Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/_YY0UJCJbQTIa1XDSLBMiZ983vo.roa
File: _YY0UJCJbQTIa1XDSLBMiZ983vo.roa (raw, json)
Hash identifier: Gk8qdq6LrPLlWU/Jmg7W6QhRrabuxZ2rc8Fg/yM8yME=
Subject key identifier: FD:86:34:50:90:89:6D:04:C8:6B:55:C3:48:B0:4C:89:9F:7C:DE:FA
Certificate issuer: /CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4
Certificate serial: 019847C9D14B6CDC2F9914B6BCE45B8B3CEA
Authority key identifier: 95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/_YY0UJCJbQTIa1XDSLBMiZ983vo.roa
Signing time: Sat 26 Jul 2025 17:31:05 +0000
ROA not before: Sat 26 Jul 2025 17:31:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 45.112.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:c9:d1:4b:6c:dc:2f:99:14:b6:bc:e4:5b:8b:3c:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4
Validity
Not Before: Jul 26 17:31:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fd86345090896d04c86b55c348b04c899f7cdefa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:79:b4:98:61:c3:e2:55:ba:d1:08:4d:7a:ec:
a8:c8:d6:7d:1e:31:e3:4c:6e:59:d3:9f:11:b2:17:
ef:23:20:eb:3a:6d:26:40:c1:75:bd:f8:e0:f4:fb:
e0:34:08:0f:06:72:2f:59:3a:57:60:fe:f5:da:80:
40:17:65:d2:e5:d6:62:19:52:17:ac:93:6c:af:de:
e7:3f:f7:21:6d:44:16:d4:16:6b:13:52:d6:e2:5d:
cf:36:bf:97:9b:20:b4:88:24:7b:6f:46:25:79:b4:
94:6a:ee:fc:e0:91:7f:06:fe:3e:32:bb:90:88:a2:
5e:6e:ff:94:28:a0:93:4d:2d:61:83:c7:a1:b4:8f:
92:d6:1b:96:1d:80:c9:41:65:32:5a:a8:d4:76:33:
eb:fa:f8:13:9a:3c:c5:eb:3e:f0:ba:46:8e:fc:a7:
13:41:3f:34:bc:34:7e:0e:c6:d6:f0:1b:19:4a:70:
b5:d4:c3:91:8c:42:14:27:62:a1:21:bd:b4:0b:bc:
2a:15:69:16:9e:5e:be:d0:a1:b9:d3:9a:35:5d:23:
ca:4f:c3:59:28:ca:62:5f:a0:8e:ba:60:fc:80:a5:
83:1f:24:2f:5f:98:06:a4:3c:33:40:60:ac:17:e5:
45:6b:d3:fe:43:ab:98:f0:6b:0c:be:fc:04:b0:7b:
b3:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:86:34:50:90:89:6D:04:C8:6B:55:C3:48:B0:4C:89:9F:7C:DE:FA
X509v3 Authority Key Identifier:
keyid:95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/_YY0UJCJbQTIa1XDSLBMiZ983vo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.112.195.0/24
Signature Algorithm: sha256WithRSAEncryption
58:e3:e9:56:ca:68:1f:52:1c:65:b3:34:30:24:5f:67:bf:1d:
2a:57:3b:16:02:26:73:84:84:bf:db:fb:b7:d3:eb:c1:40:fd:
40:d2:cb:e8:e3:ea:a7:b8:b8:73:a0:fc:f3:d3:14:74:73:f1:
fa:c2:32:6b:5f:97:a6:b7:72:2e:5b:b1:19:eb:3e:46:0d:13:
2b:30:b4:3c:a3:7d:22:e7:ab:f4:5c:62:c4:ae:25:f6:e9:d8:
76:aa:59:1e:7e:29:6a:35:2a:b4:72:e0:ca:f6:9d:2c:cb:2f:
c8:63:62:b7:93:f3:53:74:e6:ce:36:30:e3:25:72:97:0d:4e:
b6:7b:1c:67:14:de:0f:78:fe:9d:e4:48:52:32:9c:88:f7:97:
9c:aa:d2:ce:52:e9:be:e4:ea:54:62:f0:6c:75:f6:21:f5:a1:
83:f7:b9:53:a9:9d:e7:b3:ac:d5:b0:12:a1:9f:d8:d6:af:40:
12:25:21:b8:59:52:16:89:af:10:e2:03:c1:be:4d:6f:78:36:
8c:4c:0f:92:52:13:44:72:cb:8c:22:a0:44:d9:fd:5c:90:34:
31:a7:7c:76:c7:f2:6d:45:d7:4f:7e:3a:75:a0:74:50:46:48:
21:ca:fb:46:f8:44:a2:53:97:98:53:2e:92:9d:75:e8:3e:3f:
2f:64:08:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 08:17:55 2025 by rpki-client