Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/tT6ASrHAosYkp4sWCxMRwoxhYS4.roa
File: tT6ASrHAosYkp4sWCxMRwoxhYS4.roa (raw, json)
Hash identifier: iT5+PFN5V9lv2Ui5UEIdkGr/yriWuv+ENg/CnaGzDgo=
Subject key identifier: B5:3E:80:4A:B1:C0:A2:C6:24:A7:8B:16:0B:13:11:C2:8C:61:61:2E
Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial: 0199D99E0E726C9D39D67FC8D489DA66845C
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/tT6ASrHAosYkp4sWCxMRwoxhYS4.roa
Signing time: Sun 12 Oct 2025 18:10:38 +0000
ROA not before: Sun 12 Oct 2025 18:10:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 46450
IP address blocks: 45.67.145.0/24 maxlen: 24
162.218.95.0/24 maxlen: 24
212.60.16.0/23 maxlen: 23
217.197.168.0/24 maxlen: 24
217.197.171.0/24 maxlen: 24
2a07:c6c0:9::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:d9:9e:0e:72:6c:9d:39:d6:7f:c8:d4:89:da:66:84:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Validity
Not Before: Oct 12 18:10:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b53e804ab1c0a2c624a78b160b1311c28c61612e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e8:55:95:3a:13:90:73:06:f0:4e:a2:65:3e:
82:a9:e8:c3:2b:80:8d:14:34:c6:4a:e4:2d:61:6f:
99:13:ae:bc:fc:08:8d:ab:ec:64:bb:62:83:66:23:
1c:db:65:5d:da:a1:94:c5:ad:b5:d0:2b:9b:9a:e5:
ee:3d:4a:36:21:7b:66:e0:97:b6:c0:80:a7:80:28:
98:87:e8:dc:d3:32:97:b6:8d:5d:d2:bb:08:00:44:
48:29:4a:cb:50:e6:5c:45:c5:39:8b:3a:cb:76:2d:
98:60:47:e3:b3:8a:e6:ea:07:11:c8:ed:bd:a9:25:
14:f8:a4:f0:ae:7f:9e:23:e8:46:56:5f:d3:5d:83:
74:de:9b:3d:a3:bd:d9:b9:0a:34:94:72:67:36:a5:
b1:54:88:df:e3:cc:25:24:32:c4:62:de:59:11:fe:
d0:41:bc:6f:51:33:1f:c6:33:f0:3c:30:b3:8f:b3:
a5:fd:01:07:17:d8:cc:3b:3d:09:f8:28:34:8f:fd:
13:d0:aa:fb:ed:b3:57:2c:da:8a:6e:c0:41:8a:0f:
56:77:62:1b:5d:05:9b:b8:ac:4e:1b:b7:1b:cd:e5:
e5:da:6c:a7:b4:d4:7e:e1:0a:9b:b9:c5:1d:8f:20:
96:75:92:7c:f2:4f:86:bb:f6:36:36:3f:93:c7:33:
3c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:3E:80:4A:B1:C0:A2:C6:24:A7:8B:16:0B:13:11:C2:8C:61:61:2E
X509v3 Authority Key Identifier:
keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/tT6ASrHAosYkp4sWCxMRwoxhYS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.145.0/24
162.218.95.0/24
212.60.16.0/23
217.197.168.0/24
217.197.171.0/24
IPv6:
2a07:c6c0:9::/48
Signature Algorithm: sha256WithRSAEncryption
4c:72:3a:2e:af:e9:7a:04:48:71:e2:a8:98:c0:b9:89:18:6b:
7a:f7:b7:18:58:da:09:14:3d:a4:55:02:04:9c:eb:61:59:09:
7a:03:d9:99:2b:e6:5b:35:cf:cf:5a:cc:b7:4c:b8:61:57:92:
d3:c7:18:46:54:92:42:4b:b7:8c:87:71:dd:af:9d:f2:c6:10:
49:be:00:b2:e4:9c:c0:1c:d5:63:4c:60:d5:48:74:54:be:3f:
b9:57:ab:5b:12:12:3e:f5:b7:7c:2f:e5:e4:1c:63:6e:33:04:
a8:ad:f1:09:ff:ff:a0:7f:c6:95:8f:d2:b2:9f:3a:cc:4c:50:
85:8b:49:86:0f:11:39:3f:7c:74:18:f3:81:0e:e9:a2:a6:92:
39:46:9d:33:e4:13:aa:50:a5:ed:19:b5:0b:3f:a8:3a:05:55:
92:83:ed:bc:78:32:47:77:6b:0a:49:b6:ed:99:23:f0:dd:c1:
e2:ca:9d:ae:98:a9:2a:69:b4:8a:26:d8:23:7b:2d:f1:d1:0e:
ba:3c:60:d9:b0:c8:62:20:b8:b9:0a:03:9b:ea:7e:7e:5f:d7:
68:ab:5d:5b:01:01:fe:cf:37:c6:67:9f:47:ab:6b:d5:51:1a:
94:33:db:7a:05:f4:b2:4b:a4:7e:23:53:01:2e:a1:68:01:5c:
56:a2:0c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:09:03 2025 by rpki-client