Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/ysIsaLM09cg2MhKfd83ZPzLp9n4.roa
File: ysIsaLM09cg2MhKfd83ZPzLp9n4.roa (raw, json)
Hash identifier: Bh4BJiariQCaXX5PXErLYBqRPl/Hwd8mcol52yoHkJc=
Subject key identifier: CA:C2:2C:68:B3:34:F5:C8:36:32:12:9F:77:CD:D9:3F:32:E9:F6:7E
Certificate issuer: /CN=e48da335b072536d58e6b7cdf4cdb16445bcbc33
Certificate serial: 0197D6EC578FBCFD4153794E53F18A012A09
Authority key identifier: E4:8D:A3:35:B0:72:53:6D:58:E6:B7:CD:F4:CD:B1:64:45:BC:BC:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5I2jNbByU21Y5rfN9M2xZEW8vDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/ysIsaLM09cg2MhKfd83ZPzLp9n4.roa
Signing time: Fri 04 Jul 2025 19:31:42 +0000
ROA not before: Fri 04 Jul 2025 19:31:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197107
IP address blocks: 178.20.192.0/24 maxlen: 24
178.20.193.0/24 maxlen: 24
178.20.194.0/24 maxlen: 24
178.20.195.0/24 maxlen: 24
178.20.196.0/24 maxlen: 24
178.20.197.0/24 maxlen: 24
178.20.198.0/24 maxlen: 24
178.20.199.0/24 maxlen: 24
185.58.88.0/24 maxlen: 24
185.58.89.0/24 maxlen: 24
185.58.90.0/24 maxlen: 24
185.58.91.0/24 maxlen: 24
195.225.64.0/24 maxlen: 24
195.225.65.0/24 maxlen: 24
195.225.66.0/24 maxlen: 24
195.225.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/5I2jNbByU21Y5rfN9M2xZEW8vDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/5I2jNbByU21Y5rfN9M2xZEW8vDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5I2jNbByU21Y5rfN9M2xZEW8vDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d6:ec:57:8f:bc:fd:41:53:79:4e:53:f1:8a:01:2a:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e48da335b072536d58e6b7cdf4cdb16445bcbc33
Validity
Not Before: Jul 4 19:31:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cac22c68b334f5c83632129f77cdd93f32e9f67e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f5:23:f1:f6:7a:33:bc:18:77:8b:52:69:c8:
5b:fd:53:9d:0d:50:dc:9a:83:1f:91:74:74:19:a1:
73:a8:d2:e8:96:f4:27:2c:9d:61:ca:22:21:db:db:
86:a9:fe:36:8f:ed:71:7e:4c:0a:99:8e:ae:31:2d:
84:40:11:30:9c:e9:bb:a6:05:63:75:b6:d4:c7:bd:
69:8c:67:24:d6:0a:60:62:68:ce:ba:90:98:e5:2b:
f2:96:ce:ab:e9:a3:1b:e0:61:96:87:a2:3f:5b:6b:
b7:1e:e7:04:07:ee:57:f8:20:30:cf:a9:39:cf:78:
b7:cf:cf:57:70:4f:1b:aa:73:93:4b:4d:70:65:87:
3b:f1:32:e7:ad:27:76:09:b5:b2:37:73:30:21:8d:
99:d5:79:8f:4b:bd:1e:25:2c:13:00:3f:18:04:ff:
da:eb:71:ed:7c:ae:56:00:ad:55:41:54:e0:3b:7b:
bd:91:4a:cf:41:43:3e:15:15:80:f1:5e:0c:1d:ce:
46:4d:c5:2e:b2:49:ce:53:60:2d:cd:be:19:3e:1a:
e7:f3:23:f8:a1:41:48:7c:7a:6b:23:09:f5:dc:69:
d8:a9:ed:e9:a5:82:81:35:bc:61:0c:0a:57:a9:89:
5e:a4:c0:b1:4e:64:73:76:6d:74:fc:18:63:8b:0d:
71:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:C2:2C:68:B3:34:F5:C8:36:32:12:9F:77:CD:D9:3F:32:E9:F6:7E
X509v3 Authority Key Identifier:
keyid:E4:8D:A3:35:B0:72:53:6D:58:E6:B7:CD:F4:CD:B1:64:45:BC:BC:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5I2jNbByU21Y5rfN9M2xZEW8vDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/ysIsaLM09cg2MhKfd83ZPzLp9n4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/5I2jNbByU21Y5rfN9M2xZEW8vDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.20.192.0/21
185.58.88.0/22
195.225.64.0/22
Signature Algorithm: sha256WithRSAEncryption
4b:1d:e4:4f:6a:6d:a6:5a:78:aa:fa:41:3c:41:76:de:52:fc:
ce:10:71:12:fa:73:d5:76:74:ff:6e:68:b5:3f:83:b9:51:2a:
a8:eb:c5:e1:56:9f:e1:92:cb:95:89:c1:8e:3b:05:14:9a:3b:
b5:c2:b9:69:25:0c:7e:60:e3:44:43:e6:a5:20:7e:72:e8:2f:
ce:75:e4:32:d9:56:3d:1d:14:43:17:8f:75:ed:ba:58:2c:ce:
f0:f5:b0:b5:13:11:ad:ec:32:00:2d:df:d0:74:41:2d:46:83:
47:6b:17:6a:44:b8:f9:54:0a:f6:11:9b:eb:2a:5a:8a:4a:5e:
96:44:eb:19:ff:d1:6b:29:19:43:1f:ed:b9:33:37:5e:30:0f:
e6:08:86:74:2e:eb:e8:22:dc:0c:ed:e0:cd:dc:e3:c1:d5:03:
82:ad:d3:12:f4:aa:08:85:9c:40:e0:c8:08:f1:08:14:a6:7f:
81:eb:3b:66:da:ae:59:3c:fd:a2:e1:45:d3:13:3f:9d:98:df:
b4:ae:25:4b:9e:d6:aa:5e:fb:99:36:82:70:eb:ca:f3:cf:e3:
1e:38:97:16:78:62:38:c6:4a:13:50:b0:e7:6e:3c:b9:cf:e4:
ac:ee:39:b4:98:da:b4:cc:ef:48:a1:59:32:fa:fe:e9:df:00:
88:ae:7b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:58:25 2025 by rpki-client