Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/sTYYfE-ujsVTDXjz9Y8hd0TFvlE.roa
File: sTYYfE-ujsVTDXjz9Y8hd0TFvlE.roa (raw, json)
Hash identifier: ljd/bgs17GlLF7Ke34S9FfTJmNrgp26W4UM6Jrr4R8E=
Subject key identifier: B1:36:18:7C:4F:AE:8E:C5:53:0D:78:F3:F5:8F:21:77:44:C5:BE:51
Certificate issuer: /CN=2d1172c1c73f971a9fb2e89b7917200c500ee407
Certificate serial: 01985633C1820CFA473F6BD692FE6F0AE594
Authority key identifier: 2D:11:72:C1:C7:3F:97:1A:9F:B2:E8:9B:79:17:20:0C:50:0E:E4:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRFywcc_lxqfsuibeRcgDFAO5Ac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/sTYYfE-ujsVTDXjz9Y8hd0TFvlE.roa
Signing time: Tue 29 Jul 2025 12:41:29 +0000
ROA not before: Tue 29 Jul 2025 12:41:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197143
IP address blocks: 46.245.160.0/24 maxlen: 24
46.245.161.0/24 maxlen: 24
46.245.162.0/24 maxlen: 24
46.245.163.0/24 maxlen: 24
46.245.164.0/24 maxlen: 24
46.245.165.0/24 maxlen: 24
46.245.166.0/24 maxlen: 24
46.245.167.0/24 maxlen: 24
93.93.105.0/24 maxlen: 24
185.33.128.0/24 maxlen: 24
185.33.129.0/24 maxlen: 24
185.33.130.0/24 maxlen: 24
185.33.131.0/24 maxlen: 24
185.218.218.0/24 maxlen: 24
185.218.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.mft
rsync://rpki.ripe.net/repository/DEFAULT/LRFywcc_lxqfsuibeRcgDFAO5Ac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:56:33:c1:82:0c:fa:47:3f:6b:d6:92:fe:6f:0a:e5:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1172c1c73f971a9fb2e89b7917200c500ee407
Validity
Not Before: Jul 29 12:41:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b136187c4fae8ec5530d78f3f58f217744c5be51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a1:79:d2:9f:47:e6:4e:68:83:ba:ae:8e:cd:
6f:eb:8c:71:4e:3e:7e:c8:6b:a8:52:b6:6f:97:d6:
33:20:d0:36:35:5d:ac:22:e5:57:83:96:8b:35:43:
a6:5c:d5:4a:ff:3c:12:c3:8d:d0:17:f2:a7:95:21:
83:c9:47:fd:29:fb:10:52:2b:7f:e6:b5:d5:34:95:
fd:ac:d7:5c:88:4a:c5:4b:be:f3:04:f2:7e:9a:0f:
8a:b6:20:9e:b5:24:63:0b:50:e4:58:80:cf:fd:10:
01:b8:c8:9d:e7:a5:c9:be:58:f0:2d:fc:38:d3:16:
a8:25:0c:ea:56:a8:e2:00:fb:19:63:7c:17:68:e8:
93:05:13:36:1e:fc:d1:ef:e1:35:09:5e:4d:3e:6c:
5d:87:8e:37:ed:ed:f9:51:8e:9f:c3:29:3e:49:44:
1f:36:98:84:06:36:6d:5f:07:22:a9:f1:52:d0:2b:
8a:ad:92:9e:be:f7:42:04:55:02:73:a7:d2:17:b1:
01:9f:ab:6d:1f:ae:ee:a6:28:6f:c7:7b:bc:b3:e8:
a9:f9:1d:6e:1f:72:fc:1a:fa:61:80:5d:32:e7:c4:
52:7e:6c:47:6a:c5:7d:66:8c:1a:cb:1d:a0:24:c5:
af:8e:0c:41:52:26:48:90:23:c2:af:49:d5:ee:0a:
f9:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:36:18:7C:4F:AE:8E:C5:53:0D:78:F3:F5:8F:21:77:44:C5:BE:51
X509v3 Authority Key Identifier:
keyid:2D:11:72:C1:C7:3F:97:1A:9F:B2:E8:9B:79:17:20:0C:50:0E:E4:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRFywcc_lxqfsuibeRcgDFAO5Ac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/sTYYfE-ujsVTDXjz9Y8hd0TFvlE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.245.160.0/21
93.93.105.0/24
185.33.128.0/22
185.218.218.0/23
Signature Algorithm: sha256WithRSAEncryption
34:08:21:75:7b:de:0f:a7:f0:49:07:5c:a6:e8:a9:90:ab:00:
bf:44:69:83:26:5a:b2:41:80:32:2d:e4:ab:9a:a1:2d:7e:6a:
90:28:5a:67:5b:55:07:03:e1:c5:00:93:4c:92:d9:18:2b:38:
ce:f7:a6:19:0b:4b:91:9a:a5:da:32:fa:e1:e5:63:d3:d1:c7:
c8:22:66:e0:77:df:30:4c:16:16:25:ef:5b:17:2b:e8:d7:73:
24:f8:2f:ad:83:83:7b:91:fa:ec:52:54:8d:67:cf:bf:6b:08:
7a:ea:ad:e5:2f:7e:1d:e5:78:36:72:7f:bd:6d:3f:f0:ae:54:
82:d9:9b:f8:51:44:7c:70:6d:97:2d:ce:25:89:28:e3:72:21:
b2:0f:97:39:c6:19:73:1c:1c:f5:97:30:45:9e:60:2e:a8:4a:
56:ff:1a:30:0c:a2:4b:0b:13:73:5b:f6:40:a0:8d:bb:d1:1e:
9c:2d:d0:d6:be:9e:ac:98:09:82:ae:a8:e4:d7:d4:a5:1c:3b:
a8:5f:a6:81:17:74:c2:2f:09:ff:4e:09:41:01:3a:f9:75:05:
eb:6d:93:b9:eb:e8:d9:e3:78:56:19:3d:17:86:e3:ef:8a:0f:
e2:8f:4e:78:04:a2:ae:98:33:36:e6:e1:09:64:a6:c8:b3:cd:
4f:99:d2:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:23:22 2025 by rpki-client