Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/tVsg3-kSFUX3YfNLotmPA6mYhlI.roa
File: tVsg3-kSFUX3YfNLotmPA6mYhlI.roa (raw, json)
Hash identifier: A08kEWJHBVJNtdW5hUwV1JyLlJTRF46SuMitLXzaJvI=
Subject key identifier: B5:5B:20:DF:E9:12:15:45:F7:61:F3:4B:A2:D9:8F:03:A9:98:86:52
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 0197F48865C0A3351EF7A696F3EEC536483E
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/tVsg3-kSFUX3YfNLotmPA6mYhlI.roa
Signing time: Thu 10 Jul 2025 13:31:08 +0000
ROA not before: Thu 10 Jul 2025 13:31:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58110
IP address blocks: 45.88.169.0/24 maxlen: 24
45.92.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 12:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:f4:88:65:c0:a3:35:1e:f7:a6:96:f3:ee:c5:36:48:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jul 10 13:31:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b55b20dfe9121545f761f34ba2d98f03a9988652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:35:54:1e:bf:28:74:ee:02:d3:df:67:ad:3f:
8c:c1:a8:53:7b:dc:33:87:14:e4:b3:be:7e:01:2a:
1f:93:34:03:66:df:2c:24:df:85:32:e4:62:55:0c:
e8:70:90:0b:29:f4:16:22:c9:cc:f2:bb:c8:d1:99:
c4:e1:00:e2:24:f8:e2:f9:f0:23:51:8b:d3:b2:15:
d6:77:cc:1b:cd:75:14:91:9d:5c:cf:b5:5b:37:85:
f0:b3:9a:8b:3f:14:f8:00:68:eb:e5:5c:1e:97:71:
21:02:69:73:0e:bc:ac:7b:90:24:4a:55:32:9a:26:
65:41:4c:1e:21:c4:d5:a1:67:c7:58:e2:8a:f8:1e:
07:87:96:64:54:73:20:57:1a:eb:88:82:f0:a3:9c:
b2:71:cf:eb:4f:53:f6:04:b4:9a:4e:15:0c:70:4d:
da:2d:d3:c4:a1:d6:92:38:2c:08:e6:4d:c8:52:72:
89:9a:60:5f:a7:e7:4b:64:ad:d1:42:74:e2:61:f5:
53:1d:b8:11:b6:bb:31:7d:6e:8e:c1:51:6a:0d:af:
de:36:e3:39:94:c4:32:05:1d:d1:29:81:94:01:88:
43:97:4f:40:89:36:f3:eb:44:20:7d:3b:af:af:03:
6c:10:44:1a:86:8b:99:07:27:91:89:0d:1b:e8:95:
eb:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:5B:20:DF:E9:12:15:45:F7:61:F3:4B:A2:D9:8F:03:A9:98:86:52
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/tVsg3-kSFUX3YfNLotmPA6mYhlI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.169.0/24
45.92.162.0/24
Signature Algorithm: sha256WithRSAEncryption
d4:c8:5e:1a:f3:39:ef:e0:41:43:d6:2a:a3:d1:a8:52:c1:58:
43:db:77:5f:d6:55:8a:8a:d2:96:e0:43:77:53:8d:bf:20:9b:
97:ef:bd:68:fd:35:de:2f:25:e1:d1:72:99:43:94:64:31:bb:
40:18:08:ae:8d:5f:59:21:38:a7:0c:f6:12:98:88:06:f9:47:
35:ec:08:d0:65:c2:c5:31:f6:12:b9:03:d0:1d:4c:a0:6f:1e:
60:aa:e1:75:a6:bd:02:da:f7:02:cf:d2:e0:d2:4c:12:48:0e:
bc:be:8d:5c:cd:e2:98:c2:17:ab:c9:17:90:45:5b:c7:89:8c:
09:99:ce:ab:9e:86:0f:7f:b2:fd:fe:f9:63:98:95:84:40:6e:
fe:56:a2:6b:db:2f:63:4d:d5:b8:f1:38:18:dd:c7:9e:c7:3e:
33:78:74:c3:73:28:c7:6a:79:1f:ae:14:95:73:27:7e:34:9a:
29:09:2b:c7:0d:d7:54:99:a2:40:16:5d:40:58:79:24:a5:37:
f2:a6:f7:0d:8a:2d:75:c0:a7:3c:19:a9:d9:35:cf:d2:98:a2:
94:b6:e6:8a:66:13:b6:ed:e3:a9:6b:dc:80:0c:95:84:af:43:
50:4a:cc:60:b6:e1:8e:b5:a9:9c:8a:5c:89:a4:6b:94:d0:5e:
5e:52:50:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 18:51:53 2025 by rpki-client