:3d:c5:78:bd:dd:02:cd:
db:2c:c3:f3:8e:c6:c1:10:86:c0:6e:4a:3b:6b:1d:30:b8:80:
32:48:44:d3:af:40:6a:ba:d4:ee:b0:e9:e0:69:45:4f:74:b4:
e5:c2:d0:6e:18:35:b3:a1:5a:ba:66:cf:5a:20:39:01:04:db:
29:9c:7f:a2:4b:58:18:d1:cc:41:99:bd:ea:be:6e:db:d9:79:
fb:09:b5:07:0a:7d:37:52:7f:c7:83:a2:50:c0:a2:c7:fa:2d:
2a:36:13:9a:f8:c5:5b:10:be:aa:6e:fe:d2:37:65:2a:61:00:
03:c8:b7:5f:57:74:dc:b3:e5:a9:b5:9c:4c:2f:25:3b:3c:6e:
5c:c9:f3:10:83:f8:a8:b9:1b:17:ca:8c:ce:43:aa:98:97:17:
2f:cc:3c:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:09:56 2025 by rpki-client