Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/AKPHatFWzrR4GXOYZWJKjxWRQNc.roa
File: AKPHatFWzrR4GXOYZWJKjxWRQNc.roa (raw, json)
Hash identifier: e8yB+d8mWkKERLu1ArvMmqE0cs/prxD4PdsRcpmkUmI=
Subject key identifier: 00:A3:C7:6A:D1:56:CE:B4:78:19:73:98:65:62:4A:8F:15:91:40:D7
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 019A261D9159E8AA16B7C78E49DE45F299DD
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/AKPHatFWzrR4GXOYZWJKjxWRQNc.roa
Signing time: Mon 27 Oct 2025 14:41:03 +0000
ROA not before: Mon 27 Oct 2025 14:41:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 45.148.51.0/24 maxlen: 24
45.152.37.0/24 maxlen: 24
45.154.237.0/24 maxlen: 24
185.208.211.0/24 maxlen: 24
185.232.85.0/24 maxlen: 24
193.57.9.0/24 maxlen: 24
195.60.177.0/24 maxlen: 24
195.88.210.0/24 maxlen: 24
213.185.92.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft
rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:26:1d:91:59:e8:aa:16:b7:c7:8e:49:de:45:f2:99:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Oct 27 14:41:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=00a3c76ad156ceb47819739865624a8f159140d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a6:b6:f6:83:8c:05:0b:f0:a5:51:5c:a9:8f:
e1:9d:89:08:2c:1e:7a:36:23:f6:f4:c1:78:92:04:
96:a9:6b:61:e5:f3:4c:09:15:0e:61:70:bf:8a:52:
a3:ef:51:92:bf:db:fc:4a:5a:7f:4e:4a:31:c8:9e:
51:7b:4e:7a:7b:fc:34:d0:d2:00:88:7e:31:d5:66:
65:8c:5b:2d:93:c2:8c:12:70:66:e3:87:1f:a7:fd:
2a:56:53:3e:c6:0b:9c:cc:e5:b0:01:55:e6:56:35:
89:f5:1e:30:c6:28:d5:0b:d5:ec:a9:0a:c8:2c:6c:
ba:c1:12:ef:0a:e7:31:18:fc:ff:6d:98:a1:dd:f2:
6e:bd:3e:4c:55:b9:59:3a:8a:ba:9e:d4:17:d3:b7:
9a:8e:a4:87:a6:d2:0e:1f:f5:97:9d:1e:86:6d:d9:
ba:bd:72:47:20:12:14:c9:c8:64:cf:8c:d8:83:60:
b9:76:50:33:ff:7a:16:02:03:7d:90:98:45:e7:22:
d8:02:ba:81:c8:c5:92:35:4e:03:f9:36:23:06:40:
a6:57:f2:7f:9f:cd:78:f7:04:13:24:03:e9:ba:a5:
7b:3e:ea:64:d6:5f:41:5c:6a:f3:05:fe:89:9e:e7:
5c:84:5c:fc:24:d3:c1:09:0a:36:96:1c:45:d1:c9:
f1:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:A3:C7:6A:D1:56:CE:B4:78:19:73:98:65:62:4A:8F:15:91:40:D7
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/AKPHatFWzrR4GXOYZWJKjxWRQNc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.51.0/24
45.152.37.0/24
45.154.237.0/24
185.208.211.0/24
185.232.85.0/24
193.57.9.0/24
195.60.177.0/24
195.88.210.0/24
213.185.92.0/22
Signature Algorithm: sha256WithRSAEncryption
b2:05:33:8b:de:5b:db:68:62:a9:33:64:04:50:fe:24:93:50:
31:a3:ad:c0:d5:fd:db:0e:15:ec:f4:d0:79:0f:fa:3e:93:cf:
a6:e2:35:74:63:f7:13:03:bb:3d:10:b1:c9:57:35:de:2a:aa:
ef:7c:69:eb:9b:37:e6:6e:b9:52:8d:fc:4e:93:d4:f8:ad:cd:
c6:26:5b:0e:9d:34:b0:4f:9d:91:c9:34:b4:2d:69:ba:fd:ba:
aa:e4:d6:b3:b8:46:ee:f6:c2:f9:df:51:46:79:fb:8a:aa:9c:
e1:70:a4:2c:97:70:5a:f2:48:34:ff:16:93:6f:5b:f8:d8:90:
ac:17:7b:8b:5f:31:c4:e2:99:2d:28:cc:40:83:48:b2:36:fb:
0d:40:7d:70:3e:4b:d0:f2:9e:3f:7f:6f:b5:d3:a1:43:a1:d8:
a7:d4:91:dc:16:f6:51:77:25:ab:24:b7:dc:d7:f4:c0:94:5c:
23:8b:75:80:b3:59:ca:9c:2f:01:f9:c3:b5:f0:b3:0d:33:61:
67:e7:70:e6:5a:76:66:9f:8d:a8:2f:e1:2c:91:8d:72:bf:7a:
1b:a8:b8:b6:17:1e:13:c6:95:4b:c4:8f:41:90:9c:6a:77:86:
b0:1c:49:aa:db:75:53:71:23:3c:c0:e2:46:93:e6:ec:da:83:
a5:d9:32:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:12:09 2025 by rpki-client