Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/AcjZPvLVEctq4aWtM9Se4g1Hez4.roa
File: AcjZPvLVEctq4aWtM9Se4g1Hez4.roa (raw, json)
Hash identifier: m4DjUNQ10CarUgcdKKVdQWZBHX6pVTG/J1Gv/VX/MoI=
Subject key identifier: 01:C8:D9:3E:F2:D5:11:CB:6A:E1:A5:AD:33:D4:9E:E2:0D:47:7B:3E
Certificate issuer: /CN=67499595a65aab0b53768def08091e31061e9e65
Certificate serial: 019855934BF8FBB2DB8FC158DD3F11327974
Authority key identifier: 67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/AcjZPvLVEctq4aWtM9Se4g1Hez4.roa
Signing time: Tue 29 Jul 2025 09:46:13 +0000
ROA not before: Tue 29 Jul 2025 09:46:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49020
IP address blocks: 46.20.100.0/24 maxlen: 24
46.20.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:55:93:4b:f8:fb:b2:db:8f:c1:58:dd:3f:11:32:79:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67499595a65aab0b53768def08091e31061e9e65
Validity
Not Before: Jul 29 09:46:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=01c8d93ef2d511cb6ae1a5ad33d49ee20d477b3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c7:47:eb:ec:7f:44:59:df:63:aa:09:00:bc:
1c:a2:43:81:df:55:1f:d7:a7:4e:6b:5a:8c:2a:c4:
5c:3a:a8:94:42:8b:8d:e4:09:b3:9d:8f:91:23:20:
86:8b:27:c8:5a:61:bc:99:b7:aa:d4:76:9d:07:2c:
0d:1a:7c:89:f5:f8:12:23:58:71:b7:5a:ea:17:0f:
e8:e5:d1:5e:a9:bc:5e:ef:e3:8c:4f:35:ac:be:67:
86:84:74:2b:05:22:3c:ec:b8:2d:b5:dc:25:ff:c5:
bc:29:86:24:33:18:0f:70:a7:42:3e:da:64:7d:a1:
ef:c1:1b:92:53:b4:cf:c0:40:bd:e2:11:c0:38:5e:
c8:bb:40:b4:15:31:32:bc:d1:82:5e:64:a5:a5:76:
13:a9:cf:21:4a:e1:90:c2:b7:e0:16:b5:f9:dd:fd:
c4:49:a5:11:15:d4:fb:d2:c0:77:73:33:85:bc:a3:
59:23:be:c0:39:c0:21:9b:7f:34:9d:48:b4:0c:a1:
e2:5d:6f:55:e8:ac:ea:a3:7d:3c:7d:d2:0e:ae:6e:
41:eb:3c:1f:d7:5d:91:d7:e7:17:71:d9:d6:ed:9b:
dd:75:92:b8:24:88:8c:92:da:d7:68:13:f4:43:b7:
f8:62:83:b0:f6:5e:71:56:63:03:81:33:7c:a0:63:
b4:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:C8:D9:3E:F2:D5:11:CB:6A:E1:A5:AD:33:D4:9E:E2:0D:47:7B:3E
X509v3 Authority Key Identifier:
keyid:67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/AcjZPvLVEctq4aWtM9Se4g1Hez4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.20.100.0/24
46.20.103.0/24
Signature Algorithm: sha256WithRSAEncryption
32:d2:55:65:5d:47:56:9b:3c:d2:41:f8:72:4e:a1:ca:b3:76:
0b:68:30:9b:76:69:ce:6f:db:ee:8f:c3:fd:ba:58:51:27:17:
fd:6f:50:b9:c6:98:de:1b:8e:9c:8e:f5:27:e8:b0:04:aa:57:
c5:37:dc:76:53:e4:f9:86:d0:ac:1e:a3:25:94:53:a9:d0:e0:
a2:b2:cf:8f:8f:89:05:39:7d:68:53:03:17:52:f7:91:6a:67:
72:45:90:56:01:f7:fb:8f:6a:ca:e2:5a:63:45:d5:b5:4b:9c:
df:a4:12:7b:64:16:3c:4c:15:10:f5:9e:99:e8:83:56:d9:fc:
0e:c9:9a:32:ad:04:e3:4e:24:c5:d2:d7:b7:62:fb:7c:b8:76:
cb:94:25:a6:c4:fa:aa:45:4f:1a:7f:53:de:c9:d1:b6:08:fe:
9c:44:23:d9:69:99:2f:cc:e3:64:b6:ba:9e:e6:80:b8:4e:84:
0d:1c:3e:66:f0:76:79:a4:d2:44:a8:ab:1d:b7:04:3a:49:e9:
10:5e:10:96:cd:ed:d6:51:31:4b:3c:c1:7a:ca:1f:50:4f:90:
5d:23:8b:cd:08:09:45:b3:68:93:4f:13:2e:fd:bb:99:f9:7e:
7b:da:fb:77:c2:53:ae:ae:2b:ae:af:25:f6:05:f2:a4:ae:7d:
bf:f5:8d:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:49:46 2025 by rpki-client