Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/y3py8_KdR5szTCwNnRNNAmSQtvY.roa
File: y3py8_KdR5szTCwNnRNNAmSQtvY.roa (raw, json)
Hash identifier: +cv+uistxcq+Q/hhXmk+IkG5TAaaXh44QKjmgbuLZlE=
Subject key identifier: CB:7A:72:F3:F2:9D:47:9B:33:4C:2C:0D:9D:13:4D:02:64:90:B6:F6
Certificate issuer: /CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Certificate serial: 0197DE1F4C68F66258FDF61A4FE6D1264A82
Authority key identifier: F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/y3py8_KdR5szTCwNnRNNAmSQtvY.roa
Signing time: Sun 06 Jul 2025 05:04:42 +0000
ROA not before: Sun 06 Jul 2025 05:04:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205614
IP address blocks: 46.175.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.mft
rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 14:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:de:1f:4c:68:f6:62:58:fd:f6:1a:4f:e6:d1:26:4a:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Validity
Not Before: Jul 6 05:04:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cb7a72f3f29d479b334c2c0d9d134d026490b6f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ed:1c:f2:31:a5:84:70:bd:00:27:ce:a4:98:
d0:ef:db:e9:e5:62:41:79:37:30:0d:03:89:61:81:
60:80:0f:fd:07:b4:c5:2a:f9:b3:9f:6d:ff:2a:e2:
84:94:10:fd:ff:1f:d6:6b:c8:f8:f8:d5:97:cf:26:
ad:9c:5d:ff:66:25:60:de:33:a7:e5:29:8c:c4:18:
0f:91:54:48:23:17:da:14:04:f7:33:dc:aa:8c:a2:
9f:fa:0e:4c:dd:de:3b:cb:4f:6c:c3:82:a8:e3:0c:
46:ea:a1:9f:ae:26:6a:0f:49:7a:cc:2c:5a:f6:a8:
9a:7d:d2:19:4a:3c:31:bd:76:67:3d:33:e2:b5:34:
c8:9e:2c:d3:2b:14:7a:04:b2:63:4d:c5:d6:ea:24:
16:61:f1:6a:db:50:f5:76:61:86:ab:b7:56:61:f9:
aa:6d:a8:6d:b7:21:4b:14:ba:73:9f:24:9f:29:f9:
5c:20:f5:4e:43:f0:fc:f0:f9:1f:b3:6d:e8:25:40:
77:7b:0c:df:d5:09:92:49:91:dc:fb:40:e1:21:52:
4b:9a:b2:9d:c2:51:2c:5a:fa:b5:6f:e1:2c:f3:7a:
f3:ea:6a:9c:12:93:6f:2a:46:a7:6a:4c:6f:7f:26:
23:63:fe:b3:0a:b3:e0:71:ac:9d:b0:49:50:9f:53:
d3:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:7A:72:F3:F2:9D:47:9B:33:4C:2C:0D:9D:13:4D:02:64:90:B6:F6
X509v3 Authority Key Identifier:
keyid:F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/y3py8_KdR5szTCwNnRNNAmSQtvY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.175.130.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:e3:3d:d8:b3:f2:54:37:53:fe:5d:61:0d:79:c7:51:41:3a:
08:11:7f:44:8c:f1:63:9e:30:b1:48:f7:c1:ac:ce:d5:65:19:
d7:aa:67:20:f9:9c:72:63:5d:02:60:f8:dc:48:57:1e:e7:87:
5f:77:a0:b2:11:56:17:c9:74:74:02:79:39:12:49:28:09:02:
4b:86:2e:ce:ac:1a:d2:18:5c:a2:f3:bb:99:1e:ee:69:1c:ca:
c9:0f:c7:e7:a3:88:87:96:0b:b1:da:2c:32:5a:d8:fd:33:e9:
7e:93:28:54:26:40:3c:17:5c:13:c7:ad:52:b5:fe:b7:ac:85:
5b:37:5b:d0:3d:03:4d:ce:04:e5:61:1b:59:1e:97:d0:06:ca:
ef:7f:a3:de:0c:09:57:11:c9:4d:17:ba:e1:f4:11:e5:80:6f:
4c:6c:81:26:f8:04:2d:61:79:d5:b1:ea:08:96:bb:f2:83:76:
25:99:20:1f:da:95:9a:e9:0a:1f:11:01:13:1f:55:64:fa:05:
4d:96:9f:67:14:04:60:6d:b4:f8:60:51:01:19:a7:20:8e:3f:
3d:40:4a:1e:52:f8:bd:50:17:f0:f7:33:bb:f6:f0:c3:3d:1c:
db:6a:40:99:6f:8d:d6:41:48:15:32:b1:db:97:06:6d:f1:d0:
33:ad:a2:5d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZfeH0xo9mJY/fYaT+bRJkqCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwNGViMjA0ZjM1ODAwNDc4ODIyNGUyZmIxOGU0ZDVlNzRi
ZWJmOGQwHhcNMjUwNzA2MDUwNDQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYjdhNzJmM2YyOWQ0NzliMzM0YzJjMGQ5ZDEzNGQwMjY0OTBiNmY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwO0c8jGlhHC9ACfOpJjQ79vp5WJB
eTcwDQOJYYFggA/9B7TFKvmzn23/KuKElBD9/x/Wa8j4+NWXzyatnF3/ZiVg3jOn
5SmMxBgPkVRIIxfaFAT3M9yqjKKf+g5M3d47y09sw4Ko4wxG6qGfriZqD0l6zCxa
9qiafdIZSjwxvXZnPTPitTTInizTKxR6BLJjTcXW6iQWYfFq21D1dmGGq7dWYfmq
bahttyFLFLpznySfKflcIPVOQ/D88Pkfs23oJUB3ewzf1QmSSZHc+0DhIVJLmrKd
wlEsWvq1b+Es83rz6mqcEpNvKkanakxvfyYjY/6zCrPgcaydsElQn1PTYQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMt6cvPynUebM0wsDZ0TTQJkkLb2MB8GA1UdIwQY
MBaAFPBOsgTzWABHiCJOL7GOTV50vr+NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEU2eUJQTllBRWVJSWs0dnNZNU5YblMtdjQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS85YWI0MmEtZGY5Mi00ZTQyLTllMzMt
NWM1ODkyYWZhNDg3LzEveTNweThfS2RSNXN6VEN3Tm5STk5BbVNRdHZZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS85YWI0MmEtZGY5Mi00ZTQyLTllMzMtNWM1ODkyYWZhNDg3
LzEvOEU2eUJQTllBRWVJSWs0dnNZNU5YblMtdjQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALq+CMA0G
CSqGSIb3DQEBCwUAA4IBAQAa4z3Ys/JUN1P+XWENecdRQToIEX9EjPFjnjCxSPfB
rM7VZRnXqmcg+ZxyY10CYPjcSFce54dfd6CyEVYXyXR0Ank5EkkoCQJLhi7OrBrS
GFyi87uZHu5pHMrJD8fno4iHlgux2iwyWtj9M+l+kyhUJkA8F1wTx61Stf63rIVb
N1vQPQNNzgTlYRtZHpfQBsrvf6PeDAlXEclNF7rh9BHlgG9MbIEm+AQtYXnVseoI
lrvyg3YlmSAf2pWa6QofEQETH1Vk+gVNlp9nFARgbbT4YFEBGacgjj89QEoeUvi9
UBfw9zO79vDDPRzbakCZb43WQUgVMrHblwZt8dAzraJd
-----END CERTIFICATE-----
Generated at Wed Jul 23 18:12:41 2025 by rpki-client