Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/c7aVec8wRWh2uY_ep7B9EB_Hd_8.roa
File: c7aVec8wRWh2uY_ep7B9EB_Hd_8.roa (raw, json)
Hash identifier: IVR9qhn2n9gPQEgDnZi5eZBL8Hlmr2T2MC2szELxnvc=
Subject key identifier: 73:B6:95:79:CF:30:45:68:76:B9:8F:DE:A7:B0:7D:10:1F:C7:77:FF
Certificate issuer: /CN=15f889fed0085fc21b08fcbbb252c3106df99aa8
Certificate serial: 019A48DEA98B96AC3F9588F7AC913834E079
Authority key identifier: 15:F8:89:FE:D0:08:5F:C2:1B:08:FC:BB:B2:52:C3:10:6D:F9:9A:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfiJ_tAIX8IbCPy7slLDEG35mqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/c7aVec8wRWh2uY_ep7B9EB_Hd_8.roa
Signing time: Mon 03 Nov 2025 08:39:03 +0000
ROA not before: Mon 03 Nov 2025 08:39:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13101
IP address blocks: 45.145.236.0/22 maxlen: 22
46.22.152.0/21 maxlen: 21
72.251.252.0/22 maxlen: 22
109.94.212.0/22 maxlen: 22
185.234.200.0/22 maxlen: 22
192.166.40.0/22 maxlen: 22
202.71.144.0/21 maxlen: 21
206.168.72.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfiJ_tAIX8IbCPy7slLDEG35mqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 11:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:48:de:a9:8b:96:ac:3f:95:88:f7:ac:91:38:34:e0:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f889fed0085fc21b08fcbbb252c3106df99aa8
Validity
Not Before: Nov 3 08:39:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=73b69579cf30456876b98fdea7b07d101fc777ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:55:8f:d6:80:45:6f:44:18:2f:0c:97:9a:15:
c1:a2:4b:bc:f0:ad:df:1c:b2:ed:fa:d8:fd:72:4b:
5c:b3:28:cd:6a:cd:9f:0f:c3:7c:0e:7f:30:a2:0a:
6b:d6:45:45:9a:51:cd:0b:22:88:86:83:e7:5e:99:
24:4a:00:a1:8f:ca:91:7f:76:26:2c:82:a9:7b:c3:
f8:dd:78:15:21:bf:75:cd:1d:12:5f:f6:1c:29:bf:
d1:35:6b:25:13:30:b9:ae:fc:d6:26:f3:30:5e:a8:
d1:f0:c5:0a:30:ab:b9:ad:da:74:3c:03:a7:23:9d:
25:ba:5e:45:be:8d:3f:ba:18:ea:93:02:53:5e:a6:
98:3d:4c:1e:cc:fc:b4:6a:e9:8c:b8:5e:c3:4c:9d:
e2:b0:3f:e9:4f:fd:7d:dd:bd:0d:32:46:90:74:a5:
e2:b2:78:7a:2a:85:4f:b2:e8:0a:e1:c5:11:a3:24:
05:57:c5:03:77:21:71:d7:3a:a6:5c:31:17:8d:3f:
a7:70:e3:11:5d:7c:61:95:a0:ea:df:ea:ae:c2:0e:
96:a3:b2:34:86:3b:8d:e5:cd:13:f2:a2:b6:6b:3b:
c2:2f:23:11:ed:b2:19:2d:c4:5d:77:b9:f2:07:07:
4a:44:f7:3e:37:39:d0:93:71:ed:07:f2:fd:c6:bf:
c1:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:B6:95:79:CF:30:45:68:76:B9:8F:DE:A7:B0:7D:10:1F:C7:77:FF
X509v3 Authority Key Identifier:
keyid:15:F8:89:FE:D0:08:5F:C2:1B:08:FC:BB:B2:52:C3:10:6D:F9:9A:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfiJ_tAIX8IbCPy7slLDEG35mqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/c7aVec8wRWh2uY_ep7B9EB_Hd_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.236.0/22
46.22.152.0/21
72.251.252.0/22
109.94.212.0/22
185.234.200.0/22
192.166.40.0/22
202.71.144.0/21
206.168.72.0/21
Signature Algorithm: sha256WithRSAEncryption
3b:f8:d6:1e:a1:a2:c8:90:0a:ca:ef:cf:a0:e0:43:44:c1:ac:
c1:be:34:0d:2a:cd:df:2f:37:42:40:c8:50:84:56:c7:ef:5b:
11:e9:9d:cc:1b:41:57:9c:bf:99:88:50:ab:87:1d:ae:91:2c:
89:84:26:8e:61:d3:eb:40:e6:cc:c9:10:af:dd:cd:ac:b5:68:
e5:ea:2f:75:ca:96:21:06:f5:46:c2:f1:39:6d:a9:41:85:ba:
d5:81:9c:bc:69:ed:9e:cc:21:04:22:c5:1c:80:6f:08:90:58:
92:77:0d:86:f3:ab:86:02:66:41:b2:f0:47:91:65:b6:06:a4:
fa:52:b8:6c:ed:34:62:3e:d5:d2:a2:d2:53:9d:93:cb:3a:35:
a3:73:af:6f:af:bf:66:40:59:c6:a6:b2:05:71:6d:6e:69:a0:
0b:ef:1c:97:04:c1:81:2e:74:cc:c3:2f:62:d5:1d:ee:e5:f3:
57:82:da:0c:cd:c5:c9:c3:e5:11:76:5b:d2:25:27:46:13:73:
c3:ce:35:0b:58:42:3d:77:a0:26:ce:45:3a:b0:3e:28:3b:2f:
1c:b2:2c:c7:46:4d:20:83:e7:90:f6:a6:98:e6:c2:4f:de:c0:
02:7e:9d:e5:a6:f7:8a:e6:1b:69:43:23:7e:b2:57:0a:89:ae:
1d:30:b1:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:25:56 2025 by rpki-client