Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/gWi1LUFL20CRpp3-96ricHb7LOM.roa
File: gWi1LUFL20CRpp3-96ricHb7LOM.roa (raw, json)
Hash identifier: 5zUKjRHLQszQi/sfeD3PJp+bFxJUTbIBets9GADGbUM=
Subject key identifier: 81:68:B5:2D:41:4B:DB:40:91:A6:9D:FE:F7:AA:E2:70:76:FB:2C:E3
Certificate issuer: /CN=d4375814344df0bf6d017733acdc488f002631b2
Certificate serial: 01986551C2F67BAF1BFBAA6A49B0E091E279
Authority key identifier: D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/gWi1LUFL20CRpp3-96ricHb7LOM.roa
Signing time: Fri 01 Aug 2025 11:08:33 +0000
ROA not before: Fri 01 Aug 2025 11:08:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204490
IP address blocks: 45.134.217.0/24 maxlen: 24
45.134.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 16:13:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:65:51:c2:f6:7b:af:1b:fb:aa:6a:49:b0:e0:91:e2:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4375814344df0bf6d017733acdc488f002631b2
Validity
Not Before: Aug 1 11:08:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8168b52d414bdb4091a69dfef7aae27076fb2ce3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:18:f0:fc:83:c5:2c:9a:7f:3c:83:71:96:18:
ac:2f:c2:ef:4f:1f:77:8e:cb:19:27:fc:e0:dd:43:
65:ad:79:f9:59:dc:8a:9b:5a:1f:cd:b4:3d:9c:4a:
33:14:b9:01:68:36:db:6d:3e:86:20:06:03:17:a1:
99:ca:99:34:3d:28:ed:e4:8f:51:01:23:49:54:0c:
fb:5c:51:f4:02:1f:6e:06:95:0a:16:7a:0b:9e:2a:
59:b6:cc:d8:ef:d9:55:76:54:89:40:2a:45:5a:8c:
ca:ad:c2:91:d2:15:02:10:6d:29:25:de:92:51:d3:
f5:1b:89:ba:27:20:09:de:01:42:37:16:ee:03:c4:
c7:92:f8:b6:8e:f4:39:9b:83:e2:1c:e1:b8:cd:c6:
0e:84:21:33:8c:f2:04:f1:1a:02:71:06:bf:82:f9:
32:43:2f:56:83:3c:3a:fe:18:e6:a3:8d:54:77:42:
e7:bf:3e:55:b1:b7:c6:ea:be:e6:2e:86:11:f1:61:
e5:e3:c3:58:1d:7b:4f:ae:68:8e:a7:fb:8e:37:95:
8a:51:c2:de:e1:ed:5e:52:66:c9:b8:5c:cd:27:6d:
5e:20:9a:02:cb:87:b9:96:62:83:e6:ef:5a:d2:2d:
8e:5e:5f:22:5d:33:d9:4c:4c:8d:58:6b:38:c0:31:
9a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:68:B5:2D:41:4B:DB:40:91:A6:9D:FE:F7:AA:E2:70:76:FB:2C:E3
X509v3 Authority Key Identifier:
keyid:D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/gWi1LUFL20CRpp3-96ricHb7LOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.217.0-45.134.218.255
Signature Algorithm: sha256WithRSAEncryption
3a:0d:be:a2:a0:e7:64:dd:86:8f:27:a3:e2:9b:9e:60:a2:22:
da:0f:4e:3d:c9:ce:2b:95:3c:5a:fd:75:b3:86:ac:56:23:83:
