Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/g6rr2x4tqh2Mprfn-Q8g_BSj9K0.roa
File: g6rr2x4tqh2Mprfn-Q8g_BSj9K0.roa (raw, json)
Hash identifier: +mg9y+YXBOsCzGGO8+nkMOhj4ZzLTcRapopCtajhhsU=
Subject key identifier: 83:AA:EB:DB:1E:2D:AA:1D:8C:A6:B7:E7:F9:0F:20:FC:14:A3:F4:AD
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019A2F36AAF011F27447915B0F992D4A0B79
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/g6rr2x4tqh2Mprfn-Q8g_BSj9K0.roa
Signing time: Wed 29 Oct 2025 09:05:03 +0000
ROA not before: Wed 29 Oct 2025 09:05:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208959
IP address blocks: 45.12.61.0/24 maxlen: 24
45.142.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2f:36:aa:f0:11:f2:74:47:91:5b:0f:99:2d:4a:0b:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Oct 29 09:05:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=83aaebdb1e2daa1d8ca6b7e7f90f20fc14a3f4ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:17:c8:db:b7:93:cc:e9:2a:ff:62:34:a0:ef:
a8:4e:1f:7d:3e:60:41:9d:f2:00:cc:26:3b:8e:6f:
14:6e:ce:a3:ad:0d:6c:83:3c:28:d3:c3:b9:da:63:
df:c8:fa:99:ee:9b:d5:47:0a:86:6c:bb:8b:57:bf:
3c:a2:18:e7:a1:04:ec:62:1f:bc:83:60:ca:82:87:
44:42:99:e6:ef:8d:5f:83:03:1c:ce:49:53:52:13:
5c:84:c9:eb:ce:dc:ba:97:aa:25:9c:f1:20:30:d5:
cb:e8:5f:c5:df:89:2e:50:20:12:1d:06:43:ef:5d:
a0:16:b6:08:73:a2:db:11:6e:61:b2:ea:72:68:0f:
b3:66:ab:4b:8e:92:63:41:13:21:e3:e3:6f:c8:6e:
ca:88:f9:ba:92:a5:7d:ab:d6:97:9f:53:c7:81:6c:
d1:d6:29:39:21:6f:3e:76:54:6a:4a:06:ef:71:f1:
9b:63:91:e2:37:6d:c6:f2:69:c9:95:50:80:2f:ef:
bf:b0:65:94:10:82:1e:14:97:8a:47:9c:2b:f8:75:
02:8c:2f:78:2f:40:94:68:7b:35:70:8a:37:0d:c8:
ff:c8:22:10:fc:2e:fa:9b:3a:02:d7:45:80:be:bb:
75:6a:db:54:2e:1d:7d:7f:83:76:f3:c3:91:14:6d:
48:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:AA:EB:DB:1E:2D:AA:1D:8C:A6:B7:E7:F9:0F:20:FC:14:A3:F4:AD
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/g6rr2x4tqh2Mprfn-Q8g_BSj9K0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.61.0/24
45.142.28.0/24
Signature Algorithm: sha256WithRSAEncryption
95:84:38:b9:70:29:fe:d2:89:a5:04:aa:c5:a2:cc:32:dd:40:
50:1e:9f:27:f6:b1:de:4c:75:25:3d:81:65:e4:fe:12:9c:3e:
4b:4d:69:7e:1b:fe:e8:ff:a4:65:80:c6:21:37:5b:95:2c:3f:
7e:0f:bc:06:9a:90:d2:1a:82:0a:39:78:cf:9e:e5:5f:5f:c2:
ff:f0:4c:8c:29:ac:ec:25:01:7b:96:9f:d4:a4:30:3b:2c:44:
e0:7c:af:4b:cc:0a:ea:81:1d:8b:4a:ec:e0:2f:46:e3:4f:04:
3d:08:84:6a:96:18:8c:cb:04:3c:a8:21:31:5a:9e:f2:bb:0b:
79:6b:50:eb:15:6d:1c:8e:70:69:ef:31:51:1d:18:1b:78:97:
55:d8:92:21:a1:76:f5:c1:04:f3:95:0d:cc:d6:f4:16:4f:3f:
59:06:b7:5e:b2:27:51:b1:c2:64:ad:20:8c:fc:72:03:22:53:
13:1d:ac:b5:fb:bd:25:4c:59:ef:e7:1f:42:68:7f:93:e3:92:
6c:1c:7d:05:dd:40:f9:e9:a8:06:ad:c9:e1:81:ef:03:30:03:
f3:5a:b7:97:05:5c:85:60:8c:ec:f9:21:f2:a8:df:67:5d:88:
53:45:da:f9:e1:74:69:63:56:79:da:89:63:9d:1e:81:49:25:
95:34:93:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:38:50 2025 by rpki-client