Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/Jed4G8B8EXfZ4KOkd2fojKIFwoY.roa
File: Jed4G8B8EXfZ4KOkd2fojKIFwoY.roa (raw, json)
Hash identifier: ofk+4FTANUTegbHa+MJHVe4oN1T8/ZXMWzUdA+6rYqY=
Subject key identifier: 25:E7:78:1B:C0:7C:11:77:D9:E0:A3:A4:77:67:E8:8C:A2:05:C2:86
Certificate issuer: /CN=f6090b4db06a4d65935141bac98098127a8b8f5a
Certificate serial: 019906FEF58116CC3705A985F59664597E2B
Authority key identifier: F6:09:0B:4D:B0:6A:4D:65:93:51:41:BA:C9:80:98:12:7A:8B:8F:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9gkLTbBqTWWTUUG6yYCYEnqLj1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/Jed4G8B8EXfZ4KOkd2fojKIFwoY.roa
Signing time: Mon 01 Sep 2025 20:36:36 +0000
ROA not before: Mon 01 Sep 2025 20:36:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60387
IP address blocks: 45.87.220.0/24 maxlen: 24
45.87.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/9gkLTbBqTWWTUUG6yYCYEnqLj1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/9gkLTbBqTWWTUUG6yYCYEnqLj1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/9gkLTbBqTWWTUUG6yYCYEnqLj1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:06:fe:f5:81:16:cc:37:05:a9:85:f5:96:64:59:7e:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6090b4db06a4d65935141bac98098127a8b8f5a
Validity
Not Before: Sep 1 20:36:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=25e7781bc07c1177d9e0a3a47767e88ca205c286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e3:d8:bd:c2:ca:84:4d:f8:76:0d:ef:be:1e:
a0:61:56:c6:5d:30:04:d8:82:e0:91:00:0a:6a:0d:
c1:47:f3:94:49:51:30:0c:d8:ad:25:94:44:69:02:
b6:fa:7d:dd:7e:79:4c:31:57:ff:ec:79:5e:a3:c4:
77:f1:61:dd:8a:2e:d3:8d:2a:2d:14:84:52:b9:3a:
97:e2:4f:30:cd:83:ed:d9:d8:45:bb:5d:8c:52:f5:
63:7a:55:8b:1c:06:9a:a9:b6:a9:3b:47:bf:ab:8b:
08:5a:ae:fe:20:b7:c4:41:db:69:42:89:0b:ae:37:
92:68:8e:2c:f3:c2:bd:58:f6:59:78:0a:91:24:fa:
ed:cf:1d:d5:91:53:24:da:de:cb:b6:66:ed:2d:e8:
f5:0c:ea:3a:1a:8d:fa:f7:ea:6d:78:41:25:a4:56:
38:98:17:b1:23:42:f1:87:ac:c8:4f:1e:12:fa:39:
62:35:31:6b:84:31:40:44:5e:b9:b2:74:62:ce:19:
11:0f:63:9b:bd:9b:ee:6b:38:a9:10:d0:8f:50:5f:
ba:dc:13:d6:1a:57:07:ab:57:45:5f:84:6f:37:be:
f1:91:bb:d3:b3:00:9a:88:3d:ba:e6:43:6c:fe:9a:
56:24:87:05:84:57:06:07:22:f1:28:5e:14:41:93:
01:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:E7:78:1B:C0:7C:11:77:D9:E0:A3:A4:77:67:E8:8C:A2:05:C2:86
X509v3 Authority Key Identifier:
keyid:F6:09:0B:4D:B0:6A:4D:65:93:51:41:BA:C9:80:98:12:7A:8B:8F:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9gkLTbBqTWWTUUG6yYCYEnqLj1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/Jed4G8B8EXfZ4KOkd2fojKIFwoY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/9gkLTbBqTWWTUUG6yYCYEnqLj1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.220.0/24
45.87.222.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:cd:cc:f8:f5:1d:32:b6:7a:21:b5:f2:01:6c:93:5d:03:7d:
cc:0f:d2:ba:3a:a9:2f:1b:d1:f0:04:a9:b6:3d:cc:ba:7f:7a:
b6:99:fb:b9:5e:fd:d0:34:f8:16:01:d6:6d:93:26:4f:d8:5e:
88:7e:a5:12:28:e9:2a:08:8a:d9:b8:45:34:d7:17:b8:12:7a:
8c:ec:b9:05:04:31:cc:23:de:b8:a2:ab:b8:45:64:35:29:9e:
bf:0a:34:94:87:b9:8a:6a:5d:82:7c:d2:48:f2:46:41:1f:8e:
67:4f:81:76:ec:66:67:6e:69:49:d4:29:2c:6c:c1:ba:bd:a5:
52:e6:f2:98:4c:81:31:75:46:f2:16:03:5c:f5:87:31:c9:b6:
d4:bf:c1:31:8f:e7:6d:07:e7:12:d9:d4:f4:71:e6:3a:0c:b6:
d9:c4:78:02:96:17:06:da:eb:3a:db:e4:64:cc:ad:93:25:2e:
11:50:7b:72:d5:f9:35:57:1f:b6:82:7e:7c:05:96:f2:33:04:
ce:72:32:99:19:25:60:3b:6b:3b:00:bf:eb:68:bd:ee:37:dd:
2f:ff:22:e3:55:e8:0a:21:71:3c:67:bb:49:ae:60:c5:ec:c9:
39:c0:f0:d4:23:ef:c9:16:70:36:40:d7:31:d5:65:06:60:26:
8f:ec:b8:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:43:17 2025 by rpki-client