
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/4UiTAxPeF4dReWRz1skn_A53VgY.roa
File: 4UiTAxPeF4dReWRz1skn_A53VgY.roa (raw, json)
Hash identifier: XGn4dl1ajy9GdSi4NO39g/FTQVZ7QcnSWnUBG7TuD68=
Subject key identifier: E1:48:93:03:13:DE:17:87:51:79:64:73:D6:C9:27:FC:0E:77:56:06
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019953624F274A25704F844139536F2ED3E5
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/4UiTAxPeF4dReWRz1skn_A53VgY.roa
Signing time: Tue 16 Sep 2025 16:36:15 +0000
ROA not before: Tue 16 Sep 2025 16:36:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13335
IP address blocks: 45.135.183.0/24 maxlen: 24
103.245.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:53:62:4f:27:4a:25:70:4f:84:41:39:53:6f:2e:d3:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Sep 16 16:36:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e148930313de178751796473d6c927fc0e775606
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:5f:e5:12:fd:ae:57:f3:97:10:b7:cd:e8:eb:
5e:b1:ac:95:7c:81:66:92:bc:4e:78:d8:56:19:16:
26:b5:48:b2:a1:ad:9e:f6:b6:bf:0c:52:01:fe:4a:
c7:c5:35:a5:34:a9:7e:50:5b:28:f1:3c:61:e3:c1:
3d:ab:29:33:7a:17:bf:b3:bd:9c:e3:a6:93:af:55:
82:ca:b2:7a:ba:68:00:f4:42:ee:f2:2f:1f:f7:6c:
75:ee:94:6f:da:c3:90:a9:2e:d3:a1:19:7d:be:3d:
7c:98:a1:cf:43:a0:51:3f:70:a6:20:71:39:09:68:
67:70:6c:90:69:a1:b8:87:1e:b6:e9:5f:70:74:ba:
33:9b:8b:e3:0c:82:48:fd:c8:c1:57:5c:5f:38:04:
70:13:c4:0e:9e:81:ea:de:9d:9f:7e:92:55:a9:d8:
53:91:83:e2:db:ae:3e:ee:75:5e:91:82:7b:25:11:
02:a7:a0:f8:1d:65:41:2b:7d:42:10:43:cb:70:da:
11:36:b9:f1:d5:61:52:a3:9c:90:40:49:93:1c:d1:
77:3e:40:43:94:08:2e:70:97:95:5c:90:4c:53:4b:
5f:e1:ac:a2:85:5d:28:08:21:52:73:f2:f0:4f:47:
e2:ea:3e:46:7d:b1:96:30:ba:f2:fe:35:85:58:eb:
2d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:48:93:03:13:DE:17:87:51:79:64:73:D6:C9:27:FC:0E:77:56:06
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/4UiTAxPeF4dReWRz1skn_A53VgY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.183.0/24
103.245.230.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:30:57:db:0b:64:f8:65:6e:2c:b4:36:11:bd:04:44:73:c6:
c2:cb:32:58:6a:8e:ef:ed:06:5a:34:9b:2b:f8:36:56:75:fe:
56:9d:1b:aa:58:d7:4b:a7:73:68:a0:26:11:68:a1:26:d6:b6:
18:31:0d:83:0a:7f:b7:34:ee:33:0d:8b:86:07:53:77:8c:e3:
8d:5c:34:fd:b6:1c:90:24:de:2b:a0:eb:71:de:89:14:15:af:
c0:b5:ce:94:8d:05:0a:c7:6d:12:41:a6:1e:f1:26:02:8e:aa:
bb:3b:ec:05:fd:1f:48:30:48:5c:63:85:f6:a5:e0:c5:23:ff:
ab:d6:99:79:09:00:38:bf:f4:89:f7:b3:ba:8b:bc:6c:22:ea:
07:7b:f3:a1:df:27:19:cb:c9:e7:0f:df:37:78:71:7f:bc:90:
bc:6a:92:65:8d:18:68:89:03:c7:23:0f:02:aa:be:89:50:b9:
9a:1d:48:c5:a3:b1:88:7a:38:db:fb:f1:66:18:13:47:ca:e6:
e3:63:56:3c:e0:4c:19:4d:d3:34:f9:8d:7c:f9:b4:5e:39:61:
c8:d7:ea:4d:25:72:bc:f7:bb:04:45:5e:41:52:3e:23:3b:5e:
8c:32:f0:ea:dd:36:20:43:85:75:45:6e:10:41:a5:86:b2:38:
3f:92:c0:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:22:43 2025 by rpki-client