Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/ZxguzW17xFrUP53FIAJUfjkeqvQ.roa
File: ZxguzW17xFrUP53FIAJUfjkeqvQ.roa (raw, json)
Hash identifier: Sn/df7xibUqHylpF6Ngt+9h48Sxd84uF3fpZ9SuTgf8=
Subject key identifier: 67:18:2E:CD:6D:7B:C4:5A:D4:3F:9D:C5:20:02:54:7E:39:1E:AA:F4
Certificate issuer: /CN=843d1afcf13bd2117d47df683e40a63287004cfe
Certificate serial: 0198743AA0F758E6B26C5ADC13A512EF2C49
Authority key identifier: 84:3D:1A:FC:F1:3B:D2:11:7D:47:DF:68:3E:40:A6:32:87:00:4C:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hD0a_PE70hF9R99oPkCmMocATP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/ZxguzW17xFrUP53FIAJUfjkeqvQ.roa
Signing time: Mon 04 Aug 2025 08:37:36 +0000
ROA not before: Mon 04 Aug 2025 08:37:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43004
IP address blocks: 45.142.84.0/24 maxlen: 24
45.142.84.1/32 maxlen: 32
45.142.84.2/32 maxlen: 32
45.142.84.3/32 maxlen: 32
45.142.84.4/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/hD0a_PE70hF9R99oPkCmMocATP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/hD0a_PE70hF9R99oPkCmMocATP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hD0a_PE70hF9R99oPkCmMocATP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:3a:a0:f7:58:e6:b2:6c:5a:dc:13:a5:12:ef:2c:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=843d1afcf13bd2117d47df683e40a63287004cfe
Validity
Not Before: Aug 4 08:37:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=67182ecd6d7bc45ad43f9dc52002547e391eaaf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:56:b7:01:94:94:c8:2a:a0:c8:b2:51:5a:b9:
e7:7a:9d:5f:c4:0a:f0:44:df:c0:a1:46:c0:d1:c1:
fb:39:c0:56:57:22:76:c9:a9:29:c2:9c:7b:b4:17:
f4:9c:18:4e:ac:01:d0:e4:76:6e:af:7b:d3:f2:39:
03:4c:86:f9:aa:60:5a:2a:05:65:74:e7:03:96:a8:
29:92:4b:7c:22:9f:d6:de:62:ce:9d:f8:92:e1:c1:
23:82:b9:61:74:50:ff:98:3f:3b:53:c0:4b:fe:51:
cc:a4:f7:11:e0:3f:9b:bb:63:76:cf:b9:db:1b:b5:
4c:af:cd:b1:01:88:b1:4c:4f:88:8a:60:2f:85:e3:
fc:d2:3d:1e:45:e1:c9:7c:ae:a3:07:ad:92:5b:d2:
d2:a9:8f:bf:93:62:e7:2a:ff:d8:4e:d3:ea:11:d7:
13:99:f6:65:21:ab:45:f5:8d:6f:0d:cd:93:f9:1d:
6c:c3:0c:95:20:fd:1f:0e:a7:b3:1d:6c:7c:25:d5:
b5:44:18:95:54:f3:58:b1:1d:66:0d:57:93:2f:71:
7b:6d:56:15:89:20:e6:b5:61:15:80:fb:c4:de:b1:
5a:9f:48:cc:18:73:c2:33:79:d0:7b:d8:df:bd:e4:
41:ed:fd:31:f7:7b:6d:e4:5d:da:a4:24:0b:64:a9:
17:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:18:2E:CD:6D:7B:C4:5A:D4:3F:9D:C5:20:02:54:7E:39:1E:AA:F4
X509v3 Authority Key Identifier:
