Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/SYldxtHjA_JYSV3y9S2yHMZne8Q.roa
File: SYldxtHjA_JYSV3y9S2yHMZne8Q.roa (raw, json)
Hash identifier: CfGuIWkCu6mC05Ds3gqdYYewye99hhQ/GRJmjn/6PVo=
Subject key identifier: 49:89:5D:C6:D1:E3:03:F2:58:49:5D:F2:F5:2D:B2:1C:C6:67:7B:C4
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 0199B8ED90220DA93408FB2129783AE8D46E
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/SYldxtHjA_JYSV3y9S2yHMZne8Q.roa
Signing time: Mon 06 Oct 2025 09:50:00 +0000
ROA not before: Mon 06 Oct 2025 09:50:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212117
IP address blocks: 45.149.88.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft
rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 11:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:b8:ed:90:22:0d:a9:34:08:fb:21:29:78:3a:e8:d4:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Oct 6 09:50:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=49895dc6d1e303f258495df2f52db21cc6677bc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:50:78:f6:e5:8f:36:bf:b2:a3:e8:3e:30:d7:
ee:58:65:25:39:1a:3b:83:ea:ae:a1:fa:e6:2c:74:
1a:3c:ff:5f:ee:2b:d3:62:f4:1d:fe:39:a6:f0:31:
0b:52:1b:64:ba:81:95:aa:22:cd:de:39:3a:f1:dd:
d3:5e:93:ed:99:dd:fa:7f:85:17:75:26:9c:16:17:
59:6e:e3:4f:0c:06:5d:88:e9:5d:3f:71:07:5f:42:
42:9d:8d:1c:4e:50:9b:ff:43:0a:df:b5:a1:93:6c:
cf:ea:36:35:bb:3a:9d:6b:55:97:5b:4a:ab:ac:db:
ea:70:a3:18:77:a5:80:b6:79:28:97:ba:52:72:60:
38:95:3a:80:1e:1a:31:e8:0b:2d:29:0c:f0:b7:e5:
24:a3:c4:77:f8:6b:ae:0a:09:92:d9:fa:87:4f:e4:
83:ba:13:a0:f6:a1:43:3d:51:e0:c2:1a:59:7a:6b:
80:28:51:8b:05:67:8d:ae:6f:4f:b2:08:02:17:04:
4b:7f:08:a8:9c:08:a7:2f:96:35:e2:29:0c:d3:6d:
ab:3f:00:1f:e6:ea:aa:91:be:d0:04:cd:0b:0d:bc:
58:b2:0c:04:05:2b:ba:4c:dc:46:ad:ea:5c:e8:8a:
2a:1f:47:09:f2:86:8a:f5:32:10:5f:4a:44:f0:21:
30:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:89:5D:C6:D1:E3:03:F2:58:49:5D:F2:F5:2D:B2:1C:C6:67:7B:C4
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/SYldxtHjA_JYSV3y9S2yHMZne8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.88.0/23
Signature Algorithm: sha256WithRSAEncryption
50:55:83:d5:14:f8:69:8e:47:b3:d4:dd:63:b2:67:d7:a7:e5:
6f:51:1e:3c:60:50:13:a4:de:e3:31:bd:05:8b:6c:a2:c7:10:
62:0d:10:01:15:1c:81:88:9e:c8:00:65:72:74:1d:0d:26:34:
0e:ed:af:49:00:7b:6f:b3:83:31:a0:2d:32:9b:81:da:d4:dc:
07:8d:ae:e9:dc:d9:4a:b0:54:8c:9f:b7:0e:2b:bb:6e:a4:b0:
0d:b2:2b:e9:53:fb:9f:ea:42:f8:1a:47:47:9e:c7:b0:f9:ab:
59:ed:7f:c4:4d:ac:6f:db:6a:c7:51:09:d0:52:ea:c1:77:dc:
77:c8:ab:60:78:3f:8e:72:0f:34:56:33:60:ca:0b:18:dd:ec:
8c:e3:cd:db:04:f7:1f:79:21:94:89:e2:29:05:a2:d3:49:bf:
ad:cf:38:0c:3a:b7:cb:0d:6a:33:0a:ab:47:12:8b:b3:b4:f1:
e3:2d:f8:91:1a:c9:1f:71:aa:b7:62:09:7e:1a:c8:f0:41:a1:
46:ac:8a:cd:63:9e:b8:88:5b:64:ad:bf:d6:ba:29:14:c7:ba:
31:4a:62:ae:55:b2:e4:82:1a:e1:63:71:c3:7a:3f:fb:fe:dc:
10:8e:df:b5:e5:1b:ed:f2:21:05:5c:53:d1:a8:5e:0c:20:12:
ab:5c:5c:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:55:51 2025 by rpki-client