Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/cd57e2-57c7-4cc5-8714-3496c9d794bc/1/usMLAG6YZUxgwHs51gx5TCy7zzI.roa
File: usMLAG6YZUxgwHs51gx5TCy7zzI.roa (raw, json)
Hash identifier: pY+WXtHRbgCgVUJPNgpPcMNtikZqJuq/uJTTR/ANulA=
Subject key identifier: BA:C3:0B:00:6E:98:65:4C:60:C0:7B:39:D6:0C:79:4C:2C:BB:CF:32
Certificate issuer: /CN=e5802e10d4af9cb7a592c61bbb4b092eac3886d6
Certificate serial: 0199E1E2C083137FB682BDE525165C446C4D
Authority key identifier: E5:80:2E:10:D4:AF:9C:B7:A5:92:C6:1B:BB:4B:09:2E:AC:38:86:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YAuENSvnLelksYbu0sJLqw4htY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/cd57e2-57c7-4cc5-8714-3496c9d794bc/1/usMLAG6YZUxgwHs51gx5TCy7zzI.roa
Signing time: Tue 14 Oct 2025 08:42:38 +0000
ROA not before: Tue 14 Oct 2025 08:42:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208177
IP address blocks: 45.155.92.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/cd57e2-57c7-4cc5-8714-3496c9d794bc/1/5YAuENSvnLelksYbu0sJLqw4htY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/cd57e2-57c7-4cc5-8714-3496c9d794bc/1/5YAuENSvnLelksYbu0sJLqw4htY.mft
rsync://rpki.ripe.net/repository/DEFAULT/5YAuENSvnLelksYbu0sJLqw4htY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e1:e2:c0:83:13:7f:b6:82:bd:e5:25:16:5c:44:6c:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5802e10d4af9cb7a592c61bbb4b092eac3886d6
Validity
Not Before: Oct 14 08:42:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bac30b006e98654c60c07b39d60c794c2cbbcf32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:78:19:2d:56:bb:34:da:06:37:34:42:8a:bb:
6e:5d:5b:69:4a:2a:5f:47:a0:d4:32:1b:7d:c7:c9:
49:40:d2:8a:4a:6e:44:f4:79:50:14:de:37:14:89:
af:17:38:0a:b8:f1:a8:0e:f5:28:c4:52:8a:ea:ee:
f9:56:79:6b:b7:98:1d:9e:e4:97:bf:6b:73:d3:f4:
7b:15:21:0d:8a:cd:a3:92:84:a3:08:02:54:5c:ef:
4a:b0:f5:8e:86:17:8e:74:a3:be:ee:c8:40:ad:ad:
a0:fb:54:e7:2a:15:65:ce:08:aa:88:d3:e1:36:c7:
0d:e7:42:71:11:78:4d:6a:4c:92:fe:4b:69:da:89:
22:10:b6:d6:0c:9e:55:9f:d7:95:92:ea:17:4f:d2:
aa:61:68:69:fb:c0:8c:0a:0e:9e:b5:0e:5a:0a:d3:
8b:8d:5e:25:b8:36:d8:64:52:2d:33:70:ed:86:a6:
0f:58:0f:5e:72:01:59:fe:8b:de:51:60:53:52:49:
18:06:df:72:3e:d9:ad:25:4f:f7:10:1d:cc:2e:00:
84:18:d9:6c:03:09:62:d0:e5:f7:d5:2e:6a:80:91:
a2:37:f2:4e:f3:55:d0:7b:06:12:a1:58:f9:9d:17:
4e:00:2d:7e:18:fd:c0:72:dc:fe:62:d3:f6:5f:cf:
53:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:C3:0B:00:6E:98:65:4C:60:C0:7B:39:D6:0C:79:4C:2C:BB:CF:32
X509v3 Authority Key Identifier:
keyid:E5:80:2E:10:D4:AF:9C:B7:A5:92:C6:1B:BB:4B:09:2E:AC:38:86:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YAuENSvnLelksYbu0sJLqw4htY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/cd57e2-57c7-4cc5-8714-3496c9d794bc/1/usMLAG6YZUxgwHs51gx5TCy7zzI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/cd57e2-57c7-4cc5-8714-3496c9d794bc/1/5YAuENSvnLelksYbu0sJLqw4htY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.92.0/22
Signature Algorithm: sha256WithRSAEncryption
a3:9e:e7:b2:51:c4:4a:ae:2b:6d:ec:e4:95:b7:1e:e4:1b:ca:
18:75:d6:bb:8d:82:02:ec:95:7f:a6:a9:dc:1e:02:6c:25:03:
19:2b:ce:2c:10:9c:8c:f3:1b:35:52:9c:52:9f:b3:f6:2c:d5:
1f:d5:5b:f2:14:35:98:9b:1d:b4:7a:78:f5:00:44:ce:56:72:
81:d6:1b:98:04:68:e6:19:07:81:08:d3:29:35:87:9a:7c:1a:
99:7f:89:71:29:0e:29:94:6b:25:0d:c1:af:c7:22:52:ee:14:
e9:29:bb:4b:7f:b9:b5:8c:9d:f6:1c:b0:c8:bd:3b:af:e8:5f:
ea:49:3c:a2:32:14:a0:8a:aa:cf:c0:27:4c:97:ab:84:32:57:
ac:0e:3f:9d:d0:1b:a7:89:79:79:33:a4:16:54:6d:14:cf:a5:
ca:05:3a:f9:10:46:7a:41:97:58:12:65:b5:4b:b1:42:8d:1b:
8a:09:29:83:7a:ac:4c:37:05:cc:93:d4:bc:97:5a:82:63:13:
05:19:ee:92:33:5e:ad:c3:a1:d5:d6:78:22:ac:10:ab:02:e2:
15:14:e3:49:08:15:c9:24:c0:ab:ab:c6:e9:14:44:a1:04:cf:
7f:7d:9b:c4:8b:fb:e6:66:3a:32:bc:9e:f7:cd:94:8f:30:1e:
81:82:72:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:24:06 2025 by rpki-client