Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/S_Xx9-8zCphJzSWDqTG616N4Rxk.roa
File: S_Xx9-8zCphJzSWDqTG616N4Rxk.roa (raw, json)
Hash identifier: V5J5cYmKRxz4Xbqlmv0bBd8iH4Q+4weH7tvjv/5AKq0=
Subject key identifier: 4B:F5:F1:F7:EF:33:0A:98:49:CD:25:83:A9:31:BA:D7:A3:78:47:19
Certificate issuer: /CN=4cf80802c6579a4d4a10608dcf92e9ace9905b16
Certificate serial: 0199E81B2DD749550D22FA3903261D885DE9
Authority key identifier: 4C:F8:08:02:C6:57:9A:4D:4A:10:60:8D:CF:92:E9:AC:E9:90:5B:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TPgIAsZXmk1KEGCNz5LprOmQWxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/S_Xx9-8zCphJzSWDqTG616N4Rxk.roa
Signing time: Wed 15 Oct 2025 13:41:59 +0000
ROA not before: Wed 15 Oct 2025 13:41:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214503
IP address blocks: 45.84.104.0/22 maxlen: 24
45.84.107.0/24 maxlen: 24
81.27.77.0/24 maxlen: 24
213.177.169.0/24 maxlen: 24
2a0d:bbc1::/48 maxlen: 48
2a0d:bbc7::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TPgIAsZXmk1KEGCNz5LprOmQWxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e8:1b:2d:d7:49:55:0d:22:fa:39:03:26:1d:88:5d:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cf80802c6579a4d4a10608dcf92e9ace9905b16
Validity
Not Before: Oct 15 13:41:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4bf5f1f7ef330a9849cd2583a931bad7a3784719
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:3e:6a:73:e2:30:3c:90:81:c6:15:65:06:01:
8b:aa:e4:37:d8:33:2a:af:1e:6f:af:05:61:8b:12:
20:3e:3d:73:f3:d0:d3:65:66:e0:12:4d:c5:43:20:
66:ee:2a:92:4d:3b:d7:72:2a:c0:c5:c4:54:d1:e9:
7d:27:83:aa:6c:68:18:cb:7a:38:6f:c3:05:29:39:
dc:0e:e5:fe:33:4e:e7:20:e7:91:d7:55:e1:05:57:
51:2e:ca:dc:3b:6e:fb:96:71:f3:0f:c3:b9:ac:c6:
48:11:af:8c:d5:26:97:3d:78:6c:66:ee:b4:d7:67:
4a:2b:6e:e8:4d:05:9d:bc:78:7b:e5:73:a8:b3:5e:
06:89:09:f1:d7:3b:a3:99:09:90:d9:5c:21:f9:ae:
09:74:7a:1e:57:81:19:21:38:6c:7f:0a:49:a9:d3:
73:b1:b1:09:77:96:0c:fd:3f:71:eb:e4:f1:8d:68:
a6:4b:ee:eb:72:81:2b:18:19:1a:30:75:38:57:79:
1f:85:07:e1:9e:30:20:01:21:b8:11:00:96:d9:4a:
60:19:da:00:be:43:50:c8:78:b7:83:6e:c0:20:ad:
8a:89:48:9b:c4:3d:31:1a:39:96:14:c4:dc:ed:5f:
63:de:9e:76:69:d0:91:7d:23:4e:fc:64:b6:5a:ae:
15:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:F5:F1:F7:EF:33:0A:98:49:CD:25:83:A9:31:BA:D7:A3:78:47:19
X509v3 Authority Key Identifier:
keyid:4C:F8:08:02:C6:57:9A:4D:4A:10:60:8D:CF:92:E9:AC:E9:90:5B:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPgIAsZXmk1KEGCNz5LprOmQWxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/S_Xx9-8zCphJzSWDqTG616N4Rxk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.104.0/22
81.27.77.0/24
213.177.169.0/24
IPv6:
2a0d:bbc1::/48
2a0d:bbc7::/48
Signature Algorithm: sha256WithRSAEncryption
2a:97:19:37:17:be:55:c7:39:fa:d6:fd:fc:13:9c:ac:27:bf:
9e:2b:3f:42:a0:24:34:32:7f:a0:2c:ab:bf:fc:ab:cf:a0:2a:
e6:b6:bf:07:09:2f:f2:66:55:4c:b4:d9:e2:57:89:f7:b2:34:
cf:5f:1e:ac:0e:88:2f:7b:32:94:aa:22:84:51:31:0d:cb:65:
92:d1:56:a1:d7:f1:09:0c:3e:08:bc:88:c8:43:6e:66:bd:00:
ed:1c:c1:d3:cd:d9:6c:68:f9:17:3a:b3:27:32:8d:3c:b1:95:
09:ed:50:4e:6a:25:9a:fa:39:5e:f5:42:08:66:ac:75:94:26:
9a:05:f1:57:b1:b4:a0:14:01:c9:94:be:12:60:09:b9:1e:90:
fa:37:dd:d2:ea:63:d4:bb:d8:3e:b2:db:74:85:ac:62:59:59:
e2:bd:6a:11:b2:72:f0:ae:7c:5b:06:a1:c4:eb:18:f1:a7:5e:
eb:18:6c:37:93:3c:32:94:9f:4a:6b:7b:bc:0d:eb:5e:9b:ae:
47:3d:b6:e1:1f:93:46:39:af:8e:12:aa:82:d9:07:0e:6c:cd:
8c:8d:59:85:47:d1:4f:ba:48:46:79:6a:0f:3a:66:32:a2:91:
8f:b7:60:1c:a4:6f:ec:4f:e1:23:cb:da:23:f8:2c:3c:fc:d2:
89:cc:db:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:27:04 2025 by rpki-client