Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/f4c47b-9dee-4e71-a6da-80a91af42a65/1/rIYcuOWNo_aVxJgRl617C5BIy9Q.roa
File: rIYcuOWNo_aVxJgRl617C5BIy9Q.roa (raw, json)
Hash identifier: BxBO2U1Pwu966v6V4rQLz4pnONabIr2QJ+vjbhYc4wc=
Subject key identifier: AC:86:1C:B8:E5:8D:A3:F6:95:C4:98:11:97:AD:7B:0B:90:48:CB:D4
Certificate issuer: /CN=79a1d0ea730fcfcb2149995c78289bf2d6d186fc
Certificate serial: 019A0FF4F4A80192DF8C68F5D5DFAC6C3A5D
Authority key identifier: 79:A1:D0:EA:73:0F:CF:CB:21:49:99:5C:78:28:9B:F2:D6:D1:86:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eaHQ6nMPz8shSZlceCib8tbRhvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/f4c47b-9dee-4e71-a6da-80a91af42a65/1/rIYcuOWNo_aVxJgRl617C5BIy9Q.roa
Signing time: Thu 23 Oct 2025 07:25:02 +0000
ROA not before: Thu 23 Oct 2025 07:25:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205455
IP address blocks: 45.91.220.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/f4c47b-9dee-4e71-a6da-80a91af42a65/1/eaHQ6nMPz8shSZlceCib8tbRhvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/f4c47b-9dee-4e71-a6da-80a91af42a65/1/eaHQ6nMPz8shSZlceCib8tbRhvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/eaHQ6nMPz8shSZlceCib8tbRhvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0f:f4:f4:a8:01:92:df:8c:68:f5:d5:df:ac:6c:3a:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79a1d0ea730fcfcb2149995c78289bf2d6d186fc
Validity
Not Before: Oct 23 07:25:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ac861cb8e58da3f695c4981197ad7b0b9048cbd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:15:15:5b:3d:2b:f4:4e:db:b5:65:57:4d:3a:
bb:56:2e:4f:9f:58:75:a0:a0:43:67:aa:02:c1:63:
16:31:5c:2e:7b:8e:77:de:ee:af:f6:95:c7:53:4b:
c5:d7:c1:12:c7:1f:35:90:0b:aa:ea:f5:77:c3:f2:
7d:43:1e:cf:21:12:65:17:72:e1:b5:77:20:21:42:
16:c1:5a:df:d3:5a:da:d1:03:af:bc:0e:b9:68:cf:
d9:fd:28:84:a6:54:fa:f7:18:d9:22:c0:86:c7:a9:
2a:6c:c9:13:37:0e:a4:c0:99:a4:73:e8:d1:ec:48:
ea:19:d2:2b:db:c5:6b:22:de:c3:dd:83:0d:33:a8:
bc:33:3b:d0:50:88:18:f4:99:7d:33:94:a4:c4:6d:
ac:21:d5:a9:af:b6:ef:aa:e6:97:eb:f0:ba:11:1e:
f8:37:ea:96:0d:72:a8:c4:ce:28:c9:0e:3a:7c:dd:
68:5f:97:bc:52:2c:8e:a0:5f:ba:ef:8f:b6:aa:bf:
9d:d2:86:75:f7:5e:89:08:fd:f9:d8:d6:e6:23:86:
e2:47:f9:44:17:82:dd:0f:af:b5:80:79:c8:39:f7:
99:a7:c5:2a:a2:58:06:aa:9b:5a:76:f5:1e:47:43:
9a:78:9f:d5:16:3a:0f:2d:16:e8:1c:0e:31:1c:10:
6b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:86:1C:B8:E5:8D:A3:F6:95:C4:98:11:97:AD:7B:0B:90:48:CB:D4
X509v3 Authority Key Identifier:
keyid:79:A1:D0:EA:73:0F:CF:CB:21:49:99:5C:78:28:9B:F2:D6:D1:86:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eaHQ6nMPz8shSZlceCib8tbRhvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f4c47b-9dee-4e71-a6da-80a91af42a65/1/rIYcuOWNo_aVxJgRl617C5BIy9Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f4c47b-9dee-4e71-a6da-80a91af42a65/1/eaHQ6nMPz8shSZlceCib8tbRhvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.220.0/23
Signature Algorithm: sha256WithRSAEncryption
a5:cd:43:55:e8:79:db:5d:db:df:58:1b:dc:1a:b7:89:27:3c:
4e:3b:16:3c:37:ea:52:72:fe:fe:6f:7e:32:a9:2b:76:0c:2c:
82:6e:67:a4:4c:1b:54:21:10:37:1e:c6:ce:cf:fb:f6:e7:e4:
b5:54:28:f0:5f:ab:0e:fd:87:9e:f6:ce:f6:9a:e7:02:9f:81:
dd:1b:b8:53:5c:25:75:6d:27:f1:1c:64:46:0f:21:a4:a9:e2:
f3:65:f9:b1:15:29:4e:56:66:6c:3e:69:29:c4:3c:ab:43:43:
4b:20:b9:30:16:86:43:32:71:63:ff:31:df:01:2a:46:cb:fb:
dc:cd:43:d2:64:a8:b1:57:7e:5c:21:e1:da:1f:6c:71:cb:5a:
bd:f6:f5:bf:8a:1b:09:86:1a:a0:bf:17:7e:0f:54:45:96:6f:
78:bb:8f:6d:7f:65:d0:8c:e4:22:54:06:95:b9:2a:73:e6:68:
30:fc:7c:42:23:36:53:41:5b:34:58:d9:b5:7b:00:66:e8:de:
a1:7b:a9:29:15:c4:05:db:c3:e0:39:32:42:16:83:a5:ff:74:
92:d9:df:d3:d2:22:a3:ee:c1:b0:1e:6c:c7:f6:d1:5e:de:92:
8a:ab:a4:87:cf:f6:0f:91:c0:63:fd:e1:b2:44:47:17:c2:84:
10:12:ae:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:58:09 2025 by rpki-client