90:cf:62:fc:e6:69:df:81:29:32:01:2b:9b:16:18:23:dd:05:
63:0a:70:a7:64:92:f8:dd:e3:81:4c:b0:c8:38:6e:e6:d1:a8:
ad:ff:ed:5f:9a:8d:64:d3:e5:61:eb:bc:f3:4a:6b:2f:4a:53:
85:fa:09:92:9e:ea:e3:3d:9c:51:aa:a4:87:a3:59:96:3f:0a:
e9:1b:26:da:dc:70:f0:d3:d3:1c:08:e5:26:b1:1a:0b:bb:cf:
60:94:ac:dc:80:54:c2:cb:0a:0d:a4:aa:17:a8:c9:41:3e:f1:
c8:74:92:e3:dd:f9:da:38:fe:00:2a:4d:17:dd:4e:2d:fc:89:
05:16:ab:d1:ad:dd:19:81:6f:60:77:00:ec:ab:b5:3a:fe:d2:
10:6c:a8:e2:46:b6:e2:f0:80:63:08:65:d3:5f:55:78:a4:27:
65:a2:b6:af:72:60:92:4c:df:b3:9e:7a:10:d8:cd:0c:e3:91:
dd:b5:42:f3:85:74:d6:f0:53:1d:e3:98:20:e7:bb:4b:b6:d1:
07:92:68:cb:da:7e:c8:8d:6e:f2:ac:6e:82:07:b0:f8:13:61:
37:f2:11:bd
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZhlUcL2e68b+6pqSbDgkeJ5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0Mzc1ODE0MzQ0ZGYwYmY2ZDAxNzczM2FjZGM0ODhmMDAy
NjMxYjIwHhcNMjUwODAxMTEwODMzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MTY4YjUyZDQxNGJkYjQwOTFhNjlkZmVmN2FhZTI3MDc2ZmIyY2UzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxjw/IPFLJp/PINxlhisL8LvTx93
jssZJ/zg3UNlrXn5WdyKm1ofzbQ9nEozFLkBaDbbbT6GIAYDF6GZypk0PSjt5I9R
ASNJVAz7XFH0Ah9uBpUKFnoLnipZtszY79lVdlSJQCpFWozKrcKR0hUCEG0pJd6S
UdP1G4m6JyAJ3gFCNxbuA8THkvi2jvQ5m4PiHOG4zcYOhCEzjPIE8RoCcQa/gvky
Qy9Wgzw6/hjmo41Ud0Lnvz5VsbfG6r7mLoYR8WHl48NYHXtPrmiOp/uON5WKUcLe
4e1eUmbJuFzNJ21eIJoCy4e5lmKD5u9a0i2OXl8iXTPZTEyNWGs4wDGaJwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFIFotS1BS9tAkaad/veq4nB2+yzjMB8GA1UdIwQY
MBaAFNQ3WBQ0TfC/bQF3M6zcSI8AJjGyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMURkWUZEUk44TDl0QVhjenJOeElqd0FtTWJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9iMjRiMmQtMzUyMy00MjJlLTliY2Yt
MzY3MWQ2N2ViOWY4LzEvZ1dpMUxVRkwyMENScHAzLTk2cmljSGI3TE9NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC9iMjRiMmQtMzUyMy00MjJlLTliY2YtMzY3MWQ2N2ViOWY4
LzEvMURkWUZEUk44TDl0QVhjenJOeElqd0FtTWJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAAthtkD
BAAthtowDQYJKoZIhvcNAQELBQADggEBADoNvqKg52Tdho8no+KbnmCiItoPTj3J
ziuVPFr9dbOGrFYjg5DPYvzmad+BKTIBK5sWGCPdBWMKcKdkkvjd44FMsMg4bubR
qK3/7V+ajWTT5WHrvPNKay9KU4X6CZKe6uM9nFGqpIejWZY/CukbJtrccPDT0xwI
5SaxGgu7z2CUrNyAVMLLCg2kqheoyUE+8ch0kuPd+do4/gAqTRfdTi38iQUWq9Gt
3RmBb2B3AOyrtTr+0hBsqOJGtuLwgGMIZdNfVXikJ2Witq9yYJJM37OeehDYzQzj
kd21QvOFdNbwUx3jmCDnu0u20QeSaMvafsiNbvKsboIHsPgTYTfyEb0=
-----END CERTIFICATE-----
Generated at Thu Aug 7 23:57:06 2025 by rpki-client