Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/0Az8-y_KKTpzbB4tcQ1mv98QYpA.roa
File: 0Az8-y_KKTpzbB4tcQ1mv98QYpA.roa (raw, json)
Hash identifier: BCyqOL27w0i6u+MninJ11nOG/6FodeTBGbeIRACetV8=
Subject key identifier: D0:0C:FC:FB:2F:CA:29:3A:73:6C:1E:2D:71:0D:66:BF:DF:10:62:90
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 0199CDA4DE19BA1770E4E4727020EFCB122B
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/0Az8-y_KKTpzbB4tcQ1mv98QYpA.roa
Signing time: Fri 10 Oct 2025 10:22:38 +0000
ROA not before: Fri 10 Oct 2025 10:22:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197555
IP address blocks: 45.141.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:cd:a4:de:19:ba:17:70:e4:e4:72:70:20:ef:cb:12:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Oct 10 10:22:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d00cfcfb2fca293a736c1e2d710d66bfdf106290
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:64:dd:e9:d5:e9:bd:cd:a7:1e:1f:28:ee:6d:
6e:86:0d:8b:f5:54:03:45:c1:df:f4:9b:5c:cb:2e:
52:bf:8e:7c:2c:c3:f7:d3:a3:bc:74:1d:61:59:b7:
c4:fd:ae:2b:cd:5f:70:6f:c5:6f:2c:7a:a0:88:da:
c0:7a:05:da:23:ab:c9:2e:51:e0:5e:87:93:96:2b:
8c:03:d1:78:fe:8e:f9:4c:6f:25:4f:0a:a0:d5:f7:
0f:48:0b:0c:62:64:e2:db:d2:9e:83:ec:38:f7:f2:
c1:6c:a2:ea:9e:bc:fb:4b:d6:9d:dd:59:01:57:c3:
bc:d6:25:5b:ba:cd:08:1e:39:72:ff:3c:9c:13:19:
a6:24:55:43:fb:d4:af:5e:00:86:26:8f:03:2e:37:
96:83:45:02:b6:74:69:e5:41:b6:40:d5:f9:95:97:
d5:e6:21:89:a4:28:93:7e:6e:65:c6:d8:d5:2d:24:
b8:5a:2b:f2:0a:76:6c:5b:89:d8:ae:e4:3e:a5:42:
f0:27:bf:e8:bd:fc:e5:2e:23:bb:14:1d:c1:7b:82:
9a:da:c2:d3:e1:14:07:7a:d8:e0:79:49:6d:81:cc:
6f:5b:2f:9f:78:07:e0:e9:80:3f:77:88:f0:1d:f2:
83:09:ae:f2:5c:be:5e:ea:54:15:ee:23:3e:05:cd:
1d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:0C:FC:FB:2F:CA:29:3A:73:6C:1E:2D:71:0D:66:BF:DF:10:62:90
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/0Az8-y_KKTpzbB4tcQ1mv98QYpA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.148.0/24
Signature Algorithm: sha256WithRSAEncryption
20:27:ab:5d:20:76:ce:47:9a:03:e9:85:35:e0:28:e5:7f:ab:
54:33:85:fa:7d:ca:9e:53:a2:df:35:72:69:a1:d2:05:55:16:
e2:dd:52:0f:87:05:aa:ed:3b:ca:5f:b9:12:89:75:83:dd:8b:
41:2a:a5:2d:ba:93:4b:a1:a9:81:1b:89:00:e2:c2:ce:3c:51:
2c:44:77:12:67:3d:ff:b0:c2:df:2d:73:95:25:14:51:e0:fc:
60:fe:34:d2:c5:08:3e:18:e9:1e:ec:64:62:fd:d5:7d:bc:bd:
95:41:e6:13:82:82:4f:25:f8:c3:44:4f:54:8e:56:39:dd:44:
ee:71:8f:ca:a0:db:3d:0c:13:ae:2e:67:13:90:b7:ab:92:23:
de:db:82:73:5f:b0:5c:3c:e6:7b:07:39:b7:9d:63:9e:1d:c0:
e8:cb:68:98:71:75:4c:52:97:43:84:ee:44:68:6b:17:fc:b5:
c2:51:60:45:81:e2:b5:63:f9:6b:37:a1:21:88:00:ba:12:e5:
2a:47:f6:14:f0:3a:08:99:e5:6b:94:ef:f7:d3:0e:4c:63:6a:
5a:ce:51:19:b2:5e:6f:be:8b:6f:b8:2b:76:e8:aa:9d:52:11:
33:3e:5c:f2:48:42:54:4e:cd:d9:b8:f0:af:f4:e1:ba:03:ab:
e3:5a:cf:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:48:47 2025 by rpki-client