Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/YaXF2_UOTL0a5rPBedbLeK27FfI.roa
File: YaXF2_UOTL0a5rPBedbLeK27FfI.roa (raw, json)
Hash identifier: cO7ZZuKJbU9lC+DFXgCl+Dg10QqzkTTDSRwwBODyAvU=
Subject key identifier: 61:A5:C5:DB:F5:0E:4C:BD:1A:E6:B3:C1:79:D6:CB:78:AD:BB:15:F2
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 019914176FC76A657FE84C32258F83401D63
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/YaXF2_UOTL0a5rPBedbLeK27FfI.roa
Signing time: Thu 04 Sep 2025 09:38:24 +0000
ROA not before: Thu 04 Sep 2025 09:38:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2914
IP address blocks: 176.46.132.0/24 maxlen: 24
176.46.140.0/24 maxlen: 24
176.46.145.0/24 maxlen: 24
176.46.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 11:14:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:14:17:6f:c7:6a:65:7f:e8:4c:32:25:8f:83:40:1d:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Sep 4 09:38:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=61a5c5dbf50e4cbd1ae6b3c179d6cb78adbb15f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:61:17:de:fb:ea:99:76:1c:1b:30:db:53:ff:
aa:c8:0e:a8:9d:c6:63:87:18:c4:23:ce:85:0b:9d:
74:ee:cb:a0:c7:fa:14:be:5a:42:13:bb:c9:79:e4:
b7:d5:49:18:d8:ff:da:13:7c:44:11:d1:0a:db:c1:
31:b9:93:2a:bd:e2:a4:96:f1:9e:89:57:1b:89:60:
38:f0:2e:d9:f1:ca:fc:e4:21:4c:64:be:02:f4:cf:
b1:98:4f:6f:7f:89:e2:71:b6:df:1f:6c:12:40:ce:
d4:9f:51:07:38:34:b7:5a:59:d2:f1:4a:1f:ea:3c:
c7:30:ad:45:fc:3c:a9:42:eb:42:35:09:d6:a0:be:
7c:33:db:04:c4:2c:7d:97:b3:45:92:c9:bf:8a:29:
23:b6:39:dc:80:26:bb:3f:2a:10:02:00:f6:5c:b4:
1b:fa:5c:0b:04:9b:b4:6e:fe:8c:44:da:0a:47:d9:
88:fd:2c:c0:50:61:c6:16:5a:73:79:e5:c3:c0:6b:
1e:3d:2c:a7:d5:e4:07:ec:5f:1c:6a:91:93:f9:1d:
f5:d2:70:47:15:35:a1:f8:ad:79:1e:0e:0c:1f:28:
fc:27:1b:4c:07:8b:ff:fa:26:e6:82:d3:00:bb:02:
dd:33:9e:76:b6:84:a9:a5:31:6d:2e:21:af:bf:8f:
78:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:A5:C5:DB:F5:0E:4C:BD:1A:E6:B3:C1:79:D6:CB:78:AD:BB:15:F2
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/YaXF2_UOTL0a5rPBedbLeK27FfI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.46.132.0/24
176.46.140.0/24
176.46.145.0/24
176.46.151.0/24
Signature Algorithm: sha256WithRSAEncryption
38:b7:a0:56:34:42:02:28:9f:da:ca:1d:ba:98:54:fd:7b:f6:
af:2b:61:9b:fb:be:32:0f:fb:29:e3:f9:78:e9:db:d4:22:56:
8b:d3:c7:e5:d4:5c:5b:07:e5:b8:83:3f:b8:f6:82:17:c0:63:
60:ea:d8:d9:ec:83:0b:32:81:2b:b9:77:3f:b0:3b:52:69:ec:
74:00:39:c7:a4:05:d3:0b:ea:77:a6:7e:a7:41:b8:57:4e:12:
7b:2a:0c:d3:44:38:5c:d2:a7:2a:28:5b:a2:d8:8e:f7:34:2e:
48:cf:6f:ac:51:6b:ef:ba:74:e2:8a:95:10:e4:e1:c9:9b:7e:
90:61:c6:68:3d:1d:d0:77:51:0d:e9:9d:e9:48:02:95:22:d5:
15:6f:6e:61:ec:8a:a8:8a:6a:0f:7d:25:fa:90:97:a3:8a:93:
4a:ca:46:38:9a:85:6c:94:b1:3f:85:5c:88:ed:39:63:3d:4c:
b1:e6:cf:09:6c:75:9c:38:f4:76:e8:ea:b6:03:2f:9c:84:b5:
a4:b4:bd:21:90:f9:93:51:5d:d1:c7:3b:19:c0:32:a7:88:25:
e4:3b:09:34:e6:9e:95:13:8d:4a:db:ba:2a:dd:16:f9:3a:1a:
0f:0b:a3:f2:3d:9b:f6:05:e5:5f:db:b5:b0:cf:2f:87:0e:e2:
da:12:61:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 20:46:17 2025 by rpki-client