Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/YWFBK7Jytp0jjahyvynKPit3-3o.roa
File: YWFBK7Jytp0jjahyvynKPit3-3o.roa (raw, json)
Hash identifier: rjEHKjM4LEWnC9Ls6hkavxSih4kgNN910nLlCKf5IV0=
Subject key identifier: 61:61:41:2B:B2:72:B6:9D:23:8D:A8:72:BF:29:CA:3E:2B:77:FB:7A
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0197EEE1DCFD6CE119C9EB81ECD2332E17BE
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/YWFBK7Jytp0jjahyvynKPit3-3o.roa
Signing time: Wed 09 Jul 2025 11:11:08 +0000
ROA not before: Wed 09 Jul 2025 11:11:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13335
IP address blocks: 45.128.76.0/24 maxlen: 24
45.130.125.0/24 maxlen: 24
193.8.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ee:e1:dc:fd:6c:e1:19:c9:eb:81:ec:d2:33:2e:17:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jul 9 11:11:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6161412bb272b69d238da872bf29ca3e2b77fb7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:86:7f:ca:cd:64:9f:a4:1c:c9:e7:9c:6c:3c:
e4:77:c0:66:85:b2:9a:b2:7d:3b:1b:52:97:55:95:
1a:5f:04:0b:21:ac:eb:bd:1c:9c:0f:85:1a:f9:cd:
f6:da:eb:70:8f:c6:cb:4b:48:0a:51:96:95:50:c5:
13:4f:8d:e7:ff:8a:1a:3f:50:0a:aa:0b:d8:b0:82:
bf:be:f8:20:f6:30:b3:db:f8:04:56:b5:81:b0:ef:
fa:0b:2d:a1:09:d1:cc:b2:b6:b4:f3:7c:4b:c5:75:
87:3f:8f:fc:cb:6d:12:f7:79:79:43:1c:d5:f4:79:
26:d3:42:d6:a5:e3:43:47:e4:10:b5:c3:bb:ac:3a:
80:00:81:18:4c:b8:2e:f0:e1:7d:ee:92:0e:c4:2e:
26:2c:64:b5:de:6b:9f:f6:e5:da:84:1f:1a:c8:cd:
c0:ff:e1:d7:d1:ad:cb:ff:87:9e:e7:1a:69:39:17:
a2:85:1e:c6:5e:7d:10:a3:72:ec:46:50:bf:cb:c7:
75:4e:45:36:cc:7e:73:c2:bb:63:4b:eb:a4:52:b0:
1e:73:73:b4:8f:26:1f:fb:fa:40:36:d7:76:3f:ed:
93:d8:53:72:e2:25:30:03:fa:5b:2d:fb:ae:92:df:
d0:9c:bc:25:66:4e:ba:30:74:93:f1:ad:b6:51:43:
bb:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:61:41:2B:B2:72:B6:9D:23:8D:A8:72:BF:29:CA:3E:2B:77:FB:7A
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/YWFBK7Jytp0jjahyvynKPit3-3o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.76.0/24
45.130.125.0/24
193.8.231.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:e9:a8:a6:cb:40:6e:ce:37:09:e0:d1:35:ad:8c:2d:43:f5:
af:04:07:fc:96:65:fa:c8:96:6a:1f:87:39:05:20:2f:51:9d:
a4:e9:34:c3:99:36:2c:fc:51:b7:5a:32:d0:78:8d:2e:75:20:
e4:63:b9:2f:90:97:4f:05:2d:37:84:9e:66:8c:24:79:72:8b:
96:c6:61:9c:b9:aa:50:22:77:71:29:6c:1e:70:a1:f6:30:54:
36:e4:8a:e3:44:b1:5b:87:bc:48:78:dd:db:7e:0e:1e:47:d1:
9a:a8:f7:28:62:82:e2:fc:77:89:ae:9f:4d:b8:3f:5e:65:5d:
1d:45:ba:39:14:1f:63:35:31:3f:bc:e1:f9:3e:38:d4:43:82:
a9:f0:45:ea:cb:d2:00:82:ac:73:dc:f5:b5:02:57:0d:5d:10:
2d:6a:79:26:19:cd:3f:7d:af:e5:0d:48:28:5a:51:cc:88:88:
3c:a4:d0:5e:b4:09:79:d8:07:4b:ab:4a:09:07:86:7e:54:50:
56:fa:4f:0f:72:2f:e8:2f:ed:c8:55:f9:ca:f8:f8:cb:8a:22:
af:51:5a:f0:69:8e:5e:a0:b7:a0:5c:0f:76:c5:96:72:0e:19:
1e:ab:76:a0:66:c5:23:79:b2:46:9c:c7:31:16:4b:fb:13:1a:
96:6b:a8:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:31:47 2025 by rpki-client