Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/1Tusx1WOzudPnYNwvEomyCPgVqw.roa
File: 1Tusx1WOzudPnYNwvEomyCPgVqw.roa (raw, json)
Hash identifier: pKbymgupwNcqSeCqnJ3mv2Pu+ohIxSNkpea6y67mq7k=
Subject key identifier: D5:3B:AC:C7:55:8E:CE:E7:4F:9D:83:70:BC:4A:26:C8:23:E0:56:AC
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 01980823510A51EF165CF3FD9D00DE2132A5
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/1Tusx1WOzudPnYNwvEomyCPgVqw.roa
Signing time: Mon 14 Jul 2025 08:53:08 +0000
ROA not before: Mon 14 Jul 2025 08:53:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 397373
IP address blocks: 45.43.128.0/22 maxlen: 24
45.43.132.0/22 maxlen: 24
104.143.228.0/24 maxlen: 24
104.143.253.0/24 maxlen: 24
104.249.24.0/24 maxlen: 24
104.249.26.0/24 maxlen: 24
104.249.27.0/24 maxlen: 24
104.249.28.0/24 maxlen: 24
104.249.56.0/22 maxlen: 22
104.249.57.0/24 maxlen: 24
104.249.59.0/24 maxlen: 24
216.173.83.0/24 maxlen: 24
216.173.101.0/24 maxlen: 24
216.173.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:08:23:51:0a:51:ef:16:5c:f3:fd:9d:00:de:21:32:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Jul 14 08:53:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d53bacc7558ecee74f9d8370bc4a26c823e056ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ac:57:1c:23:5e:93:27:e7:ee:b4:12:40:5c:
4c:8f:22:8e:00:33:9f:a8:1d:4f:eb:e2:e3:67:58:
4b:f0:d8:55:9e:63:2a:53:91:1d:02:ac:29:a9:8e:
0a:00:bc:12:af:6c:86:40:d2:f9:e8:ef:08:1c:e1:
ad:76:0a:9d:1e:bf:fc:30:65:86:99:e7:5f:9d:e9:
d8:92:58:c7:96:f8:e6:47:6e:2b:6b:df:5c:f5:5b:
c8:0f:e1:2e:87:13:99:27:88:a0:b2:5f:aa:83:fc:
3a:df:3f:86:f7:f8:36:17:c5:ad:7f:e0:d8:58:44:
27:a5:00:60:bd:46:f9:13:0b:4e:1f:09:f0:bc:52:
be:f3:ef:a9:36:46:4a:c8:4c:27:08:0d:fd:82:46:
4f:ab:c1:06:40:cc:7c:b6:d1:42:7d:ae:c8:90:01:
0f:a1:2f:62:bb:a7:f9:da:45:4d:62:23:38:f3:86:
31:7e:64:ab:a4:c6:27:09:a0:e8:52:78:50:fd:88:
61:fe:19:da:8c:99:2b:f5:e7:2f:4f:f7:02:98:ac:
72:bf:fb:c6:ff:6e:5f:37:8c:73:1b:3a:22:d7:f4:
58:60:71:44:61:cb:ca:2b:ef:a2:06:1d:d1:55:d7:
73:78:d9:d2:a5:15:87:12:07:c5:b6:96:a5:48:a2:
55:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:3B:AC:C7:55:8E:CE:E7:4F:9D:83:70:BC:4A:26:C8:23:E0:56:AC
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/1Tusx1WOzudPnYNwvEomyCPgVqw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.43.128.0/21
104.143.228.0/24
104.143.253.0/24
104.249.24.0/24
104.249.26.0-104.249.28.255
104.249.56.0/22
216.173.83.0/24
216.173.101.0/24
