Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/4b9izW4q-rZz0OWQO5fC5XUHYeY.roa
File: 4b9izW4q-rZz0OWQO5fC5XUHYeY.roa (raw, json)
Hash identifier: 9wYly/cGREYrx63PXNBvuVlfGIfSHaXqrrjuZtYRkA0=
Subject key identifier: E1:BF:62:CD:6E:2A:FA:B6:73:D0:E5:90:3B:97:C2:E5:75:07:61:E6
Certificate issuer: /CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Certificate serial: 019938BCB66814C2695C9522AF477D22DAA7
Authority key identifier: BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/4b9izW4q-rZz0OWQO5fC5XUHYeY.roa
Signing time: Thu 11 Sep 2025 12:25:15 +0000
ROA not before: Thu 11 Sep 2025 12:25:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43624
IP address blocks: 45.67.228.0/24 maxlen: 24
45.67.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:38:bc:b6:68:14:c2:69:5c:95:22:af:47:7d:22:da:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Validity
Not Before: Sep 11 12:25:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e1bf62cd6e2afab673d0e5903b97c2e5750761e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e3:24:e5:e5:f5:0e:1d:61:7d:e6:6f:f4:15:
47:64:53:8c:12:92:87:6a:28:a3:5c:c2:70:83:7f:
86:89:55:51:04:ab:6d:4c:c6:5d:ea:3d:ec:35:a1:
4b:c2:5e:8b:1b:82:8e:ae:10:bf:3e:5c:71:ca:43:
83:f9:73:80:6e:0c:f6:91:88:bf:42:20:17:c9:dc:
4f:af:67:80:5c:42:8d:ce:2b:1c:6d:61:8c:b9:aa:
a7:13:7d:c7:01:d5:47:d3:70:9a:64:01:b1:1b:3b:
62:7d:af:f6:79:39:c8:2e:5f:4e:ad:63:d7:1f:e9:
17:45:42:fd:71:eb:98:aa:15:b6:c5:9a:ea:b4:9f:
d1:4c:45:d5:15:c9:57:2f:34:f2:ac:a4:bb:5a:3d:
36:c4:ed:53:ce:be:97:de:7b:e6:5e:f3:88:6c:92:
ba:18:af:f3:a6:47:3e:51:a0:a9:80:e8:ec:d5:d2:
ed:2b:46:d9:01:1a:fc:55:03:40:3e:e2:94:68:d6:
8c:62:28:c4:35:0f:9a:70:c4:0e:fc:a5:2e:67:d8:
8b:5f:86:a3:e1:9b:91:f1:cb:80:09:dc:98:5d:c6:
e9:21:08:a0:4e:87:a5:45:01:40:63:de:b4:08:ad:
1b:c4:eb:be:26:91:e3:51:32:c4:e8:4c:a1:fa:a5:
94:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:BF:62:CD:6E:2A:FA:B6:73:D0:E5:90:3B:97:C2:E5:75:07:61:E6
X509v3 Authority Key Identifier:
keyid:BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/4b9izW4q-rZz0OWQO5fC5XUHYeY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.228.0/24
45.67.231.0/24
Signature Algorithm: sha256WithRSAEncryption
58:77:5d:39:9f:f5:bf:40:81:a7:28:d9:93:9f:0e:81:74:ad:
e1:45:52:6c:1e:db:5e:50:60:aa:c7:9d:47:76:cf:fc:10:d7:
87:ff:e2:ea:f9:df:3e:46:3a:b5:fe:8b:05:f0:bc:8b:47:ca:
39:fa:28:de:3e:04:fa:4b:58:06:ac:35:f9:31:6c:5c:a3:70:
b8:8d:2e:ef:92:b6:3c:c8:54:d4:a7:9b:2c:7f:81:9a:7d:27:
14:94:2a:09:a2:19:6d:51:33:85:be:e5:7b:47:03:26:2b:82:
d6:e6:74:bd:42:46:f2:60:65:e3:3b:5a:15:01:79:74:60:3c:
82:61:0f:73:87:f4:99:2c:b2:af:ef:85:01:90:a8:85:3a:d7:
1f:24:5f:0b:b7:15:be:ff:da:ff:0b:e0:95:99:20:52:d0:84:
45:c8:ae:e2:51:47:8e:fc:55:04:90:7d:0d:47:59:5f:23:d8:
c7:4c:d7:bb:ec:78:a3:2a:a1:79:73:fa:16:b1:f5:b0:ff:94:
cc:12:e0:20:04:5f:f6:eb:5d:94:14:6f:0c:a4:da:32:b5:6f:
5b:a0:41:f7:b7:3e:7d:df:9b:1b:fe:19:11:9e:1e:9d:31:b1:
0f:cf:49:f0:f1:b9:a9:ea:2c:9a:e4:f1:30:e2:8a:68:08:87:
6f:15:5f:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:57:49 2025 by rpki-client