Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/mX1m4UQyXXwpGD0jqQb_y8LC8FI.roa
File: mX1m4UQyXXwpGD0jqQb_y8LC8FI.roa (raw, json)
Hash identifier: rM0m6jdxRtvhd5JgDnoJoekO12B/OCdpvQvQXsOMtes=
Subject key identifier: 99:7D:66:E1:44:32:5D:7C:29:18:3D:23:A9:06:FF:CB:C2:C2:F0:52
Certificate issuer: /CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Certificate serial: 01987572B83E3D01D499CF0B29B300C8A327
Authority key identifier: 1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/mX1m4UQyXXwpGD0jqQb_y8LC8FI.roa
Signing time: Mon 04 Aug 2025 14:18:29 +0000
ROA not before: Mon 04 Aug 2025 14:18:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 967
IP address blocks: 45.10.68.0/24 maxlen: 24
91.208.109.0/24 maxlen: 24
91.213.174.0/24 maxlen: 24
91.213.186.0/24 maxlen: 24
91.213.189.0/24 maxlen: 24
91.216.169.0/24 maxlen: 24
91.216.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:72:b8:3e:3d:01:d4:99:cf:0b:29:b3:00:c8:a3:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Validity
Not Before: Aug 4 14:18:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=997d66e144325d7c29183d23a906ffcbc2c2f052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0d:c5:e7:97:63:6f:ee:5a:a8:f8:c5:df:2e:
82:00:6f:6a:68:8f:6e:97:5c:cc:6f:13:68:3e:de:
fb:97:c7:93:c0:a2:4c:f5:0b:ec:ca:50:85:ad:ed:
58:98:74:ed:f5:85:00:57:55:42:b1:ef:40:ff:2d:
20:d3:45:15:36:27:e2:b9:cf:a5:0c:72:4e:0e:e8:
62:9c:34:3a:b0:f0:22:ab:e7:b0:b0:39:f8:d9:27:
a2:ce:aa:73:41:9d:80:31:73:4c:ba:31:c5:8f:58:
5a:3c:dc:2a:15:ae:eb:fa:70:19:85:ce:e2:ab:cf:
d9:be:00:8b:bd:34:72:4f:4f:56:14:a6:ed:51:40:
8a:df:d3:d1:b0:1e:43:2c:b5:81:5e:bf:93:6d:df:
bf:77:fe:83:45:20:62:28:7e:70:cb:61:84:71:a3:
85:b7:a5:9e:4d:3e:e5:0c:d5:ec:6c:7a:00:e3:cb:
b9:a3:59:73:da:60:bd:eb:d5:f7:c5:f2:66:d2:5f:
75:d8:ea:25:f4:97:a3:d9:7d:8b:5d:2f:de:ee:1e:
f3:08:7b:90:39:95:cd:d0:c6:1b:b3:3f:7c:c6:1d:
c5:90:2e:86:57:13:14:89:61:e0:20:99:5c:97:7e:
cc:c5:ac:19:ce:90:1d:43:0a:a6:ee:1b:a9:fb:ec:
0b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:7D:66:E1:44:32:5D:7C:29:18:3D:23:A9:06:FF:CB:C2:C2:F0:52
X509v3 Authority Key Identifier:
keyid:1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/mX1m4UQyXXwpGD0jqQb_y8LC8FI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.68.0/24
91.208.109.0/24
91.213.174.0/24
91.213.186.0/24
91.213.189.0/24
91.216.169.0/24
91.216.190.0/24
Signature Algorithm: sha256WithRSAEncryption
44:a4:d2:8e:78:5f:28:e5:8b:e0:de:39:23:2d:ba:cb:ae:7d:
fc:54:09:e7:84:ed:6c:27:e7:e1:ad:f3:e5:c0:1c:6e:52:63:
65:fd:14:5a:d2:cd:d6:f3:ab:bb:45:c9:23:f9:9f:9b:17:b9:
bd:ce:88:c9:48:0e:10:27:28:dd:f1:7a:4d:72:fe:a0:f0:d3:
b2:82:af:c9:4a:0c:29:5f:94:ee:6e:90:08:3c:01:bf:7c:80:
a7:78:e3:3f:0f:81:f3:86:9e:2d:36:b3:50:6c:b2:f8:23:50:
0b:e5:a9:44:90:34:be:9f:5b:57:46:72:8b:5d:14:0c:ef:e8:
59:d4:e6:1e:88:f5:b0:f8:ef:0b:a6:04:72:5c:c7:f6:cf:43:
54:67:fe:91:d6:1b:bb:0e:5d:35:20:ab:10:6b:24:d2:67:44:
2d:71:ca:55:3d:fb:0d:53:ba:0e:5a:ef:e1:58:5f:35:c8:8b:
0e:de:7a:ce:7a:7c:1d:ff:8c:e4:4f:d3:78:f7:00:68:6d:ff:
32:23:d1:02:99:92:20:ed:a9:c5:19:4a:ba:09:90:5f:41:f2:
9d:e8:09:06:1a:c6:4a:0a:e0:35:7f:64:2c:d1:a4:27:ef:97:
89:38:31:7f:5b:88:3d:ad:8d:38:11:f9:69:71:90:5b:8c:78:
76:67:47:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:38:57 2025 by rpki-client