Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/s1jMtP4ZxdDGLiXyWufZ2W2cTr8.roa
File: s1jMtP4ZxdDGLiXyWufZ2W2cTr8.roa (raw, json)
Hash identifier: fhS6zm0llrlKGdQl7xXdaHOU6S1Tam7R5lawO5PGwwg=
Subject key identifier: B3:58:CC:B4:FE:19:C5:D0:C6:2E:25:F2:5A:E7:D9:D9:6D:9C:4E:BF
Certificate issuer: /CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Certificate serial: 0198910472C62CBF2A5245064AE8DC38EA38
Authority key identifier: BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/s1jMtP4ZxdDGLiXyWufZ2W2cTr8.roa
Signing time: Sat 09 Aug 2025 22:47:24 +0000
ROA not before: Sat 09 Aug 2025 22:47:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39798
IP address blocks: 45.95.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:91:04:72:c6:2c:bf:2a:52:45:06:4a:e8:dc:38:ea:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Validity
Not Before: Aug 9 22:47:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b358ccb4fe19c5d0c62e25f25ae7d9d96d9c4ebf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d6:a7:64:6d:53:36:f3:54:1c:d1:e2:60:54:
31:02:42:e8:fc:38:96:55:ac:6f:6f:a4:01:b0:f4:
ea:d1:8c:08:d3:d7:1e:f3:25:0f:aa:e5:78:ed:3e:
4a:a8:2c:02:77:c2:88:f5:0f:de:db:0e:8f:2a:19:
9b:9b:b5:02:8e:0d:5d:1f:e1:0b:2e:ba:a6:1a:6b:
d0:57:23:29:cf:fe:36:09:10:65:0a:d3:76:37:0a:
db:32:40:63:f9:0c:ed:0a:2f:fd:6b:ad:f7:24:c5:
70:61:a7:4e:2d:46:30:9e:89:d3:23:67:cd:07:20:
f4:d7:b9:d3:9f:be:04:24:3d:f1:a4:43:b7:ed:ca:
32:5f:39:ca:89:ba:59:19:ad:19:5c:3d:f0:ac:79:
c5:30:92:7f:54:56:43:6b:71:94:8a:c1:51:1a:fe:
8b:4b:d9:7e:56:cf:37:2d:52:d5:1a:2c:71:fa:ee:
4c:41:90:cd:23:92:87:0e:2b:51:d8:b6:71:62:6d:
a3:2a:43:36:d1:0c:7d:e0:d5:4b:5d:e4:96:d1:a6:
4d:46:22:ff:12:84:ff:4b:88:ec:50:2c:82:47:d2:
92:ae:de:5c:3c:3a:f4:a1:26:39:16:85:d8:81:9f:
5a:6b:e0:76:83:ed:1f:20:4a:f0:87:b4:4f:e4:a3:
4a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:58:CC:B4:FE:19:C5:D0:C6:2E:25:F2:5A:E7:D9:D9:6D:9C:4E:BF
X509v3 Authority Key Identifier:
keyid:BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/s1jMtP4ZxdDGLiXyWufZ2W2cTr8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.226.0/24
Signature Algorithm: sha256WithRSAEncryption
13:37:84:a5:9d:f9:b2:41:c1:3b:2f:08:98:95:2d:47:a7:53:
bf:ab:1e:71:ca:d9:1e:e3:4c:fe:78:99:44:5c:af:93:1f:b8:
6c:d5:b6:60:1a:ac:c4:43:11:44:52:61:45:58:42:7b:6b:9a:
1d:b1:e9:24:c3:01:21:9a:a2:d1:36:28:dc:c2:f9:29:69:f1:
03:d2:9f:4f:31:69:8c:5d:82:95:aa:67:87:e2:9f:2e:2d:17:
a0:7c:ea:a8:b5:ae:be:ac:9f:30:a1:a4:7b:5f:8c:95:56:7b:
81:84:e6:88:c8:76:72:fe:cf:ca:32:f4:1e:7c:3a:4b:7b:8d:
63:26:02:bc:6b:34:f2:f3:12:f9:4e:2f:b1:40:30:b5:96:84:
49:84:32:fb:99:2f:2e:ba:04:5f:03:6f:ce:c6:e7:c8:df:f2:
db:d2:21:09:36:c7:ac:70:aa:8e:6c:e4:b1:77:47:05:9f:5a:
04:0f:ce:70:c7:ec:c8:dd:18:d6:ac:c6:5a:b9:48:bb:72:03:
b0:0a:88:22:64:88:81:9a:a9:58:6b:d5:1a:38:2e:9e:d7:bf:
4f:2d:1d:24:d8:11:11:96:c9:7c:53:78:eb:a7:4a:1a:76:de:
e2:6c:ba:f9:59:1e:fb:ea:8a:f9:f0:47:87:2a:19:68:3b:da:
14:26:f7:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:52:00 2025 by rpki-client