Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/xFdoszmO-lXmpUO23UStYAmjO1o.roa
File: xFdoszmO-lXmpUO23UStYAmjO1o.roa (raw, json)
Hash identifier: Eg3ssA00t5E6u1ZRWRpZdswo8W1K9XAdmFIVhN3Dt0M=
Subject key identifier: C4:57:68:B3:39:8E:FA:55:E6:A5:43:B6:DD:44:AD:60:09:A3:3B:5A
Certificate issuer: /CN=f6090b4db06a4d65935141bac98098127a8b8f5a
Certificate serial: 019A4E11D69FB7908A074C090D1E00625398
Authority key identifier: F6:09:0B:4D:B0:6A:4D:65:93:51:41:BA:C9:80:98:12:7A:8B:8F:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9gkLTbBqTWWTUUG6yYCYEnqLj1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/xFdoszmO-lXmpUO23UStYAmjO1o.roa
Signing time: Tue 04 Nov 2025 08:53:03 +0000
ROA not before: Tue 04 Nov 2025 08:53:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60387
IP address blocks: 45.87.220.0/24 maxlen: 24
45.87.221.0/24 maxlen: 24
45.87.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/9gkLTbBqTWWTUUG6yYCYEnqLj1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/9gkLTbBqTWWTUUG6yYCYEnqLj1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/9gkLTbBqTWWTUUG6yYCYEnqLj1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:11:d6:9f:b7:90:8a:07:4c:09:0d:1e:00:62:53:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6090b4db06a4d65935141bac98098127a8b8f5a
Validity
Not Before: Nov 4 08:53:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c45768b3398efa55e6a543b6dd44ad6009a33b5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:01:e8:39:a7:8f:87:8c:3d:a2:20:56:0e:d7:
ab:e3:b9:fd:ad:02:18:98:0b:4d:45:2f:3d:0d:45:
49:13:87:ca:f6:fe:79:01:2e:50:2a:ac:5b:6a:ab:
45:bf:f8:fa:34:cc:3c:5d:8f:3f:6f:76:4d:48:45:
08:1b:fb:78:3d:8e:64:af:6f:ae:e6:cf:ca:b7:4d:
31:ba:9d:ba:8e:fa:50:e0:85:29:66:bc:de:d9:64:
50:33:b4:79:1f:6b:c2:48:ea:af:c1:9b:e8:fc:a7:
ce:ea:1c:0b:cd:a5:68:ce:1e:6d:47:6c:73:af:d9:
81:38:54:41:83:7f:ff:d7:44:7c:b2:04:af:eb:2a:
80:88:50:dc:21:86:56:19:f2:fe:6d:58:c1:62:04:
04:d0:ac:13:fe:a6:7d:35:d4:26:1b:68:21:d0:dc:
4d:aa:01:3a:d3:ce:59:b1:ba:dd:74:ef:9f:68:d0:
ff:57:c9:2e:a5:d9:99:e1:7d:9d:f9:ac:ca:7d:20:
b7:18:ad:fd:c0:7a:74:db:8b:95:b1:63:bd:4b:f4:
bb:98:ff:ec:1f:50:85:71:6e:c5:1a:7d:b7:7b:82:
2b:92:5f:ed:b6:aa:ec:55:8f:fe:be:e1:c2:15:8d:
ae:bc:21:7b:f4:29:26:7e:8e:60:8f:5d:52:11:9a:
9d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:57:68:B3:39:8E:FA:55:E6:A5:43:B6:DD:44:AD:60:09:A3:3B:5A
X509v3 Authority Key Identifier:
keyid:F6:09:0B:4D:B0:6A:4D:65:93:51:41:BA:C9:80:98:12:7A:8B:8F:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9gkLTbBqTWWTUUG6yYCYEnqLj1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/xFdoszmO-lXmpUO23UStYAmjO1o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/9gkLTbBqTWWTUUG6yYCYEnqLj1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.220.0-45.87.222.255
