Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/RMceaHZCGYPBugBbenixpuTXQ9Y.roa
File: RMceaHZCGYPBugBbenixpuTXQ9Y.roa (raw, json)
Hash identifier: Fx5SL+sVQDhB9eE6jeOWGgrsF0E4+4lRz/S67IVHpMs=
Subject key identifier: 44:C7:1E:68:76:42:19:83:C1:BA:00:5B:7A:78:B1:A6:E4:D7:43:D6
Certificate issuer: /CN=c1d369e66cdbe30d7b3aff6081f20c17a98fdc5b
Certificate serial: 0197F980FAC63C8A13A0255DCB842C71FEF7
Authority key identifier: C1:D3:69:E6:6C:DB:E3:0D:7B:3A:FF:60:81:F2:0C:17:A9:8F:DC:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/RMceaHZCGYPBugBbenixpuTXQ9Y.roa
Signing time: Fri 11 Jul 2025 12:41:08 +0000
ROA not before: Fri 11 Jul 2025 12:41:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204601
IP address blocks: 45.88.78.0/24 maxlen: 24
81.91.176.0/24 maxlen: 24
81.91.177.0/24 maxlen: 24
81.91.178.0/24 maxlen: 24
95.215.205.0/24 maxlen: 24
103.246.146.0/24 maxlen: 24
103.246.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 31 Jul 2025 15:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:f9:80:fa:c6:3c:8a:13:a0:25:5d:cb:84:2c:71:fe:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1d369e66cdbe30d7b3aff6081f20c17a98fdc5b
Validity
Not Before: Jul 11 12:41:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=44c71e6876421983c1ba005b7a78b1a6e4d743d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8d:5d:5b:17:cf:b2:11:6d:8b:35:fc:7f:f2:
3e:b9:f7:e0:d1:e9:52:6c:8b:84:95:c3:9e:17:c9:
cd:3e:df:29:2f:d3:ef:c1:ec:3b:6d:66:dc:f1:e4:
08:c5:98:0b:6a:d9:82:ec:33:68:f5:cc:3f:02:83:
91:f1:3d:2e:f3:f2:9f:fa:28:09:53:db:97:11:0b:
62:a9:e4:b4:ab:37:45:c7:a4:04:15:09:af:e4:fc:
c8:60:bf:53:75:33:70:28:73:2a:dc:ab:34:c1:90:
eb:ed:c6:00:4e:3f:8a:00:f1:f1:a6:90:e9:ee:53:
4c:90:3f:ef:d6:81:bd:02:bb:80:18:ee:11:e7:e6:
d1:14:cb:f5:88:f7:15:82:38:26:92:1d:a9:f6:2d:
db:8a:7b:ad:03:7f:e1:63:9d:d1:d2:b3:17:da:4d:
19:f2:fd:64:a3:04:35:7e:84:62:59:2d:3d:f1:6d:
56:db:05:69:da:7e:5d:c4:68:e8:c3:5e:f0:6c:d6:
b5:8f:b2:5a:17:6b:a6:e7:22:3a:bd:ef:5c:40:74:
ec:2d:3c:bb:62:95:c7:13:a1:b5:cd:1b:d2:be:0b:
aa:95:eb:f6:d9:cc:c0:df:56:b7:22:b9:c2:46:ab:
20:e9:34:12:23:0d:2c:73:59:29:9f:b2:1a:54:c5:
29:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:C7:1E:68:76:42:19:83:C1:BA:00:5B:7A:78:B1:A6:E4:D7:43:D6
X509v3 Authority Key Identifier:
keyid:C1:D3:69:E6:6C:DB:E3:0D:7B:3A:FF:60:81:F2:0C:17:A9:8F:DC:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/RMceaHZCGYPBugBbenixpuTXQ9Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.78.0/24
81.91.176.0-81.91.178.255
95.215.205.0/24
103.246.146.0/23
Signature Algorithm: sha256WithRSAEncryption
