Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/k5sVbm4YUnKhPOuJcBlxLJ2XXkU.roa
File: k5sVbm4YUnKhPOuJcBlxLJ2XXkU.roa (raw, json)
Hash identifier: +f21o7HPZIklVFhymWVhNPtlEvTp3jhMe2GhHC/9iiY=
Subject key identifier: 93:9B:15:6E:6E:18:52:72:A1:3C:EB:89:70:19:71:2C:9D:97:5E:45
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 0198608AB87A718009BAC8108443BBE88912
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/k5sVbm4YUnKhPOuJcBlxLJ2XXkU.roa
Signing time: Thu 31 Jul 2025 12:52:40 +0000
ROA not before: Thu 31 Jul 2025 12:52:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48314
IP address blocks: 45.145.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft
rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 04:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:60:8a:b8:7a:71:80:09:ba:c8:10:84:43:bb:e8:89:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jul 31 12:52:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=939b156e6e185272a13ceb897019712c9d975e45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:34:60:31:96:fe:23:89:67:31:26:b9:a0:cc:
76:1b:6a:80:2b:cf:40:fe:d4:07:7d:00:e9:88:dd:
d9:96:f9:16:4c:d9:f7:7d:e0:b8:16:3b:3d:34:34:
59:a2:d7:38:6d:95:1f:12:cb:b9:67:53:73:f3:ae:
e2:a1:b8:38:55:f5:35:06:a7:dc:a1:84:a9:a7:cb:
5e:49:0d:fc:aa:5f:5c:e3:35:7d:8d:7d:27:3e:93:
c0:06:ad:20:64:ac:c4:cb:11:a6:0e:3d:93:bd:e6:
ce:65:de:27:44:01:9b:6b:22:80:f2:6a:e0:3b:13:
4b:cb:5e:7a:2e:ce:11:a5:5e:ad:24:76:23:9c:80:
de:a7:6a:d4:18:54:3b:34:ff:39:f9:6d:c0:79:9e:
93:f4:fe:7d:07:e5:16:82:a3:1b:64:ca:e7:50:7e:
09:5b:c6:2f:f4:31:dd:bf:24:4b:32:84:68:70:94:
65:ac:a4:6e:9f:7e:af:07:4b:87:e5:bd:1a:f1:8b:
d0:b0:19:47:a2:7c:cf:e2:af:d9:3a:e6:0a:58:40:
f4:50:88:eb:a4:f1:cc:a3:43:48:d1:28:f6:8d:c4:
c3:c1:31:7f:da:a6:1e:6b:0f:e5:52:e6:d5:79:51:
8c:ac:0e:26:a9:99:ef:20:a7:f6:d8:b3:36:51:6e:
a9:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:9B:15:6E:6E:18:52:72:A1:3C:EB:89:70:19:71:2C:9D:97:5E:45
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/k5sVbm4YUnKhPOuJcBlxLJ2XXkU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.226.0/24
Signature Algorithm: sha256WithRSAEncryption
11:c5:da:50:0d:dd:b6:8b:81:1e:32:46:03:89:72:75:37:2d:
71:95:79:22:69:e6:9e:3c:df:98:92:0c:f2:b7:24:5e:47:26:
09:ca:aa:a0:09:aa:e4:fb:c7:25:93:41:e2:d5:7d:56:40:69:
3c:51:c0:32:47:09:1b:94:2d:70:20:e2:44:3f:85:69:d1:ca:
68:8d:45:1d:8a:e9:b2:84:55:88:b6:8b:6d:23:aa:6c:e2:e6:
f8:50:e1:bb:b0:eb:51:bb:6e:5e:b0:48:1f:3d:3f:91:f6:d0:
99:c9:f8:98:4f:be:b5:e4:bb:56:b8:55:fe:74:92:48:36:61:
f0:12:dd:24:ed:5d:03:4c:66:87:4c:bb:8f:fa:75:85:c1:bc:
7c:a7:64:c4:51:6c:af:14:ba:39:dc:57:fb:7a:aa:92:51:9b:
4a:76:48:fc:a9:32:71:1e:95:c2:ab:39:8a:e8:eb:9a:ee:92:
eb:28:0d:3e:60:68:1f:89:92:6e:e9:86:ce:d4:84:dc:e9:8f:
64:34:63:57:0a:24:92:53:61:51:80:d1:4e:49:2c:1a:f5:bb:
2f:29:b0:c3:7d:32:57:9a:b1:45:f5:43:63:cc:32:3b:82:cc:
b2:66:57:e5:51:a3:8a:66:dd:e0:aa:51:2c:68:63:de:b2:fc:
03:3c:fd:84
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZhgirh6cYAJusgQhEO76IkSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiMDQxNWJmYzQzYjM4ZTljZmQxYTEyOTk1MjAyZTg3NjM3
NTJmZGUwHhcNMjUwNzMxMTI1MjQwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MzliMTU2ZTZlMTg1MjcyYTEzY2ViODk3MDE5NzEyYzlkOTc1ZTQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDRgMZb+I4lnMSa5oMx2G2qAK89A
/tQHfQDpiN3ZlvkWTNn3feC4Fjs9NDRZotc4bZUfEsu5Z1Nz867iobg4VfU1Bqfc
oYSpp8teSQ38ql9c4zV9jX0nPpPABq0gZKzEyxGmDj2TvebOZd4nRAGbayKA8mrg
OxNLy156Ls4RpV6tJHYjnIDep2rUGFQ7NP85+W3AeZ6T9P59B+UWgqMbZMrnUH4J
W8Yv9DHdvyRLMoRocJRlrKRun36vB0uH5b0a8YvQsBlHonzP4q/ZOuYKWED0UIjr
pPHMo0NI0Sj2jcTDwTF/2qYeaw/lUubVeVGMrA4mqZnvIKf22LM2UW6pVQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJObFW5uGFJyoTzriXAZcSydl15FMB8GA1UdIwQY
MBaAFBsEFb/EOzjpz9GhKZUgLodjdS/eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1Nzgt
YTNjYTBkYjgzMjU0LzEvazVzVmJtNFlVbktoUE91SmNCbHhMSjJYWGtVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1NzgtYTNjYTBkYjgzMjU0
LzEvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZHiMA0G
CSqGSIb3DQEBCwUAA4IBAQARxdpQDd22i4EeMkYDiXJ1Ny1xlXkiaeaePN+Ykgzy
tyReRyYJyqqgCark+8clk0Hi1X1WQGk8UcAyRwkblC1wIOJEP4Vp0cpojUUdiumy
hFWItottI6ps4ub4UOG7sOtRu25esEgfPT+R9tCZyfiYT7615LtWuFX+dJJINmHw
Et0k7V0DTGaHTLuP+nWFwbx8p2TEUWyvFLo53Ff7eqqSUZtKdkj8qTJxHpXCqzmK
6Oua7pLrKA0+YGgfiZJu6YbO1ITc6Y9kNGNXCiSSU2FRgNFOSSwa9bsvKbDDfTJX
mrFF9UNjzDI7gsyyZlflUaOKZt3gqlEsaGPesvwDPP2E
-----END CERTIFICATE-----
Generated at Sat Aug 9 10:49:29 2025 by rpki-client