Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/vuqehHp6wdf7c9w4q3PwCUkqIno.roa
File: vuqehHp6wdf7c9w4q3PwCUkqIno.roa (raw, json)
Hash identifier: k0nS6MUv/1Ak6MeFV78g2Z43zPuVwGJ6ExwWNcjv49M=
Subject key identifier: BE:EA:9E:84:7A:7A:C1:D7:FB:73:DC:38:AB:73:F0:09:49:2A:22:7A
Certificate issuer: /CN=32474ac7ca85e09c2d48b33e7bf66f8ed764de0f
Certificate serial: 01989AB2C8C9F095105A15A5457627392970
Authority key identifier: 32:47:4A:C7:CA:85:E0:9C:2D:48:B3:3E:7B:F6:6F:8E:D7:64:DE:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/vuqehHp6wdf7c9w4q3PwCUkqIno.roa
Signing time: Mon 11 Aug 2025 19:54:24 +0000
ROA not before: Mon 11 Aug 2025 19:54:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59741
IP address blocks: 45.141.53.0/24 maxlen: 24
45.141.54.0/24 maxlen: 24
45.155.79.0/24 maxlen: 24
185.73.240.0/24 maxlen: 24
185.73.241.0/24 maxlen: 24
2a05:4740::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9a:b2:c8:c9:f0:95:10:5a:15:a5:45:76:27:39:29:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32474ac7ca85e09c2d48b33e7bf66f8ed764de0f
Validity
Not Before: Aug 11 19:54:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=beea9e847a7ac1d7fb73dc38ab73f009492a227a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:35:ab:10:7e:29:ee:1c:51:11:1e:bd:5d:36:
6e:17:84:4c:0f:a8:5f:62:1c:86:c7:16:34:e4:db:
ff:73:e4:4e:2c:a1:68:25:93:db:5a:fa:f2:f5:b9:
4b:07:a6:01:54:ea:cb:9c:1d:1a:0b:d2:77:5e:12:
c8:3a:12:34:df:c0:78:04:6f:0e:78:c4:60:7d:23:
83:40:ca:59:d6:a3:7e:c8:ad:bd:58:48:01:e1:f4:
4f:5b:45:34:5b:ad:db:d4:a5:83:fe:90:c2:10:79:
b7:26:47:91:87:67:55:77:58:7f:5d:b1:08:82:cc:
cb:98:be:06:ba:9c:cb:8c:5d:5d:ca:c5:80:dc:35:
23:58:b1:1c:fc:3e:a5:17:36:de:40:e1:fc:1a:39:
94:b5:92:34:d9:59:ec:cf:24:35:a9:4f:15:5e:b6:
72:e8:84:55:4e:1b:4f:ed:87:c1:ab:b9:f1:ec:94:
1f:a4:d5:6e:82:af:92:5c:b1:e4:0b:16:17:2a:d7:
e5:86:f5:40:b7:68:0a:14:e6:65:07:ce:b3:10:f1:
b1:bf:3c:fb:86:01:60:72:99:f8:e0:bd:e9:9b:d7:
41:cc:6e:45:62:33:29:59:ab:66:fd:9e:59:45:a2:
89:48:5f:58:59:1b:5f:9f:ec:48:21:f2:b4:47:84:
58:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:EA:9E:84:7A:7A:C1:D7:FB:73:DC:38:AB:73:F0:09:49:2A:22:7A
X509v3 Authority Key Identifier:
keyid:32:47:4A:C7:CA:85:E0:9C:2D:48:B3:3E:7B:F6:6F:8E:D7:64:DE:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/vuqehHp6wdf7c9w4q3PwCUkqIno.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.53.0-45.141.54.255
45.155.79.0/24
185.73.240.0/23
IPv6:
2a05:4740::/32
Signature Algorithm: sha256WithRSAEncryption
0d:d0:be:95:4f:12:a5:f9:25:3c:84:52:c5:40:c3:a8:45:75:
05:9d:94:e1:71:89:bd:f5:ce:b8:07:d0:5e:28:7b:49:9e:14:
34:f7:b4:db:23:f2:14:65:f1:ee:27:60:d4:58:ab:64:e0:d2:
49:9e:6f:1b:0f:74:8f:e7:08:96:bd:ae:5a:a2:d0:f7:08:d3:
76:90:b3:c2:be:2b:a6:2c:87:da:d1:fc:0b:8c:79:c5:33:64:
e0:31:89:12:b6:d1:b6:57:67:18:2b:cd:e9:bd:35:af:84:12:
91:83:3d:48:82:3f:06:ba:05:ef:a0:a7:25:07:43:d7:2d:2d:
12:c6:62:23:01:bc:ae:58:50:5f:43:d9:e3:80:d6:f3:0b:fb:
93:3f:56:50:f0:41:31:97:f6:fa:4b:59:99:e0:75:1e:05:89:
b2:b5:4b:29:94:da:db:96:7a:75:52:92:0c:7f:89:1c:a9:b6:
6e:fc:e5:ba:9f:e8:51:80:2b:77:b2:db:ba:4d:59:35:22:4b:
d7:bf:2b:e9:a7:aa:5b:72:56:e1:35:4b:ba:83:0d:9c:19:c9:
d1:16:4d:3d:29:31:47:53:b7:0c:70:9f:d0:95:e7:02:b8:b9:
68:c9:4f:64:43:61:7f:a3:4f:20:e3:f8:b5:e1:4c:1f:81:63:
54:f8:88:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:40:56 2025 by rpki-client