Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/0ghhSS3bKVZhw8XUGwgytRcqpMg.roa
File: 0ghhSS3bKVZhw8XUGwgytRcqpMg.roa (raw, json)
Hash identifier: 5yQt6cwU2qkAgSrjPLqI1O3lJp1uRI2gxYBEBtwxPh0=
Subject key identifier: D2:08:61:49:2D:DB:29:56:61:C3:C5:D4:1B:08:32:B5:17:2A:A4:C8
Certificate issuer: /CN=48395eb4c0ee2daa5392cd99fc45efbc4a754e90
Certificate serial: 01987B27E747D8185A51E3549B590AD49866
Authority key identifier: 48:39:5E:B4:C0:EE:2D:AA:53:92:CD:99:FC:45:EF:BC:4A:75:4E:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SDletMDuLapTks2Z_EXvvEp1TpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/0ghhSS3bKVZhw8XUGwgytRcqpMg.roa
Signing time: Tue 05 Aug 2025 16:54:29 +0000
ROA not before: Tue 05 Aug 2025 16:54:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200845
IP address blocks: 45.150.12.0/22 maxlen: 24
2a0f:8a00::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/SDletMDuLapTks2Z_EXvvEp1TpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/SDletMDuLapTks2Z_EXvvEp1TpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/SDletMDuLapTks2Z_EXvvEp1TpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:27:e7:47:d8:18:5a:51:e3:54:9b:59:0a:d4:98:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48395eb4c0ee2daa5392cd99fc45efbc4a754e90
Validity
Not Before: Aug 5 16:54:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d20861492ddb295661c3c5d41b0832b5172aa4c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b6:b0:c9:90:b8:88:72:c2:0a:10:9e:f5:cc:
19:ec:bd:e2:9f:78:42:24:61:7e:e8:91:01:a0:a6:
11:69:01:4d:c7:b4:62:19:9e:57:3a:13:f4:c9:51:
24:30:84:b3:42:e2:e7:9f:c1:a0:ab:a6:8e:16:01:
be:05:8b:d9:48:c0:29:2f:31:52:d9:27:fc:84:4a:
5b:95:2a:38:7e:b1:2a:aa:4e:d2:7a:c9:d6:b3:19:
09:02:43:63:81:ad:70:8f:10:ac:ac:5e:ad:3c:dc:
e8:9d:c0:60:22:e4:a3:b7:77:62:6e:41:71:8f:41:
87:8f:9d:c0:b6:81:98:3a:ff:22:76:bc:83:1f:78:
7b:29:70:a6:5e:57:96:92:9a:85:d4:a3:3a:e4:ef:
53:2e:d0:13:82:81:2e:af:75:45:ae:d9:fa:c5:f7:
54:b6:c6:60:62:68:06:e7:7c:08:28:97:0d:5b:58:
56:8a:b7:e6:4c:7a:cf:a5:7c:86:21:07:ec:a4:d0:
e6:61:79:0b:e8:32:af:76:73:0a:ba:d4:43:1a:31:
9e:69:8e:f7:9b:b0:32:31:23:22:3e:ee:45:eb:32:
a0:7b:73:46:93:ca:b4:87:1b:ea:45:73:1f:c4:18:
fb:ff:b8:fa:16:08:ff:1d:1c:ca:36:45:8b:33:e0:
b4:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:08:61:49:2D:DB:29:56:61:C3:C5:D4:1B:08:32:B5:17:2A:A4:C8
X509v3 Authority Key Identifier:
keyid:48:39:5E:B4:C0:EE:2D:AA:53:92:CD:99:FC:45:EF:BC:4A:75:4E:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SDletMDuLapTks2Z_EXvvEp1TpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/0ghhSS3bKVZhw8XUGwgytRcqpMg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/SDletMDuLapTks2Z_EXvvEp1TpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.12.0/22
IPv6:
2a0f:8a00::/29
Signature Algorithm: sha256WithRSAEncryption
17:5f:2b:63:02:7d:e5:19:27:7c:2e:b6:fc:ce:d9:31:ef:5b:
f2:db:ae:cc:4b:0f:03:81:af:f4:2b:fa:e1:df:c9:4d:22:96:
a9:45:50:c0:d2:99:18:ad:09:12:6f:1b:11:90:d0:54:7d:85:
3b:05:6a:21:6e:78:e2:f6:b1:9a:b7:5c:cc:34:b6:39:c1:56:
ee:f7:a4:c8:d7:83:41:ee:40:8f:3a:e7:c1:8d:32:32:81:6a:
7f:43:39:22:5b:f2:8c:f6:93:ff:20:6c:b0:20:1c:b5:ca:b6:
a0:f2:16:70:69:25:ec:f3:5e:6f:9d:e7:5f:60:60:b9:32:32:
4b:47:67:bc:4a:a2:f2:7c:55:eb:4f:c0:76:fa:0b:9a:84:20:
58:82:59:c3:ea:76:9e:3b:f2:ac:21:ac:7a:16:df:b4:c8:3d:
b9:b2:10:01:36:95:49:46:96:82:b3:50:bd:b4:38:55:28:bf:
45:03:8b:28:4a:5e:99:60:1e:ff:06:bc:17:46:7c:0c:2d:af:
32:4b:bd:94:b8:f3:b1:72:b0:cd:1b:fd:58:4c:e2:1d:c4:90:
cf:60:76:bf:5b:bc:6e:22:db:bf:f8:89:12:f5:21:a7:ce:c5:
93:7b:dc:ad:81:6c:62:eb:bc:04:11:9e:c5:62:4c:54:f8:5e:
3c:62:81:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:20:18 2025 by rpki-client