Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/CxuPoWFY7VRkmCzcmvU3DlBeLIQ.roa
File: CxuPoWFY7VRkmCzcmvU3DlBeLIQ.roa (raw, json)
Hash identifier: r7/U8C/VmncMCVZX9kbKeoqOsbKRouBZUt6rAXIjAhM=
Subject key identifier: 0B:1B:8F:A1:61:58:ED:54:64:98:2C:DC:9A:F5:37:0E:50:5E:2C:84
Certificate issuer: /CN=e754c347d68d15493de71bb962f0a567e134d603
Certificate serial: 01999AB90E382F101A96041A3145EF3A080D
Authority key identifier: E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/CxuPoWFY7VRkmCzcmvU3DlBeLIQ.roa
Signing time: Tue 30 Sep 2025 13:04:02 +0000
ROA not before: Tue 30 Sep 2025 13:04:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213535
IP address blocks: 107.161.168.0/24 maxlen: 24
107.161.174.0/24 maxlen: 24
107.181.134.0/24 maxlen: 24
155.254.35.0/24 maxlen: 24
162.217.248.0/24 maxlen: 24
162.217.249.0/24 maxlen: 24
198.105.112.0/24 maxlen: 24
198.105.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.mft
rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:9a:b9:0e:38:2f:10:1a:96:04:1a:31:45:ef:3a:08:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e754c347d68d15493de71bb962f0a567e134d603
Validity
Not Before: Sep 30 13:04:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0b1b8fa16158ed5464982cdc9af5370e505e2c84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e3:f6:ea:7a:c1:5f:8e:3d:5d:0f:9e:c8:7e:
2b:b7:c9:08:50:80:d1:b3:3b:e0:0f:d0:c5:6e:2c:
77:5d:34:9c:21:44:bd:96:c5:f7:e8:13:93:85:ca:
cb:57:c4:20:9c:f2:17:13:36:9b:0d:1d:9e:7a:5d:
3c:c8:a3:87:6b:36:04:9f:04:51:e8:67:92:d9:b4:
cf:fb:43:70:21:ef:33:72:15:b2:7c:e7:b2:71:a5:
0f:b3:fc:6b:aa:8e:e9:b8:0c:f7:6c:cb:12:95:77:
89:0e:cb:ef:f5:d5:4b:c6:3c:c5:fd:34:4f:91:47:
10:90:cc:29:78:d8:81:8d:0e:26:42:ad:b5:b9:a4:
ed:72:34:81:93:e7:ff:02:d2:68:1b:7f:4e:3b:ab:
41:77:35:17:ab:10:49:58:47:8d:f3:33:da:e5:47:
91:07:47:01:ad:d0:06:2d:9a:50:71:a0:e1:ea:de:
47:c9:41:7f:bf:ba:52:72:81:9a:54:5a:95:97:12:
98:cf:37:a0:09:96:68:78:10:39:f0:0f:63:47:dd:
38:d6:34:9b:94:39:50:a7:85:44:f2:2b:e4:83:40:
b3:71:71:a9:15:df:0e:f5:c0:eb:ab:eb:18:3b:57:
1b:00:cc:ea:0f:44:78:c1:c1:d6:cb:9d:80:b9:8f:
65:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:1B:8F:A1:61:58:ED:54:64:98:2C:DC:9A:F5:37:0E:50:5E:2C:84
X509v3 Authority Key Identifier:
keyid:E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/CxuPoWFY7VRkmCzcmvU3DlBeLIQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
107.161.168.0/24
107.161.174.0/24
107.181.134.0/24
155.254.35.0/24
162.217.248.0/23
198.105.112.0/24
198.105.123.0/24
Signature Algorithm: sha256WithRSAEncryption
27:ab:74:0b:00:17:71:aa:04:3e:59:7a:85:ea:33:65:a7:44:
14:57:9a:f7:c9:9f:d6:c1:e1:83:69:4e:c9:2d:38:e9:cf:e6:
40:05:4f:69:a4:55:e4:e2:2c:26:1c:71:d6:b9:ea:e2:2b:93:
cc:51:6d:2c:f3:76:11:2b:51:5d:c0:2d:5a:62:ba:57:44:f6:
b1:fc:03:7b:23:4c:c5:68:c0:cd:5d:da:b0:ee:fe:8e:62:ea:
a0:a4:20:8d:d0:7f:fe:42:e4:40:92:16:50:8f:eb:51:1d:f9:
c4:df:70:af:0d:8f:f3:14:5b:67:c8:4e:fe:0f:89:c7:7c:23:
08:5f:9c:95:4b:cf:ad:33:9e:8c:4e:15:1e:40:c7:09:16:e0:
60:bc:02:70:71:fc:75:2c:bc:85:76:43:9a:dc:8e:ef:35:0d:
54:16:a3:70:f3:cd:35:b8:7c:16:47:95:4c:ed:69:67:f9:bc:
c1:b8:b0:8f:30:ef:f6:b9:e5:21:d3:75:a1:6b:84:93:2b:4d:
f3:0e:7a:d8:89:8f:97:20:3f:64:c7:34:30:19:3c:a8:2c:47:
3e:68:fd:b6:3b:43:51:7d:12:b1:51:77:50:6a:d3:e0:aa:1f:
3d:e5:b3:aa:aa:a6:49:86:67:c1:28:fb:78:fd:05:b0:cf:1e:
de:ba:85:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:04:09 2025 by rpki-client