Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/AkuNATViTFoUsLRTBmxq5TZta1U.roa
File: AkuNATViTFoUsLRTBmxq5TZta1U.roa (raw, json)
Hash identifier: +ALe8BR6dBzO5s8AWGnd/n4M4kjwqZrGPKmd2bf8aB0=
Subject key identifier: 02:4B:8D:01:35:62:4C:5A:14:B0:B4:53:06:6C:6A:E5:36:6D:6B:55
Certificate issuer: /CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Certificate serial: 019870EF51F65983512564EE4EF419B22F74
Authority key identifier: AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/AkuNATViTFoUsLRTBmxq5TZta1U.roa
Signing time: Sun 03 Aug 2025 17:16:29 +0000
ROA not before: Sun 03 Aug 2025 17:16:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214941
IP address blocks: 45.10.151.0/24 maxlen: 24
45.143.98.0/24 maxlen: 24
185.148.240.0/24 maxlen: 24
185.174.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:70:ef:51:f6:59:83:51:25:64:ee:4e:f4:19:b2:2f:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Validity
Not Before: Aug 3 17:16:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=024b8d0135624c5a14b0b453066c6ae5366d6b55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:11:88:05:89:b3:bb:46:0d:70:89:c2:81:17:
f6:fa:8a:8e:67:f0:73:05:d6:fe:ab:3c:c8:a6:33:
bd:a2:51:93:46:ac:8c:bc:c4:3d:14:62:94:32:5a:
8d:c9:91:2d:5a:cd:22:5b:a2:6d:0f:f9:f6:7b:bc:
ba:22:ce:2d:84:45:9c:2d:de:cd:0d:f6:28:cf:88:
74:9b:d9:95:d6:5e:a1:07:aa:0f:47:18:5a:b9:0a:
28:f0:7d:ef:87:2d:68:77:ba:5f:6f:fb:19:b8:98:
c8:ee:6a:66:09:6d:03:01:85:29:bc:64:e5:85:55:
61:0a:72:68:0f:f5:a1:cc:33:63:a8:e1:45:6d:d4:
3e:6b:e8:59:5b:88:fa:57:73:ce:64:b7:fd:08:7c:
00:4a:ea:74:e7:43:90:f4:95:c4:4e:aa:a8:01:07:
dc:ee:cf:2d:43:66:f6:4d:ee:94:ed:97:9d:5f:08:
1d:7c:89:c4:85:be:b2:71:cb:13:93:7c:e5:02:44:
93:08:c1:33:a1:f6:dc:8b:7a:25:42:64:d9:33:0a:
1d:e3:b1:86:40:23:0f:ff:d2:de:7c:02:b3:60:1d:
18:93:c8:8c:04:4a:ce:b1:11:4e:e5:86:68:26:c5:
98:ad:99:f9:ca:6b:63:36:eb:1a:87:31:5c:1d:94:
fc:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:4B:8D:01:35:62:4C:5A:14:B0:B4:53:06:6C:6A:E5:36:6D:6B:55
X509v3 Authority Key Identifier:
keyid:AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/AkuNATViTFoUsLRTBmxq5TZta1U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.151.0/24
45.143.98.0/24
185.148.240.0/24
185.174.20.0/24
Signature Algorithm: sha256WithRSAEncryption
72:56:62:6e:0f:30:8d:f0:7f:fd:3a:50:08:b6:7f:ba:c0:67:
87:0b:03:4d:cd:aa:e6:23:ad:95:2c:ea:65:21:f6:3b:09:22:
56:83:2c:a3:33:98:94:61:ea:6e:be:c6:54:d0:8c:23:8b:34:
e8:7b:74:09:e4:f9:ff:97:df:12:0c:37:d6:8a:76:d0:80:b3:
0b:96:5f:b5:40:ff:a6:7b:49:47:68:4d:c5:57:87:e5:0a:1c:
89:60:8c:ad:77:15:ec:bd:82:8f:d7:57:56:2f:e3:8e:aa:c0:
b3:d9:0f:47:16:bc:34:b9:87:9a:84:c4:83:bd:1d:a3:66:4d:
e1:66:a5:f7:03:42:0d:22:65:94:92:fb:b8:07:10:43:b3:d6:
1c:0f:fa:04:37:ea:46:5b:c4:71:0c:8d:86:f2:e0:08:20:d3:
13:1b:09:57:8b:29:61:70:95:71:2c:3c:e0:1b:39:84:67:8d:
3f:99:c1:b2:81:6f:bf:ab:86:13:16:fe:46:fe:81:5f:4d:d3:
cd:bf:d9:b7:39:05:fd:31:03:2d:14:ca:53:91:54:e7:bb:54:
fd:91:91:5b:aa:cf:b3:ff:8a:8c:31:48:a2:da:d8:75:c2:95:
88:59:b8:30:af:e3:e6:ed:cf:f3:e8:f0:f8:53:29:20:64:ad:
66:51:28:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:21:03 2025 by rpki-client