Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/ynd4UkjjokC1Px89Xh64g5Sq-Qg.roa
File: ynd4UkjjokC1Px89Xh64g5Sq-Qg.roa (raw, json)
Hash identifier: D2rufQuFpkeqh+ITObE3/x2V+FzHVt2qoNBYBC/ZS4w=
Subject key identifier: CA:77:78:52:48:E3:A2:40:B5:3F:1F:3D:5E:1E:B8:83:94:AA:F9:08
Certificate issuer: /CN=3ee770f47fd903925d80ac58e05e076f3baa110b
Certificate serial: 0199138E1CB4E88592838807F2CD8E0262F4
Authority key identifier: 3E:E7:70:F4:7F:D9:03:92:5D:80:AC:58:E0:5E:07:6F:3B:AA:11:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/ynd4UkjjokC1Px89Xh64g5Sq-Qg.roa
Signing time: Thu 04 Sep 2025 07:08:24 +0000
ROA not before: Thu 04 Sep 2025 07:08:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 45.136.39.0/24 maxlen: 24
194.31.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 19:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:13:8e:1c:b4:e8:85:92:83:88:07:f2:cd:8e:02:62:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ee770f47fd903925d80ac58e05e076f3baa110b
Validity
Not Before: Sep 4 07:08:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ca77785248e3a240b53f1f3d5e1eb88394aaf908
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c5:45:da:5a:1d:46:44:a8:d1:26:e3:b1:0e:
87:18:98:59:76:18:f4:7d:da:e5:4a:a4:aa:41:66:
1f:2a:79:b0:60:b0:74:9c:f9:96:9a:39:17:02:47:
17:1d:b3:98:a7:d9:c5:c7:7e:3b:d4:d9:4f:d0:01:
af:e8:f4:44:38:fc:b9:c2:97:e0:58:71:be:46:f5:
28:e6:4c:1a:72:b6:22:41:9b:5f:45:5a:25:1d:d0:
e6:6e:f7:13:f0:28:6e:15:97:cb:1f:29:67:51:80:
ab:c9:22:6a:43:dc:18:7c:46:b2:a6:56:66:0e:ef:
04:fc:36:44:0b:22:a7:63:59:33:73:66:c4:db:78:
4a:8d:56:0e:45:7d:17:2e:d6:4e:df:d4:7a:86:c2:
8e:aa:d7:18:ff:04:88:fa:6e:7e:07:6c:61:74:b5:
58:5b:66:71:92:7b:c7:5c:b5:10:80:e9:95:a4:0c:
11:71:fc:5b:d2:72:65:e8:01:80:16:a0:f0:18:6e:
b4:b0:fc:36:b7:ad:ae:d1:5a:60:52:ac:ff:d6:86:
6c:17:20:7d:55:67:a2:61:77:39:3e:e8:0f:a5:3e:
63:ea:03:70:52:66:e7:4f:9f:5b:ba:cb:a1:cf:d8:
86:ea:a2:2a:0f:94:be:ae:87:00:05:24:e7:98:a0:
34:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:77:78:52:48:E3:A2:40:B5:3F:1F:3D:5E:1E:B8:83:94:AA:F9:08
X509v3 Authority Key Identifier:
keyid:3E:E7:70:F4:7F:D9:03:92:5D:80:AC:58:E0:5E:07:6F:3B:AA:11:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/ynd4UkjjokC1Px89Xh64g5Sq-Qg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.39.0/24
194.31.167.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:de:b5:56:a4:24:18:b2:06:18:30:03:24:86:a0:ea:bd:32:
ee:96:49:5f:14:84:ff:17:4b:ca:8c:f6:46:1d:b8:dc:ef:3c:
fc:3f:e5:bc:9a:a4:36:bf:06:e0:17:b4:92:68:6b:55:a2:e0:
1d:48:9c:97:48:d2:10:90:c2:29:51:32:75:ed:74:b7:a0:9e:
85:7f:56:a6:8e:18:6a:93:00:e1:1c:c9:79:1e:f4:0b:5b:7c:
77:a3:a8:80:ee:0c:17:f0:32:e6:bf:b8:e7:34:02:0a:3f:8a:
56:ce:a9:44:45:ea:62:0f:b4:82:47:60:7d:ee:5c:ad:ee:b2:
60:ce:76:7b:a2:da:e5:63:c3:2a:68:5d:31:26:64:76:fb:e2:
a1:4a:2c:33:c6:db:37:09:0a:bf:6e:4e:27:36:af:27:6c:5a:
8f:ae:42:71:61:80:cc:7c:e9:a2:15:60:be:86:87:55:35:c5:
ec:62:43:22:f9:ff:4e:f7:a2:ab:35:d0:d8:c5:3b:84:68:ef:
46:54:69:ec:fa:ba:e1:f0:fd:b2:d3:b2:2f:02:67:c8:35:bc:
0e:d7:5c:41:69:15:22:5f:83:c2:7b:78:1f:4b:05:54:a1:cf:
5f:25:e5:a2:84:e4:f8:33:b5:bc:f5:d3:cc:fb:cd:7c:16:79:
e4:72:2c:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 00:41:04 2025 by rpki-client