Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/4cba7a-11d7-4624-851d-a7ca02c88e39/1/uhPMNPhZqA_HAHJGGHQJzVsVHKo.roa
File: uhPMNPhZqA_HAHJGGHQJzVsVHKo.roa (raw, json)
Hash identifier: 1sUZfTZAirMWw4gpIHAyzWjKdpLh/vSDHu9mudU6a9w=
Subject key identifier: BA:13:CC:34:F8:59:A8:0F:C7:00:72:46:18:74:09:CD:5B:15:1C:AA
Certificate issuer: /CN=fe0fd4769c82ffb49293041e9549d94bd12c1a17
Certificate serial: 0199F183EE0A4A8CC427F934933FEB2FBA71
Authority key identifier: FE:0F:D4:76:9C:82:FF:B4:92:93:04:1E:95:49:D9:4B:D1:2C:1A:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_g_UdpyC_7SSkwQelUnZS9EsGhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/4cba7a-11d7-4624-851d-a7ca02c88e39/1/uhPMNPhZqA_HAHJGGHQJzVsVHKo.roa
Signing time: Fri 17 Oct 2025 09:32:59 +0000
ROA not before: Fri 17 Oct 2025 09:32:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42329
IP address blocks: 45.143.56.0/24 maxlen: 24
45.143.57.0/24 maxlen: 24
45.143.58.0/24 maxlen: 24
45.143.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/4cba7a-11d7-4624-851d-a7ca02c88e39/1/_g_UdpyC_7SSkwQelUnZS9EsGhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/4cba7a-11d7-4624-851d-a7ca02c88e39/1/_g_UdpyC_7SSkwQelUnZS9EsGhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_g_UdpyC_7SSkwQelUnZS9EsGhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:f1:83:ee:0a:4a:8c:c4:27:f9:34:93:3f:eb:2f:ba:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe0fd4769c82ffb49293041e9549d94bd12c1a17
Validity
Not Before: Oct 17 09:32:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ba13cc34f859a80fc7007246187409cd5b151caa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f5:4d:0d:ac:ad:4a:2c:b1:21:c3:c0:3d:f7:
19:be:ae:f0:8d:30:da:13:61:5d:87:6a:ea:5e:2c:
6f:8f:c9:e7:d1:a0:a3:62:97:b2:1d:1e:30:50:7d:
df:a3:14:c6:5f:16:b8:0e:4d:11:70:8f:5e:76:29:
37:a4:5c:d7:4e:03:3a:be:45:ba:4e:85:7a:f5:9f:
9f:7a:85:bd:f9:f5:ac:19:82:a9:fb:1c:b6:c3:08:
32:77:69:b9:84:df:39:9d:35:93:a7:32:b5:ef:86:
d8:3e:20:10:15:4b:cb:dc:e5:79:88:39:93:72:38:
6a:fa:80:3b:c1:71:13:c5:8e:4c:47:8a:03:43:53:
34:c6:79:73:70:18:32:82:6d:f4:18:92:d4:39:4a:
4d:b5:a4:26:35:cf:39:5a:da:cf:27:5b:24:80:63:
eb:40:2c:35:fe:e4:d2:60:f5:12:c4:7b:87:9f:e4:
c2:0f:66:1e:5b:3e:c3:8e:94:e6:9c:0a:30:c3:35:
26:de:7f:f8:5c:d1:e6:47:41:7e:43:60:fc:4b:09:
5a:ed:ee:5b:fe:11:ae:64:66:32:ad:49:a1:cc:61:
b2:77:02:ed:ca:3c:89:29:25:c7:c1:28:0c:d8:12:
d3:48:bc:b1:db:77:60:48:c9:9c:e3:f1:11:a3:cc:
28:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:13:CC:34:F8:59:A8:0F:C7:00:72:46:18:74:09:CD:5B:15:1C:AA
X509v3 Authority Key Identifier:
keyid:FE:0F:D4:76:9C:82:FF:B4:92:93:04:1E:95:49:D9:4B:D1:2C:1A:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_g_UdpyC_7SSkwQelUnZS9EsGhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4cba7a-11d7-4624-851d-a7ca02c88e39/1/uhPMNPhZqA_HAHJGGHQJzVsVHKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4cba7a-11d7-4624-851d-a7ca02c88e39/1/_g_UdpyC_7SSkwQelUnZS9EsGhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.56.0/22
Signature Algorithm: sha256WithRSAEncryption
05:f1:65:38:1b:fa:18:88:13:9b:c1:e1:e4:ac:21:32:3f:3e:
df:ec:41:18:ea:22:11:47:f1:fa:56:ff:aa:db:52:dd:dd:53:
6e:b9:d1:a0:1e:3a:c4:cd:bc:91:d0:6a:e8:e6:b5:96:48:6e:
f8:47:10:2e:24:e0:a6:79:f1:cf:f2:47:b1:40:50:b2:94:61:
78:c8:59:99:98:ba:0d:14:20:8f:85:b2:c7:ff:ec:8a:42:39:
69:91:51:de:bc:5e:e2:4c:3a:7d:55:59:d8:16:ce:a8:82:93:
72:cf:db:50:c5:0c:2e:67:6d:1e:dd:f0:12:5f:04:71:30:a6:
b2:ca:08:1a:50:63:bb:56:89:6a:ce:90:da:15:35:4d:14:46:
fa:ad:e0:9a:d1:d6:75:e6:23:fe:12:af:7c:97:84:ed:68:6c:
c3:ca:4a:ff:a3:cf:3f:f5:5d:ef:bc:6f:14:d5:a7:01:ed:f3:
6f:22:ac:97:47:07:07:67:c0:59:08:c8:03:0d:be:47:e2:57:
94:1c:ba:72:9a:ec:9e:af:e6:f0:2a:a1:4c:e5:ce:de:f0:af:
a7:21:7c:35:2a:52:1d:41:a9:d9:15:18:30:29:83:61:f4:7f:
89:40:25:c2:d2:68:d0:a9:45:f0:62:6d:32:8d:54:13:4a:c2:
c2:72:ed:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:14:56 2025 by rpki-client