Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/i8qvVDzB0EdZzbEqOCYh8-BRgb8.roa
File: i8qvVDzB0EdZzbEqOCYh8-BRgb8.roa (raw, json)
Hash identifier: LtCwHDk9vteM4sh5YJW2cXL6k8bouHBIQ0PfzbNpVeI=
Subject key identifier: 8B:CA:AF:54:3C:C1:D0:47:59:CD:B1:2A:38:26:21:F3:E0:51:81:BF
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019861F084CE262E35E4C101BC626811EC71
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/i8qvVDzB0EdZzbEqOCYh8-BRgb8.roa
Signing time: Thu 31 Jul 2025 19:23:29 +0000
ROA not before: Thu 31 Jul 2025 19:23:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25198
IP address blocks: 45.128.78.0/24 maxlen: 24
2a13:18c6:100::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 06:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:61:f0:84:ce:26:2e:35:e4:c1:01:bc:62:68:11:ec:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jul 31 19:23:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8bcaaf543cc1d04759cdb12a382621f3e05181bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:19:8e:db:fe:98:06:69:4f:35:42:d9:b8:ed:
96:a9:96:39:e9:a0:1b:ee:e0:69:d6:60:14:83:71:
0a:91:66:ff:ae:ed:94:95:64:9f:7c:08:c6:c7:17:
d3:08:cb:d9:d3:b5:9a:a4:bf:4d:22:53:9e:6c:d1:
d9:91:d3:8c:c4:f3:0b:ac:eb:a2:50:21:ab:d5:b4:
60:92:30:50:f6:ec:35:a3:27:d4:92:b1:0c:a0:9f:
1e:e3:99:fd:9b:6b:c2:55:ba:d2:a3:47:b9:d7:10:
a6:3e:80:fa:2b:7d:40:c2:0e:d0:1a:c6:0c:cc:64:
1d:12:53:bf:d8:76:48:03:29:28:81:e8:f5:a5:d3:
cc:ef:95:b8:ac:28:d4:0c:e2:66:67:c5:eb:24:1a:
c9:c8:11:ee:76:1f:27:20:0d:67:06:a7:db:1d:9f:
36:f5:f4:ca:07:d9:95:6e:3b:d2:92:4f:68:5f:ee:
10:25:c8:f4:f1:4e:ae:12:94:0e:02:0d:11:e6:a3:
86:3d:57:a9:41:73:95:a7:92:02:82:54:fe:50:78:
dc:1f:3f:e7:48:44:6d:7e:a2:80:b3:35:53:df:68:
50:1a:1a:dd:a7:d0:cf:5e:c4:8a:d2:4f:19:87:be:
32:a3:c5:1c:df:9d:8d:a9:4a:a4:43:c0:1a:a6:f1:
7e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:CA:AF:54:3C:C1:D0:47:59:CD:B1:2A:38:26:21:F3:E0:51:81:BF
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/i8qvVDzB0EdZzbEqOCYh8-BRgb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.78.0/24
IPv6:
2a13:18c6:100::/48
Signature Algorithm: sha256WithRSAEncryption
c4:6a:78:af:71:68:c5:18:58:30:e1:a7:3f:ce:da:38:4c:0f:
30:d7:9c:1b:7a:b6:a8:f7:66:46:37:07:42:7f:d2:06:e8:d6:
fd:ff:32:22:3a:12:50:f4:44:b6:99:b8:08:d7:49:7f:5b:7e:
20:90:cc:dc:fc:dd:b5:53:46:19:42:e2:9e:3d:01:33:31:ed:
78:7a:85:73:1d:6a:f6:30:9e:05:4e:62:3e:24:fa:8a:07:a4:
18:e9:27:6e:47:b5:63:4a:44:b7:85:36:b6:ca:2f:38:51:cf:
b9:47:09:34:28:68:08:fc:10:cd:15:83:d7:ac:93:cd:06:8d:
be:c3:6e:1a:f0:20:38:1c:69:64:54:88:5f:b8:67:ff:24:e9:
ee:c7:78:c9:eb:49:f8:ac:14:99:63:b8:c4:05:4f:12:b5:69:
00:0d:24:ca:31:46:86:6b:7f:50:c8:a9:fe:a2:92:71:8a:8b:
c1:7f:f2:17:9e:fc:68:d5:8d:95:00:68:42:8d:39:b2:46:18:
0d:2e:6d:6c:94:ab:89:cb:7b:9a:d1:dd:e4:1d:0b:b0:69:c4:
c6:a7:b0:34:18:06:54:1c:f5:c1:1b:6a:af:8e:c5:bc:91:1a:
2b:5b:f6:91:c4:f0:5b:e0:c8:f5:3c:65:4c:46:33:19:6a:d2:
a9:71:43:57
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZhh8ITOJi415MEBvGJoEexxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjUwNzMxMTkyMzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YmNhYWY1NDNjYzFkMDQ3NTljZGIxMmEzODI2MjFmM2UwNTE4MWJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRmO2/6YBmlPNULZuO2WqZY56aAb
7uBp1mAUg3EKkWb/ru2UlWSffAjGxxfTCMvZ07WapL9NIlOebNHZkdOMxPMLrOui
UCGr1bRgkjBQ9uw1oyfUkrEMoJ8e45n9m2vCVbrSo0e51xCmPoD6K31Awg7QGsYM
zGQdElO/2HZIAykogej1pdPM75W4rCjUDOJmZ8XrJBrJyBHudh8nIA1nBqfbHZ82
9fTKB9mVbjvSkk9oX+4QJcj08U6uEpQOAg0R5qOGPVepQXOVp5ICglT+UHjcHz/n
SERtfqKAszVT32hQGhrdp9DPXsSK0k8Zh74yo8Uc352NqUqkQ8AapvF+cQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFIvKr1Q8wdBHWc2xKjgmIfPgUYG/MB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvaThxdlZEekIwRWRaemJFcU9DWWg4LUJSZ2I4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQALYBOMA8E
AgACMAkDBwAqExjGAQAwDQYJKoZIhvcNAQELBQADggEBAMRqeK9xaMUYWDDhpz/O
2jhMDzDXnBt6tqj3ZkY3B0J/0gbo1v3/MiI6ElD0RLaZuAjXSX9bfiCQzNz83bVT
RhlC4p49ATMx7Xh6hXMdavYwngVOYj4k+ooHpBjpJ25HtWNKRLeFNrbKLzhRz7lH
CTQoaAj8EM0Vg9esk80Gjb7DbhrwIDgcaWRUiF+4Z/8k6e7HeMnrSfisFJljuMQF
TxK1aQANJMoxRoZrf1DIqf6iknGKi8F/8hee/GjVjZUAaEKNObJGGA0ubWyUq4nL
e5rR3eQdC7BpxMansDQYBlQc9cEbaq+OxbyRGitb9pHE8FvgyPU8ZUxGMxlq0qlx
Q1c=
-----END CERTIFICATE-----
Generated at Sun Aug 10 14:00:41 2025 by rpki-client