Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/2e38E4yERXnJnX_7lAmuIWBgkqw.roa
File: 2e38E4yERXnJnX_7lAmuIWBgkqw.roa (raw, json)
Hash identifier: RyTcYkww6V25d9tnOY/Khif1bq7/8hCTOGJ9b3WOhWQ=
Subject key identifier: D9:ED:FC:13:8C:84:45:79:C9:9D:7F:FB:94:09:AE:21:60:60:92:AC
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 019A24EE86F350DEF8C066A28FC36FF578A7
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/2e38E4yERXnJnX_7lAmuIWBgkqw.roa
Signing time: Mon 27 Oct 2025 09:10:03 +0000
ROA not before: Mon 27 Oct 2025 09:10:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137409
IP address blocks: 45.91.22.0/24 maxlen: 24
45.128.198.0/24 maxlen: 24
45.130.141.0/24 maxlen: 24
2a07:e342::/32 maxlen: 48
2a0f:2740::/29 maxlen: 48
2a0f:e383::/32 maxlen: 48
2a0f:e384::/32 maxlen: 48
2a0f:e385::/32 maxlen: 48
2a0f:e387::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:ee:86:f3:50:de:f8:c0:66:a2:8f:c3:6f:f5:78:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Oct 27 09:10:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d9edfc138c844579c99d7ffb9409ae21606092ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:02:93:42:09:80:68:63:d2:47:b8:25:ee:d8:
95:e1:3f:14:69:14:b7:c3:e8:ed:b6:a9:02:1e:9b:
0d:81:9d:8d:5f:ab:f0:d1:1b:5c:23:82:74:39:91:
6f:78:b0:a9:44:d1:38:35:96:c9:65:40:b8:b2:14:
4d:3e:98:9c:e8:0d:04:45:d7:17:9b:f9:e8:4e:09:
f2:4f:ce:aa:ff:2f:81:63:14:7b:26:e2:9a:8b:1d:
a6:62:b8:59:55:02:34:a1:55:6b:37:f9:18:e4:4a:
a0:0f:0a:54:ca:91:17:1e:c9:9c:43:5f:d8:6a:94:
85:a2:2b:ca:04:c9:c2:6f:00:12:dc:7f:4e:c4:97:
6f:1b:b0:2b:b4:5e:f1:49:10:20:18:95:2d:08:a5:
ed:3c:29:8b:0f:54:3b:e8:f7:98:7f:68:1c:b5:75:
9b:9a:0b:68:be:a1:7e:f9:70:75:a5:04:46:92:87:
a6:cb:65:02:8a:e4:90:2c:f0:6b:9d:c9:fe:67:18:
2c:4b:cf:5a:b8:5b:c1:8b:c9:da:b0:42:37:20:34:
ee:e5:58:7c:72:ed:71:a7:9e:08:ee:33:71:f3:fb:
80:97:7f:fd:cb:18:8b:d1:66:12:6c:4d:ab:a3:86:
77:21:b9:1b:0e:4f:4c:42:fb:94:bb:c0:bf:9a:6d:
b6:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:ED:FC:13:8C:84:45:79:C9:9D:7F:FB:94:09:AE:21:60:60:92:AC
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/2e38E4yERXnJnX_7lAmuIWBgkqw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.22.0/24
45.128.198.0/24
45.130.141.0/24
IPv6:
2a07:e342::/32
2a0f:2740::/29
2a0f:e383::-2a0f:e385:ffff:ffff:ffff:ffff:ffff:ffff
2a0f:e387::/32
Signature Algorithm: sha256WithRSAEncryption
8f:60:dd:cd:2f:30:d0:09:66:2c:16:9a:1b:e5:5a:3c:85:f2:
2e:e8:40:09:60:09:4e:ee:13:23:dd:7a:d3:9f:c9:43:22:c7:
e6:0a:14:f2:bd:aa:05:55:27:5a:16:9f:0e:97:57:d6:e7:d7:
d4:3c:65:93:03:0b:91:20:1c:f5:8b:99:54:2e:b1:47:fc:96:
90:53:2d:d8:0d:f6:9a:ad:cf:67:dd:32:e0:a9:34:d8:8c:00:
6d:f0:b3:30:7f:80:23:61:e3:98:bd:e9:f9:8b:d0:a1:bf:c4:
48:2a:f7:ad:a8:23:d2:6a:6a:e9:0f:53:82:66:c2:39:28:a7:
2a:c4:cd:80:9e:d6:b2:06:ae:56:7c:0e:7a:32:60:35:52:d9:
b8:7d:b0:f1:1d:c7:53:b2:a2:70:e3:81:9b:8d:f2:12:b0:a6:
15:0c:12:c8:24:64:76:e9:64:6a:5b:eb:4e:1f:71:ef:52:16:
34:c0:e3:ff:b1:65:55:48:5c:7e:1c:16:6e:78:b7:0a:b4:ee:
7f:93:43:92:39:4a:48:99:e4:c8:6b:83:d0:40:f8:41:ad:bf:
db:26:70:65:27:df:5a:4d:f5:25:68:4a:94:67:55:33:72:dd:
65:1f:1a:28:8b:b0:75:a5:7d:c4:9a:eb:da:74:a5:a2:31:1d:
be:21:95:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:35:07 2025 by rpki-client