Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/fxJkWXCM8r3kDcKlXxPbkxlnjuE.roa
File: fxJkWXCM8r3kDcKlXxPbkxlnjuE.roa (raw, json)
Hash identifier: iirUEeI+h/ZzqZXJj63VxAw7lWmX9NQK/6qxFgrbnkw=
Subject key identifier: 7F:12:64:59:70:8C:F2:BD:E4:0D:C2:A5:5F:13:DB:93:19:67:8E:E1
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 0199E61A2925BCC50BAF81ACA13AF35CAA45
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/fxJkWXCM8r3kDcKlXxPbkxlnjuE.roa
Signing time: Wed 15 Oct 2025 04:21:38 +0000
ROA not before: Wed 15 Oct 2025 04:21:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28435
IP address blocks: 45.133.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e6:1a:29:25:bc:c5:0b:af:81:ac:a1:3a:f3:5c:aa:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Oct 15 04:21:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7f126459708cf2bde40dc2a55f13db9319678ee1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e5:be:dd:1a:63:8f:72:9e:65:0f:b3:bd:45:
4e:52:68:f9:ab:23:da:4c:bb:e1:9c:4e:d2:4f:a9:
f8:4a:e3:d4:5d:5b:e5:ad:b5:3e:a0:c5:58:64:d7:
72:ea:4c:1a:8e:23:ea:df:16:78:46:84:51:e3:54:
b8:31:91:d0:c1:10:e2:99:93:a5:02:d4:f5:10:43:
8b:69:16:e6:9d:61:15:a7:46:ec:76:13:7d:c1:24:
c4:dc:13:f3:f8:88:2e:a2:2b:1e:cb:50:f8:0c:0b:
2f:02:62:2d:04:fe:08:bd:29:b6:1c:e3:00:b9:f0:
cc:4d:55:f7:88:20:a5:eb:d4:4b:a6:37:4c:60:9a:
c3:b2:31:ac:c6:2f:ed:2a:cd:b4:c3:33:5c:65:55:
ee:88:ad:3f:2d:d7:30:c1:82:d1:3c:91:5a:12:b6:
00:ce:cc:99:9a:65:31:f4:de:b9:4d:65:c5:3e:b3:
07:d0:56:2d:8a:c0:90:cf:3e:c1:f1:bc:10:14:21:
f4:83:8b:6e:f2:35:f8:c6:22:99:11:3f:ff:11:13:
f6:45:3f:b2:c9:04:02:d5:c4:76:d2:a9:75:4f:98:
2a:a9:f9:fe:26:66:d1:88:b9:9c:43:b6:11:bb:b8:
73:e3:e9:7a:6c:2f:88:4a:b5:e0:71:b2:05:49:76:
c4:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:12:64:59:70:8C:F2:BD:E4:0D:C2:A5:5F:13:DB:93:19:67:8E:E1
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/fxJkWXCM8r3kDcKlXxPbkxlnjuE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.63.0/24
Signature Algorithm: sha256WithRSAEncryption
40:15:e2:61:7f:8f:21:9e:a7:a7:ad:42:da:7b:f8:2a:25:99:
6b:3f:60:34:08:9a:00:8c:fd:3f:f4:f0:ff:24:25:6e:c9:d8:
a5:e8:cb:8d:be:aa:27:48:17:d7:c8:89:37:6c:cd:cd:cb:f1:
40:86:ea:54:7c:09:12:7d:ff:0f:4c:d3:6f:3d:b9:c3:18:4c:
f7:ed:ca:4f:7b:59:86:00:4d:72:68:8b:11:4d:1b:af:ff:4f:
4c:39:dd:c6:f7:67:25:3d:ed:ea:a3:7e:6a:b0:e3:f0:eb:aa:
59:db:26:63:bd:7f:6d:b1:bc:01:0e:19:93:5e:e2:a4:ec:fd:
c7:0d:18:68:9a:8e:05:d9:34:e6:8e:72:c9:c4:72:cb:62:29:
dc:9e:64:36:e8:24:e2:63:7b:9c:c4:2c:65:0f:2c:ee:59:0e:
e9:ad:36:df:a3:9a:11:98:94:30:65:f1:49:a5:c7:c2:65:f2:
61:75:40:b6:1c:a3:36:33:dd:b6:f0:44:a1:3f:0b:b8:d4:d9:
2c:77:fc:70:26:a3:7c:42:39:7f:76:c4:e0:38:ad:ce:04:93:
e5:ee:f6:93:57:fa:84:9d:e1:6e:54:ac:2f:d8:38:57:68:45:
58:63:40:e0:f2:e0:db:a0:42:fb:8b:32:c6:95:24:a8:fe:a9:
e3:bd:90:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:34:26 2025 by rpki-client