Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/LYQe83i4uqKWfjPj6Z9zXTU-p78.roa
File: LYQe83i4uqKWfjPj6Z9zXTU-p78.roa (raw, json)
Hash identifier: vuiLEpBdLUqGEg3KwkVsbC81EJZ5mjcdPos8EYGaDPQ=
Subject key identifier: 2D:84:1E:F3:78:B8:BA:A2:96:7E:33:E3:E9:9F:73:5D:35:3E:A7:BF
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01990E49B93D825FCBA0BDEE9CC157CF3B04
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/LYQe83i4uqKWfjPj6Z9zXTU-p78.roa
Signing time: Wed 03 Sep 2025 06:35:36 +0000
ROA not before: Wed 03 Sep 2025 06:35:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25198
IP address blocks: 45.128.78.0/24 maxlen: 24
45.134.185.0/24 maxlen: 24
84.21.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 11:14:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:0e:49:b9:3d:82:5f:cb:a0:bd:ee:9c:c1:57:cf:3b:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Sep 3 06:35:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2d841ef378b8baa2967e33e3e99f735d353ea7bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:32:d6:05:41:d7:38:ba:b2:0f:ec:28:33:9e:
90:0e:52:53:a7:9b:ed:cd:08:6d:1b:e8:cb:31:8d:
82:72:6a:55:7a:57:6b:da:c4:f3:86:65:23:95:31:
77:55:4d:b2:64:af:bc:67:44:d5:7b:75:a9:1e:57:
a3:7c:ab:51:23:0f:ea:3e:6b:0b:9f:6d:f4:f2:b0:
db:4d:d1:ae:8c:2d:9b:33:f6:5c:33:da:0a:c9:ba:
75:12:48:9a:83:d2:ea:68:61:b1:75:9f:40:f2:82:
83:cf:8a:19:77:d3:ec:b4:2e:95:0e:2d:7d:cd:46:
91:b4:4d:6b:30:03:5b:8c:b1:11:a7:b6:42:9c:de:
cc:b0:7c:f2:5a:45:02:e5:64:56:63:7a:41:04:82:
a1:13:f3:ef:11:98:37:01:e0:29:21:9f:91:9e:32:
c8:ab:70:ec:0d:ee:75:eb:12:0f:ae:9e:7d:e1:bf:
02:5c:19:2c:15:17:7b:49:c6:3e:fc:e4:76:e9:88:
70:58:48:b4:cd:50:51:f2:70:8e:f5:21:80:ce:e8:
06:b4:1c:32:df:8d:0a:11:c6:48:f1:15:01:1c:04:
45:1b:62:bd:8d:39:20:6c:4d:8e:42:68:23:be:8d:
15:e5:94:2a:f6:9a:27:a8:91:1c:81:49:ab:0b:e8:
d5:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:84:1E:F3:78:B8:BA:A2:96:7E:33:E3:E9:9F:73:5D:35:3E:A7:BF
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/LYQe83i4uqKWfjPj6Z9zXTU-p78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.78.0/24
45.134.185.0/24
84.21.188.0/24
Signature Algorithm: sha256WithRSAEncryption
59:d9:0e:10:d2:ec:26:2a:e3:6a:f0:43:35:65:0e:5f:09:c8:
14:2f:b1:70:10:cb:c3:38:29:60:1f:aa:4a:79:d9:49:f0:0d:
c1:10:e7:2d:46:28:83:ab:15:00:03:d3:da:68:eb:38:97:90:
aa:09:68:b4:d6:53:f9:99:d9:2c:47:c8:66:f2:5a:a7:fb:0e:
37:a1:98:39:33:0a:cf:3a:a3:96:5f:02:1a:bf:eb:d0:23:33:
49:d0:02:86:1e:3f:87:9d:72:7c:e4:cf:13:7a:55:ea:94:80:
45:81:b6:f8:56:4c:07:72:33:08:08:ec:d9:8a:db:91:ee:e1:
6d:ab:bf:af:22:d7:f9:07:de:f8:f8:4a:6a:21:0e:40:50:e3:
fb:bc:dc:f7:a7:d7:a2:3c:1d:22:5e:64:0a:47:29:43:f6:b5:
8b:33:bb:7b:31:19:d7:ac:5a:60:34:f1:6e:47:4a:db:d1:56:
68:aa:23:11:08:7d:24:a7:46:b6:2e:aa:ca:c1:58:72:d6:25:
73:d1:87:da:63:ce:36:59:c5:b6:45:02:2d:37:66:eb:bd:12:
65:8e:20:28:df:ae:9e:aa:dd:31:38:6b:02:9f:be:8e:72:b3:
4c:a5:59:d4:2d:1c:30:49:de:12:17:0b:c6:75:a6:e4:c6:21:
29:b0:fb:45
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZkOSbk9gl/LoL3unMFXzzsEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjUwOTAzMDYzNTM2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZDg0MWVmMzc4YjhiYWEyOTY3ZTMzZTNlOTlmNzM1ZDM1M2VhN2JmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDLWBUHXOLqyD+woM56QDlJTp5vt
zQhtG+jLMY2CcmpVeldr2sTzhmUjlTF3VU2yZK+8Z0TVe3WpHlejfKtRIw/qPmsL
n2308rDbTdGujC2bM/ZcM9oKybp1Ekiag9LqaGGxdZ9A8oKDz4oZd9PstC6VDi19
zUaRtE1rMANbjLERp7ZCnN7MsHzyWkUC5WRWY3pBBIKhE/PvEZg3AeApIZ+RnjLI
q3DsDe516xIPrp594b8CXBksFRd7ScY+/OR26YhwWEi0zVBR8nCO9SGAzugGtBwy
340KEcZI8RUBHARFG2K9jTkgbE2OQmgjvo0V5ZQq9ponqJEcgUmrC+jVVwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFC2EHvN4uLqiln4z4+mfc101Pqe/MB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvTFlRZTgzaTR1cUtXZmpQajZaOXpYVFUtcDc4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALYBOAwQA
LYa5AwQAVBW8MA0GCSqGSIb3DQEBCwUAA4IBAQBZ2Q4Q0uwmKuNq8EM1ZQ5fCcgU
L7FwEMvDOClgH6pKedlJ8A3BEOctRiiDqxUAA9PaaOs4l5CqCWi01lP5mdksR8hm
8lqn+w43oZg5MwrPOqOWXwIav+vQIzNJ0AKGHj+HnXJ85M8TelXqlIBFgbb4VkwH
cjMICOzZituR7uFtq7+vItf5B974+EpqIQ5AUOP7vNz3p9eiPB0iXmQKRylD9rWL
M7t7MRnXrFpgNPFuR0rb0VZoqiMRCH0kp0a2LqrKwVhy1iVz0YfaY842WcW2RQIt
N2brvRJljiAo366eqt0xOGsCn76OcrNMpVnULRwwSd4SFwvGdabkxiEpsPtF
-----END CERTIFICATE-----
Generated at Sat Sep 6 20:58:21 2025 by rpki-client