Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/V7RyU_NINstU1A0fLuHZmTjTrkg.roa
File: V7RyU_NINstU1A0fLuHZmTjTrkg.roa (raw, json)
Hash identifier: KsrGZfPAoWelxKFe8J0Y3TRePeGni4oKwPisnmV/LNA=
Subject key identifier: 57:B4:72:53:F3:48:36:CB:54:D4:0D:1F:2E:E1:D9:99:38:D3:AE:48
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01992FF09FFB627FCACC47136DE62D0ECC64
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/V7RyU_NINstU1A0fLuHZmTjTrkg.roa
Signing time: Tue 09 Sep 2025 19:25:22 +0000
ROA not before: Tue 09 Sep 2025 19:25:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209693
IP address blocks: 45.88.88.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
87.121.86.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
176.125.254.0/24 maxlen: 24
185.252.177.0/24 maxlen: 24
194.48.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Sep 2025 17:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2f:f0:9f:fb:62:7f:ca:cc:47:13:6d:e6:2d:0e:cc:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 9 19:25:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=57b47253f34836cb54d40d1f2ee1d99938d3ae48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:39:8a:3f:2c:de:de:aa:61:f7:9a:54:6f:66:
79:83:41:dd:c7:aa:2d:89:19:a5:5e:b0:12:d5:72:
d8:58:78:f6:ec:09:5c:90:5e:57:d3:3d:42:3f:64:
9e:ea:c1:50:00:17:12:ea:7c:9b:02:38:47:18:93:
0c:e7:70:c7:7c:1b:1b:c0:6b:8b:d9:f3:0b:43:0b:
b5:6e:24:cc:98:7b:72:53:b9:2c:1a:7f:a6:b7:ad:
ba:72:f9:68:98:5e:78:4f:84:b7:db:d9:83:11:cf:
2f:a5:ff:4d:82:02:67:b2:0d:92:7f:f7:87:0b:4e:
fe:72:db:64:48:59:c5:33:53:0f:a7:fd:d4:9f:b5:
89:c3:26:79:dc:f5:8d:47:d6:9d:3e:4f:72:bf:fd:
f6:c7:fb:0d:45:7f:8b:3b:cc:36:c8:89:97:91:4f:
19:b7:1f:c8:e7:34:43:69:20:98:72:ef:57:a0:1f:
bc:19:60:b5:6b:13:49:b0:c7:4d:d8:3e:22:8a:cb:
db:e9:cd:40:c1:2f:05:67:17:99:8f:11:17:74:b6:
c6:31:1f:d0:d5:b6:c5:02:49:65:f3:17:fc:5c:c1:
58:28:4d:98:d4:46:0d:e8:91:d4:b4:2f:45:b7:4b:
8d:2e:d3:da:9e:4c:74:0d:d2:e3:5e:bd:63:a0:31:
f0:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:B4:72:53:F3:48:36:CB:54:D4:0D:1F:2E:E1:D9:99:38:D3:AE:48
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/V7RyU_NINstU1A0fLuHZmTjTrkg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.88.0/24
83.219.97.0/24
87.121.86.0/24
87.121.221.0/24
176.125.254.0/24
185.252.177.0/24
194.48.250.0/24
Signature Algorithm: sha256WithRSAEncryption
39:82:66:eb:81:e0:ef:0a:af:ea:18:f3:21:74:57:95:2b:09:
ac:50:16:f5:e3:33:09:77:e7:24:cb:0b:d3:46:04:b5:37:98:
ff:67:4f:cc:ac:ce:7b:fb:a9:20:d8:69:50:ba:c6:e8:9d:c1:
f0:88:99:b6:03:43:08:5b:19:67:60:da:5d:21:5c:8e:c0:dd:
de:94:c8:51:aa:af:99:98:9a:e2:ae:1c:b7:18:3b:3d:89:4f:
38:ec:3c:42:2a:07:aa:7f:b4:2f:87:de:76:77:e2:b0:1d:f3:
49:a9:e4:bf:25:e3:79:ac:73:a6:99:bc:d2:81:f3:c1:72:ab:
b2:33:00:20:ca:10:02:cd:a4:92:03:6a:bb:af:c8:94:d2:c7:
30:bd:7e:ba:b9:bd:75:51:44:48:1f:95:36:2e:9f:df:ce:35:
08:35:bf:eb:89:15:9e:84:81:53:2a:fb:2d:7b:0d:7e:31:00:
30:6d:59:bf:ea:19:33:f4:3d:f1:46:47:1a:32:72:b4:02:5a:
d6:bf:1f:13:8c:9f:44:6a:2a:75:1e:db:38:87:ee:f0:ba:89:
38:06:56:fa:c1:6c:ad:38:11:ac:ae:5e:0c:11:fd:70:c5:88:
a7:c5:e7:27:7b:d8:3d:f0:76:24:24:90:ce:80:56:8a:ae:9f:
b9:15:fe:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 01:35:46 2025 by rpki-client