Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/rD5WberuF-n7ACpPs11fopy3pmU.roa
File: rD5WberuF-n7ACpPs11fopy3pmU.roa (raw, json)
Hash identifier: QMDAI5BMmpQE5a72W8hznb/16iVEAcS3JU5CmaR0gco=
Subject key identifier: AC:3E:56:6D:EA:EE:17:E9:FB:00:2A:4F:B3:5D:5F:A2:9C:B7:A6:65
Certificate issuer: /CN=f6090b4db06a4d65935141bac98098127a8b8f5a
Certificate serial: 0198748D0BC928F7A0E8CFCAE9DF67B98866
Authority key identifier: F6:09:0B:4D:B0:6A:4D:65:93:51:41:BA:C9:80:98:12:7A:8B:8F:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9gkLTbBqTWWTUUG6yYCYEnqLj1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/rD5WberuF-n7ACpPs11fopy3pmU.roa
Signing time: Mon 04 Aug 2025 10:07:37 +0000
ROA not before: Mon 04 Aug 2025 10:07:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60387
IP address blocks: 45.87.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/9gkLTbBqTWWTUUG6yYCYEnqLj1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/9gkLTbBqTWWTUUG6yYCYEnqLj1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/9gkLTbBqTWWTUUG6yYCYEnqLj1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:8d:0b:c9:28:f7:a0:e8:cf:ca:e9:df:67:b9:88:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6090b4db06a4d65935141bac98098127a8b8f5a
Validity
Not Before: Aug 4 10:07:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ac3e566deaee17e9fb002a4fb35d5fa29cb7a665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ea:72:e0:e9:61:60:f1:06:6a:ec:34:eb:b2:
b3:da:e2:7f:26:55:0e:99:a7:65:91:2e:94:90:a8:
0a:87:38:e5:de:83:31:af:73:c3:51:ad:67:1f:57:
a5:d4:23:b4:98:80:8f:70:f8:bd:c4:5c:db:5f:95:
9c:02:d5:8a:18:e2:a6:f7:22:d8:91:08:c3:94:49:
55:43:8e:33:90:5f:fe:8b:63:b3:7d:56:ae:cc:76:
de:59:cf:a0:19:0d:d8:08:70:7c:45:1c:67:c1:ed:
93:a0:8e:1e:f2:2a:c3:0d:9c:9c:27:e5:ac:91:ab:
be:4c:a5:95:e2:e9:05:18:33:3e:cf:5b:f3:54:32:
43:00:db:df:ff:27:6c:d0:96:20:ee:58:8f:54:66:
27:9c:ad:3a:49:34:fa:20:04:d1:8f:de:a9:ab:b7:
02:9e:6a:a2:38:80:fd:dd:f3:32:d0:06:bc:41:86:
cd:32:9a:43:6a:01:69:aa:7d:c9:11:91:0e:94:78:
57:db:e2:36:a0:e6:2f:06:f0:33:de:09:f9:28:59:
23:02:ff:aa:d6:b6:31:85:d3:99:d7:bc:67:9e:a8:
5f:25:89:bf:49:54:ee:89:d7:39:22:fc:c6:b7:06:
b6:c8:31:85:dc:6c:ed:b8:5b:7d:e8:8d:4c:69:46:
07:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:3E:56:6D:EA:EE:17:E9:FB:00:2A:4F:B3:5D:5F:A2:9C:B7:A6:65
X509v3 Authority Key Identifier:
keyid:F6:09:0B:4D:B0:6A:4D:65:93:51:41:BA:C9:80:98:12:7A:8B:8F:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9gkLTbBqTWWTUUG6yYCYEnqLj1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/rD5WberuF-n7ACpPs11fopy3pmU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/9gkLTbBqTWWTUUG6yYCYEnqLj1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.220.0/24
Signature Algorithm: sha256WithRSAEncryption
31:f6:74:50:81:81:c4:7c:2b:43:09:fb:49:41:64:5c:f5:9d:
05:1d:c7:b9:ad:64:70:aa:8b:4c:50:23:35:7d:45:cb:d7:5c:
75:1b:1d:b8:2f:26:25:45:98:dc:2e:bb:dc:db:2a:c4:0f:a6:
e7:7f:f6:b2:71:7a:a8:ef:33:33:92:b8:61:4f:f1:3d:e5:89:
84:8e:ae:ac:36:18:97:81:9a:3a:0d:68:ff:eb:13:38:02:62:
0f:f2:9c:23:55:d3:7c:0d:5a:fe:e2:d8:f9:7a:11:30:2f:55:
9a:15:d3:1c:4c:f0:47:2d:8f:25:db:25:d6:0c:fe:f6:3a:73:
55:94:4f:c6:cd:a2:77:c6:ab:9a:ef:4a:3b:8a:63:fc:48:c7:
fb:e7:cb:ad:d9:15:ca:f9:26:09:64:7d:61:e6:a5:62:ae:19:
c3:7d:77:6a:a5:d7:b1:77:3a:92:5c:74:2c:44:63:fd:4c:8a:
f0:db:24:67:b2:a4:98:b6:f5:0f:44:f8:b6:28:89:ed:fa:d5:
c7:de:59:dd:06:a1:63:4d:e1:be:8b:95:44:26:27:db:4b:90:
26:2f:95:ea:68:61:df:97:05:28:e9:50:79:16:7b:0f:38:3f:
90:fb:ab:c4:b2:6e:51:18:b6:b2:30:61:ba:9a:e8:22:3b:e4:
b0:12:66:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:36:49 2025 by rpki-client