Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/45y2eM_9RmNAB44-r5-uKhDMD9k.roa
File: 45y2eM_9RmNAB44-r5-uKhDMD9k.roa (raw, json)
Hash identifier: a22xKNsQmcfld1bNQDJEKJ/sFCciZX8nT/TNrTr5YXk=
Subject key identifier: E3:9C:B6:78:CF:FD:46:63:40:07:8E:3E:AF:9F:AE:2A:10:CC:0F:D9
Certificate issuer: /CN=b32ee2b39712377b4bfec9e66ac7e6e908efceec
Certificate serial: 0199D3DB234C2156822A3FEC1FF6EDF5C0BB
Authority key identifier: B3:2E:E2:B3:97:12:37:7B:4B:FE:C9:E6:6A:C7:E6:E9:08:EF:CE:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sy7is5cSN3tL_snmasfm6Qjvzuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/45y2eM_9RmNAB44-r5-uKhDMD9k.roa
Signing time: Sat 11 Oct 2025 15:19:37 +0000
ROA not before: Sat 11 Oct 2025 15:19:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60175
IP address blocks: 89.63.0.0/20 maxlen: 20
89.63.16.0/20 maxlen: 20
89.63.20.0/24 maxlen: 24
89.63.32.0/24 maxlen: 24
89.63.240.0/20 maxlen: 20
185.35.12.0/22 maxlen: 24
185.35.12.0/24 maxlen: 24
185.35.14.0/23 maxlen: 23
195.4.128.0/19 maxlen: 19
195.4.145.0/24 maxlen: 24
195.4.160.0/20 maxlen: 20
195.4.184.0/21 maxlen: 21
195.4.192.0/20 maxlen: 20
195.4.199.0/24 maxlen: 24
195.4.208.0/21 maxlen: 21
2a00:dca0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/sy7is5cSN3tL_snmasfm6Qjvzuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:d3:db:23:4c:21:56:82:2a:3f:ec:1f:f6:ed:f5:c0:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b32ee2b39712377b4bfec9e66ac7e6e908efceec
Validity
Not Before: Oct 11 15:19:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e39cb678cffd466340078e3eaf9fae2a10cc0fd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d8:27:86:00:f8:c5:1b:c2:93:3f:48:6f:ac:
36:6b:1c:31:6b:f6:cc:36:2c:09:9f:71:46:f1:05:
e2:e7:c3:4b:07:d1:e7:5e:cd:1e:b2:ff:1a:5f:2a:
77:45:12:74:e4:53:9e:56:50:bf:1b:68:d6:8b:d9:
d3:34:21:a0:e5:e1:ee:5b:9b:1b:b7:39:b3:97:52:
99:b4:21:18:4c:54:e3:14:4c:43:ce:4b:36:3a:0e:
c7:a8:d8:88:ac:d2:51:88:3b:6e:c7:4a:15:ab:44:
1b:ad:f4:6f:c3:95:24:0d:a1:6c:50:c1:67:07:45:
27:a8:6c:88:9a:de:f3:3a:30:f8:2b:fb:14:b1:5d:
9d:4e:a9:4f:92:22:a5:b4:f8:9b:9f:b2:4c:ba:57:
d3:97:48:29:52:e8:8d:e7:eb:ec:f3:9d:44:8f:67:
a3:e5:d0:ab:7d:07:e2:0c:b1:ec:63:01:67:bb:f1:
df:94:70:d8:a8:01:bb:c1:40:f5:1f:c0:08:4d:72:
19:6c:35:c0:f4:26:cf:34:7d:bf:fb:67:5d:12:38:
9a:df:33:6f:40:a2:3e:82:c6:fe:6f:2f:39:3c:53:
e8:16:23:16:e8:3d:28:8c:fb:e3:a7:2e:c4:7e:a3:
ea:0a:e6:b1:a3:58:58:77:bd:51:7e:c4:e2:ab:42:
7f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:9C:B6:78:CF:FD:46:63:40:07:8E:3E:AF:9F:AE:2A:10:CC:0F:D9
X509v3 Authority Key Identifier:
keyid:B3:2E:E2:B3:97:12:37:7B:4B:FE:C9:E6:6A:C7:E6:E9:08:EF:CE:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sy7is5cSN3tL_snmasfm6Qjvzuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/45y2eM_9RmNAB44-r5-uKhDMD9k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.63.0.0-89.63.32.255
89.63.240.0/20
185.35.12.0/22
195.4.128.0-195.4.175.255
195.4.184.0-195.4.215.255
IPv6:
2a00:dca0::/29
Signature Algorithm: sha256WithRSAEncryption
14:33:bb:a6:3e:85:df:40:84:91:73:3d:ca:aa:f4:c2:15:7b:
56:78:c7:77:e9:24:99:7b:a4:a8:a4:3c:30:9a:67:56:01:9d:
1f:1a:32:04:b5:ed:eb:c5:7a:fa:91:2e:60:e7:a0:8f:b4:31:
81:f8:a7:23:86:3b:97:4c:03:53:b9:61:89:bb:02:b4:5b:5d:
f5:d7:79:81:52:14:30:88:dc:e5:4a:f4:3d:40:f0:17:cd:42:
ac:cb:21:a3:d2:6a:9c:16:fe:de:00:19:93:03:98:6d:c8:7c:
e8:31:04:1b:ea:b2:29:92:59:f1:20:96:8e:ec:4f:26:31:ad:
4b:91:3b:95:79:bd:93:a4:82:60:51:bc:9b:67:bf:b8:04:1a:
0e:47:ea:71:46:90:19:70:95:ca:e7:9e:a4:70:b6:82:eb:04:
45:08:51:00:b3:61:bb:9a:2a:12:11:4d:73:37:a8:8d:54:66:
53:f1:62:84:10:68:5a:1c:b7:e0:31:9b:04:f1:c9:8b:ff:ca:
ad:44:e7:56:65:18:75:6c:9f:de:ff:cc:77:91:d8:50:6c:14:
eb:99:f7:be:a8:27:13:33:5a:bb:ac:98:98:5a:86:46:4e:36:
04:8b:8f:4d:e1:05:1b:04:1a:76:06:c9:a2:3b:43:b9:47:76:
b2:3b:bd:64
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Oct 20 02:05:05 2025 by rpki-client