Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/PWoTLfI1GBVWXAdLNRuMVldxrk4.roa
File: PWoTLfI1GBVWXAdLNRuMVldxrk4.roa (raw, json)
Hash identifier: Be3sB5DnBNtLR4E5AJd2Iddf4oH46RSRRAT/o6NWkO0=
Subject key identifier: 3D:6A:13:2D:F2:35:18:15:56:5C:07:4B:35:1B:8C:56:57:71:AE:4E
Certificate issuer: /CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4
Certificate serial: 019874B35F52FC61DCAFBAC8772435A298D3
Authority key identifier: 5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/PWoTLfI1GBVWXAdLNRuMVldxrk4.roa
Signing time: Mon 04 Aug 2025 10:49:29 +0000
ROA not before: Mon 04 Aug 2025 10:49:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215267
IP address blocks: 45.89.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:b3:5f:52:fc:61:dc:af:ba:c8:77:24:35:a2:98:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4
Validity
Not Before: Aug 4 10:49:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3d6a132df2351815565c074b351b8c565771ae4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:83:5e:8f:81:00:65:50:27:82:03:fd:83:b6:
5c:a6:c2:74:82:22:36:14:1c:32:0e:93:66:22:8d:
b6:45:b0:91:9b:a2:34:5b:b2:d3:7f:38:85:9d:af:
85:ac:b9:12:6c:e0:15:13:64:94:bb:b5:64:87:1a:
81:ed:7e:9a:4e:df:b2:2b:41:55:24:40:22:b2:e9:
15:b9:49:03:47:17:e5:d2:f1:57:50:cf:e9:5f:29:
1b:4e:0c:fa:18:c9:69:e8:26:f6:29:fe:c3:02:15:
be:44:76:1a:b8:57:e3:09:7b:8b:94:5a:ac:67:75:
f4:ef:e4:a1:3b:11:12:3e:cd:a9:ad:45:da:91:e8:
81:35:f8:11:10:2d:83:0d:c6:2c:98:0f:fa:5d:e8:
0a:7f:65:37:40:1f:15:4a:82:06:28:32:1e:6b:83:
2f:18:27:2f:e1:37:e3:c9:b8:c8:27:db:ec:07:17:
ac:ca:9e:41:82:48:3c:54:28:f2:2f:9e:ca:c6:d8:
6a:f2:78:6d:17:aa:52:a2:50:77:17:22:ae:aa:05:
85:87:7f:56:e6:5f:62:dc:78:b2:6e:1a:d0:b5:5a:
a5:6b:9a:eb:c4:f9:18:bc:37:1f:71:74:cd:45:d4:
bf:d9:8c:a4:49:6b:83:b2:83:bc:27:c4:38:f4:77:
77:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:6A:13:2D:F2:35:18:15:56:5C:07:4B:35:1B:8C:56:57:71:AE:4E
X509v3 Authority Key Identifier:
keyid:5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/PWoTLfI1GBVWXAdLNRuMVldxrk4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.28.0/24
Signature Algorithm: sha256WithRSAEncryption
37:ce:e7:77:fd:c2:dd:c7:0d:b8:42:c0:00:59:2c:6e:42:d0:
6c:92:3c:05:3c:9c:ab:55:24:a9:df:97:3e:44:2a:9a:54:eb:
ee:21:82:69:50:24:c3:1e:44:4e:09:c4:a9:8a:14:ae:9a:d5:
79:e4:60:79:24:8b:67:92:b7:d5:de:48:c9:d7:9b:c7:70:1b:
91:2c:fe:86:44:01:d5:98:48:c7:1f:8f:e4:29:10:7b:e7:23:
b3:35:74:a8:60:92:23:69:c3:59:f3:fd:5e:e9:87:cb:9a:44:
17:f8:83:a3:32:34:c5:e7:6d:03:56:d6:10:2c:40:26:3a:8a:
df:26:15:97:70:f9:0f:f7:3e:bc:3d:d4:a7:00:16:fe:aa:a6:
92:18:c0:ac:d9:b7:52:a4:54:e3:26:4b:cb:50:54:77:81:a5:
94:8f:d4:b4:1a:76:fa:1d:a7:fa:d0:33:26:27:58:6e:b8:1e:
5f:9f:6c:9f:7e:0c:5d:c1:d1:d2:25:a6:49:17:35:a7:52:0e:
19:bc:16:c9:29:34:0b:b9:bb:e7:61:39:4c:ed:9d:89:f5:e6:
30:14:5b:e7:4b:c8:79:66:7b:cc:38:48:9c:25:50:86:81:42:
38:6a:85:ec:83:ab:1f:c3:0d:9f:d9:9a:50:88:d0:c4:82:c7:
b0:7a:ad:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 16:10:17 2025 by rpki-client