Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/NSyRH3VwK0K9tLNBCWC_LN7vwmU.roa
File: NSyRH3VwK0K9tLNBCWC_LN7vwmU.roa (raw, json)
Hash identifier: m+ERimYZaugkhabUMSmU/s2W+j7xStOFQ495EZDvo5c=
Subject key identifier: 35:2C:91:1F:75:70:2B:42:BD:B4:B3:41:09:60:BF:2C:DE:EF:C2:65
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01980A8E37A17519282AA4B0A4342871FE3D
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/NSyRH3VwK0K9tLNBCWC_LN7vwmU.roa
Signing time: Mon 14 Jul 2025 20:09:09 +0000
ROA not before: Mon 14 Jul 2025 20:09:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213790
IP address blocks: 45.146.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 14:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:0a:8e:37:a1:75:19:28:2a:a4:b0:a4:34:28:71:fe:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jul 14 20:09:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=352c911f75702b42bdb4b3410960bf2cdeefc265
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:14:d1:31:b9:22:32:4f:9c:41:ac:1e:dd:a3:
e7:07:ba:a3:00:5d:af:22:48:f0:f8:44:2a:0d:43:
4e:e4:e0:ad:6d:a6:6f:56:44:a3:9c:37:53:66:65:
44:09:fc:19:00:59:d3:72:6b:b4:ec:aa:20:35:a7:
b5:e6:3f:d7:d0:34:81:b5:8e:c7:06:0f:6e:22:a5:
5f:22:d3:4e:cc:47:e2:1f:1f:f4:fd:73:81:73:d4:
cc:a6:92:83:85:12:df:1c:46:7d:d1:8d:b8:4f:b2:
f5:00:53:7a:84:21:db:75:55:79:9a:9f:64:df:01:
42:40:02:4a:da:17:97:f0:39:5b:8a:db:3c:7e:92:
fc:93:cc:05:e7:03:13:b8:1b:a6:d7:9a:28:c1:30:
35:fb:82:2b:00:80:29:b5:b5:f8:7c:d8:ce:61:a0:
4d:31:32:af:78:a3:87:62:25:fe:3e:e3:39:f6:cf:
ab:39:b2:76:95:c0:eb:d1:d3:c3:3a:9e:dc:7c:14:
7d:2d:2e:9c:34:57:4b:15:10:50:a1:b7:ec:3f:bc:
17:22:02:73:c8:bc:d7:a4:c3:08:1a:f7:01:45:4a:
cf:8c:cd:70:c2:5c:fe:d3:14:8e:20:7c:69:48:25:
18:b7:7b:2b:0f:16:41:cc:88:be:f6:a5:b2:16:20:
2e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:2C:91:1F:75:70:2B:42:BD:B4:B3:41:09:60:BF:2C:DE:EF:C2:65
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/NSyRH3VwK0K9tLNBCWC_LN7vwmU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.130.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:51:f5:8a:a1:d2:81:d8:dd:af:6f:b7:ee:12:45:36:1c:46:
3a:90:be:ca:67:5d:81:7c:25:3d:99:f0:3e:47:3d:15:e3:59:
c7:b0:74:1f:32:d5:88:1d:93:93:70:1a:72:2e:a8:72:be:33:
64:69:9f:51:d4:cc:09:7f:e0:f7:31:7c:ad:95:9f:da:f8:1a:
57:31:8c:38:9b:82:c1:9a:26:5b:48:b0:5d:2b:6a:9c:ed:20:
52:5b:db:7b:d8:13:c1:47:0d:63:c2:f7:77:f3:2f:6b:49:b2:
7e:59:c5:c5:d6:7b:d0:73:d2:4f:d0:5b:eb:9d:0b:b1:97:8d:
5d:3f:af:f3:b1:5e:05:77:73:0e:6d:49:4e:8f:13:de:61:b6:
46:ff:0a:33:d2:e0:b5:4b:b8:50:99:4a:3f:98:07:0b:85:55:
01:a7:ca:cb:cb:a2:21:7f:63:c9:82:55:ad:65:6d:b5:8a:ac:
6c:b0:54:b8:57:de:03:7a:c0:f4:87:29:69:cb:44:b6:c9:cf:
b1:77:e9:29:d0:da:80:d8:34:dc:a2:85:4e:9a:d2:7c:4f:ce:
27:a2:f5:52:ff:84:31:ca:3d:83:58:8a:68:5d:a9:d0:9f:b3:
72:21:13:c2:e6:d1:e2:d3:63:b3:e3:42:11:33:51:af:55:84:
01:82:73:9c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZgKjjehdRkoKqSwpDQocf49MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjUwNzE0MjAwOTA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNTJjOTExZjc1NzAyYjQyYmRiNGIzNDEwOTYwYmYyY2RlZWZjMjY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6BTRMbkiMk+cQawe3aPnB7qjAF2v
Ikjw+EQqDUNO5OCtbaZvVkSjnDdTZmVECfwZAFnTcmu07KogNae15j/X0DSBtY7H
Bg9uIqVfItNOzEfiHx/0/XOBc9TMppKDhRLfHEZ90Y24T7L1AFN6hCHbdVV5mp9k
3wFCQAJK2heX8Dlbits8fpL8k8wF5wMTuBum15oowTA1+4IrAIAptbX4fNjOYaBN
MTKveKOHYiX+PuM59s+rObJ2lcDr0dPDOp7cfBR9LS6cNFdLFRBQobfsP7wXIgJz
yLzXpMMIGvcBRUrPjM1wwlz+0xSOIHxpSCUYt3srDxZBzIi+9qWyFiAulwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDUskR91cCtCvbSzQQlgvyze78JlMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvTlN5UkgzVndLMEs5dExOQkNXQ19MTjd2d21VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZKCMA0G
CSqGSIb3DQEBCwUAA4IBAQDFUfWKodKB2N2vb7fuEkU2HEY6kL7KZ12BfCU9mfA+
Rz0V41nHsHQfMtWIHZOTcBpyLqhyvjNkaZ9R1MwJf+D3MXytlZ/a+BpXMYw4m4LB
miZbSLBdK2qc7SBSW9t72BPBRw1jwvd38y9rSbJ+WcXF1nvQc9JP0FvrnQuxl41d
P6/zsV4Fd3MObUlOjxPeYbZG/woz0uC1S7hQmUo/mAcLhVUBp8rLy6Ihf2PJglWt
ZW21iqxssFS4V94DesD0hylpy0S2yc+xd+kp0NqA2DTcooVOmtJ8T84novVS/4Qx
yj2DWIpoXanQn7NyIRPC5tHi02Oz40IRM1GvVYQBgnOc
-----END CERTIFICATE-----
Generated at Wed Jul 23 23:25:29 2025 by rpki-client