Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/igoaVqyafl2WoffAgVIkgHdSfnk.roa
File: igoaVqyafl2WoffAgVIkgHdSfnk.roa (raw, json)
Hash identifier: 7zTU7iM8S5PjrZF0LQz4SXiwfKyS8Iv9hHGwUS2ZAMQ=
Subject key identifier: 8A:0A:1A:56:AC:9A:7E:5D:96:A1:F7:C0:81:52:24:80:77:52:7E:79
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 019A4FD7F09A8C9698B17655C1B511BC4DC0
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/igoaVqyafl2WoffAgVIkgHdSfnk.roa
Signing time: Tue 04 Nov 2025 17:09:03 +0000
ROA not before: Tue 04 Nov 2025 17:09:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211507
IP address blocks: 45.67.138.0/24 maxlen: 24
45.133.73.0/24 maxlen: 24
45.137.201.0/24 maxlen: 24
185.132.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft
rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 11:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d7:f0:9a:8c:96:98:b1:76:55:c1:b5:11:bc:4d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Nov 4 17:09:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8a0a1a56ac9a7e5d96a1f7c08152248077527e79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2d:b0:79:a6:36:3f:19:cf:73:38:21:85:0d:
14:57:77:44:44:cc:b4:33:a6:73:d5:47:f0:ed:ea:
78:05:83:5b:25:0c:e4:9a:0d:4c:bb:41:64:ea:e4:
eb:c6:ea:c9:16:04:41:68:79:b4:4d:73:f5:9d:c1:
a4:63:b3:a3:00:69:3c:5d:b2:5f:40:f2:2b:23:d2:
96:a8:0c:10:b8:37:94:0e:1e:37:87:c4:d5:bf:69:
a3:a9:76:71:c1:77:9a:62:2d:0e:f0:8e:80:f5:59:
36:1a:31:27:de:de:8f:45:a2:10:2f:93:57:a5:17:
f8:be:b1:82:78:6d:1a:bc:c3:b1:b0:25:b8:40:cd:
34:96:aa:ab:53:aa:31:3c:78:f7:8c:de:8b:93:03:
9e:2a:ca:32:f8:94:89:ca:9d:c9:3f:aa:36:3e:1a:
de:9b:ca:24:5a:e7:b9:be:e5:3a:97:50:7f:bb:be:
06:92:55:c1:60:fe:1a:c8:33:5d:a0:d4:ae:e0:40:
26:19:dc:6a:7d:f1:a5:0c:21:30:0f:50:9b:5d:7e:
8c:55:b9:e5:a1:2e:4f:b9:b8:99:ec:2f:0c:03:70:
1f:f0:fb:22:dc:98:49:8b:b1:28:df:49:76:51:ec:
e5:39:01:22:d7:fe:f5:e9:ef:92:48:e8:b4:20:0c:
2d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:0A:1A:56:AC:9A:7E:5D:96:A1:F7:C0:81:52:24:80:77:52:7E:79
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/igoaVqyafl2WoffAgVIkgHdSfnk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.138.0/24
45.133.73.0/24
45.137.201.0/24
185.132.53.0/24
Signature Algorithm: sha256WithRSAEncryption
64:90:1c:c1:45:6e:ea:cd:d5:3e:75:75:c3:0c:b5:0d:e7:64:
ae:ad:3f:85:2c:53:a3:6e:9b:6e:6d:a0:27:1e:5c:e9:24:3f:
a4:1f:ec:48:0a:82:48:70:6d:aa:0a:37:7f:e9:75:9a:eb:d8:
66:01:7a:56:1f:d5:18:c0:38:76:6c:d9:94:06:e9:b7:ea:bf:
cd:36:e0:2c:95:09:0c:e8:ab:28:30:75:dd:09:7f:50:a8:da:
02:ed:6d:01:1b:e9:06:a3:7a:08:e5:9c:04:4a:d2:bd:41:bd:
d0:c0:f2:e5:84:5d:fb:0b:32:3b:4d:b0:a8:39:d7:8d:06:b5:
c6:58:0f:84:61:91:57:85:8a:b2:a2:c6:c9:ae:bb:17:8d:a2:
d4:dc:bf:eb:5f:c6:e5:86:79:ba:fd:d7:9c:be:c8:fb:47:3e:
1c:07:6d:f1:1d:4d:28:b2:df:b5:94:88:71:61:f7:0e:2e:a2:
c4:bc:b8:64:5b:7a:65:cd:6d:83:8b:0a:17:c3:b7:b8:37:06:
ed:9c:41:f5:db:c2:e8:41:48:6f:5c:d0:aa:66:b9:a9:7d:e3:
4d:d4:29:32:8e:db:ba:b8:17:3f:55:58:18:6b:a4:1f:7f:58:
80:fd:61:99:ce:20:03:dc:01:ba:57:9e:c0:d9:31:08:5b:14:
eb:75:39:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:55:42 2025 by rpki-client