keyid:84:3D:1A:FC:F1:3B:D2:11:7D:47:DF:68:3E:40:A6:32:87:00:4C:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hD0a_PE70hF9R99oPkCmMocATP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/ZxguzW17xFrUP53FIAJUfjkeqvQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/hD0a_PE70hF9R99oPkCmMocATP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.84.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:f0:20:dc:b4:f3:c4:e2:91:27:bd:af:3b:58:97:0c:06:96:
63:64:0a:e3:09:9f:1c:84:c9:6b:4f:80:18:6a:5a:f9:41:71:
5d:01:f8:52:dd:3d:7f:6a:c0:33:f6:a9:a1:15:b9:1a:10:36:
6c:a0:27:a9:3d:84:9b:10:eb:18:65:bd:b4:61:0f:a9:86:79:
91:f9:10:b2:2c:1c:52:85:de:a8:fb:32:38:09:e6:1c:fe:39:
2c:29:2a:90:24:8b:df:6d:13:7b:5c:0c:a5:f4:62:89:a1:00:
29:27:ba:53:d0:68:df:bc:d2:8a:68:ca:4e:37:9f:05:c1:2c:
5c:32:1e:2e:15:82:8a:f5:73:a9:23:58:55:03:02:08:c9:9c:
b7:17:1f:0f:cf:d7:52:5b:02:12:df:44:86:1c:3a:bc:3f:0f:
df:78:69:9c:1f:f2:b7:8f:c5:e9:5a:35:11:37:cd:af:80:03:
21:b5:81:96:cb:6d:8b:a6:94:cc:ad:76:1d:d4:d7:8f:08:ff:
55:a9:f0:f4:9d:3e:f5:2b:5a:e8:8d:c4:8f:b5:fa:a3:f3:38:
13:e2:d7:79:3d:5a:7e:f1:cc:6c:d9:a1:03:73:98:9f:ce:44:
1e:ce:c0:07:f6:fb:8d:07:fa:83:db:1a:7b:0a:e1:b3:46:d3:
97:66:11:3a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZh0OqD3WOaybFrcE6US7yxJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0M2QxYWZjZjEzYmQyMTE3ZDQ3ZGY2ODNlNDBhNjMyODcw
MDRjZmUwHhcNMjUwODA0MDgzNzM2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NzE4MmVjZDZkN2JjNDVhZDQzZjlkYzUyMDAyNTQ3ZTM5MWVhYWY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFa3AZSUyCqgyLJRWrnnep1fxArw
RN/AoUbA0cH7OcBWVyJ2yakpwpx7tBf0nBhOrAHQ5HZur3vT8jkDTIb5qmBaKgVl
dOcDlqgpkkt8Ip/W3mLOnfiS4cEjgrlhdFD/mD87U8BL/lHMpPcR4D+bu2N2z7nb
G7VMr82xAYixTE+IimAvheP80j0eReHJfK6jB62SW9LSqY+/k2LnKv/YTtPqEdcT
mfZlIatF9Y1vDc2T+R1swwyVIP0fDqezHWx8JdW1RBiVVPNYsR1mDVeTL3F7bVYV
iSDmtWEVgPvE3rFan0jMGHPCM3nQe9jfveRB7f0x93tt5F3apCQLZKkXhQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGcYLs1te8Ra1D+dxSACVH45Hqr0MB8GA1UdIwQY
MBaAFIQ9GvzxO9IRfUffaD5ApjKHAEz+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEQwYV9QRTcwaEY5Ujk5b1BrQ21Nb2NBVFA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS8xNzMzMDYtMmRiZC00YWQ4LWJkNTEt
YjFmM2JjYzY3YWFlLzEvWnhndXpXMTd4RnJVUDUzRklBSlVmamtlcXZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS8xNzMzMDYtMmRiZC00YWQ4LWJkNTEtYjFmM2JjYzY3YWFl
LzEvaEQwYV9QRTcwaEY5Ujk5b1BrQ21Nb2NBVFA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALY5UMA0G
CSqGSIb3DQEBCwUAA4IBAQC08CDctPPE4pEnva87WJcMBpZjZArjCZ8chMlrT4AY
alr5QXFdAfhS3T1/asAz9qmhFbkaEDZsoCepPYSbEOsYZb20YQ+phnmR+RCyLBxS
hd6o+zI4CeYc/jksKSqQJIvfbRN7XAyl9GKJoQApJ7pT0GjfvNKKaMpON58FwSxc
Mh4uFYKK9XOpI1hVAwIIyZy3Fx8Pz9dSWwIS30SGHDq8Pw/feGmcH/K3j8XpWjUR
N82vgAMhtYGWy22LppTMrXYd1NePCP9VqfD0nT71K1rojcSPtfqj8zgT4td5PVp+
8cxs2aEDc5ifzkQezsAH9vuNB/qD2xp7CuGzRtOXZhE6
-----END CERTIFICATE-----
Generated at Fri Aug 8 19:32:59 2025 by rpki-client