Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/bMo57y-oTQkGqB079kAEKqpUF1w.roa
File: bMo57y-oTQkGqB079kAEKqpUF1w.roa (raw, json)
Hash identifier: xzP+7FgN33i1ZuegIxbC0/0Ub3+NRD4KSIrFE9Mdeac=
Subject key identifier: 6C:CA:39:EF:2F:A8:4D:09:06:A8:1D:3B:F6:40:04:2A:AA:54:17:5C
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 0199773459ECE4637BBFBBAEC32AFFA4ED37
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/bMo57y-oTQkGqB079kAEKqpUF1w.roa
Signing time: Tue 23 Sep 2025 15:32:23 +0000
ROA not before: Tue 23 Sep 2025 15:32:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205570
IP address blocks: 45.131.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:77:34:59:ec:e4:63:7b:bf:bb:ae:c3:2a:ff:a4:ed:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Sep 23 15:32:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6cca39ef2fa84d0906a81d3bf640042aaa54175c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c6:5c:33:31:3f:17:bc:ae:7b:21:88:ad:3c:
e1:8a:35:b7:6d:2f:94:f7:76:29:b9:67:99:18:8a:
44:84:e0:49:29:b3:94:e4:05:43:08:86:b8:4a:ad:
29:17:19:09:25:e8:85:43:e1:77:b8:d4:6c:2f:6a:
78:6f:31:5a:8e:2f:f7:5f:e2:19:5d:aa:74:c0:3c:
b0:50:a1:0b:2b:ae:8b:0d:72:1c:ac:fd:e8:cc:37:
d2:36:3d:2d:cf:2a:13:dc:88:39:a3:37:3d:33:d9:
8e:4e:f1:70:3a:95:2b:96:25:7f:04:97:80:6f:78:
f8:a0:d1:33:ae:4a:57:bc:e5:8c:5a:73:c2:7d:18:
d7:1b:c0:c1:2a:23:22:99:9a:28:98:0e:c0:d8:52:
fb:82:82:ec:9b:52:e1:8d:39:f2:27:e3:77:24:11:
df:46:4a:96:01:52:51:a9:83:de:6b:66:4a:e7:0c:
12:53:51:aa:c6:70:89:38:ea:17:0b:89:8f:22:94:
c8:01:51:c4:6d:10:32:48:30:d2:f9:67:de:dc:51:
99:ed:8b:ab:da:a2:8f:40:90:bc:b6:23:98:e3:28:
c7:fd:33:c0:9c:3c:dc:17:03:e3:62:75:85:7d:1f:
05:bc:50:3e:03:08:b1:39:5b:37:29:e7:97:b0:cc:
b8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:CA:39:EF:2F:A8:4D:09:06:A8:1D:3B:F6:40:04:2A:AA:54:17:5C
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/bMo57y-oTQkGqB079kAEKqpUF1w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.1.0/24
Signature Algorithm: sha256WithRSAEncryption
50:77:5c:12:0c:5a:d6:aa:cc:70:d2:8e:2b:e6:50:03:6b:2d:
fd:7b:88:46:e8:45:df:f6:ca:b8:da:a7:0a:3c:5e:57:2c:2d:
22:49:f3:52:12:ee:ba:f4:72:20:ed:60:89:6e:96:a0:b7:83:
f6:04:9d:2f:2f:68:dd:e7:ff:58:84:73:bd:52:7a:bf:65:d1:
00:a2:10:bc:fa:91:2d:e6:3c:73:d7:08:c4:d6:1e:c7:e3:06:
d1:41:eb:5d:59:89:f9:1b:86:22:78:bf:8c:fb:a8:84:ae:94:
30:8f:c3:f7:ab:bd:f5:1c:5d:21:ac:3a:d1:83:c2:7d:d5:e8:
7a:13:a7:fd:09:6a:82:a4:dc:ac:fc:ee:2c:fa:b1:ee:ae:9d:
27:0f:e1:40:8b:b2:7d:06:d4:4e:ee:e7:87:56:00:be:13:2b:
03:0e:b5:b2:24:4c:d6:b0:53:a8:e0:ee:e7:a1:42:5f:e5:9d:
04:a8:8b:32:54:49:c4:43:9c:17:c1:23:5c:ec:29:b2:fe:dd:
ca:07:6c:e7:6b:d6:21:ee:8c:fe:0d:5b:83:1d:9f:04:1a:fc:
d4:2d:77:37:34:0f:50:29:5b:c2:ed:16:24:81:19:02:b7:2d:
d9:b6:df:76:ff:24:75:8b:f9:4d:db:30:31:90:6e:a9:77:75:
28:0d:0b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:27:15 2025 by rpki-client