Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/YDunI5FinLdkmL6kbL4sn70t1mM.roa
File: YDunI5FinLdkmL6kbL4sn70t1mM.roa (raw, json)
Hash identifier: I6AA+Ij7Ypxf1FcJt+bTsc41ghBVr1iNUkCNk4yKf5Q=
Subject key identifier: 60:3B:A7:23:91:62:9C:B7:64:98:BE:A4:6C:BE:2C:9F:BD:2D:D6:63
Certificate issuer: /CN=771c7897c0ee3b269a67d2e1d64e3fd1c15a1d5f
Certificate serial: 019F2368929462352933FAB58A487F9B26F5
Authority key identifier: 77:1C:78:97:C0:EE:3B:26:9A:67:D2:E1:D6:4E:3F:D1:C1:5A:1D:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dxx4l8DuOyaaZ9Lh1k4_0cFaHV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/YDunI5FinLdkmL6kbL4sn70t1mM.roa
Signing time: Thu 02 Jul 2026 15:18:03 +0000
ROA not before: Thu 02 Jul 2026 15:18:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215224
IP address blocks: 45.8.178.0/24 maxlen: 24
45.12.32.0/24 maxlen: 24
45.12.33.0/24 maxlen: 24
45.142.0.0/24 maxlen: 24
45.142.3.0/24 maxlen: 24
45.148.147.0/24 maxlen: 24
185.224.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/dxx4l8DuOyaaZ9Lh1k4_0cFaHV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/dxx4l8DuOyaaZ9Lh1k4_0cFaHV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dxx4l8DuOyaaZ9Lh1k4_0cFaHV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:92:94:62:35:29:33:fa:b5:8a:48:7f:9b:26:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=771c7897c0ee3b269a67d2e1d64e3fd1c15a1d5f
Validity
Not Before: Jul 2 15:18:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=603ba72391629cb76498bea46cbe2c9fbd2dd663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:41:c3:c6:6c:b5:c1:f8:43:39:ba:2d:8c:6d:
bf:a9:cf:dc:51:60:f8:94:8c:6f:5c:9b:59:a5:bf:
f8:cb:9a:fd:d3:29:43:7e:c6:44:6a:16:bf:e3:2e:
d4:af:96:5a:18:4e:1e:f9:64:f4:03:0f:14:5b:5c:
27:df:71:40:03:ad:48:52:54:d0:09:5a:89:fa:9e:
60:44:a3:82:80:06:66:59:be:0a:a4:52:5d:35:19:
e1:95:2a:c4:a5:b0:3f:ae:20:69:3e:e8:4e:49:79:
84:f1:7f:93:a3:d9:f3:fb:4f:73:c4:d2:ed:15:96:
d6:20:2b:2d:57:b0:70:1d:86:74:11:d4:d6:c8:a3:
54:33:72:22:fc:59:e9:15:85:9f:52:8d:d6:c2:29:
af:80:7c:f2:04:7c:5b:20:04:b4:d0:7c:03:74:f2:
1c:02:c5:cc:de:17:9d:c9:17:b8:80:e2:96:c4:c3:
5f:16:ae:bf:f9:5c:64:66:b0:56:70:ad:f6:9b:70:
65:4b:4b:3d:c0:26:9d:80:a9:e7:d9:a0:9e:63:c8:
57:ee:fc:6e:a5:4b:6a:44:7d:8b:e5:e6:27:c8:c2:
db:79:e4:66:4e:39:49:f5:53:ff:c4:d5:84:93:4c:
f5:06:11:1e:06:19:a9:59:4b:01:98:42:ca:86:02:
55:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:3B:A7:23:91:62:9C:B7:64:98:BE:A4:6C:BE:2C:9F:BD:2D:D6:63
X509v3 Authority Key Identifier:
keyid:77:1C:78:97:C0:EE:3B:26:9A:67:D2:E1:D6:4E:3F:D1:C1:5A:1D:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dxx4l8DuOyaaZ9Lh1k4_0cFaHV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/YDunI5FinLdkmL6kbL4sn70t1mM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/dxx4l8DuOyaaZ9Lh1k4_0cFaHV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.178.0/24
45.12.32.0/23
45.142.0.0/24
45.142.3.0/24
45.148.147.0/24
185.224.217.0/24
Signature Algorithm: sha256WithRSAEncryption
94:9f:a2:93:d6:09:c8:55:a4:82:ba:97:c2:53:f8:bc:2e:43:
ab:cb:60:5d:6f:6d:b6:62:4c:d1:dc:23:ea:b8:d1:df:24:a4:
af:7b:17:48:b5:4d:c8:bd:b7:9b:61:c7:a2:ac:84:5d:73:45:
e7:7a:9b:f5:ac:9b:2c:c3:7e:44:e5:49:3d:3f:61:10:f6:69:
0e:49:38:b7:94:50:3b:c6:09:e6:07:d8:a8:cc:4d:d1:ca:7d:
38:60:92:7d:db:b5:8b:87:1f:d2:8c:4d:6a:fb:77:18:dd:95:
45:9a:b1:11:93:22:ad:b1:2c:57:f2:99:be:25:19:32:c6:16:
77:d2:46:16:88:12:57:a2:0f:e7:2d:b0:d2:5d:41:e7:59:10:
c7:61:93:e3:71:35:cc:39:7d:05:65:d3:63:dc:86:ed:a5:e0:
f8:74:b1:0a:4a:57:6a:d7:85:4c:8d:a6:22:02:1c:bc:39:27:
3d:22:82:4a:68:92:d4:b1:6b:b2:fa:e9:1a:ab:ae:d2:ec:7f:
89:24:4e:06:38:5e:f9:d2:c4:3f:1d:68:2d:7b:76:2b:f3:ab:
3d:75:3d:35:ad:84:fe:a0:27:e1:08:0f:2d:8f:6b:df:c3:f0:
a1:2c:d8:a0:4c:5c:c6:12:8f:ee:b6:6e:55:f8:42:c9:dd:e8:
c7:fe:3b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:34:55 2026 by rpki-client