Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/xvpDoCPyP6m8rTh4TdYLijltBEU.roa
File: xvpDoCPyP6m8rTh4TdYLijltBEU.roa (raw, json)
Hash identifier: 1QZy2+YU9OJIymABtnuqhBDeWAQW4cZaDTmdh21152Q=
Subject key identifier: C6:FA:43:A0:23:F2:3F:A9:BC:AD:38:78:4D:D6:0B:8A:39:6D:04:45
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0198752D2805329D5ED65E8180FAD01D90AB
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/xvpDoCPyP6m8rTh4TdYLijltBEU.roa
Signing time: Mon 04 Aug 2025 13:02:30 +0000
ROA not before: Mon 04 Aug 2025 13:02:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42926
IP address blocks: 45.84.223.0/24 maxlen: 24
45.89.246.0/24 maxlen: 24
212.115.40.0/24 maxlen: 24
212.115.42.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 03:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:2d:28:05:32:9d:5e:d6:5e:81:80:fa:d0:1d:90:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 4 13:02:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c6fa43a023f23fa9bcad38784dd60b8a396d0445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c0:ab:90:0f:9b:7c:4b:bf:df:c2:39:c5:1d:
ee:df:2f:4c:88:13:0b:dc:5b:0b:c9:25:36:12:a8:
9e:ab:c7:ad:e1:d8:ec:1b:b5:89:5c:b5:3a:54:54:
24:21:10:63:48:c3:d8:fe:08:e3:b7:f9:c5:91:5c:
dc:c0:d2:2f:03:c3:14:05:dd:9a:37:c6:0c:e8:64:
a6:25:38:35:be:a4:ac:11:01:bd:f3:b8:14:21:75:
9a:db:3d:fe:ab:95:52:da:1c:6d:0b:1d:34:02:4e:
6d:fe:55:dd:3e:f0:cd:b7:72:4d:ef:08:9b:79:0f:
45:4a:4c:cd:d9:a0:6a:49:6e:8e:a8:7e:0d:64:4c:
57:0d:40:ef:d0:06:24:0c:43:b6:cf:07:9c:ec:21:
17:47:7b:f6:be:02:be:c0:d1:74:f4:c7:6f:20:05:
88:fe:31:b3:9b:35:7b:b3:88:78:d9:50:f2:1c:c4:
88:4a:bb:f6:16:7b:1f:c7:64:6d:fd:b6:d7:5e:35:
e5:e9:55:97:31:b5:70:14:30:27:ef:6d:0d:27:61:
35:2a:40:25:29:7d:9d:77:2f:3b:f5:e0:fb:e5:18:
4e:49:1b:0a:fd:5a:b3:24:0d:22:77:e2:a8:0b:40:
eb:8a:c9:58:90:64:8d:4d:50:26:5a:07:7f:06:ed:
f1:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:FA:43:A0:23:F2:3F:A9:BC:AD:38:78:4D:D6:0B:8A:39:6D:04:45
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/xvpDoCPyP6m8rTh4TdYLijltBEU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.223.0/24
45.89.246.0/24
212.115.40.0/24
212.115.42.0/23
Signature Algorithm: sha256WithRSAEncryption
3f:c0:ec:99:35:e5:9f:e9:5a:49:f3:80:6e:56:74:09:65:9a:
52:88:e2:3d:65:de:ea:30:c8:3f:ff:d3:1e:50:c0:9e:62:61:
bd:82:25:4d:77:3d:a3:10:d2:6d:74:4e:ec:b1:1b:c0:34:37:
1b:ae:dd:60:16:9d:a7:3d:73:99:e1:0d:04:65:4a:bb:74:15:
80:27:3e:d7:5e:84:e6:c8:fe:22:c4:d6:ae:40:f4:92:5c:77:
ba:bb:01:f4:3f:5a:36:03:f9:aa:3a:f5:39:b2:31:a9:10:0f:
e2:45:9f:99:45:1b:19:67:06:15:9f:86:e9:2d:72:66:bb:95:
83:93:cf:0f:9b:09:57:79:8b:ff:89:ed:e8:ef:18:af:d7:d2:
73:43:24:ac:f7:5a:21:6b:44:f9:6b:0b:d5:62:c8:82:2a:2a:
ac:53:eb:d7:98:a4:87:4f:7f:fd:07:4e:c7:eb:53:f7:1f:d0:
f4:9d:4d:d5:1a:41:6b:12:38:45:99:c1:b3:7d:b4:be:7b:74:
ec:f1:cf:85:35:dd:68:1d:01:b9:8d:70:e4:7b:8f:d0:46:73:
96:2e:a4:a8:ea:8e:94:f9:0d:6e:2c:15:bc:68:fe:5a:af:a6:
8e:00:9c:64:17:c3:2f:ac:f2:e6:83:2d:b5:34:5d:f0:e1:e1:
84:c4:aa:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 10:34:16 2025 by rpki-client