Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/iilXsANYfvtZWSytyypl5JvMQM0.roa
File: iilXsANYfvtZWSytyypl5JvMQM0.roa (raw, json)
Hash identifier: sPKhBcB1Baiyrj9BVq9uB7o9YEJKNquxS52KN9ZgPv0=
Subject key identifier: 8A:29:57:B0:03:58:7E:FB:59:59:2C:AD:CB:2A:65:E4:9B:CC:40:CD
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01985FB367AE3CD572CCF5E467AE39C7554A
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/iilXsANYfvtZWSytyypl5JvMQM0.roa
Signing time: Thu 31 Jul 2025 08:57:29 +0000
ROA not before: Thu 31 Jul 2025 08:57:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213790
IP address blocks: 45.146.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 09:16:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5f:b3:67:ae:3c:d5:72:cc:f5:e4:67:ae:39:c7:55:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jul 31 08:57:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8a2957b003587efb59592cadcb2a65e49bcc40cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:05:9d:4e:48:87:fa:05:90:a5:52:43:8d:3b:
80:77:1f:27:21:34:5b:c5:08:ad:02:80:07:bb:fb:
cd:ff:78:be:2b:07:d5:de:0d:2a:b7:a1:38:8b:eb:
63:a3:14:3d:7a:1e:9e:4f:83:c8:01:a9:24:be:97:
f0:ff:bb:b9:a8:96:57:18:7a:a1:74:61:3c:23:a8:
05:07:3d:0b:af:05:4a:26:a0:a8:07:ff:69:39:ba:
7f:47:b5:4f:84:25:6c:2b:83:a4:f2:10:ab:3e:fb:
f7:37:84:aa:11:1b:9e:f3:98:00:8c:e8:88:3c:23:
1d:59:7c:6a:87:3f:53:bc:80:0a:43:1f:d0:7f:d2:
05:95:04:1e:72:0c:e9:94:ac:e8:65:63:3b:a4:7c:
6b:79:f4:e8:de:ab:e8:f6:c5:21:b8:e4:2e:d6:60:
d1:aa:2c:dd:9e:ef:83:4b:c5:6a:38:ca:92:52:cd:
af:fb:0f:13:a2:c9:a0:cb:e6:a3:18:f9:4f:1c:2b:
2f:7a:9a:40:80:00:95:ba:74:c6:f7:1e:a2:6c:66:
95:d7:7c:9d:69:35:7c:0a:5c:13:65:c0:a1:5f:ac:
87:b1:de:b4:9f:0e:74:f0:2b:47:04:9c:25:82:a4:
fc:f8:f1:8a:a7:78:62:0c:60:1a:cb:82:02:4c:7b:
3e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:29:57:B0:03:58:7E:FB:59:59:2C:AD:CB:2A:65:E4:9B:CC:40:CD
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/iilXsANYfvtZWSytyypl5JvMQM0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.130.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:ca:d9:70:b9:cc:62:63:2a:80:83:d5:c8:3b:ec:78:4a:4c:
89:3a:35:50:c4:13:24:41:e1:ab:7f:bd:53:2a:94:f8:d2:bf:
ab:7b:72:a4:7b:8f:55:76:57:63:6d:8d:b7:78:5d:71:14:ee:
c4:c1:f6:dd:a8:b8:ac:4d:39:6a:31:29:43:8a:2d:52:26:de:
b2:35:2a:3c:c9:c8:4c:4c:54:df:f8:54:c8:71:65:95:ee:4f:
70:e6:e8:44:72:c7:e7:9e:22:2c:d6:2d:61:e9:a6:e2:75:43:
a7:f7:11:eb:c6:4b:4c:8f:9a:17:07:a8:55:5e:0f:7f:33:87:
cd:90:51:da:ff:eb:12:bd:a8:8e:03:f1:91:fa:98:b3:a5:1e:
ed:dc:6a:d1:57:14:d1:42:2b:4b:4d:c6:17:a0:a5:16:86:a8:
fa:ad:f9:84:ea:0b:ad:de:3b:0f:04:32:a8:e5:68:e6:ca:3f:
1b:19:e2:0a:01:6d:d7:72:af:bd:1b:bf:dd:1f:13:4c:95:1f:
59:3b:af:7e:4c:95:d1:5a:b4:c4:65:42:07:f1:cf:3c:8a:02:
7c:e2:1f:88:8a:7c:ac:ea:15:e6:fd:6f:71:30:13:5c:74:e0:
b5:53:09:61:c9:9c:76:8b:77:23:4f:b5:63:ac:80:b7:0c:62:
90:68:1f:e7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZhfs2euPNVyzPXkZ645x1VKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjUwNzMxMDg1NzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YTI5NTdiMDAzNTg3ZWZiNTk1OTJjYWRjYjJhNjVlNDliY2M0MGNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowWdTkiH+gWQpVJDjTuAdx8nITRb
xQitAoAHu/vN/3i+KwfV3g0qt6E4i+tjoxQ9eh6eT4PIAakkvpfw/7u5qJZXGHqh
dGE8I6gFBz0LrwVKJqCoB/9pObp/R7VPhCVsK4Ok8hCrPvv3N4SqERue85gAjOiI
PCMdWXxqhz9TvIAKQx/Qf9IFlQQecgzplKzoZWM7pHxrefTo3qvo9sUhuOQu1mDR
qizdnu+DS8VqOMqSUs2v+w8Tosmgy+ajGPlPHCsveppAgACVunTG9x6ibGaV13yd
aTV8ClwTZcChX6yHsd60nw508CtHBJwlgqT8+PGKp3hiDGAay4ICTHs+YQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIopV7ADWH77WVksrcsqZeSbzEDNMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvaWlsWHNBTllmdnRaV1N5dHl5cGw1SnZNUU0wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZKCMA0G
CSqGSIb3DQEBCwUAA4IBAQAdytlwucxiYyqAg9XIO+x4SkyJOjVQxBMkQeGrf71T
KpT40r+re3Kke49VdldjbY23eF1xFO7EwfbdqLisTTlqMSlDii1SJt6yNSo8ychM
TFTf+FTIcWWV7k9w5uhEcsfnniIs1i1h6abidUOn9xHrxktMj5oXB6hVXg9/M4fN
kFHa/+sSvaiOA/GR+pizpR7t3GrRVxTRQitLTcYXoKUWhqj6rfmE6gut3jsPBDKo
5Wjmyj8bGeIKAW3Xcq+9G7/dHxNMlR9ZO69+TJXRWrTEZUIH8c88igJ84h+Iinys
6hXm/W9xMBNcdOC1UwlhyZx2i3cjT7VjrIC3DGKQaB/n
-----END CERTIFICATE-----
Generated at Tue Aug 5 17:22:40 2025 by rpki-client