Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/FdIidW0iI8s3BDlLJ5hpekaUDyI.roa
File: FdIidW0iI8s3BDlLJ5hpekaUDyI.roa (raw, json)
Hash identifier: MUdmy80p3zlztbVODgC1EefbLUSe+QTqIqdUtl+oHlc=
Subject key identifier: 15:D2:22:75:6D:22:23:CB:37:04:39:4B:27:98:69:7A:46:94:0F:22
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 01985B2C5716A9BC52FF1AA25E460D2D0211
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/FdIidW0iI8s3BDlLJ5hpekaUDyI.roa
Signing time: Wed 30 Jul 2025 11:51:29 +0000
ROA not before: Wed 30 Jul 2025 11:51:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204104
IP address blocks: 46.38.136.0/24 maxlen: 24
46.38.137.0/24 maxlen: 24
46.38.138.0/24 maxlen: 24
46.38.143.0/24 maxlen: 24
109.94.164.0/24 maxlen: 24
212.80.8.0/24 maxlen: 24
212.80.9.0/24 maxlen: 24
212.80.10.0/24 maxlen: 24
212.80.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 17:44:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5b:2c:57:16:a9:bc:52:ff:1a:a2:5e:46:0d:2d:02:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Jul 30 11:51:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=15d222756d2223cb3704394b2798697a46940f22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8c:5f:ca:e2:04:39:03:58:7d:83:8f:00:fe:
5f:80:77:3c:89:5d:46:99:f8:0c:58:f3:f8:5c:50:
79:b7:6f:8f:03:30:a8:86:54:82:58:e9:aa:ec:2b:
c4:a1:75:ac:b9:88:de:74:22:91:c1:8c:be:ea:7a:
53:e3:85:8b:e0:d9:09:51:43:54:be:4e:65:41:79:
63:16:be:a6:50:9b:0b:0d:f1:45:37:56:a2:c3:4f:
49:c3:4c:b3:bf:31:08:3b:ff:62:91:fd:2f:35:00:
9a:04:e2:39:5e:e8:0e:1d:35:f9:e6:b9:e1:fb:bb:
f4:80:b4:91:31:12:a0:5b:24:60:87:95:ed:53:ec:
bf:8a:7a:0d:52:f6:c1:4f:3e:e5:0f:55:6e:af:a6:
73:1f:0e:fd:3c:99:76:03:d6:82:4d:2f:1f:32:b5:
91:91:35:e1:4d:dd:c0:c5:e1:1f:c4:6d:22:96:ed:
e2:b4:b2:8c:b6:33:a4:b4:a6:dd:b0:db:fd:6a:67:
56:c7:4b:77:d4:e9:98:20:2a:89:2f:a7:e4:74:d8:
4b:05:17:a0:50:1d:64:b7:ee:9a:bb:1b:33:6c:a4:
7b:d7:80:ec:aa:67:57:ed:fb:23:bd:2a:2c:d2:57:
ef:2a:06:92:a0:ed:26:90:48:d8:af:84:35:33:ce:
54:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:D2:22:75:6D:22:23:CB:37:04:39:4B:27:98:69:7A:46:94:0F:22
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/FdIidW0iI8s3BDlLJ5hpekaUDyI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.38.136.0-46.38.138.255
46.38.143.0/24
109.94.164.0/24
212.80.8.0-212.80.10.255
212.80.31.0/24
Signature Algorithm: sha256WithRSAEncryption
12:61:3c:a3:9e:2c:ef:85:ed:33:28:24:d9:f4:b5:d9:d8:8d:
6f:7f:8e:64:96:7a:11:ff:c1:8d:ea:57:7d:e8:ad:3e:e9:13:
4f:51:ae:b2:62:0f:9d:84:ab:9f:fc:2c:3e:dd:34:b6:16:22:
91:cd:66:fc:c8:bb:19:67:75:28:06:1a:62:b2:19:cc:f0:10:
85:be:35:8a:30:e1:e8:21:b0:2c:e7:60:ca:fe:46:21:25:d4:
2f:ec:a8:d6:d5:2d:7c:5a:c1:3d:c5:17:91:1a:13:5b:5b:d7:
78:93:ce:d3:f7:24:51:ec:99:42:c4:cf:5e:b3:11:7e:14:14:
dc:8d:2a:a5:bf:1b:e6:6b:5f:77:e0:d6:9d:c6:00:f8:1d:8f:
b5:d7:87:7c:91:cb:45:eb:14:10:84:bc:b2:d4:f1:6d:b6:de:
f6:43:6e:48:02:99:3c:06:19:c2:44:d4:21:ea:8c:54:32:3b:
fd:03:60:b9:a4:51:f5:51:16:3e:bd:f1:b1:ea:4e:e4:29:96:
37:fd:46:4a:24:2a:0e:7c:e4:9c:13:17:45:4e:96:cd:57:23:
40:a7:b3:d7:a1:93:8d:df:47:b0:96:27:44:9c:8b:2b:70:bf:
d4:f7:97:af:0a:3b:94:fd:53:28:2a:45:37:bd:55:49:da:5c:
68:00:99:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:56:53 2025 by rpki-client