Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/2zPiptdl-0edV96cLherBbf5jpY.roa
File: 2zPiptdl-0edV96cLherBbf5jpY.roa (raw, json)
Hash identifier: pkUla5A0kJ9PBuMPaZOoGa9M3BoexGxDuGiL7TSPY+Q=
Subject key identifier: DB:33:E2:A6:D7:65:FB:47:9D:57:DE:9C:2E:17:AB:05:B7:F9:8E:96
Certificate issuer: /CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
Certificate serial: 01987A22FA45DD4E84471364670D37524666
Authority key identifier: F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/2zPiptdl-0edV96cLherBbf5jpY.roa
Signing time: Tue 05 Aug 2025 12:09:29 +0000
ROA not before: Tue 05 Aug 2025 12:09:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214128
IP address blocks: 45.155.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:22:fa:45:dd:4e:84:47:13:64:67:0d:37:52:46:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
Validity
Not Before: Aug 5 12:09:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=db33e2a6d765fb479d57de9c2e17ab05b7f98e96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f3:ee:61:26:54:d2:91:27:f0:e0:fa:3a:6b:
9b:e1:5a:fd:29:ff:c7:09:e4:40:4c:ed:a9:d3:77:
1d:bf:97:2f:44:6d:72:14:c9:31:46:5c:37:a0:1f:
00:21:f5:6a:52:06:1f:91:2f:28:2c:11:b3:87:57:
be:34:e6:50:24:da:01:43:f3:14:6c:90:31:04:83:
f0:7f:73:16:56:51:97:67:ef:91:57:d4:7e:d9:33:
a3:74:62:14:64:7e:69:84:25:4d:6d:55:e6:8a:b0:
f5:1e:c9:ca:44:55:20:25:41:b1:d8:65:31:ab:16:
80:26:6d:6a:1b:86:6a:ac:43:8e:b7:25:1b:71:05:
31:73:9a:7f:c5:5e:eb:3d:8f:0e:d0:e3:f6:3a:b0:
96:f0:56:03:9d:61:2f:b7:d5:f0:54:b3:c7:57:0e:
63:f2:84:f4:33:43:c9:7a:84:d2:b5:a3:f9:e6:b5:
84:33:a3:01:72:bd:a2:74:94:88:08:54:3b:d7:8f:
29:7c:7e:24:78:90:f1:44:22:97:5d:dd:25:6b:62:
0a:46:de:b0:8c:df:a5:1b:52:2d:5b:6b:71:47:ab:
b8:65:66:a1:90:93:ce:43:9b:73:a1:29:15:53:e2:
3c:a4:57:29:01:02:94:b6:dd:ea:2e:89:a5:f7:60:
89:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:33:E2:A6:D7:65:FB:47:9D:57:DE:9C:2E:17:AB:05:B7:F9:8E:96
X509v3 Authority Key Identifier:
keyid:F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/2zPiptdl-0edV96cLherBbf5jpY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.164.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:9c:1c:96:2d:e6:9a:16:f3:63:19:87:40:52:8f:e7:b5:db:
52:af:8f:53:45:47:21:1e:fa:af:4a:c8:29:6f:50:09:92:a7:
00:9f:6e:19:78:b3:d8:ce:41:84:22:05:a1:0d:85:a2:54:e8:
9d:aa:7a:95:99:77:19:87:96:43:84:c3:bf:8f:1f:36:2a:bd:
ab:9a:7b:62:a3:da:a3:32:44:7a:6f:60:d7:6e:70:02:57:12:
3e:94:c9:ca:97:46:69:b3:82:d4:d3:39:97:19:de:d5:b9:73:
69:e4:38:cd:60:71:66:10:1f:9a:0b:ff:1a:46:15:5c:96:7e:
6b:e0:b1:85:8a:cb:94:97:c2:67:35:2b:b2:e6:62:15:cf:69:
e8:32:bb:ae:7c:76:a6:57:ce:3e:59:16:c3:ca:fd:43:46:16:
d6:2d:39:bf:5c:04:74:43:82:ae:61:02:31:d0:1f:8a:c8:71:
25:c4:a5:27:b1:40:78:39:52:69:77:09:96:a3:71:d0:57:20:
a1:c7:79:b1:02:f7:b0:b4:7e:b2:d0:23:c5:0a:60:ab:c5:28:
42:54:41:38:8e:a9:83:e7:ac:11:24:ef:5d:54:3a:f9:25:3b:
49:27:7c:61:5c:a2:f5:56:f5:ba:67:42:b9:ed:40:96:dc:ea:
11:14:b1:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:58:11 2025 by rpki-client