Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/H1ot2MdUTN3jveoJS7U1sYASkIY.roa
File: H1ot2MdUTN3jveoJS7U1sYASkIY.roa (raw, json)
Hash identifier: ysbPlqFJhEFUNGGIg/X6JBUO2rkOODa5SQIBLfuQqpI=
Subject key identifier: 1F:5A:2D:D8:C7:54:4C:DD:E3:BD:EA:09:4B:B5:35:B1:80:12:90:86
Certificate issuer: /CN=49722a0ca8bbc94d48a5cb48ccc92efef845a7e3
Certificate serial: 019A39870C048E64AC9B79705935A5C9317D
Authority key identifier: 49:72:2A:0C:A8:BB:C9:4D:48:A5:CB:48:CC:C9:2E:FE:F8:45:A7:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SXIqDKi7yU1IpctIzMku_vhFp-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/H1ot2MdUTN3jveoJS7U1sYASkIY.roa
Signing time: Fri 31 Oct 2025 09:09:03 +0000
ROA not before: Fri 31 Oct 2025 09:09:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44486
IP address blocks: 45.81.232.0/22 maxlen: 24
45.132.88.0/24 maxlen: 24
45.132.89.0/24 maxlen: 24
45.132.90.0/24 maxlen: 24
2a0e:66c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/SXIqDKi7yU1IpctIzMku_vhFp-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:39:87:0c:04:8e:64:ac:9b:79:70:59:35:a5:c9:31:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49722a0ca8bbc94d48a5cb48ccc92efef845a7e3
Validity
Not Before: Oct 31 09:09:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1f5a2dd8c7544cdde3bdea094bb535b180129086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:41:ce:ed:43:ef:ba:b7:fa:5f:be:67:ab:45:
07:16:0a:19:14:89:3d:a3:2b:3e:4e:fe:ee:9a:49:
2d:c5:95:41:7d:00:9e:f0:ed:a0:d9:d0:2c:93:52:
6a:1e:40:bf:ed:3a:c6:9b:cc:fc:84:84:43:83:f7:
a1:15:70:d2:b0:a8:58:0f:d1:0c:95:d7:7d:92:8b:
7b:53:dc:a7:69:c9:9e:1d:8f:e8:15:c8:c7:3f:1f:
7a:b1:4d:74:c1:5b:b1:1d:b4:0a:b7:a9:f2:1c:d9:
3e:08:14:95:93:43:46:62:c9:8c:1a:9d:9c:73:bc:
34:2c:cb:a9:14:c0:a6:f6:8d:02:fc:75:3c:6b:8b:
b9:e2:5a:53:60:d1:43:48:7b:2f:f5:7c:11:b8:ee:
50:52:94:c2:cf:c7:c3:a1:d2:38:1c:15:fd:f8:1d:
a3:2a:46:2a:de:9e:5f:1c:ee:9d:64:94:0d:58:e2:
24:2d:ba:da:20:f2:00:33:55:64:17:06:74:b9:8a:
70:c7:13:e4:aa:15:a8:cd:ad:dd:b2:e3:96:91:4f:
e2:06:41:24:85:7f:40:5d:d7:0d:74:0d:2f:eb:d6:
cd:1b:0c:d7:33:05:f5:c3:ed:93:df:86:d7:89:b2:
a1:db:b0:d5:68:73:40:f8:bd:61:95:5c:73:80:68:
53:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:5A:2D:D8:C7:54:4C:DD:E3:BD:EA:09:4B:B5:35:B1:80:12:90:86
X509v3 Authority Key Identifier:
keyid:49:72:2A:0C:A8:BB:C9:4D:48:A5:CB:48:CC:C9:2E:FE:F8:45:A7:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SXIqDKi7yU1IpctIzMku_vhFp-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/H1ot2MdUTN3jveoJS7U1sYASkIY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.232.0/22
45.132.88.0-45.132.90.255
IPv6:
2a0e:66c0::/29
Signature Algorithm: sha256WithRSAEncryption
d1:2a:93:9e:c3:67:15:84:96:6e:5c:f1:e4:09:60:b0:ac:d9:
1a:c3:b2:48:e7:10:82:8e:2f:b6:88:34:12:da:74:e3:27:c6:
6e:55:ee:1e:81:0e:ff:7b:b5:d3:cf:ce:69:b4:d2:8c:18:36:
7a:72:42:c3:28:88:31:11:7a:80:aa:bc:cb:f5:72:46:89:a9:
4c:bd:9e:f0:44:fb:4e:14:6a:4c:7e:98:b3:8f:cf:66:5d:c6:
29:8a:68:34:2c:10:1a:42:56:06:91:fb:5a:67:9a:a7:cc:4f:
a7:a6:06:12:c0:50:fd:bc:c8:16:f4:fa:6e:e0:4e:97:23:0e:
f1:ea:b1:0c:e6:a2:98:c3:1e:81:3f:b1:a5:66:ed:54:be:82:
af:c4:0e:ed:47:ee:88:56:fc:05:75:c1:b4:09:b9:60:16:ca:
1e:4a:9d:c7:b9:41:f9:97:c9:03:87:44:8a:48:97:1a:49:d0:
8a:5d:e4:43:51:22:f9:4c:15:cc:bf:56:6e:f5:42:d3:0c:55:
99:fd:7b:1e:22:2d:f9:17:39:a3:2b:bf:ac:74:19:13:74:c0:
22:e1:66:f8:f7:35:09:5c:ca:61:96:0f:77:bd:ad:dd:e9:bb:
b4:fa:d8:82:09:e7:4e:fe:94:89:2c:08:8c:4e:6c:bf:c8:59:
9b:ce:aa:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:45:41 2025 by rpki-client