Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/gY9IWzADSyT7lNkrIarlDvX2S_o.roa
File: gY9IWzADSyT7lNkrIarlDvX2S_o.roa (raw, json)
Hash identifier: w8bQ41WhVjEG8YkAZ+pTSGzOoaebm2sLr/elW4aizbw=
Subject key identifier: 81:8F:48:5B:30:03:4B:24:FB:94:D9:2B:21:AA:E5:0E:F5:F6:4B:FA
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 01987458BD13C3B39A78C5B322597424D3CB
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/gY9IWzADSyT7lNkrIarlDvX2S_o.roa
Signing time: Mon 04 Aug 2025 09:10:29 +0000
ROA not before: Mon 04 Aug 2025 09:10:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9009
IP address blocks: 37.49.145.0/24 maxlen: 24
37.49.151.0/24 maxlen: 24
94.74.147.0/24 maxlen: 24
94.74.157.0/24 maxlen: 24
109.203.160.0/24 maxlen: 24
109.203.176.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 09:11:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:58:bd:13:c3:b3:9a:78:c5:b3:22:59:74:24:d3:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Aug 4 09:10:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=818f485b30034b24fb94d92b21aae50ef5f64bfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:63:8a:6d:cc:f3:6f:48:0b:c5:5a:9b:4d:4f:
be:b4:60:17:ed:9e:43:65:b0:a9:8a:bf:cd:f7:39:
71:39:93:4a:2b:3c:0f:b2:a2:28:df:48:a7:96:5e:
e4:a2:f2:46:26:70:6e:34:28:54:bc:67:87:52:51:
02:09:e9:a4:a3:e0:b5:18:3a:48:59:21:84:08:84:
4d:53:98:79:f6:40:0d:b2:73:b3:43:f3:f6:23:7b:
0d:fd:2c:4c:a3:6c:7a:0d:37:bf:4f:69:79:b0:65:
2c:e0:ab:64:2b:fc:ca:a9:af:43:c0:4f:87:e4:5f:
67:84:5a:eb:d0:1c:a5:5f:a6:05:d9:9d:fe:03:7f:
3c:80:8a:da:8e:fd:c0:df:78:81:ed:05:e9:26:20:
a9:12:e8:bf:a4:f2:ac:0c:b4:82:b4:d6:66:e2:7b:
08:58:9a:48:a1:c3:11:12:6d:d1:97:45:75:31:a2:
48:14:ff:a4:f7:2d:21:53:e1:1d:af:83:1a:08:d8:
ec:88:7f:2a:24:9a:6f:71:04:01:48:c1:af:24:13:
5d:9b:dd:91:7e:05:a4:cb:55:93:a1:89:e3:2b:5d:
49:02:cc:10:15:05:bf:27:a9:3b:68:df:25:43:37:
97:e3:4c:84:26:ff:d7:0d:02:8e:94:56:45:29:8c:
a9:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:8F:48:5B:30:03:4B:24:FB:94:D9:2B:21:AA:E5:0E:F5:F6:4B:FA
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/gY9IWzADSyT7lNkrIarlDvX2S_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.49.145.0/24
37.49.151.0/24
94.74.147.0/24
94.74.157.0/24
109.203.160.0/24
109.203.176.0/21
Signature Algorithm: sha256WithRSAEncryption
06:3d:cb:fb:09:10:66:27:dc:0a:81:44:6c:42:bb:55:9f:66:
e5:11:7c:56:2b:c4:b4:53:1a:71:24:06:c7:96:8d:cb:fe:85:
dc:56:99:03:6b:09:d3:9d:d5:47:17:34:67:f4:b2:0f:14:56:
0f:48:de:24:c1:df:48:ec:6b:49:bb:a2:d9:bb:a6:e4:03:9f:
36:71:c5:16:e7:f4:6b:9f:ae:7e:83:0f:b0:e6:90:5d:ae:ec:
4e:7f:3a:f7:48:5f:07:5b:e6:1f:ae:f2:87:d4:25:8a:94:92:
c3:5b:07:98:3b:69:70:80:d5:93:72:64:f6:08:83:20:0d:79:
63:72:17:60:4d:a0:ba:f1:27:4c:d1:aa:20:97:c6:75:bc:b6:
76:a0:4b:d9:b8:7e:f8:9e:49:7a:af:14:03:8d:32:46:36:ff:
47:f4:ab:5c:57:a4:52:a6:35:df:2b:41:33:1c:37:f9:26:e2:
17:4e:da:00:1e:57:ec:d6:93:a4:c4:f7:2e:ca:fd:9c:0b:85:
99:cf:dd:3b:37:99:e1:a2:f2:0a:b1:06:98:bf:ad:b8:02:af:
1e:61:58:4d:83:83:f6:4c:a8:7d:3b:e8:d2:0b:a5:1e:b7:30:
a2:cf:2a:4c:cc:82:10:21:2c:84:dd:1d:2f:64:14:f4:68:47:
ed:5d:fb:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:28:35 2025 by rpki-client