Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/H4lyP83NjE4StXhzWVmNmQgWeD4.roa
File: H4lyP83NjE4StXhzWVmNmQgWeD4.roa (raw, json)
Hash identifier: C6GXgty+pdVrNR5OI7BiS07ixVEg3xvCstT2O6bzlQY=
Subject key identifier: 1F:89:72:3F:CD:CD:8C:4E:12:B5:78:73:59:59:8D:99:08:16:78:3E
Certificate issuer: /CN=49722a0ca8bbc94d48a5cb48ccc92efef845a7e3
Certificate serial: 019A37321F89631B3D5B340716C1256EA0C8
Authority key identifier: 49:72:2A:0C:A8:BB:C9:4D:48:A5:CB:48:CC:C9:2E:FE:F8:45:A7:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SXIqDKi7yU1IpctIzMku_vhFp-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/H4lyP83NjE4StXhzWVmNmQgWeD4.roa
Signing time: Thu 30 Oct 2025 22:17:03 +0000
ROA not before: Thu 30 Oct 2025 22:17:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197071
IP address blocks: 45.132.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/SXIqDKi7yU1IpctIzMku_vhFp-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:37:32:1f:89:63:1b:3d:5b:34:07:16:c1:25:6e:a0:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49722a0ca8bbc94d48a5cb48ccc92efef845a7e3
Validity
Not Before: Oct 30 22:17:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1f89723fcdcd8c4e12b5787359598d990816783e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a8:82:bf:a2:73:78:91:33:4c:6e:88:f8:e6:
9c:d5:62:65:15:7a:dc:8e:89:5d:e6:c1:d3:c9:2f:
c8:62:32:6c:01:0f:51:1f:b3:c1:b4:4a:f0:1c:06:
71:6c:d5:47:71:f1:58:b9:e8:e2:dd:90:97:ab:28:
d0:21:49:84:50:9f:b5:3a:22:b9:43:f9:58:5b:e8:
2f:17:a2:60:e1:33:f9:39:0f:fe:be:3b:d2:02:85:
d3:91:90:0b:cc:97:07:2f:7b:77:d8:fd:1a:4e:97:
29:9f:5a:5a:b6:2f:a7:15:90:55:c3:fb:12:0d:19:
64:65:01:76:4b:23:bf:89:55:f3:d1:db:91:6e:29:
15:61:00:b9:6d:fa:84:0e:6a:f0:30:f4:79:90:c6:
01:d8:3b:9f:a2:6e:0c:82:ba:60:3f:b3:be:9b:a8:
8e:ce:8a:e3:62:6a:88:f0:83:33:d9:07:78:a7:78:
a2:66:ce:61:df:5f:60:f1:92:af:71:bc:e9:1b:dc:
01:d1:18:9c:fd:3d:5b:d8:19:31:a0:3b:88:3c:0b:
4d:5f:9a:af:e9:59:17:68:2d:d0:19:fd:4d:4d:77:
7e:31:97:d8:6c:97:a4:f8:05:59:47:d4:e4:e2:ae:
da:e4:68:07:f6:df:21:2e:e1:b3:e4:7b:be:92:76:
61:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:89:72:3F:CD:CD:8C:4E:12:B5:78:73:59:59:8D:99:08:16:78:3E
X509v3 Authority Key Identifier:
keyid:49:72:2A:0C:A8:BB:C9:4D:48:A5:CB:48:CC:C9:2E:FE:F8:45:A7:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SXIqDKi7yU1IpctIzMku_vhFp-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/H4lyP83NjE4StXhzWVmNmQgWeD4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.91.0/24
Signature Algorithm: sha256WithRSAEncryption
29:4b:b1:84:5a:f2:9d:a0:74:04:9f:56:5f:d4:61:73:ce:5c:
8a:6e:98:73:e3:33:4a:74:df:54:53:32:d5:04:ef:bb:a7:ee:
74:57:a6:78:b9:ef:9b:98:5d:b5:e1:1b:0d:90:74:69:50:6b:
6b:77:96:16:29:7e:2b:25:cd:bd:92:bd:c3:a0:84:32:00:10:
78:13:66:c1:6f:0c:a2:5f:1c:d9:eb:5b:3b:f4:c5:75:9d:40:
96:d0:f5:69:8e:e5:21:f4:ff:6f:d7:69:f7:e4:5e:bb:9b:a9:
b0:53:58:50:6c:6e:c6:66:a8:ec:4d:00:97:19:d9:6e:9a:d6:
ba:76:fa:40:21:fe:81:67:8a:29:27:a7:24:90:b7:58:11:16:
4c:45:83:9e:7b:12:08:aa:4c:33:c7:5d:ef:ad:53:12:69:5e:
da:07:13:e5:a6:cc:10:a0:9f:24:20:eb:8e:a8:3d:a3:98:80:
e5:91:9a:88:b5:c1:9f:54:6b:75:4b:5d:74:2b:e9:af:ed:62:
32:55:93:b4:48:d9:ec:99:19:33:34:99:97:ea:cf:65:a7:49:
0d:b3:35:77:44:1f:8c:b6:d4:ac:a6:bf:1f:00:2f:89:c3:be:
38:cd:f6:88:d0:53:cd:15:89:7f:1b:d4:fe:f0:4c:d4:eb:8b:
16:fa:87:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:45:51 2025 by rpki-client