Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/1-W34Y2-6ZjemXz3iWQp8JT5r4fo.roa
File: 1-W34Y2-6ZjemXz3iWQp8JT5r4fo.roa (raw, json)
Hash identifier: jNjeNOA7d8RyKrYy4kXSP0ufCj18S8yCDg4Nofw0dAY=
Subject key identifier: F9:6D:F8:63:6F:BA:66:37:A6:5F:3D:E2:59:0A:7C:25:3E:6B:E1:FA
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 0197B2ED8EBFDAA0F37EE39B1C7E1E670543
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/1-W34Y2-6ZjemXz3iWQp8JT5r4fo.roa
Signing time: Fri 27 Jun 2025 19:46:42 +0000
ROA not before: Fri 27 Jun 2025 19:46:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206832
IP address blocks: 45.141.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 22:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b2:ed:8e:bf:da:a0:f3:7e:e3:9b:1c:7e:1e:67:05:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Jun 27 19:46:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f96df8636fba6637a65f3de2590a7c253e6be1fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6e:ad:39:ac:82:9a:11:19:ff:02:7d:6e:1b:
32:58:f1:63:f4:61:f2:35:eb:f3:d7:e9:f5:0e:29:
df:a5:56:83:f6:d9:29:c5:58:72:1d:57:ac:4a:53:
78:f5:89:69:fa:2c:51:43:91:c5:1b:d7:99:6e:b6:
0e:d2:6b:f6:3e:8c:26:6b:b5:00:63:e0:52:43:fc:
f6:21:c4:4e:0e:32:db:3f:c6:b0:df:d9:e8:42:a9:
83:16:4a:8e:0a:f7:c5:51:de:c8:0d:c2:ca:ee:cb:
8f:80:d7:1b:a9:83:51:24:dc:85:24:f5:3c:41:c7:
96:08:ff:5c:bf:8e:7c:43:ef:7f:95:a0:fc:a3:e4:
5a:6b:0c:9d:5e:c3:83:39:f3:44:04:9e:56:99:44:
b1:3d:2f:92:49:11:57:13:31:6e:88:b9:9b:12:e5:
7f:7f:d1:95:09:bc:84:79:2f:c2:62:39:c2:4a:23:
10:46:11:96:fd:2f:89:4b:07:7e:df:98:da:73:5c:
45:7e:23:89:a8:b3:9e:51:31:bd:79:e4:2e:18:0e:
70:ba:36:da:14:25:36:36:ef:2a:c7:32:4a:cf:95:
37:24:e2:f8:c6:5d:d9:a4:fb:bc:7e:bc:5e:83:10:
9c:84:9d:91:42:92:de:06:b5:eb:fa:d8:d3:a1:0a:
be:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:6D:F8:63:6F:BA:66:37:A6:5F:3D:E2:59:0A:7C:25:3E:6B:E1:FA
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/1-W34Y2-6ZjemXz3iWQp8JT5r4fo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.149.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:ae:a7:40:ab:bf:23:fa:44:74:ae:f1:c0:73:44:4e:9a:c2:
06:51:50:45:18:d9:74:61:ae:e7:ff:08:f3:b3:8f:71:0a:c6:
81:ea:a3:c0:47:00:c7:6d:b1:f5:5c:49:92:5a:a0:e3:b5:9d:
3e:48:79:de:11:09:f8:3d:b8:1c:ab:03:79:34:71:55:34:62:
be:23:30:63:41:d4:a5:0d:17:27:8d:37:63:1d:51:b9:3e:30:
85:7a:22:45:86:43:98:9a:c3:bf:d1:e4:65:7e:5b:9e:20:03:
b9:a6:7f:14:ec:76:6c:4a:d3:84:a7:c1:37:cb:38:d5:16:d5:
59:ab:6c:81:bf:52:2e:09:40:f2:d9:fb:02:52:a7:04:6e:ab:
c4:76:ad:46:86:f7:02:32:b2:4d:0f:98:14:71:25:eb:f0:7d:
52:56:d8:6c:51:84:fd:c3:e4:14:17:b2:47:32:de:1c:a9:d3:
5c:83:35:ac:1d:6d:6f:b9:20:d6:85:7c:12:4e:54:0b:3d:a2:
52:fb:0d:fb:98:ca:4f:3b:a4:d7:68:23:b2:27:cf:29:b1:ab:
c1:2f:90:86:17:e3:b0:7f:4d:44:59:8e:d3:23:c8:52:36:57:
69:9c:28:c1:cb:a7:d7:59:52:46:17:81:12:db:c1:25:6c:45:
1b:01:7d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 04:00:43 2025 by rpki-client