Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/RYzhujVp6gIBgIh6wj1hAB_7rVc.roa
File: RYzhujVp6gIBgIh6wj1hAB_7rVc.roa (raw, json)
Hash identifier: dxOdcde2n2siUlRnNLCGHKOg3YoidL7qLRsEX5nlICY=
Subject key identifier: 45:8C:E1:BA:35:69:EA:02:01:80:88:7A:C2:3D:61:00:1F:FB:AD:57
Certificate issuer: /CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Certificate serial: 0197EEF60061076E4AE423C9BEC7E92815B2
Authority key identifier: 30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/RYzhujVp6gIBgIh6wj1hAB_7rVc.roa
Signing time: Wed 09 Jul 2025 11:33:08 +0000
ROA not before: Wed 09 Jul 2025 11:33:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201976
IP address blocks: 195.53.40.0/23 maxlen: 23
195.53.40.0/24 maxlen: 24
195.53.41.0/24 maxlen: 24
195.53.42.0/23 maxlen: 23
195.53.42.0/24 maxlen: 24
195.53.43.0/24 maxlen: 24
195.57.200.0/22 maxlen: 22
195.57.200.0/23 maxlen: 23
195.57.200.0/24 maxlen: 24
195.57.201.0/24 maxlen: 24
195.57.202.0/23 maxlen: 23
195.57.202.0/24 maxlen: 24
195.57.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 18:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ee:f6:00:61:07:6e:4a:e4:23:c9:be:c7:e9:28:15:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Validity
Not Before: Jul 9 11:33:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=458ce1ba3569ea020180887ac23d61001ffbad57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8f:04:68:0d:b0:81:5f:c9:6a:f7:48:d4:7e:
ad:6f:86:54:fd:00:4f:63:53:4c:78:1f:17:24:9f:
31:5a:7e:ef:c2:ca:a9:ee:0d:10:bd:5d:1d:7b:f5:
ec:ba:39:f0:4b:63:fe:1a:83:f8:c7:ef:35:1e:b7:
75:65:40:fe:26:1a:8b:00:f5:f0:f2:50:ea:a6:e9:
28:0e:46:fd:6e:ab:78:ac:9b:e0:93:fe:d4:6d:a7:
d1:a5:d1:52:66:67:56:3f:15:76:d8:f3:4d:49:8d:
d0:42:07:06:02:42:4c:6a:d1:cc:65:a9:d2:59:b6:
ae:a0:c5:bf:cb:87:91:41:e9:c1:3c:5a:46:0e:8b:
bc:d6:40:4d:a2:2e:4d:fa:f8:b9:56:2b:f3:7f:7f:
e9:54:b7:da:8f:b4:3e:87:6b:b3:97:1a:19:fe:a5:
18:a6:2e:4f:95:f2:6f:ba:a2:7b:e0:b3:7f:b9:e0:
92:51:ba:6b:51:b6:03:11:d1:a8:84:ce:98:99:48:
be:1f:b3:8c:8a:2e:5f:78:0a:76:70:90:06:c4:d3:
fe:3b:75:9a:f1:b4:47:23:9b:26:f8:8a:46:66:5b:
75:c9:85:1b:08:b5:be:e1:54:eb:99:dd:4f:9f:54:
11:f7:f7:31:10:23:e0:71:26:e7:26:61:61:f5:65:
8d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:8C:E1:BA:35:69:EA:02:01:80:88:7A:C2:3D:61:00:1F:FB:AD:57
X509v3 Authority Key Identifier:
keyid:30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/RYzhujVp6gIBgIh6wj1hAB_7rVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.53.40.0/22
195.57.200.0/22
Signature Algorithm: sha256WithRSAEncryption
41:7f:50:65:19:1d:49:eb:76:d1:a4:63:94:ac:74:e2:84:6c:
45:02:a9:c9:6e:1a:f3:f9:f2:61:c0:68:c3:7f:86:80:76:d1:
c2:4f:8a:e3:58:7d:2e:45:65:1b:8f:af:f3:d3:f8:56:d2:a9:
6f:3a:32:f0:34:0d:52:46:9a:9e:f8:4d:ae:2f:02:db:30:b6:
71:57:c5:10:01:ba:46:5a:e3:8b:e2:96:05:75:94:9e:dc:de:
c7:04:b1:27:26:e2:4f:7e:0e:58:d3:89:16:2a:8d:42:2a:6d:
ae:54:cb:34:97:b7:3b:8d:fd:91:9f:8f:fe:e6:e4:ac:a0:2c:
8d:b9:f4:21:0d:c2:4b:01:e4:c7:2d:f1:e3:60:fe:f5:0f:09:
aa:1f:6f:d2:d5:ef:44:77:6e:41:5a:67:4a:5d:8b:20:9a:ef:
e6:a1:e0:4c:f7:81:cd:d5:d3:46:a7:cd:d6:9c:6d:96:1e:a3:
a2:64:38:c1:d0:87:a4:06:0c:b8:13:74:5e:c6:44:c9:80:e3:
6a:bb:d4:04:fa:b3:3a:0d:a8:64:02:4a:c0:f7:97:6c:d6:52:
9e:bf:34:a0:0c:46:41:e7:e5:de:96:e1:fe:d9:97:c1:ca:9e:
18:bb:a7:04:c7:3e:76:54:fa:d5:8c:64:1a:45:b4:0b:3b:c6:
e5:b3:a8:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 00:59:47 2025 by rpki-client