Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/A36TtvXMPQL0vuYt-DbADXkioHg.roa
File: A36TtvXMPQL0vuYt-DbADXkioHg.roa (raw, json)
Hash identifier: gr5xlNyjdy6ao9YoMSyHuCoI8p4LyFouICazI8UxNgw=
Subject key identifier: 03:7E:93:B6:F5:CC:3D:02:F4:BE:E6:2D:F8:36:C0:0D:79:22:A0:78
Certificate issuer: /CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Certificate serial: 0199F23DC7CF66BF33BFF3DB226573D929AE
Authority key identifier: BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/A36TtvXMPQL0vuYt-DbADXkioHg.roa
Signing time: Fri 17 Oct 2025 12:55:58 +0000
ROA not before: Fri 17 Oct 2025 12:55:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 45.140.58.0/24 maxlen: 24
212.81.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:f2:3d:c7:cf:66:bf:33:bf:f3:db:22:65:73:d9:29:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Validity
Not Before: Oct 17 12:55:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=037e93b6f5cc3d02f4bee62df836c00d7922a078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ff:d8:3d:cd:05:72:90:35:1f:7a:76:e4:f8:
88:7e:99:fa:a4:96:2c:e0:c8:74:36:b6:d7:8d:ae:
7b:77:91:5e:f5:2b:4e:4e:77:48:7d:f9:7a:89:0c:
6f:61:6c:8f:c5:c2:67:d4:59:df:18:a4:2f:8a:46:
9d:d8:2d:f4:fd:77:65:fa:73:53:4d:7a:7f:52:91:
38:61:30:79:da:72:ee:1f:c3:db:4c:be:57:fb:b9:
1b:0f:16:39:60:e8:24:b5:79:51:62:84:c8:e2:f0:
bb:ac:20:ae:34:fe:5f:db:ee:5d:cf:67:08:4a:20:
83:24:d3:fc:2a:fb:78:c2:74:58:83:a2:e3:01:f1:
aa:1f:13:45:75:2a:d0:63:60:ab:89:14:fb:e8:d8:
a7:0b:f3:a9:47:de:4d:f6:83:ce:58:f8:96:de:65:
03:4f:e9:52:a7:a1:17:33:a4:c9:3f:5c:fa:23:a6:
14:7a:d8:ca:37:d9:cf:71:84:ec:c1:81:d9:2e:72:
f1:68:3f:b1:4d:c0:26:94:e6:16:34:b1:77:07:6d:
f4:29:de:d1:f8:f0:c4:f2:f1:0b:f2:2b:ad:31:10:
56:96:7e:ae:6b:9b:88:0a:f8:dc:71:ac:32:9f:12:
a3:e8:5d:45:21:d3:41:26:15:f4:45:24:cd:9e:c4:
09:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:7E:93:B6:F5:CC:3D:02:F4:BE:E6:2D:F8:36:C0:0D:79:22:A0:78
X509v3 Authority Key Identifier:
keyid:BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/A36TtvXMPQL0vuYt-DbADXkioHg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.58.0/24
212.81.45.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:61:a9:d8:3c:b8:3a:c7:a6:f4:4d:6b:5f:f6:b1:99:9e:f1:
91:f5:42:b4:01:9a:f0:32:5e:d0:3f:3e:58:5d:9b:3b:c0:27:
a0:04:a6:42:5f:64:4f:95:51:66:71:ec:7b:fb:9a:bc:00:37:
48:5b:fc:c8:49:33:a6:f1:c2:52:66:9f:86:fd:d1:03:28:51:
8c:5a:58:34:a6:77:c1:75:2c:8c:91:77:56:1e:0d:ab:13:ea:
38:62:e5:fb:5c:e6:e7:7a:c7:b3:7e:32:23:3a:dc:67:6e:b6:
a0:32:24:38:36:70:24:12:00:be:0e:25:69:58:95:9c:2c:60:
fc:54:2f:93:e8:8e:61:03:74:4a:0e:16:bd:5d:68:a2:85:70:
63:ef:d8:3a:66:6c:08:2a:f0:a1:ca:2b:62:22:55:19:1c:32:
48:08:ed:63:f5:b0:7e:26:99:23:c9:8b:57:a4:e3:47:d9:50:
96:c6:ba:fa:7f:a5:cf:cf:b0:63:2d:09:72:fe:20:75:b9:00:
a7:73:9d:ef:1d:11:48:24:f5:c0:93:65:59:bf:de:24:f5:62:
e6:0d:d9:a6:8e:2a:29:cd:52:e0:09:e9:0f:d9:61:83:08:10:
fe:a2:a2:5f:2a:be:a7:a6:62:fd:df:a9:f3:88:a3:9c:e3:0c:
8a:7b:54:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 14:41:27 2025 by rpki-client