Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/e1544b-1b2c-4ebd-8658-77839eb5f820/1/1ykQwAr7tjzYeu5N5mzq1ApyYvM.roa
File: 1ykQwAr7tjzYeu5N5mzq1ApyYvM.roa (raw, json)
Hash identifier: 5NLaYiuNwek7qbqlr2qTFyj4HJSwenOAixDp+ZTkHiw=
Subject key identifier: D7:29:10:C0:0A:FB:B6:3C:D8:7A:EE:4D:E6:6C:EA:D4:0A:72:62:F3
Certificate issuer: /CN=32bdecf2b1a410f6523c20e630826709cb6dac19
Certificate serial: 019812CA1EC4719C456E32E2DBF72634B6E1
Authority key identifier: 32:BD:EC:F2:B1:A4:10:F6:52:3C:20:E6:30:82:67:09:CB:6D:AC:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mr3s8rGkEPZSPCDmMIJnCcttrBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/e1544b-1b2c-4ebd-8658-77839eb5f820/1/1ykQwAr7tjzYeu5N5mzq1ApyYvM.roa
Signing time: Wed 16 Jul 2025 10:31:32 +0000
ROA not before: Wed 16 Jul 2025 10:31:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42189
IP address blocks: 45.15.56.0/22 maxlen: 22
45.82.156.0/22 maxlen: 22
77.240.96.0/20 maxlen: 24
185.115.8.0/22 maxlen: 24
2a00:1aa8::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/e1544b-1b2c-4ebd-8658-77839eb5f820/1/Mr3s8rGkEPZSPCDmMIJnCcttrBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/e1544b-1b2c-4ebd-8658-77839eb5f820/1/Mr3s8rGkEPZSPCDmMIJnCcttrBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mr3s8rGkEPZSPCDmMIJnCcttrBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 07:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:12:ca:1e:c4:71:9c:45:6e:32:e2:db:f7:26:34:b6:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32bdecf2b1a410f6523c20e630826709cb6dac19
Validity
Not Before: Jul 16 10:31:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d72910c00afbb63cd87aee4de66cead40a7262f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fd:21:93:2f:5f:38:48:98:51:28:58:0e:58:
33:ed:bd:5f:67:be:06:3d:0e:a3:55:6d:2c:9e:b2:
35:5d:b1:73:77:3c:fd:68:fd:b3:53:b1:f6:29:8b:
66:56:06:84:ee:14:81:b0:53:33:7e:f8:fb:3e:c9:
f6:92:61:fb:6d:f4:c1:a2:40:0f:36:b3:99:d5:0a:
6b:b4:07:6d:f0:1d:c2:75:ab:83:32:a7:52:23:a1:
4e:75:89:66:f0:0b:00:4a:42:98:52:83:c9:1d:35:
e3:be:97:f6:7e:ff:73:1d:7d:21:d5:98:f8:3c:43:
ef:75:74:85:8c:64:0d:1f:98:f3:10:91:c6:dc:83:
9d:7d:ef:3d:a9:ab:2a:8c:9e:ec:39:bc:6d:64:65:
66:8c:5b:d9:56:28:8d:54:20:4f:c6:bd:bd:f8:10:
04:86:89:0b:4c:58:27:19:b0:48:38:b9:82:75:b5:
88:b6:27:d6:d8:7f:2d:5d:f7:74:42:5a:1b:29:31:
31:0f:85:92:de:aa:39:3d:a9:01:13:e3:50:b8:0c:
a5:b9:0c:29:ca:32:8b:3f:6d:47:43:6e:64:89:a8:
e2:08:32:87:6d:78:f5:5d:cb:ac:55:0d:9b:95:47:
9c:81:d8:de:99:3c:02:2b:ba:c2:86:cd:17:15:cb:
11:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:29:10:C0:0A:FB:B6:3C:D8:7A:EE:4D:E6:6C:EA:D4:0A:72:62:F3
X509v3 Authority Key Identifier:
keyid:32:BD:EC:F2:B1:A4:10:F6:52:3C:20:E6:30:82:67:09:CB:6D:AC:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mr3s8rGkEPZSPCDmMIJnCcttrBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/e1544b-1b2c-4ebd-8658-77839eb5f820/1/1ykQwAr7tjzYeu5N5mzq1ApyYvM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/e1544b-1b2c-4ebd-8658-77839eb5f820/1/Mr3s8rGkEPZSPCDmMIJnCcttrBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.56.0/22
45.82.156.0/22
77.240.96.0/20
185.115.8.0/22
IPv6:
2a00:1aa8::/29
Signature Algorithm: sha256WithRSAEncryption
60:3b:d3:01:31:34:19:bb:9a:84:54:b0:7d:98:97:09:6a:91:
fa:50:c1:64:e3:e3:e7:fd:99:03:20:25:46:60:8b:86:90:54:
bf:a1:ac:eb:4a:9d:f0:6c:47:ca:52:c3:53:f4:b3:83:64:d5:
5c:88:cf:76:e1:1a:e4:77:ab:20:d5:53:4b:75:27:ca:ee:f4:
98:1b:34:7a:59:32:ca:34:a1:b7:5d:7d:37:24:45:3e:a8:95:
51:fa:7b:47:fa:d5:8c:6a:1f:8c:0e:05:e5:2f:36:00:d8:77:
98:1a:cc:f1:95:1b:2f:99:64:ee:a5:f8:f7:35:c8:e7:6c:dd:
28:ce:1d:2f:7b:c1:fd:ee:b6:f3:90:89:a9:c1:67:7d:62:ed:
7d:d1:33:b4:c5:71:cd:75:2b:b9:3d:2f:ee:96:ed:ac:8b:b6:
7c:35:5c:68:bd:1c:1d:2e:bc:1e:c4:1d:a4:3c:ff:90:f2:73:
ef:83:ab:a0:15:7e:a8:29:49:70:33:3e:3b:e7:e5:66:c7:9d:
b1:fa:a1:de:a7:8f:d0:d5:31:20:76:2f:dc:bc:e1:df:1e:db:
98:99:34:6d:c8:e4:01:f2:32:b5:ad:1b:7e:d3:ac:8e:40:85:
b9:2f:50:d8:8b:c9:41:97:64:5d:1e:3b:85:83:21:d7:2e:ee:
ec:ae:de:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 16:06:24 2025 by rpki-client