Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/y9rvtnyXZQSaHcISGufCbgd9oMg.roa
File: y9rvtnyXZQSaHcISGufCbgd9oMg.roa (raw, json)
Hash identifier: YtKgQZ+a37E4WaxSPAYmpHW8Z8QKRoCD8fhZcaauCRA=
Subject key identifier: CB:DA:EF:B6:7C:97:65:04:9A:1D:C2:12:1A:E7:C2:6E:07:7D:A0:C8
Certificate issuer: /CN=234b54b119a7b3eff153085b7315507cd8513a0f
Certificate serial: 0196F7596C616F5ADF3F4A4844B08C4B5F09
Authority key identifier: 23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/y9rvtnyXZQSaHcISGufCbgd9oMg.roa
Signing time: Thu 22 May 2025 09:35:54 +0000
ROA not before: Thu 22 May 2025 09:35:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 135402
IP address blocks: 45.87.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f7:59:6c:61:6f:5a:df:3f:4a:48:44:b0:8c:4b:5f:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=234b54b119a7b3eff153085b7315507cd8513a0f
Validity
Not Before: May 22 09:35:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cbdaefb67c9765049a1dc2121ae7c26e077da0c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d2:84:04:92:84:fc:a2:88:dd:e6:80:db:35:
45:e1:eb:de:75:1f:2c:bc:3e:9b:0f:ad:72:0c:68:
86:29:8a:fb:f0:95:0a:93:f9:da:07:10:8a:7f:70:
98:e4:09:e6:a8:de:c1:90:aa:d9:16:2e:f9:b8:e2:
08:c0:53:c9:2b:eb:8c:7d:ad:74:2c:f6:49:8d:09:
e8:ab:b6:64:93:79:2f:92:06:e1:08:6e:08:b6:c1:
fb:a4:e1:70:ac:5f:9f:fd:c3:0b:a2:77:55:26:e6:
c3:16:52:85:62:e2:d3:02:55:33:20:43:66:89:dd:
7f:bb:ae:0e:2a:f1:ab:0a:14:ad:d7:69:4a:59:7f:
58:43:ad:67:0f:9c:d3:99:82:ac:ac:6d:a9:7c:e7:
b8:dc:b9:8b:43:f1:f5:b3:0b:40:d5:c5:8c:ad:39:
1a:89:88:92:7e:ce:40:77:8d:a2:eb:fb:2f:56:32:
e2:c3:81:90:79:98:1e:63:35:93:af:7b:5d:49:ac:
d7:1e:67:be:78:95:f7:f8:08:e9:8c:6d:e3:cd:16:
20:48:64:91:e5:2b:bc:77:81:c6:a1:7a:21:67:85:
16:04:21:63:3e:da:47:82:11:69:59:ca:0e:cf:8a:
b6:73:24:73:e7:32:aa:4c:76:61:83:9d:36:bb:cf:
71:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:DA:EF:B6:7C:97:65:04:9A:1D:C2:12:1A:E7:C2:6E:07:7D:A0:C8
X509v3 Authority Key Identifier:
keyid:23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/y9rvtnyXZQSaHcISGufCbgd9oMg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.163.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:44:ef:f0:01:02:7c:39:35:02:71:a6:e2:9d:b7:cd:5c:76:
72:00:6a:db:cf:82:cc:b1:30:98:4a:ca:da:88:8c:dc:a8:66:
bb:29:5a:1b:70:8d:7a:98:3b:7d:ee:d2:63:a2:39:49:2d:e6:
6d:d2:2f:12:a9:0c:d2:cf:1b:99:ed:03:93:ff:e1:98:b0:ee:
9a:94:20:62:46:a4:e4:ff:1c:84:15:c0:77:29:1f:1e:30:f3:
c3:68:c2:53:ce:06:cc:cd:b9:bc:6a:00:58:fa:cc:a4:6d:e8:
a3:46:a6:cf:2d:46:0d:07:87:74:02:62:e5:3d:22:7c:89:a1:
ca:50:9c:de:72:ef:11:08:f5:fd:c9:ed:60:5a:f2:6b:97:16:
91:0f:84:bc:61:67:03:f0:32:85:23:af:15:84:cb:2b:b5:4f:
0b:09:b4:9f:2a:33:66:24:75:f8:69:6c:19:89:d3:71:aa:51:
9b:5f:03:95:91:8e:bb:54:c4:13:72:8c:a9:71:9e:1d:82:07:
39:65:4f:40:9b:23:7c:7c:f0:d0:13:cb:bf:c8:75:32:71:34:
f6:0a:35:db:83:2b:8c:3d:57:67:74:56:d7:6d:00:6e:72:e9:
0f:17:89:7a:70:c7:69:c4:53:f4:50:18:72:e9:8e:31:10:55:
30:b9:c4:bc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZb3WWxhb1rfP0pIRLCMS18JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzNGI1NGIxMTlhN2IzZWZmMTUzMDg1YjczMTU1MDdjZDg1
MTNhMGYwHhcNMjUwNTIyMDkzNTU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYmRhZWZiNjdjOTc2NTA0OWExZGMyMTIxYWU3YzI2ZTA3N2RhMGM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNKEBJKE/KKI3eaA2zVF4evedR8s
vD6bD61yDGiGKYr78JUKk/naBxCKf3CY5AnmqN7BkKrZFi75uOIIwFPJK+uMfa10
LPZJjQnoq7Zkk3kvkgbhCG4ItsH7pOFwrF+f/cMLondVJubDFlKFYuLTAlUzIENm
id1/u64OKvGrChSt12lKWX9YQ61nD5zTmYKsrG2pfOe43LmLQ/H1swtA1cWMrTka
iYiSfs5Ad42i6/svVjLiw4GQeZgeYzWTr3tdSazXHme+eJX3+AjpjG3jzRYgSGSR
5Su8d4HGoXohZ4UWBCFjPtpHghFpWcoOz4q2cyRz5zKqTHZhg502u89xVQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMva77Z8l2UEmh3CEhrnwm4HfaDIMB8GA1UdIwQY
MBaAFCNLVLEZp7Pv8VMIW3MVUHzYUToPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTB0VXNSbW5zLV94VXdoYmN4VlFmTmhST2c4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9iYzcwNzgtMWVlNC00MmYxLWJjMzQt
MWQyMWQxYmNlM2ZlLzEveTlydnRueVhaUVNhSGNJU0d1ZkNiZ2Q5b01nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9iYzcwNzgtMWVlNC00MmYxLWJjMzQtMWQyMWQxYmNlM2Zl
LzEvSTB0VXNSbW5zLV94VXdoYmN4VlFmTmhST2c4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVejMA0G
CSqGSIb3DQEBCwUAA4IBAQAqRO/wAQJ8OTUCcabinbfNXHZyAGrbz4LMsTCYSsra
iIzcqGa7KVobcI16mDt97tJjojlJLeZt0i8SqQzSzxuZ7QOT/+GYsO6alCBiRqTk
/xyEFcB3KR8eMPPDaMJTzgbMzbm8agBY+sykbeijRqbPLUYNB4d0AmLlPSJ8iaHK
UJzecu8RCPX9ye1gWvJrlxaRD4S8YWcD8DKFI68VhMsrtU8LCbSfKjNmJHX4aWwZ
idNxqlGbXwOVkY67VMQTcoypcZ4dggc5ZU9AmyN8fPDQE8u/yHUycTT2CjXbgyuM
PVdndFbXbQBucukPF4l6cMdpxFP0UBhy6Y4xEFUwucS8
-----END CERTIFICATE-----
Generated at Fri Jun 6 13:29:33 2025 by rpki-client