Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/SYjATDQ1I6kN9eqCLTNcZMWeeh0.roa
File: SYjATDQ1I6kN9eqCLTNcZMWeeh0.roa (raw, json)
Hash identifier: Njd04jRClV/GG253dPwIxhrsePepY7gbrmA3HPI3sFU=
Subject key identifier: 49:88:C0:4C:34:35:23:A9:0D:F5:EA:82:2D:33:5C:64:C5:9E:7A:1D
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 0197DED2BEAB6BC83B87B2A531A67C7173EA
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/SYjATDQ1I6kN9eqCLTNcZMWeeh0.roa
Signing time: Sun 06 Jul 2025 08:20:42 +0000
ROA not before: Sun 06 Jul 2025 08:20:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214351
IP address blocks: 176.46.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 17:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:de:d2:be:ab:6b:c8:3b:87:b2:a5:31:a6:7c:71:73:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Jul 6 08:20:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4988c04c343523a90df5ea822d335c64c59e7a1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ef:23:06:16:b1:0f:8e:0a:58:39:6d:ae:df:
98:b8:96:99:f2:99:23:9c:f0:f9:f9:e8:cd:06:97:
6f:9b:15:7a:31:f2:02:2d:6e:05:df:1c:c3:63:a3:
14:4c:00:ee:36:0a:b3:a7:9f:ab:57:d9:92:07:9a:
84:39:e9:2c:ee:c7:47:a9:95:b1:51:ed:ad:5a:b1:
0c:86:a9:e0:82:9f:34:76:f4:4d:67:f5:18:0c:31:
61:fd:d9:c6:ba:29:cf:9e:85:64:58:db:44:a0:5c:
18:74:f5:f0:d6:6e:e2:2e:ee:d3:42:68:06:0e:de:
f7:45:c9:01:3f:14:46:93:7c:d4:e4:fb:c5:bc:30:
08:6e:d7:ce:13:18:7e:22:62:79:c2:c4:29:e6:a3:
8e:18:bf:f9:ce:8f:ba:5b:09:6e:f2:20:62:53:dd:
99:78:dc:33:f4:a9:c9:3c:36:28:11:3b:cb:c4:50:
f7:3e:7e:f9:25:b7:20:ec:81:2e:ed:99:bb:4a:79:
44:06:3b:6a:75:90:4c:5e:26:6a:cd:da:1e:b5:68:
eb:a4:d8:58:b1:df:0f:c4:ff:08:dd:42:d5:e9:b0:
3b:dc:69:01:b4:26:87:1a:73:3e:ae:25:1e:c5:f3:
cb:8a:e2:0d:6d:f5:bc:67:cd:da:8d:1f:c4:0d:0f:
dd:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:88:C0:4C:34:35:23:A9:0D:F5:EA:82:2D:33:5C:64:C5:9E:7A:1D
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/SYjATDQ1I6kN9eqCLTNcZMWeeh0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.46.152.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:df:9e:87:87:5f:e2:ae:45:24:e5:a3:fc:46:81:a1:cd:be:
89:96:b3:99:a4:7c:aa:9c:3f:85:b5:8b:19:81:67:f0:f3:68:
6f:2c:a6:3e:8d:fd:b9:b0:61:76:f3:93:db:99:8e:0b:e0:67:
53:46:ec:7f:12:01:9a:d5:eb:e3:3c:92:ff:de:84:7c:6a:17:
d4:54:99:6e:f7:9a:69:48:d3:61:5a:50:1a:cc:85:8f:a9:a6:
b2:71:8b:2a:63:05:b8:83:fb:37:b5:41:95:3b:d3:0f:e1:6b:
50:1c:ef:e3:50:e6:df:8d:47:ec:7f:e9:33:26:6f:a3:f2:0c:
fd:cf:17:e6:07:dc:17:85:3a:1a:bc:8b:b1:68:c1:3c:6e:a5:
f2:02:9a:44:a5:11:7f:ab:91:69:8b:15:47:03:5b:59:c5:c9:
bf:50:b4:ba:12:ba:be:45:e1:0d:ec:8f:bf:48:36:e2:24:84:
75:29:07:d4:32:f3:5a:af:39:6a:b5:f0:ff:73:fb:0a:08:1e:
34:8f:37:19:08:77:97:11:f1:0c:e5:13:df:ad:de:79:a5:36:
3f:05:ad:ae:df:f9:8a:24:f3:19:86:cc:91:b0:d4:35:30:c3:
ac:c2:a9:c2:6c:01:86:ca:46:9e:b2:66:64:0f:b2:3e:a4:36:
f0:19:e3:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 02:29:38 2025 by rpki-client