93:84:3c:8d:bf:63:70:35:fa:49:85:1f:db:e9:23:e1:08:3e:
97:92:4f:f7:d8:b1:8e:66:40:92:b7:e8:a5:32:39:72:d9:cc:
72:ae:a1:61:f0:7f:fd:85:a4:03:a6:6b:9a:ac:c3:85:6b:b6:
3c:e9:e4:00:5a:a5:95:35:fe:1b:0c:4e:fb:0e:87:68:1e:9e:
93:b7:61:48:c1:4e:36:a7:b8:25:57:be:4f:4c:52:08:8f:cc:
2e:20:a9:f4:7d:78:05:9c:3e:1a:c1:41:7b:c0:bd:13:8e:6c:
4e:d8:57:7b:f2:9c:a4:43:da:b0:d6:04:bb:cf:a0:01:91:fc:
8d:c0:32:3c:a7:78:6e:33:17:1f:ad:0d:f6:92:18:5e:d4:73:
24:b6:c0:bc:44:0e:f8:05:b0:6e:12:e4:8b:86:ff:99:37:0e:
b6:be:79:0a:e2:c1:d9:4c:0d:a5:93:70:0d:47:70:1b:88:99:
82:b1:4c:a6:1c:8c:a5:c2:34:68:d7:20:0d:1f:3f:39:24:a1:
e7:2a:41:40:4d:b1:65:dd:aa:ab:91:13:19:ac:0b:60:c2:a3:
34:72:f0:3c:2c:0f:8f:4c:eb:2c:c6:01:f3:1b:b7:6a:e0:bf:
7b:68:14:4b:79:66:1a:42:87:9e:f9:2f:07:10:2f:a1:59:1a:
7c:6d:fe:33
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAZf5gPrGPIoToCVdy4Qscf73MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxZDM2OWU2NmNkYmUzMGQ3YjNhZmY2MDgxZjIwYzE3YTk4
ZmRjNWIwHhcNMjUwNzExMTI0MTA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NGM3MWU2ODc2NDIxOTgzYzFiYTAwNWI3YTc4YjFhNmU0ZDc0M2Q2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxI1dWxfPshFtizX8f/I+uffg0elS
bIuElcOeF8nNPt8pL9Pvwew7bWbc8eQIxZgLatmC7DNo9cw/AoOR8T0u8/Kf+igJ
U9uXEQtiqeS0qzdFx6QEFQmv5PzIYL9TdTNwKHMq3Ks0wZDr7cYATj+KAPHxppDp
7lNMkD/v1oG9AruAGO4R5+bRFMv1iPcVgjgmkh2p9i3binutA3/hY53R0rMX2k0Z
8v1kowQ1foRiWS098W1W2wVp2n5dxGjow17wbNa1j7JaF2um5yI6ve9cQHTsLTy7
YpXHE6G1zRvSvguqlev22czA31a3IrnCRqsg6TQSIw0sc1kpn7IaVMUpnQIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFETHHmh2QhmDwboAW3p4sabk10PWMB8GA1UdIwQY
MBaAFMHTaeZs2+MNezr/YIHyDBepj9xbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2ROcDVtemI0dzE3T3Y5Z2dmSU1GNm1QM0ZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yMjQzNTEtM2E0Ny00MDE0LWIzOTUt
YTYzNDc5NjEwOTY4LzEvUk1jZWFIWkNHWVBCdWdCYmVuaXhwdVRYUTlZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8yMjQzNTEtM2E0Ny00MDE0LWIzOTUtYTYzNDc5NjEwOTY4
LzEvd2ROcDVtemI0dzE3T3Y5Z2dmSU1GNm1QM0ZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQALVhOMAwD
BARRW7ADBABRW7IDBABf180DBAFn9pIwDQYJKoZIhvcNAQELBQADggEBAJOEPI2/
Y3A1+kmFH9vpI+EIPpeST/fYsY5mQJK36KUyOXLZzHKuoWHwf/2FpAOma5qsw4Vr
tjzp5ABapZU1/hsMTvsOh2genpO3YUjBTjanuCVXvk9MUgiPzC4gqfR9eAWcPhrB
QXvAvROObE7YV3vynKRD2rDWBLvPoAGR/I3AMjyneG4zFx+tDfaSGF7UcyS2wLxE
DvgFsG4S5IuG/5k3Dra+eQriwdlMDaWTcA1HcBuImYKxTKYcjKXCNGjXIA0fPzkk
oecqQUBNsWXdqquRExmsC2DCozRy8DwsD49M6yzGAfMbt2rgv3toFEt5ZhpCh575
LwcQL6FZGnxt/jM=
-----END CERTIFICATE-----
Generated at Wed Jul 30 20:36:52 2025 by rpki-client