Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/742340-8cf8-4460-85cc-aa2b3bea08bf/1/CydDVAKyohnqLi0wWXvTVMJ6qrc.roa
File: CydDVAKyohnqLi0wWXvTVMJ6qrc.roa (raw, json)
Hash identifier: CgTETwq/5IJ8p47GbXwZWPzz5v+JUI2QPE1EE37OngM=
Subject key identifier: 0B:27:43:54:02:B2:A2:19:EA:2E:2D:30:59:7B:D3:54:C2:7A:AA:B7
Certificate issuer: /CN=8f0a2bb8813b74d78283b1728fdb9bbc5d57845d
Certificate serial: 0198E16672A33FEE2824F4637FD36F77F893
Authority key identifier: 8F:0A:2B:B8:81:3B:74:D7:82:83:B1:72:8F:DB:9B:BC:5D:57:84:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jworuIE7dNeCg7Fyj9ubvF1XhF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/742340-8cf8-4460-85cc-aa2b3bea08bf/1/CydDVAKyohnqLi0wWXvTVMJ6qrc.roa
Signing time: Mon 25 Aug 2025 13:24:04 +0000
ROA not before: Mon 25 Aug 2025 13:24:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57724
IP address blocks: 176.57.64.0/23 maxlen: 23
176.57.66.0/24 maxlen: 24
176.57.67.0/24 maxlen: 24
185.215.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/742340-8cf8-4460-85cc-aa2b3bea08bf/1/jworuIE7dNeCg7Fyj9ubvF1XhF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/742340-8cf8-4460-85cc-aa2b3bea08bf/1/jworuIE7dNeCg7Fyj9ubvF1XhF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/jworuIE7dNeCg7Fyj9ubvF1XhF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e1:66:72:a3:3f:ee:28:24:f4:63:7f:d3:6f:77:f8:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f0a2bb8813b74d78283b1728fdb9bbc5d57845d
Validity
Not Before: Aug 25 13:24:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0b27435402b2a219ea2e2d30597bd354c27aaab7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6d:87:e9:c6:31:49:69:bc:fb:1b:cb:0a:f8:
f7:2b:d7:00:d3:73:73:22:43:55:97:b1:02:dd:f3:
6c:7e:4a:04:a9:29:00:70:65:7e:53:2d:f2:1d:23:
8c:d9:94:12:b3:1e:4a:bf:94:c1:ba:4a:6e:1f:36:
1e:dd:20:cb:11:4c:62:56:0d:92:80:63:d3:8b:6c:
35:16:7a:d5:74:74:7a:64:b3:03:66:1f:87:fe:a2:
7d:c9:63:ab:0c:68:79:de:e4:0b:f2:ef:49:d4:78:
5d:ac:ef:9f:6b:a7:9a:eb:71:ef:b5:c2:29:66:08:
97:6d:19:4f:0a:1c:f0:a8:ae:76:87:a1:69:02:f2:
0a:82:cc:ca:a2:0c:c8:23:f0:d4:a6:c9:7a:99:24:
a9:d9:5c:06:f3:28:9b:35:60:0e:be:9f:92:4f:f0:
20:24:f1:09:1d:b0:96:13:1a:ef:e0:61:3e:cf:9f:
a4:05:4e:ad:cf:55:42:83:e8:62:5f:d9:95:59:1c:
36:8a:80:30:6d:27:75:57:ad:d4:77:a8:1d:ee:fb:
ac:10:c1:01:22:32:a4:a7:2a:76:20:eb:37:53:bb:
bc:64:a2:05:77:a9:c6:2f:c9:58:af:cf:8d:6e:76:
55:35:9e:5f:9e:dc:90:78:8c:6b:4f:ba:b3:7a:a8:
09:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:27:43:54:02:B2:A2:19:EA:2E:2D:30:59:7B:D3:54:C2:7A:AA:B7
X509v3 Authority Key Identifier:
