Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/pyktrmc72WV1qefgTAjFzkgE3fA.roa
File: pyktrmc72WV1qefgTAjFzkgE3fA.roa (raw, json)
Hash identifier: ktN8+rEqEpkifmsRSk+dPRW6X182gdxgcrxV9l7L7ic=
Subject key identifier: A7:29:2D:AE:67:3B:D9:65:75:A9:E7:E0:4C:08:C5:CE:48:04:DD:F0
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 01991047A3E42F7D6A9A9B7971E1ADAEBA72
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/pyktrmc72WV1qefgTAjFzkgE3fA.roa
Signing time: Wed 03 Sep 2025 15:52:34 +0000
ROA not before: Wed 03 Sep 2025 15:52:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 54103
IP address blocks: 185.51.48.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 17:17:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:10:47:a3:e4:2f:7d:6a:9a:9b:79:71:e1:ad:ae:ba:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Sep 3 15:52:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a7292dae673bd96575a9e7e04c08c5ce4804ddf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c0:fe:07:03:89:65:06:bc:b2:da:7d:e1:be:
57:e9:94:68:84:67:65:84:3c:3f:d7:cc:ce:f6:10:
44:9c:81:4b:a1:7c:36:86:fe:ec:ea:6d:21:55:4d:
ae:22:ea:4a:36:b4:0a:6c:72:9c:21:21:11:26:d4:
93:2c:26:9b:01:d3:19:76:14:cc:d3:4d:2d:d5:b0:
55:4b:12:2b:50:8e:c7:03:08:08:82:d8:2d:73:57:
f7:ca:a1:5e:86:48:5b:1b:8a:a0:c6:38:8f:3a:12:
d1:3d:59:22:7b:d8:f7:a8:ed:87:aa:88:96:41:eb:
ed:13:16:da:79:84:9a:76:5c:d8:0c:da:19:af:65:
4c:a2:b0:f8:24:f0:5d:45:34:c5:6a:3e:89:b2:02:
c4:b1:be:21:09:81:3b:3b:02:ac:bd:a6:f2:c4:a6:
48:a6:5b:74:55:04:7f:1e:44:a7:96:3a:b4:c3:8d:
7d:b4:a0:a1:7e:22:4e:0f:d8:3c:5a:d4:f3:d5:6d:
5a:c8:66:d3:2c:26:6f:54:66:06:37:01:41:aa:b1:
80:d4:ba:fa:a9:8e:31:19:00:4b:2b:e1:6c:64:a9:
35:53:85:42:6e:af:2a:f5:83:81:ad:20:de:5e:e7:
76:65:6e:f3:7a:02:fa:14:d1:fd:ec:ac:68:79:8a:
15:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:29:2D:AE:67:3B:D9:65:75:A9:E7:E0:4C:08:C5:CE:48:04:DD:F0
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/pyktrmc72WV1qefgTAjFzkgE3fA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.51.48.0/22
Signature Algorithm: sha256WithRSAEncryption
87:12:b8:d9:e4:f7:a8:12:43:04:c2:f1:73:46:81:44:ca:24:
57:00:ec:93:ef:97:48:a6:34:91:86:c1:ed:a1:58:a3:75:99:
20:36:90:5d:6c:4b:d3:6f:a0:08:1a:0a:ba:e6:b6:aa:40:7a:
c7:57:92:9c:d5:ba:fe:e8:c4:f0:92:04:d2:45:e8:62:bd:08:
98:25:91:b0:03:73:f5:c3:84:c3:0e:47:dd:df:85:e6:4b:ac:
fa:92:3b:ae:c3:cc:35:fc:8a:26:32:c6:3f:74:da:2a:9d:0c:
22:11:34:94:fc:3c:ee:02:28:d3:2c:a1:11:b6:fb:32:1c:9b:
23:ed:68:fb:2e:03:96:0f:e8:64:7f:ea:43:f7:a7:d8:ef:6e:
24:69:f3:99:17:91:6d:4c:83:b4:49:01:23:be:b8:4b:6f:c7:
38:4b:1e:6a:7f:5d:e7:b1:65:13:c8:a1:c3:1c:95:68:95:5a:
14:5f:4e:94:cf:c7:3f:6c:82:11:2b:5d:e2:79:e5:a4:7a:5d:
5a:4f:48:1d:8d:6d:f2:41:27:25:ed:e2:4d:c6:9f:aa:85:c1:
d9:c2:33:61:15:1b:cf:65:1d:b7:20:f9:91:31:3d:80:f7:d7:
74:81:01:36:95:14:e5:37:61:43:50:3c:ca:32:07:53:5f:2e:
14:a3:dc:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 02:15:22 2025 by rpki-client