Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/XBSoJwH6E1urm__nhVN0rODdUTY.roa
File: XBSoJwH6E1urm__nhVN0rODdUTY.roa (raw, json)
Hash identifier: gHHxXVT2CpGa7fLcQu+XgtNC0i6D3SbCprplkB6tnmU=
Subject key identifier: 5C:14:A8:27:01:FA:13:5B:AB:9B:FF:E7:85:53:74:AC:E0:DD:51:36
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 019A34F7C1016A43A5E7B5DD8D3F99EA4939
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/XBSoJwH6E1urm__nhVN0rODdUTY.roa
Signing time: Thu 30 Oct 2025 11:54:03 +0000
ROA not before: Thu 30 Oct 2025 11:54:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199524
IP address blocks: 45.130.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 21:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:34:f7:c1:01:6a:43:a5:e7:b5:dd:8d:3f:99:ea:49:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Oct 30 11:54:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5c14a82701fa135bab9bffe7855374ace0dd5136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ff:06:e4:d1:90:43:32:a7:b4:0c:7e:ce:19:
c8:84:d8:5b:6f:8f:24:30:89:7b:19:15:0b:84:42:
c1:63:94:2d:d2:f9:23:d2:8e:dd:8c:9a:8f:3f:89:
2a:f9:30:86:3d:04:42:23:af:4b:24:6b:12:30:07:
e5:d4:6f:25:7e:b5:e9:38:15:a1:fd:f0:cd:9a:41:
2c:ba:f3:6c:c4:bf:62:e8:e4:84:ca:20:bd:91:69:
e4:95:6f:e8:94:c4:bb:74:05:2f:02:35:ac:2f:30:
f5:12:37:57:b7:a7:54:11:80:30:25:33:d3:35:bf:
44:d0:c2:2a:95:92:91:e4:b5:fb:91:3e:f4:a7:08:
7b:09:a0:fa:b9:dc:3f:26:8c:b8:fe:74:09:d0:dc:
3b:dd:c7:84:4c:86:96:ab:81:18:2d:b8:b5:ab:40:
26:ff:90:63:a1:7a:7b:08:30:c6:b5:5f:01:e5:f5:
75:41:55:fa:42:2a:f9:8d:da:fe:7a:78:46:f9:06:
01:f6:f3:78:31:a5:a4:b3:de:e3:12:e7:7b:32:19:
d9:fa:10:53:1c:47:2a:6f:2f:2c:3f:c8:d5:87:56:
99:27:e9:3f:ed:35:89:27:6e:e0:31:22:99:5d:28:
48:c5:8b:1b:6c:0d:7e:e7:7c:39:ac:c5:18:06:85:
90:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:14:A8:27:01:FA:13:5B:AB:9B:FF:E7:85:53:74:AC:E0:DD:51:36
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/XBSoJwH6E1urm__nhVN0rODdUTY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.137.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:41:25:b3:2e:50:1b:74:17:7f:e3:89:53:2c:e0:af:a2:14:
17:16:37:99:c2:a7:4f:5c:6d:b2:91:03:8f:e3:de:22:3d:b2:
fa:93:74:42:3b:f4:55:cc:66:15:2c:ca:56:a6:43:df:8f:fc:
cd:cf:fa:57:4e:8d:1d:fe:a6:94:77:9f:87:15:a1:13:48:25:
64:76:51:05:86:e1:fa:c6:d9:6e:f3:95:a3:b5:90:05:f1:2e:
d4:9f:eb:f8:30:86:b1:32:0e:d9:0a:ff:87:7d:fb:ef:80:a2:
67:01:23:c4:7a:00:64:48:0c:f9:29:32:de:3f:a2:be:93:24:
b1:53:df:c9:41:7b:f4:d3:a4:e3:c5:93:81:cc:4d:62:85:56:
c3:c8:3d:5e:65:91:29:da:db:5f:c3:94:a9:e8:c7:de:c2:89:
9e:fe:9d:74:9a:93:a8:c3:04:12:ee:d1:ca:b2:21:ba:03:b0:
b3:38:5d:71:3a:84:7f:b9:8d:8c:1d:6c:7d:6b:3a:93:5e:7a:
c3:f1:67:2b:a0:d9:f4:af:d3:be:66:36:f4:8c:0f:5d:5d:0b:
6f:25:91:06:15:3d:6a:d8:99:3c:d6:bd:21:36:0f:e6:66:f9:
f0:13:b1:3b:e0:66:e0:a0:24:35:8d:75:a7:c5:5d:ba:2c:e1:
5e:f1:9c:52
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZo098EBakOl57XdjT+Z6kk5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNTUwMDljM2RlNDIxY2M0ZTY3YjlhOWFlNDIzYmIzNWRl
MGI5MjYwHhcNMjUxMDMwMTE1NDAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YzE0YTgyNzAxZmExMzViYWI5YmZmZTc4NTUzNzRhY2UwZGQ1MTM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmf8G5NGQQzKntAx+zhnIhNhbb48k
MIl7GRULhELBY5Qt0vkj0o7djJqPP4kq+TCGPQRCI69LJGsSMAfl1G8lfrXpOBWh
/fDNmkEsuvNsxL9i6OSEyiC9kWnklW/olMS7dAUvAjWsLzD1EjdXt6dUEYAwJTPT
Nb9E0MIqlZKR5LX7kT70pwh7CaD6udw/Joy4/nQJ0Nw73ceETIaWq4EYLbi1q0Am
/5BjoXp7CDDGtV8B5fV1QVX6Qir5jdr+enhG+QYB9vN4MaWks97jEud7MhnZ+hBT
HEcqby8sP8jVh1aZJ+k/7TWJJ27gMSKZXShIxYsbbA1+53w5rMUYBoWQBwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFwUqCcB+hNbq5v/54VTdKzg3VE2MB8GA1UdIwQY
MBaAFLFVAJw95CHMTme5qa5CO7Nd4LkmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYt
NzM4NTZhZjQ5ZjNlLzEvWEJTb0p3SDZFMXVybV9fbmhWTjByT0RkVVRZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYtNzM4NTZhZjQ5ZjNl
LzEvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYKJMA0G
CSqGSIb3DQEBCwUAA4IBAQArQSWzLlAbdBd/44lTLOCvohQXFjeZwqdPXG2ykQOP
494iPbL6k3RCO/RVzGYVLMpWpkPfj/zNz/pXTo0d/qaUd5+HFaETSCVkdlEFhuH6
xtlu85WjtZAF8S7Un+v4MIaxMg7ZCv+HffvvgKJnASPEegBkSAz5KTLeP6K+kySx
U9/JQXv006TjxZOBzE1ihVbDyD1eZZEp2ttfw5Sp6Mfewome/p10mpOowwQS7tHK
siG6A7CzOF1xOoR/uY2MHWx9azqTXnrD8WcroNn0r9O+Zjb0jA9dXQtvJZEGFT1q
2Jk81r0hNg/mZvnwE7E74GbgoCQ1jXWnxV26LOFe8ZxS
-----END CERTIFICATE-----
Generated at Thu Nov 6 05:48:20 2025 by rpki-client