216.173.118.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:ba:cf:5c:3f:79:68:76:d8:0d:19:a4:1f:e5:72:7c:7b:fb:
d0:cc:3d:f3:57:e3:01:39:ba:9f:fe:7c:4a:39:7a:7d:ee:0a:
9d:f2:05:eb:56:56:27:2a:b6:33:ea:33:33:5b:58:39:98:a5:
2c:17:6a:b2:03:2e:45:e9:35:ee:6c:ec:92:70:8a:75:63:ea:
df:04:b5:3a:12:e0:29:b8:9c:73:93:3f:ff:33:b0:fe:8b:db:
06:23:20:35:a9:5d:ae:2d:87:82:e5:66:c2:06:1f:c9:16:94:
6d:83:ec:d6:7d:f3:13:32:26:76:dc:d2:87:de:69:41:e8:35:
35:fa:8c:56:92:9d:6e:90:2f:07:6e:9c:fe:0a:e3:0a:bb:f1:
44:5b:67:9b:7d:96:ca:14:6d:67:e4:7f:5f:dd:95:d4:88:1f:
83:6b:4b:d0:ea:17:12:52:21:fd:68:e9:24:a4:52:d7:23:f0:
da:8e:ef:80:5f:66:01:3a:6c:7f:43:2e:1d:31:bb:02:71:7d:
2d:46:88:5b:65:52:72:a7:40:33:76:b2:8e:25:0e:3c:6b:08:
e9:7d:12:ed:2c:a9:71:fa:18:b0:43:48:f1:51:7f:99:99:a1:
08:a8:9d:ff:be:ed:b7:ab:6c:aa:20:84:44:b8:15:96:95:6f:
a2:fa:71:40
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgISAZgII1EKUe8WXPP9nQDeITKlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNTgxZTY3M2Q4MGY3NDc0OTM2YjIxMzM3ZWFmY2MxYmRj
Mzg1ZTkwHhcNMjUwNzE0MDg1MzA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNTNiYWNjNzU1OGVjZWU3NGY5ZDgzNzBiYzRhMjZjODIzZTA1NmFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKxXHCNekyfn7rQSQFxMjyKOADOf
qB1P6+LjZ1hL8NhVnmMqU5EdAqwpqY4KALwSr2yGQNL56O8IHOGtdgqdHr/8MGWG
medfnenYkljHlvjmR24ra99c9VvID+EuhxOZJ4igsl+qg/w63z+G9/g2F8Wtf+DY
WEQnpQBgvUb5EwtOHwnwvFK+8++pNkZKyEwnCA39gkZPq8EGQMx8ttFCfa7IkAEP
oS9iu6f52kVNYiM484YxfmSrpMYnCaDoUnhQ/Yhh/hnajJkr9ecvT/cCmKxyv/vG
/25fN4xzGzoi1/RYYHFEYcvKK++iBh3RVddzeNnSpRWHEgfFtpalSKJVmwIDAQAB
o4ICQTCCAj0wHQYDVR0OBBYEFNU7rMdVjs7nT52DcLxKJsgj4FasMB8GA1UdIwQY
MBaAFGBYHmc9gPdHSTayEzfq/MG9w4XpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYt
ZmIwNzk1NWYzYWFhLzEvMVR1c3gxV096dWRQbllOd3ZFb215Q1BnVnF3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYtZmIwNzk1NWYzYWFh
LzEvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFcGCCsGAQUFBwEHAQH/BEgwRjBEBAIAATA+AwQDLSuAAwQA
aI/kAwQAaI/9AwQAaPkYMAwDBAFo+RoDBABo+RwDBAJo+TgDBADYrVMDBADYrWUD
BADYrXYwDQYJKoZIhvcNAQELBQADggEBAI+6z1w/eWh22A0ZpB/lcnx7+9DMPfNX
4wE5up/+fEo5en3uCp3yBetWVicqtjPqMzNbWDmYpSwXarIDLkXpNe5s7JJwinVj
6t8EtToS4Cm4nHOTP/8zsP6L2wYjIDWpXa4th4LlZsIGH8kWlG2D7NZ98xMyJnbc
0ofeaUHoNTX6jFaSnW6QLwdunP4K4wq78URbZ5t9lsoUbWfkf1/dldSIH4NrS9Dq
FxJSIf1o6SSkUtcj8NqO74BfZgE6bH9DLh0xuwJxfS1GiFtlUnKnQDN2so4lDjxr
COl9Eu0sqXH6GLBDSPFRf5mZoQionf++7berbKoghES4FZaVb6L6cUA=
-----END CERTIFICATE-----
Generated at Mon Jul 21 07:30:17 2025 by rpki-client