Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/772cbc-7e69-4c91-86a3-3661b1ebbcfb/1/SnUCCZZYum042g1gYXMaVoOXuMU.roa
File: SnUCCZZYum042g1gYXMaVoOXuMU.roa (raw, json)
Hash identifier: M/QoXy5WhPTKQgTBgL09lFPLsW1ii5YQSa5PEJIzgjY=
Subject key identifier: 4A:75:02:09:96:58:BA:6D:38:DA:0D:60:61:73:1A:56:83:97:B8:C5
Certificate issuer: /CN=c276a8ba874c3fbddad344d03258b3e2c04d7bcb
Certificate serial: 019977DA0FF4BC78416E3C7A2330D607A044
Authority key identifier: C2:76:A8:BA:87:4C:3F:BD:DA:D3:44:D0:32:58:B3:E2:C0:4D:7B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wnaouodMP73a00TQMliz4sBNe8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/772cbc-7e69-4c91-86a3-3661b1ebbcfb/1/SnUCCZZYum042g1gYXMaVoOXuMU.roa
Signing time: Tue 23 Sep 2025 18:33:23 +0000
ROA not before: Tue 23 Sep 2025 18:33:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51872
IP address blocks: 45.93.204.0/22 maxlen: 22
45.93.204.0/24 maxlen: 24
45.93.205.0/24 maxlen: 24
45.93.206.0/24 maxlen: 24
45.93.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/772cbc-7e69-4c91-86a3-3661b1ebbcfb/1/wnaouodMP73a00TQMliz4sBNe8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/772cbc-7e69-4c91-86a3-3661b1ebbcfb/1/wnaouodMP73a00TQMliz4sBNe8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/wnaouodMP73a00TQMliz4sBNe8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:77:da:0f:f4:bc:78:41:6e:3c:7a:23:30:d6:07:a0:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c276a8ba874c3fbddad344d03258b3e2c04d7bcb
Validity
Not Before: Sep 23 18:33:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4a7502099658ba6d38da0d6061731a568397b8c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:18:9f:34:10:e9:d5:79:79:15:ab:ff:ef:03:
c0:42:b9:29:0b:96:be:ec:39:c4:f8:75:f6:3b:c9:
7d:1e:60:b2:fd:ed:f2:ec:13:61:bf:92:9e:67:86:
49:0c:72:77:3e:0e:05:04:c8:c4:8a:38:45:b2:02:
19:4f:88:73:97:e4:64:7d:b8:0d:f3:dd:b2:a1:30:
80:6a:b1:5e:f4:68:9d:96:fa:69:f4:8a:f4:8c:df:
74:b2:5a:22:23:56:c1:9c:a5:5e:31:be:4d:3f:5e:
61:35:d1:63:3e:e1:78:d7:87:64:60:90:6c:2d:fb:
ad:45:99:45:c8:ed:a3:be:c9:62:f3:74:6f:56:d0:
7c:57:e5:65:2a:97:22:db:f2:10:63:bf:1d:08:32:
51:bc:6e:f7:8e:9c:89:e1:c8:50:66:09:cb:f2:a6:
21:f0:d6:c3:df:b7:6e:6c:ef:e9:3a:2a:70:a3:4d:
0d:b7:00:58:36:04:bd:8b:14:ed:ef:84:2b:5a:d6:
b4:89:92:0b:50:e2:d0:06:ee:17:79:a6:1a:b5:28:
e0:af:3a:df:f2:d3:6e:28:c1:1f:79:9e:59:df:90:
fb:14:0d:6d:ca:b9:bf:4e:1d:d6:e4:d6:35:0e:c1:
f8:1a:de:e7:7b:e0:24:46:37:54:f6:2e:98:85:80:
a9:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:75:02:09:96:58:BA:6D:38:DA:0D:60:61:73:1A:56:83:97:B8:C5
X509v3 Authority Key Identifier:
keyid:C2:76:A8:BA:87:4C:3F:BD:DA:D3:44:D0:32:58:B3:E2:C0:4D:7B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnaouodMP73a00TQMliz4sBNe8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/772cbc-7e69-4c91-86a3-3661b1ebbcfb/1/SnUCCZZYum042g1gYXMaVoOXuMU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/772cbc-7e69-4c91-86a3-3661b1ebbcfb/1/wnaouodMP73a00TQMliz4sBNe8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.204.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:35:fc:5c:d8:c6:93:a7:b8:ec:f6:4c:e7:81:90:d8:88:da:
d4:ca:88:3d:98:d5:13:15:79:c4:b6:d4:c0:00:65:e3:5c:8d:
d4:7e:83:37:d4:8c:11:9d:aa:97:e4:cb:13:b3:e3:64:fc:e1:
3b:8d:f2:52:5f:40:bd:66:7b:55:81:a4:87:0b:53:5d:b6:cf:
f2:e3:b3:51:37:f9:d9:e9:24:fc:37:d2:2a:b4:8e:06:fd:be:
e2:ce:fa:1c:31:4a:dc:2f:ac:a6:b2:06:e0:48:dd:6c:38:4a:
a7:c5:aa:83:53:06:b3:e7:81:53:ab:e4:08:7d:79:01:a3:27:
0b:b7:f9:d1:f7:ee:57:16:0e:0d:24:9d:6e:7b:84:92:28:32:
13:48:72:53:35:fe:99:85:66:d9:5e:71:a2:9f:fc:8c:a7:fc:
96:9d:1b:c9:3f:eb:1c:ea:d9:63:4f:31:ed:46:1d:f5:68:9a:
be:ed:89:07:7c:a6:46:d3:e1:72:c3:19:71:d0:15:39:81:92:
00:0c:b4:c6:1d:5c:fd:31:fb:ba:1d:d6:f4:3f:0c:aa:b9:df:
f3:79:df:16:9a:2f:7e:d0:d3:dc:e8:fe:87:de:ab:2a:ed:d0:
9d:d3:dc:e5:8b:16:75:18:f8:6b:52:30:7e:ec:6c:44:2c:64:
df:0d:17:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:46:14 2025 by rpki-client