Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/4XbrpnYb9fH0wMvekeYaI_ADm2M.roa
File: 4XbrpnYb9fH0wMvekeYaI_ADm2M.roa (raw, json)
Hash identifier: KaRiqzoHzlwolVC6yfXNO0R4xyGemvvXu9DHgMiuTFw=
Subject key identifier: E1:76:EB:A6:76:1B:F5:F1:F4:C0:CB:DE:91:E6:1A:23:F0:03:9B:63
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 0199E8EA157620A79C7C479235DB1682A1BC
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/4XbrpnYb9fH0wMvekeYaI_ADm2M.roa
Signing time: Wed 15 Oct 2025 17:27:58 +0000
ROA not before: Wed 15 Oct 2025 17:27:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201814
IP address blocks: 45.141.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e8:ea:15:76:20:a7:9c:7c:47:92:35:db:16:82:a1:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Oct 15 17:27:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e176eba6761bf5f1f4c0cbde91e61a23f0039b63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:c8:91:7e:8d:a9:92:14:40:67:ae:bc:48:cb:
78:fa:74:46:b2:6f:f2:ab:d8:b5:7d:7c:03:3a:77:
e8:5a:56:0c:da:c3:02:00:76:23:a1:87:d9:50:ff:
2c:57:cc:18:de:e9:68:61:58:2d:e2:97:f9:63:a6:
9e:40:78:e4:5b:8a:a4:91:01:55:2d:d7:7a:d0:94:
90:a8:23:72:e6:1a:49:6a:75:46:33:fb:7b:a1:8f:
ae:f9:70:72:ac:3d:66:af:f1:d8:c7:7e:d2:5d:46:
6c:a6:c3:d9:ed:9f:4f:09:33:6f:40:52:37:ab:5c:
fe:df:3a:f0:4b:79:1f:81:70:34:8c:65:72:69:7f:
0e:24:56:f1:0c:55:c2:06:4a:e7:18:37:7e:01:d4:
15:d0:b3:f1:b3:03:4d:7e:1c:53:ca:cf:d3:26:9a:
ee:75:29:83:10:86:87:be:7c:9b:f0:f1:5c:9e:33:
07:bc:f1:62:74:9a:fa:b3:ef:6e:76:75:98:d2:68:
f8:70:6e:4c:e0:da:31:1d:80:87:ee:c3:81:ab:1b:
d7:e2:c3:f5:a0:67:ad:65:a5:0e:8d:b0:c5:df:65:
14:e4:7a:fb:21:96:ed:87:b0:54:91:16:a4:9d:e0:
e1:f0:25:5b:5e:97:79:4d:67:9d:7c:bc:74:57:a3:
03:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:76:EB:A6:76:1B:F5:F1:F4:C0:CB:DE:91:E6:1A:23:F0:03:9B:63
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/4XbrpnYb9fH0wMvekeYaI_ADm2M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.233.0/24
Signature Algorithm: sha256WithRSAEncryption
69:82:c8:05:b3:8e:6a:9c:59:90:5f:17:89:18:30:dd:8d:02:
a8:07:f9:d3:b1:e8:ef:08:39:b1:8d:ce:9b:9f:08:1d:46:ba:
69:15:dd:cc:b9:dc:af:54:73:6b:e5:4b:90:6e:c6:9e:e5:fc:
cd:36:8d:29:9f:2f:e2:c8:25:6a:ac:5a:ff:81:a6:db:20:b0:
61:31:d8:25:99:f6:3d:f3:89:6b:a7:6b:ab:8e:c4:e0:70:ec:
89:8f:a9:3d:d4:8a:51:3d:9d:cd:9d:44:2b:9e:2e:aa:76:c6:
a0:ab:20:6e:b3:e1:f4:96:5d:70:b7:4c:37:69:aa:2c:f7:68:
dd:70:b7:ac:76:43:b4:92:3b:5d:b7:bb:0f:ce:86:f3:bc:a6:
dc:b2:2b:c4:38:c3:68:05:ad:0b:d8:58:6c:fd:79:69:35:1c:
0a:82:01:cf:da:f7:48:8c:55:00:78:79:36:e8:af:f2:70:0b:
46:f3:7d:54:59:c9:cf:7a:9e:09:67:53:3b:f5:af:88:46:89:
ed:47:cf:08:1e:f2:15:43:d7:8b:09:28:40:7c:02:93:b7:8e:
d2:52:56:83:36:05:6f:3f:4f:7d:8a:dc:b6:da:86:2e:a4:ec:
53:33:bb:62:02:06:b3:3e:95:c2:9d:e0:bb:c6:22:2f:b4:ac:
d7:75:cc:91
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZno6hV2IKecfEeSNdsWgqG8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkMWNhYTY5MzU4ZjhjOThmN2E3MTlmMjU5N2Q1ZGFkZGJk
MDAxOGMwHhcNMjUxMDE1MTcyNzU4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMTc2ZWJhNjc2MWJmNWYxZjRjMGNiZGU5MWU2MWEyM2YwMDM5YjYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9ciRfo2pkhRAZ668SMt4+nRGsm/y
q9i1fXwDOnfoWlYM2sMCAHYjoYfZUP8sV8wY3uloYVgt4pf5Y6aeQHjkW4qkkQFV
Ldd60JSQqCNy5hpJanVGM/t7oY+u+XByrD1mr/HYx37SXUZspsPZ7Z9PCTNvQFI3
q1z+3zrwS3kfgXA0jGVyaX8OJFbxDFXCBkrnGDd+AdQV0LPxswNNfhxTys/TJpru
dSmDEIaHvnyb8PFcnjMHvPFidJr6s+9udnWY0mj4cG5M4NoxHYCH7sOBqxvX4sP1
oGetZaUOjbDF32UU5Hr7IZbth7BUkRakneDh8CVbXpd5TWedfLx0V6MD8wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOF266Z2G/Xx9MDL3pHmGiPwA5tjMB8GA1UdIwQY
MBaAFC0cqmk1j4yY96cZ8ll9Xa3b0AGMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9hOTM2OTktMTg4Yi00NzBhLTk2Yjct
MjliMDg1ZGQyM2FkLzEvNFhicnBuWWI5Zkgwd012ZWtlWWFJX0FEbTJNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9hOTM2OTktMTg4Yi00NzBhLTk2YjctMjliMDg1ZGQyM2Fk
LzEvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALY3pMA0G
CSqGSIb3DQEBCwUAA4IBAQBpgsgFs45qnFmQXxeJGDDdjQKoB/nTsejvCDmxjc6b
nwgdRrppFd3MudyvVHNr5UuQbsae5fzNNo0pny/iyCVqrFr/gabbILBhMdglmfY9
84lrp2urjsTgcOyJj6k91IpRPZ3NnUQrni6qdsagqyBus+H0ll1wt0w3aaos92jd
cLesdkO0kjtdt7sPzobzvKbcsivEOMNoBa0L2Fhs/XlpNRwKggHP2vdIjFUAeHk2
6K/ycAtG831UWcnPep4JZ1M79a+IRontR88IHvIVQ9eLCShAfAKTt47SUlaDNgVv
P099ity22oYupOxTM7tiAgazPpXCneC7xiIvtKzXdcyR
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:58:02 2025 by rpki-client