Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/Aq-TvzjFztbKAkWflBycG6JnnmI.roa
File: Aq-TvzjFztbKAkWflBycG6JnnmI.roa (raw, json)
Hash identifier: vNeC+WdDRSicqm3sNUPFizoozGyatbmAcuwj3IYL5Nw=
Subject key identifier: 02:AF:93:BF:38:C5:CE:D6:CA:02:45:9F:94:1C:9C:1B:A2:67:9E:62
Certificate issuer: /CN=24f51bbdf01088d34c6baaeef86bda25a9f02196
Certificate serial: 019A48AA7A45730DB24F4D770C577ED143E8
Authority key identifier: 24:F5:1B:BD:F0:10:88:D3:4C:6B:AA:EE:F8:6B:DA:25:A9:F0:21:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JPUbvfAQiNNMa6ru-GvaJanwIZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/Aq-TvzjFztbKAkWflBycG6JnnmI.roa
Signing time: Mon 03 Nov 2025 07:42:03 +0000
ROA not before: Mon 03 Nov 2025 07:42:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206150
IP address blocks: 45.89.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JPUbvfAQiNNMa6ru-GvaJanwIZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:48:aa:7a:45:73:0d:b2:4f:4d:77:0c:57:7e:d1:43:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24f51bbdf01088d34c6baaeef86bda25a9f02196
Validity
Not Before: Nov 3 07:42:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=02af93bf38c5ced6ca02459f941c9c1ba2679e62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:74:60:13:77:3a:49:e0:28:a5:14:6b:66:fd:
f1:01:8a:59:23:4e:1e:8d:0b:32:95:30:5d:27:7e:
d5:fe:7c:7f:07:e6:e3:d8:52:11:3a:c2:89:49:89:
77:64:b1:53:bc:1d:05:42:67:e1:44:a2:62:c4:7b:
07:fe:37:04:c3:93:e9:7b:e3:2c:f2:44:da:d8:86:
e8:77:d4:61:f3:46:4a:89:a2:1d:15:d1:1c:fb:e3:
8c:e6:5e:f7:ef:2d:a8:c8:b6:83:5f:43:d2:a3:22:
19:da:8c:96:48:9a:f4:9e:fb:d4:c2:70:d9:7c:c1:
24:12:90:0e:81:a6:05:6f:43:18:45:75:46:94:cb:
0a:7b:1e:41:1d:e4:0a:d7:cf:1c:ee:a3:8d:71:8a:
f7:b4:d7:69:07:cd:bb:af:ea:0a:3c:0d:3f:52:06:
ca:0d:a4:72:29:ff:e0:18:cf:79:9d:4f:5b:2c:ac:
52:20:fa:b3:0e:9c:6b:48:90:09:6c:a5:b2:0b:79:
94:03:b6:fc:82:61:05:57:58:09:c2:71:c8:c8:26:
62:51:da:46:4b:9d:5a:3d:1b:49:6b:49:48:3c:ad:
48:70:62:10:04:97:66:ac:94:6c:6c:b5:b6:5d:38:
48:45:0f:fb:60:92:ba:9f:2e:2d:e8:ec:94:8f:8a:
a1:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:AF:93:BF:38:C5:CE:D6:CA:02:45:9F:94:1C:9C:1B:A2:67:9E:62
X509v3 Authority Key Identifier:
keyid:24:F5:1B:BD:F0:10:88:D3:4C:6B:AA:EE:F8:6B:DA:25:A9:F0:21:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JPUbvfAQiNNMa6ru-GvaJanwIZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/Aq-TvzjFztbKAkWflBycG6JnnmI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.21.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:2d:ef:ec:b9:af:df:e5:3e:82:8d:b0:0c:fa:a7:ff:bc:5f:
67:5c:52:eb:d2:ee:c2:76:52:8f:94:79:c7:26:34:eb:31:48:
02:98:d4:d7:1a:ab:2c:9d:c2:36:92:e4:a4:7e:e5:6d:96:6a:
ee:4b:ef:0e:ab:e1:bb:19:b2:b8:0b:56:ef:da:63:27:39:4b:
0a:d9:6e:ce:6e:60:c5:83:43:54:61:f1:6a:21:05:75:7c:35:
1e:2b:66:49:44:f1:3b:03:ea:15:62:16:08:45:fc:7a:83:e4:
c7:ce:9d:d4:a5:8a:6b:7f:d6:ae:96:8a:b2:c4:11:9d:83:85:
2f:c6:79:f5:88:65:b9:50:25:72:f3:74:52:cf:46:08:b4:4c:
4d:78:f6:8e:c6:22:2c:15:4a:d5:04:d5:6b:96:11:89:13:8b:
71:15:9f:f9:98:25:a4:31:d2:bc:1b:c3:0a:94:49:06:ad:36:
5f:13:6c:66:06:00:00:a6:5b:6a:10:70:8e:08:5d:c7:c8:86:
38:30:61:e5:d1:8f:e1:7e:6e:4b:c3:d2:d7:80:e4:59:ee:83:
33:d8:91:4d:3d:9e:7a:d5:30:38:4e:ad:07:dd:fc:76:f9:44:
6a:36:9e:3f:54:32:7b:a9:92:d8:ff:ea:fd:7f:64:2b:8c:b0:
e5:55:3c:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:03:26 2025 by rpki-client