Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/x-YMFFC50MPjiwbim8K7Y78OaWU.roa
File: x-YMFFC50MPjiwbim8K7Y78OaWU.roa (raw, json)
Hash identifier: eND7BGcGgHdviQWu0IdfM0wmyxP3VDDiwFSUsQb8yDM=
Subject key identifier: C7:E6:0C:14:50:B9:D0:C3:E3:8B:06:E2:9B:C2:BB:63:BF:0E:69:65
Certificate issuer: /CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Certificate serial: 019822BC5B2413A2FE73EC696B6EBEA89CC5
Authority key identifier: 55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/x-YMFFC50MPjiwbim8K7Y78OaWU.roa
Signing time: Sat 19 Jul 2025 12:50:25 +0000
ROA not before: Sat 19 Jul 2025 12:50:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210644
IP address blocks: 83.147.192.0/24 maxlen: 24
83.147.216.0/24 maxlen: 24
83.147.222.0/24 maxlen: 24
83.147.252.0/24 maxlen: 24
83.147.253.0/24 maxlen: 24
83.147.254.0/24 maxlen: 24
91.186.212.0/24 maxlen: 24
91.186.213.0/24 maxlen: 24
91.186.216.0/24 maxlen: 24
91.186.217.0/24 maxlen: 24
91.186.218.0/24 maxlen: 24
91.186.219.0/24 maxlen: 24
178.253.31.0/24 maxlen: 24
178.253.38.0/24 maxlen: 24
178.253.39.0/24 maxlen: 24
178.253.44.0/24 maxlen: 24
178.253.45.0/24 maxlen: 24
178.253.52.0/24 maxlen: 24
178.253.53.0/24 maxlen: 24
178.253.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:22:bc:5b:24:13:a2:fe:73:ec:69:6b:6e:be:a8:9c:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Validity
Not Before: Jul 19 12:50:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c7e60c1450b9d0c3e38b06e29bc2bb63bf0e6965
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:96:12:80:8d:57:27:c9:5f:03:e0:3d:ee:c7:
8f:97:1e:58:4e:b0:a8:4e:83:9a:ec:69:9f:7c:43:
62:da:32:75:da:64:30:f7:b1:6f:d2:86:3d:53:4a:
4d:6e:7a:74:b5:5f:a5:7f:8c:56:6f:40:22:51:9c:
8f:08:95:91:08:16:68:3b:e3:e6:7e:48:d3:e9:26:
56:45:64:7a:63:85:2e:4c:4a:32:16:6b:fa:90:9c:
24:f1:03:c6:de:ae:43:a9:0f:18:84:70:0f:35:5d:
e1:14:90:01:a3:15:d5:a0:2a:bc:99:0d:93:88:a1:
e4:38:43:df:fc:9b:e1:46:f8:f8:8f:d3:8d:51:d9:
db:f0:17:06:dd:70:a7:b4:7e:e9:56:8b:4a:7c:eb:
69:2b:44:d6:c8:16:69:11:7b:46:c5:c3:0a:49:27:
03:13:29:4a:c7:12:33:3d:ab:88:61:9e:0f:25:73:
a5:bd:36:65:81:bb:6f:66:1f:de:29:e8:f8:0c:63:
96:6e:de:86:fb:52:0b:52:9e:cb:98:bd:7f:b4:22:
9a:98:ac:2a:ee:86:83:7d:d9:0b:26:5c:00:ae:5a:
22:a6:1c:40:75:a6:bf:e5:f1:b3:90:00:6a:87:6d:
53:8c:2e:5f:2f:bf:62:d7:a3:a6:b9:fd:b9:3d:25:
73:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:E6:0C:14:50:B9:D0:C3:E3:8B:06:E2:9B:C2:BB:63:BF:0E:69:65
X509v3 Authority Key Identifier:
keyid:55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/x-YMFFC50MPjiwbim8K7Y78OaWU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.192.0/24
83.147.216.0/24
83.147.222.0/24
83.147.252.0-83.147.254.255
91.186.212.0/23
91.186.216.0/22
178.253.31.0/24
178.253.38.0/23
178.253.44.0/23
178.253.52.0/23
178.253.55.0/24
Signature Algorithm: sha256WithRSAEncryption
46:d0:7d:81:6b:1b:c4:38:d8:4a:32:12:51:b1:2b:c8:f7:12:
cc:bc:aa:a3:5c:a5:35:96:e6:0c:07:90:23:57:04:ea:3f:1f:
45:35:77:08:5b:f5:f8:75:8d:99:5e:fd:99:05:75:40:c7:ed:
18:fb:9e:70:c4:ad:b1:97:68:70:2d:15:07:9d:42:b9:cf:c4:
ff:8b:9f:3d:18:78:f6:57:a2:df:56:df:bf:73:10:fb:c4:36:
d6:ce:26:47:54:6a:43:55:83:e5:61:4a:05:c4:2c:86:8f:46:
f7:71:52:39:24:0d:65:74:4f:28:89:37:b0:89:c2:50:31:74:
11:f6:e6:04:3f:0d:c7:b0:1b:bb:32:62:4c:f2:35:04:a4:80:
f2:52:87:a1:cc:fe:fe:9f:d0:61:20:c9:56:99:0a:e8:b3:1a:
6e:59:e3:59:96:f1:02:98:b1:30:77:8a:b2:df:76:62:35:8f:
fd:3c:83:74:1e:02:0a:11:97:da:61:cf:17:bb:70:ff:bd:e2:
59:98:ce:62:cf:7d:c5:8b:bf:50:fd:75:e8:a6:93:c7:15:db:
4b:66:40:c6:6d:22:74:8a:24:68:b0:5c:d0:17:98:c9:e4:3b:
51:9a:ed:07:46:68:78:48:27:ec:82:f8:40:40:87:d6:6b:43:
c8:0f:b5:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 12:07:14 2025 by rpki-client