Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/RRUQKBpDYcAV9cNGLyc68EQW7y0.roa
File: RRUQKBpDYcAV9cNGLyc68EQW7y0.roa (raw, json)
Hash identifier: kdzrAPKS0KYflxppWaXv9S8Fv5AxgW09gljRe5Drd+o=
Subject key identifier: 45:15:10:28:1A:43:61:C0:15:F5:C3:46:2F:27:3A:F0:44:16:EF:2D
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0197D9DEBF239AE8A832FB57353177FA277E
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/RRUQKBpDYcAV9cNGLyc68EQW7y0.roa
Signing time: Sat 05 Jul 2025 09:15:43 +0000
ROA not before: Sat 05 Jul 2025 09:15:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 397423
IP address blocks: 85.31.47.0/24 maxlen: 24
91.92.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d9:de:bf:23:9a:e8:a8:32:fb:57:35:31:77:fa:27:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 5 09:15:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=451510281a4361c015f5c3462f273af04416ef2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a4:88:52:d1:1b:6d:b2:99:38:19:cc:1a:a8:
66:45:47:96:6d:30:e8:14:99:e1:a9:b2:37:1e:6e:
4f:46:2f:7d:7e:72:24:ef:c7:62:16:e2:f2:49:62:
3f:08:05:2c:1a:c8:a6:61:a1:5a:e6:ba:26:03:bb:
20:4c:de:4a:46:0e:f5:ff:63:be:fc:46:95:44:76:
70:42:9f:a6:6c:d7:f8:5c:5c:e8:59:b3:b8:ee:7a:
ab:d3:b6:3c:7d:bb:35:db:20:e4:e7:53:b3:b4:0c:
dc:a8:7c:79:27:5c:19:a2:7d:ec:7c:05:33:7d:06:
c3:61:00:10:78:83:66:7e:f6:c5:ce:96:3e:de:6b:
93:31:ff:ba:24:14:2e:26:28:4e:4f:91:ff:c4:04:
ad:32:2b:73:7f:83:cf:5d:3e:f0:c4:83:29:6f:6c:
73:51:4f:e7:63:79:90:2a:3b:eb:1e:29:df:5a:11:
a6:6a:af:ba:19:e6:9e:1a:01:b7:53:ef:51:fe:36:
d0:fc:4a:f3:90:e5:80:cc:fd:07:61:17:22:8a:1c:
d0:3c:fa:73:00:c2:de:18:57:44:2e:44:51:5d:0e:
21:6f:03:69:e7:13:c5:3e:5d:98:9f:04:9b:1a:80:
9e:35:79:69:13:91:6a:bf:fd:64:9d:a1:74:6e:47:
1f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:15:10:28:1A:43:61:C0:15:F5:C3:46:2F:27:3A:F0:44:16:EF:2D
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/RRUQKBpDYcAV9cNGLyc68EQW7y0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.31.47.0/24
91.92.195.0/24
Signature Algorithm: sha256WithRSAEncryption
79:79:12:e8:0a:c8:43:0d:7f:d1:87:10:f8:84:cb:98:aa:f4:
88:61:9f:49:da:a6:fc:56:ce:bc:27:5d:14:86:a9:a3:0d:1d:
a2:23:03:ef:f6:1e:96:80:1e:22:78:7a:66:9b:37:92:36:17:
bd:a4:b5:ec:5e:99:24:d3:4f:be:db:64:1f:ce:23:72:eb:de:
77:cf:5c:f7:61:76:a7:96:8a:cf:3a:6a:4f:d7:32:fb:44:14:
dd:85:eb:46:ee:7d:01:52:10:9d:f3:02:ed:fd:d7:87:89:37:
26:2d:83:db:e6:aa:b6:58:07:37:d5:98:bf:96:04:49:b1:57:
7e:ee:e0:6b:3c:a3:23:d5:9e:c1:8d:4e:eb:97:89:a1:41:01:
ae:20:fc:f8:ab:e9:89:9c:54:54:f5:da:ae:5a:a5:0b:15:a4:
48:e5:86:4c:d9:7c:c4:7f:a2:d1:40:54:cd:d4:63:1f:81:36:
e4:8d:17:56:be:3f:38:85:bf:49:0a:70:5a:23:75:04:78:d6:
2d:f8:c4:c3:3e:0c:44:34:d5:44:02:b3:6d:cb:08:61:50:32:
a0:6f:73:a0:52:e7:fc:5f:a7:43:e0:4c:e6:84:8f:66:95:e9:
d4:db:d7:82:68:ce:76:e9:dc:bf:f0:55:98:2c:3d:9f:b6:07:
ae:d2:45:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 08:33:46 2025 by rpki-client