Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/Y87LNPXwYxzM1KbDSMEARR-tLxU.roa
File: Y87LNPXwYxzM1KbDSMEARR-tLxU.roa (raw, json)
Hash identifier: Hc9P0WIM13wsCCDXXb34wAtaFccE9wg34ig8vLvBeGY=
Subject key identifier: 63:CE:CB:34:F5:F0:63:1C:CC:D4:A6:C3:48:C1:00:45:1F:AD:2F:15
Certificate issuer: /CN=706d3abbb478b74ef2adef9bb7c4336e34111d51
Certificate serial: 019856D6B8122F743B309AF93AF6FE33D523
Authority key identifier: 70:6D:3A:BB:B4:78:B7:4E:F2:AD:EF:9B:B7:C4:33:6E:34:11:1D:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/Y87LNPXwYxzM1KbDSMEARR-tLxU.roa
Signing time: Tue 29 Jul 2025 15:39:29 +0000
ROA not before: Tue 29 Jul 2025 15:39:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5511
IP address blocks: 46.175.129.0/24 maxlen: 24
109.234.76.0/24 maxlen: 24
194.26.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:56:d6:b8:12:2f:74:3b:30:9a:f9:3a:f6:fe:33:d5:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=706d3abbb478b74ef2adef9bb7c4336e34111d51
Validity
Not Before: Jul 29 15:39:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=63cecb34f5f0631cccd4a6c348c100451fad2f15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:38:c5:7e:8c:7d:4f:df:27:69:ff:99:37:88:
fe:a5:96:87:1c:4f:95:00:5a:6e:12:f4:22:ae:70:
a6:e9:6c:51:fc:45:10:31:4b:61:91:e4:d0:69:4b:
c0:1b:60:d0:65:e0:2e:dd:6e:ff:05:0c:1c:12:d8:
68:4a:76:c6:e8:14:a8:24:cd:02:91:f1:33:28:4d:
a9:62:46:6d:5d:4a:ee:38:50:1f:80:ba:26:53:9e:
ad:53:2e:26:5d:a0:cc:64:4a:59:ab:45:bc:9f:24:
a2:08:5e:a1:5e:ee:a0:15:6d:85:ef:1c:18:47:65:
89:04:06:a2:d7:f3:c1:56:1b:4d:c6:3d:7a:11:10:
ba:fb:37:a1:25:87:3c:94:36:d1:35:fc:06:fe:a4:
30:45:5c:93:7c:2d:95:59:7e:13:ad:2c:11:1a:8f:
1d:9f:38:73:ca:65:1f:8c:c1:da:ee:30:3f:cb:82:
d9:40:a9:a7:6d:32:0b:c2:45:60:3b:fc:55:ad:8c:
03:df:1f:ed:e5:f7:bb:57:3e:25:d9:c7:78:a2:29:
47:7f:39:09:0f:2b:c7:07:46:5d:98:8e:8d:04:93:
7e:eb:0d:cc:f3:70:c0:65:1f:05:71:d1:fc:f5:bd:
0d:d9:da:99:21:1c:64:71:b8:3e:6e:f8:d0:fd:91:
51:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:CE:CB:34:F5:F0:63:1C:CC:D4:A6:C3:48:C1:00:45:1F:AD:2F:15
X509v3 Authority Key Identifier:
keyid:70:6D:3A:BB:B4:78:B7:4E:F2:AD:EF:9B:B7:C4:33:6E:34:11:1D:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/Y87LNPXwYxzM1KbDSMEARR-tLxU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.175.129.0/24
109.234.76.0/24
194.26.119.0/24
Signature Algorithm: sha256WithRSAEncryption
11:d1:a2:cf:59:6d:c9:e2:76:20:ef:1e:61:e2:bb:6f:40:e4:
a2:e5:7d:a5:44:b5:c0:04:61:cf:95:3b:0e:91:1a:51:9c:55:
46:fc:fe:ef:c5:d7:46:1f:ef:c6:af:4b:19:a3:6f:c8:0f:06:
7a:4c:13:5e:55:2d:ef:bb:91:c7:59:93:e6:48:6e:f0:38:56:
7d:fd:d2:2c:b0:6e:eb:10:2a:01:3c:de:1a:19:68:ce:9a:09:
3b:3c:91:7f:c5:27:75:d9:0c:3e:d1:9e:f0:1e:de:82:97:46:
5f:14:b6:45:6f:82:4d:8b:08:d3:f3:af:bf:df:7b:1e:ea:61:
62:16:58:cd:21:da:5d:8e:0c:b0:ea:e3:b8:e7:62:20:ae:99:
ff:cc:bc:2f:d0:ed:6e:69:f1:fd:9f:ed:3f:78:86:45:c5:1a:
20:6d:0b:5c:71:56:82:aa:86:d6:a5:18:f2:c1:8b:a6:7d:a2:
74:be:b2:2f:33:2d:51:da:33:77:11:a3:a8:d9:75:b9:fa:3d:
f2:e3:2a:2b:95:09:79:87:66:d5:58:95:e1:9e:41:e5:d8:21:
6c:96:99:52:32:7a:a2:90:a8:bf:52:c0:d0:40:36:68:13:8c:
2f:b7:ef:57:ae:5b:a6:79:60:fd:19:af:16:72:67:f4:7c:e9:
59:df:81:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 06:01:43 2025 by rpki-client