Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/wYHxxm7S4v3mxinAyfvv5FANYS8.roa
File: wYHxxm7S4v3mxinAyfvv5FANYS8.roa (raw, json)
Hash identifier: 4FbQjjG6qSRPpFG5pN+Xl7EK8v1ndSDHYtAv1WLzqo8=
Subject key identifier: C1:81:F1:C6:6E:D2:E2:FD:E6:C6:29:C0:C9:FB:EF:E4:50:0D:61:2F
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019A24B4DB37E013DF294D13759639B05499
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/wYHxxm7S4v3mxinAyfvv5FANYS8.roa
Signing time: Mon 27 Oct 2025 08:07:03 +0000
ROA not before: Mon 27 Oct 2025 08:07:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197450
IP address blocks: 45.128.233.0/24 maxlen: 24
185.221.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:b4:db:37:e0:13:df:29:4d:13:75:96:39:b0:54:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 27 08:07:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c181f1c66ed2e2fde6c629c0c9fbefe4500d612f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d1:5b:5b:c7:d4:d6:3d:4b:65:a5:ef:2d:e6:
f7:4c:fa:b1:0f:61:30:a7:b0:a0:67:f9:db:8c:02:
db:4a:22:0a:46:0e:d7:51:ec:26:79:ff:44:f5:19:
0b:23:d7:92:6a:da:e7:15:b9:af:bf:10:7f:98:fe:
2c:a1:18:7c:8a:20:20:5f:85:62:8d:2b:77:cb:7f:
42:41:f6:9d:8c:37:08:ea:74:0c:83:0a:fa:60:dc:
95:47:e3:55:75:12:e1:0d:00:1c:ab:ee:94:09:16:
0b:d4:95:8f:df:68:4b:f9:23:52:e7:65:7b:be:75:
c8:45:f1:43:fb:fc:b9:4d:45:2d:f1:4f:37:96:69:
c0:23:3a:d6:3e:94:3d:4e:24:b7:71:63:aa:c7:69:
af:6c:ca:f5:24:82:1e:04:d2:7e:b5:6b:35:05:ef:
23:a6:cc:08:1d:d1:25:93:3f:f6:a8:33:e6:a9:99:
3c:fb:7f:be:89:8b:d7:06:d5:67:fa:0d:df:c2:07:
d0:44:3b:53:61:80:8c:47:6f:c0:b3:39:6e:c8:3d:
fc:27:c3:d8:8c:3e:39:b2:a3:ed:f5:e5:3b:50:3d:
46:e5:e5:99:d5:31:9c:41:9d:c4:af:c6:88:36:2b:
1e:32:44:b3:f9:c9:1b:4e:e0:81:06:8f:2a:fc:75:
65:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:81:F1:C6:6E:D2:E2:FD:E6:C6:29:C0:C9:FB:EF:E4:50:0D:61:2F
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/wYHxxm7S4v3mxinAyfvv5FANYS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.233.0/24
185.221.64.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:68:13:a2:a7:b3:e6:5f:3f:f2:ea:81:08:e0:4c:a1:95:f6:
a5:3d:b4:4d:c3:ee:15:c0:0e:67:61:88:ee:d5:5e:66:a2:61:
56:de:2b:9f:ba:16:d2:e3:8c:13:40:22:9b:69:ac:98:33:8e:
56:73:37:01:fa:d9:3e:f2:8e:b8:16:af:6f:60:84:bb:c4:df:
ff:0c:95:ba:a6:6e:8c:14:99:0c:5e:15:e4:84:4d:42:d5:c3:
b8:23:67:d1:84:5b:92:9a:49:10:41:8f:af:8b:77:a3:58:27:
a5:ad:a8:f6:8f:4e:94:f3:ca:a9:50:58:6e:2e:a3:5c:b2:b2:
3f:fe:41:e1:07:28:1f:41:b7:80:95:41:10:a9:67:5b:2a:b0:
ae:83:4b:b8:02:bb:62:06:ff:7f:24:c6:95:78:9a:46:88:fb:
2e:a6:95:df:df:8f:21:4f:6d:59:c6:f5:87:35:d5:da:01:42:
38:ab:06:19:58:a7:bc:1e:a1:04:71:fb:ed:60:51:37:2e:a7:
6e:7f:2a:ec:9a:81:a5:cb:9b:03:50:87:77:2a:60:56:3e:e0:
f6:da:ca:d3:96:5f:b2:7c:97:eb:8c:54:96:76:42:58:b7:3e:
b0:11:13:f6:8b:25:92:dd:19:38:2a:19:e2:1b:c0:55:6d:92:
9d:6f:1b:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 13:23:00 2025 by rpki-client