Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/X18ZVhwbFBkGl8_3NQfa_XVen8E.roa
File: X18ZVhwbFBkGl8_3NQfa_XVen8E.roa (raw, json)
Hash identifier: yA/VCESjBmXTsome/0JIY5jQpuKBTcw9EOGbIF++kLw=
Subject key identifier: 5F:5F:19:56:1C:1B:14:19:06:97:CF:F7:35:07:DA:FD:75:5E:9F:C1
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 019A50D4A18AF0809422EB9CD448EF89E6F7
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/X18ZVhwbFBkGl8_3NQfa_XVen8E.roa
Signing time: Tue 04 Nov 2025 21:45:03 +0000
ROA not before: Tue 04 Nov 2025 21:45:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202425
IP address blocks: 45.140.222.0/24 maxlen: 24
185.242.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:d4:a1:8a:f0:80:94:22:eb:9c:d4:48:ef:89:e6:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Nov 4 21:45:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5f5f19561c1b14190697cff73507dafd755e9fc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:86:18:1c:02:47:e3:d7:34:9f:fc:93:b1:05:
37:63:9d:38:1f:b8:e1:f6:18:4a:fe:21:2d:3b:cd:
52:e6:25:93:d2:ce:41:1b:b5:54:1c:da:b9:f7:09:
45:fa:bf:5b:c5:54:b0:2a:3c:41:ed:77:e4:cb:73:
87:9d:ef:a3:d7:5c:4f:51:17:43:07:53:1a:ae:58:
f7:af:80:9d:68:9f:50:70:32:46:90:d7:ec:49:72:
aa:3d:e6:38:57:33:a9:93:7c:62:cf:13:73:ee:78:
4a:11:2c:b0:e2:60:e9:63:2f:1b:4d:8a:15:6a:a3:
e1:4c:d0:f0:cc:1c:44:47:d3:7c:27:8a:27:20:93:
77:f8:12:c1:75:1c:ce:25:de:a4:ea:cf:6a:fc:b4:
17:d0:da:6f:25:5e:d2:03:0c:8f:4f:6e:e0:16:df:
c8:db:6e:31:1b:ca:87:75:d1:8e:59:6a:fb:78:52:
ea:98:71:f4:fd:0c:ca:99:59:1c:0d:f6:92:86:7d:
b5:0b:af:0e:b6:ff:b2:79:4b:65:ba:1e:b9:99:8a:
04:3c:2b:29:dd:49:35:be:a1:fb:ef:59:de:d0:72:
67:b7:2e:59:2f:28:4e:0e:d6:1e:12:13:35:b5:35:
46:2a:99:b9:62:c8:ed:35:e8:f8:d9:cd:52:f6:ce:
72:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:5F:19:56:1C:1B:14:19:06:97:CF:F7:35:07:DA:FD:75:5E:9F:C1
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/X18ZVhwbFBkGl8_3NQfa_XVen8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.222.0/24
185.242.226.0/24
Signature Algorithm: sha256WithRSAEncryption
46:c1:13:27:db:4c:54:18:f0:10:35:b7:23:5e:92:07:3b:97:
f8:b9:ef:f5:de:e7:5a:db:ed:f3:fe:ae:fb:21:7f:5c:56:8b:
90:b8:52:d3:a1:52:b5:ef:be:4e:aa:c2:f4:24:6e:da:78:12:
ad:83:f6:6b:87:a4:14:dc:52:71:45:9c:52:65:15:cf:a1:64:
09:03:4c:1b:67:0d:ec:bf:c1:7f:97:4d:b4:24:76:74:4f:ce:
3e:ea:72:4b:58:95:51:4d:7a:d6:fc:05:07:a2:d7:44:11:29:
8e:9f:c4:cc:b6:b5:3f:6d:16:93:46:8e:e7:3e:30:7e:09:3e:
bd:07:fb:de:e3:06:4a:e2:ee:a0:e3:01:af:74:2a:8b:9e:72:
38:09:13:2a:00:c9:3e:11:81:a0:2c:c3:0b:88:87:c0:34:84:
b4:9e:73:28:48:64:b9:ac:f1:31:f7:67:41:95:6c:a1:75:e7:
0f:a1:24:64:fe:76:ea:34:80:55:fb:99:4e:a1:99:31:dc:cc:
01:d0:1f:4a:b5:48:c4:df:be:75:bd:3c:cf:56:5a:15:d6:c7:
86:30:a4:9c:47:5f:1b:69:84:86:95:f9:52:aa:77:7a:b7:d1:
19:94:f2:ae:bf:87:0f:b7:4d:3d:08:0c:f9:87:5d:c4:e0:3b:
e2:b1:22:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:36:50 2025 by rpki-client