Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/f4f244-8c0c-4564-9c42-af60fd5f06b1/1/e24B7HUjem2EcUgVIiWCP9iwbs8.roa
File: e24B7HUjem2EcUgVIiWCP9iwbs8.roa (raw, json)
Hash identifier: NqLDz/MGE43z7asDnz2IcWTOaDhJNwXlKh8N6TqUooc=
Subject key identifier: 7B:6E:01:EC:75:23:7A:6D:84:71:48:15:22:25:82:3F:D8:B0:6E:CF
Certificate issuer: /CN=b45addcd579648fc3f6124e558479ef0b07f018c
Certificate serial: 019A35B802E9099040FFB099E141B83A7BC4
Authority key identifier: B4:5A:DD:CD:57:96:48:FC:3F:61:24:E5:58:47:9E:F0:B0:7F:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFrdzVeWSPw_YSTlWEee8LB_AYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/f4f244-8c0c-4564-9c42-af60fd5f06b1/1/e24B7HUjem2EcUgVIiWCP9iwbs8.roa
Signing time: Thu 30 Oct 2025 15:24:03 +0000
ROA not before: Thu 30 Oct 2025 15:24:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212066
IP address blocks: 45.148.65.0/24 maxlen: 24
2a14:48c6::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/f4f244-8c0c-4564-9c42-af60fd5f06b1/1/tFrdzVeWSPw_YSTlWEee8LB_AYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/f4f244-8c0c-4564-9c42-af60fd5f06b1/1/tFrdzVeWSPw_YSTlWEee8LB_AYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFrdzVeWSPw_YSTlWEee8LB_AYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:35:b8:02:e9:09:90:40:ff:b0:99:e1:41:b8:3a:7b:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45addcd579648fc3f6124e558479ef0b07f018c
Validity
Not Before: Oct 30 15:24:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7b6e01ec75237a6d847148152225823fd8b06ecf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:14:e0:2c:f5:e9:d7:81:0f:78:55:68:96:2e:
09:33:25:73:88:00:08:b0:83:57:c6:ef:57:ae:56:
7b:67:81:28:cf:be:93:73:57:53:3f:d4:f3:d1:e3:
68:9d:17:4d:66:7c:11:da:f5:6e:c0:21:8e:5f:7f:
f5:b9:a1:bf:d8:2c:1a:e5:af:d2:df:d8:a0:b1:f3:
60:5a:81:64:a0:91:c2:20:4e:83:27:e1:52:ce:99:
e5:bd:a1:66:ae:1c:fb:09:4a:8f:5b:e9:4f:0a:96:
ce:e5:12:e9:28:07:f5:06:9a:4f:c6:c4:ef:3c:40:
34:93:81:a7:45:cc:53:af:a5:f3:61:42:b1:49:a0:
28:26:92:5c:47:e9:ad:7a:ab:a4:d9:09:93:d3:03:
45:2d:0b:21:26:7d:d5:04:72:ed:d9:08:b5:19:21:
05:b1:b7:8e:79:17:9c:4c:76:39:15:39:b9:3f:8a:
d7:36:1f:5e:f1:ba:7a:4e:05:9f:2c:8c:6f:d4:82:
c4:04:d0:28:bc:5d:4c:ee:ba:67:63:0a:ef:fb:95:
23:45:ac:63:97:e3:2d:78:d5:94:d0:8e:93:81:41:
29:b0:a7:2a:c5:bf:b5:f5:45:43:66:c8:99:9c:a2:
44:d1:8e:29:9b:40:23:c7:6f:1a:da:54:71:00:e3:
1f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:6E:01:EC:75:23:7A:6D:84:71:48:15:22:25:82:3F:D8:B0:6E:CF
X509v3 Authority Key Identifier:
keyid:B4:5A:DD:CD:57:96:48:FC:3F:61:24:E5:58:47:9E:F0:B0:7F:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFrdzVeWSPw_YSTlWEee8LB_AYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/f4f244-8c0c-4564-9c42-af60fd5f06b1/1/e24B7HUjem2EcUgVIiWCP9iwbs8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/f4f244-8c0c-4564-9c42-af60fd5f06b1/1/tFrdzVeWSPw_YSTlWEee8LB_AYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.65.0/24
IPv6:
2a14:48c6::/48
Signature Algorithm: sha256WithRSAEncryption
8a:a1:d6:fa:d3:94:54:1d:69:94:c0:c9:3f:76:dd:f7:09:47:
e0:fd:ee:2c:3b:50:5b:39:c7:00:77:d6:a3:87:80:4c:cd:4b:
a3:e5:a9:df:6a:39:d2:fd:88:4a:f7:d4:0a:8f:58:fd:62:5f:
d3:14:8a:87:8a:67:4d:45:de:cd:90:69:08:cd:8b:c7:af:f8:
29:21:78:8a:1d:bc:e1:83:23:ec:de:93:a3:74:68:11:1d:6b:
26:01:40:90:4b:25:e0:b0:4b:39:c0:1c:b0:91:69:9f:a0:34:
de:87:63:ec:89:22:cc:4d:38:d2:99:10:7a:45:46:ff:05:89:
1b:f7:fa:f7:3b:97:7e:45:6d:ed:a6:aa:84:bf:1c:2a:65:df:
b2:1d:ed:22:60:41:d9:22:88:cb:e2:78:c0:02:7a:c9:10:2e:
16:07:f0:4b:6a:10:6c:8f:93:5c:44:ed:c2:7e:5b:e1:22:0c:
a2:55:57:b6:de:e5:f7:7b:c6:e0:a9:4c:01:6c:cc:8b:e7:ea:
4e:60:4d:33:ca:19:90:77:6f:9b:81:03:4a:b8:8d:78:70:91:
73:57:81:fb:29:c4:d9:51:78:0b:cc:a4:94:87:b6:05:ca:6f:
bb:f0:c1:00:76:fb:34:c7:5a:4e:21:b5:1a:24:1d:c5:6e:0b:
31:5b:08:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:49:34 2025 by rpki-client