Signature Algorithm: sha256WithRSAEncryption
aa:1d:76:0e:6c:93:b6:d4:c7:3c:a1:65:50:70:26:b8:5b:05:
6e:cc:2b:db:ed:08:21:40:d7:25:b3:24:7f:4a:c1:c1:f5:ff:
c9:27:05:08:df:00:e1:0e:3f:18:77:8d:9d:94:74:4f:7a:83:
b2:9d:a4:86:a2:da:ec:f8:b4:e9:a0:76:09:f4:be:f8:06:ac:
32:7d:e2:2f:95:ba:38:0b:97:25:30:1d:4b:be:c2:dc:ae:3f:
eb:5f:c9:0f:0a:f5:9f:bd:a6:5e:c6:a6:f4:17:74:11:45:35:
6f:54:61:a1:5c:57:d4:32:06:7f:da:5b:39:8e:de:3d:0a:44:
83:fb:ff:22:5d:a9:10:bf:7d:86:85:54:fc:89:f5:9a:0a:94:
25:98:85:6a:5c:40:a2:ad:79:df:0c:3c:0f:c2:65:95:5e:95:
77:b5:eb:f4:b8:ec:50:2c:37:b0:62:46:01:7d:02:40:a1:9f:
d3:c5:71:70:85:87:cf:55:44:5c:26:ea:eb:49:77:0e:4b:05:
36:32:df:7b:a3:3d:dc:63:ea:4a:6b:70:9a:d2:b3:a1:60:14:
c9:37:d4:57:13:8e:7d:e2:85:b3:ea:42:a5:bf:8e:92:87:fc:
c1:6c:fa:50:ab:9b:2c:02:b4:1e:30:89:ec:0d:94:b8:66:58:
4a:73:6a:ce
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZpOEdaft5CKB0wJDR4AYlOYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2MDkwYjRkYjA2YTRkNjU5MzUxNDFiYWM5ODA5ODEyN2E4
YjhmNWEwHhcNMjUxMTA0MDg1MzAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNDU3NjhiMzM5OGVmYTU1ZTZhNTQzYjZkZDQ0YWQ2MDA5YTMzYjVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowHoOaePh4w9oiBWDter47n9rQIY
mAtNRS89DUVJE4fK9v55AS5QKqxbaqtFv/j6NMw8XY8/b3ZNSEUIG/t4PY5kr2+u
5s/Kt00xup26jvpQ4IUpZrze2WRQM7R5H2vCSOqvwZvo/KfO6hwLzaVozh5tR2xz
r9mBOFRBg3//10R8sgSv6yqAiFDcIYZWGfL+bVjBYgQE0KwT/qZ9NdQmG2gh0NxN
qgE6085ZsbrddO+faND/V8kupdmZ4X2d+azKfSC3GK39wHp024uVsWO9S/S7mP/s
H1CFcW7FGn23e4Irkl/ttqrsVY/+vuHCFY2uvCF79Ckmfo5gj11SEZqd9QIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFMRXaLM5jvpV5qVDtt1ErWAJoztaMB8GA1UdIwQY
MBaAFPYJC02wak1lk1FBusmAmBJ6i49aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWdrTFRiQnFUV1dUVVVHNnlZQ1lFbnFMajFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8yZGM3YWYtMmM4Yy00NTdiLWFlYjAt
NGUxZGMxNTA1MjYwLzEveEZkb3N6bU8tbFhtcFVPMjNVU3RZQW1qTzFvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC8yZGM3YWYtMmM4Yy00NTdiLWFlYjAtNGUxZGMxNTA1MjYw
LzEvOWdrTFRiQnFUV1dUVVVHNnlZQ1lFbnFMajFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAItV9wD
BAAtV94wDQYJKoZIhvcNAQELBQADggEBAKoddg5sk7bUxzyhZVBwJrhbBW7MK9vt
CCFA1yWzJH9KwcH1/8knBQjfAOEOPxh3jZ2UdE96g7KdpIai2uz4tOmgdgn0vvgG
rDJ94i+VujgLlyUwHUu+wtyuP+tfyQ8K9Z+9pl7GpvQXdBFFNW9UYaFcV9QyBn/a
WzmO3j0KRIP7/yJdqRC/fYaFVPyJ9ZoKlCWYhWpcQKKted8MPA/CZZVelXe16/S4
7FAsN7BiRgF9AkChn9PFcXCFh89VRFwm6utJdw5LBTYy33ujPdxj6kprcJrSs6Fg
FMk31FcTjn3ihbPqQqW/jpKH/MFs+lCrmywCtB4wiewNlLhmWEpzas4=
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:30:50 2025 by rpki-client