keyid:8F:0A:2B:B8:81:3B:74:D7:82:83:B1:72:8F:DB:9B:BC:5D:57:84:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jworuIE7dNeCg7Fyj9ubvF1XhF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/742340-8cf8-4460-85cc-aa2b3bea08bf/1/CydDVAKyohnqLi0wWXvTVMJ6qrc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/742340-8cf8-4460-85cc-aa2b3bea08bf/1/jworuIE7dNeCg7Fyj9ubvF1XhF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.57.64.0/22
185.215.4.0/24
Signature Algorithm: sha256WithRSAEncryption
00:e0:de:a5:2d:be:f6:b7:29:38:e7:85:8e:b7:ce:ea:c9:98:
a3:8b:ab:86:a8:75:1e:dc:1c:9e:3e:ab:43:96:ab:6d:a1:dd:
fd:7f:99:90:69:70:5a:54:76:83:48:ae:6f:03:fb:59:77:ee:
5b:f7:ed:36:fe:d4:f8:ea:08:8f:7e:f7:a0:4e:1b:93:5e:9c:
aa:58:2a:1e:7d:bd:1b:c7:3c:1f:bd:2d:eb:f6:ab:aa:67:5c:
69:2c:0b:24:e3:c2:cd:4b:a3:8a:d2:fd:b5:6d:52:14:62:a4:
11:c2:7c:4b:f9:36:ff:48:9a:6e:ce:ae:1f:bf:06:3e:11:8a:
6f:cd:f7:8c:91:17:1e:12:5a:f6:0a:bd:2f:7d:a1:c8:77:f5:
0b:9c:39:d4:30:13:c6:d1:b8:cb:06:79:b6:09:9e:f3:b4:aa:
22:69:9b:00:6e:bc:f8:c4:5b:f2:1a:9a:d2:fd:c8:b5:a0:e6:
db:ba:3d:74:07:84:25:6e:f6:09:3c:66:bc:43:c3:7c:29:e5:
8b:1f:62:3b:8a:49:94:1b:b2:e9:d5:87:2a:eb:cd:b8:33:c0:
ea:d1:7a:6f:9e:f2:4a:32:56:9e:92:5a:42:ed:09:75:a2:fa:
f0:e4:2b:b1:e7:f8:8d:d0:78:ef:17:44:f3:48:89:46:b9:97:
69:78:b6:a4
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZjhZnKjP+4oJPRjf9Nvd/iTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmMGEyYmI4ODEzYjc0ZDc4MjgzYjE3MjhmZGI5YmJjNWQ1
Nzg0NWQwHhcNMjUwODI1MTMyNDA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYjI3NDM1NDAyYjJhMjE5ZWEyZTJkMzA1OTdiZDM1NGMyN2FhYWI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAum2H6cYxSWm8+xvLCvj3K9cA03Nz
IkNVl7EC3fNsfkoEqSkAcGV+Uy3yHSOM2ZQSsx5Kv5TBukpuHzYe3SDLEUxiVg2S
gGPTi2w1FnrVdHR6ZLMDZh+H/qJ9yWOrDGh53uQL8u9J1HhdrO+fa6ea63HvtcIp
ZgiXbRlPChzwqK52h6FpAvIKgszKogzII/DUpsl6mSSp2VwG8yibNWAOvp+ST/Ag
JPEJHbCWExrv4GE+z5+kBU6tz1VCg+hiX9mVWRw2ioAwbSd1V63Ud6gd7vusEMEB
IjKkpyp2IOs3U7u8ZKIFd6nGL8lYr8+NbnZVNZ5fntyQeIxrT7qzeqgJIwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFAsnQ1QCsqIZ6i4tMFl701TCeqq3MB8GA1UdIwQY
MBaAFI8KK7iBO3TXgoOxco/bm7xdV4RdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvandvcnVJRTdkTmVDZzdGeWo5dWJ2RjFYaEYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny83NDIzNDAtOGNmOC00NDYwLTg1Y2Mt
YWEyYjNiZWEwOGJmLzEvQ3lkRFZBS3lvaG5xTGkwd1dYdlRWTUo2cXJjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny83NDIzNDAtOGNmOC00NDYwLTg1Y2MtYWEyYjNiZWEwOGJm
LzEvandvcnVJRTdkTmVDZzdGeWo5dWJ2RjFYaEYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCsDlAAwQA
udcEMA0GCSqGSIb3DQEBCwUAA4IBAQAA4N6lLb72tyk454WOt87qyZiji6uGqHUe
3ByePqtDlqttod39f5mQaXBaVHaDSK5vA/tZd+5b9+02/tT46giPfvegThuTXpyq
WCoefb0bxzwfvS3r9quqZ1xpLAsk48LNS6OK0v21bVIUYqQRwnxL+Tb/SJpuzq4f
vwY+EYpvzfeMkRceElr2Cr0vfaHId/ULnDnUMBPG0bjLBnm2CZ7ztKoiaZsAbrz4
xFvyGprS/ci1oObbuj10B4QlbvYJPGa8Q8N8KeWLH2I7ikmUG7Lp1Ycq6824M8Dq
0XpvnvJKMlaeklpC7Ql1ovrw5Cux5/iN0HjvF0TzSIlGuZdpeLak
-----END CERTIFICATE-----
Generated at Mon Sep 8 12:11:15 2025 by rpki-client