Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/RRusTWAcexTqLC42cFR-oCBy9lM.roa
File: RRusTWAcexTqLC42cFR-oCBy9lM.roa (raw, json)
Hash identifier: t4Odd3VWJ3G1+E+5g7abf9afhZJ6ZxIEkJDEFpC0d7o=
Subject key identifier: 45:1B:AC:4D:60:1C:7B:14:EA:2C:2E:36:70:54:7E:A0:20:72:F6:53
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 0198C5F3C941FD070C7ADA486D2947DC7582
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/RRusTWAcexTqLC42cFR-oCBy9lM.roa
Signing time: Wed 20 Aug 2025 05:29:04 +0000
ROA not before: Wed 20 Aug 2025 05:29:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2914
IP address blocks: 80.97.54.0/24 maxlen: 24
81.181.175.0/24 maxlen: 24
81.181.236.0/22 maxlen: 22
194.102.122.0/23 maxlen: 23
194.102.217.0/24 maxlen: 24
217.156.29.0/24 maxlen: 24
217.156.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c5:f3:c9:41:fd:07:0c:7a:da:48:6d:29:47:dc:75:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Aug 20 05:29:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=451bac4d601c7b14ea2c2e3670547ea02072f653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:21:61:a2:bf:9d:2a:bb:4b:08:5f:30:f6:23:
fe:9a:69:c0:23:df:a6:5f:0b:cc:00:0a:53:d1:a5:
dd:a4:c4:2b:4a:7b:23:04:51:67:7e:e8:cb:ce:1e:
90:78:9c:1d:4e:aa:0b:ad:a0:fd:da:9e:f5:5d:ce:
d8:f6:bc:2c:57:6e:c8:6a:09:37:e2:79:e4:27:68:
90:01:7e:a9:10:2c:8d:ef:e6:a2:d7:30:43:73:73:
15:8c:44:12:d2:43:ca:e1:b1:6d:15:22:33:ce:bd:
a3:33:e1:60:68:dc:fa:20:45:42:9b:91:7e:19:09:
dd:7d:0e:e3:a0:a2:c8:e4:e5:a6:49:dd:7d:04:c5:
6d:51:4e:87:a9:0b:a6:e7:08:dc:fc:a3:80:2b:72:
d8:b5:77:f6:c5:e8:38:8a:7a:41:1a:8b:f9:10:53:
22:9a:2c:3a:f9:e9:d4:d3:16:66:e8:63:36:2a:95:
d7:d4:50:47:ae:0b:bd:19:46:ba:4b:87:e4:36:59:
e0:2d:0f:4e:80:a8:42:14:93:50:71:91:50:60:c7:
f1:9a:7e:d6:de:89:c4:bf:93:0e:3c:83:0b:a0:32:
11:76:e7:5b:0c:c6:8c:a5:9c:70:07:b5:04:9d:2b:
a3:80:9f:91:94:e6:b6:70:98:e0:6c:eb:75:69:b5:
7a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:1B:AC:4D:60:1C:7B:14:EA:2C:2E:36:70:54:7E:A0:20:72:F6:53
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/RRusTWAcexTqLC42cFR-oCBy9lM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.97.54.0/24
81.181.175.0/24
81.181.236.0/22
194.102.122.0/23
194.102.217.0/24
217.156.29.0/24
217.156.57.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:f9:d9:3d:01:21:12:b9:79:52:0a:a0:b4:e5:34:3b:01:1f:
00:8c:20:ca:58:d2:0a:f4:ed:f2:cc:7c:3e:fa:db:24:d8:64:
8c:c5:a3:97:cd:ae:50:32:00:ae:9e:cb:4b:a4:ac:94:7e:44:
d9:37:29:31:09:4d:35:22:6d:6d:d0:60:5b:6c:43:bf:5e:15:
38:ee:af:e4:a3:53:af:1b:42:9a:ce:a7:68:fa:19:b1:60:12:
f8:a1:1a:61:ad:4d:85:d2:1c:ae:58:42:eb:38:0b:25:bb:d8:
8f:d1:03:ed:18:d0:10:04:ab:08:e2:77:6a:6e:59:12:5b:72:
8d:bc:f0:a3:1e:9d:86:51:61:e8:b5:38:4f:47:f2:82:76:77:
f3:86:42:26:5a:cd:47:7a:7e:4f:47:65:53:8e:10:32:8c:15:
f5:2a:55:35:2f:7f:83:15:c0:ed:08:96:2a:fa:45:ff:39:5e:
57:26:ef:ce:1b:f9:62:9c:92:68:1d:58:33:ae:83:c9:38:8f:
1c:85:dd:a0:ee:4e:15:41:f8:44:3f:9c:75:91:d6:9b:39:8d:
8d:5d:23:a3:95:40:72:b7:fb:51:87:f9:5c:6f:aa:56:e9:43:
4e:d6:c7:6a:c1:9d:e5:58:78:a3:17:eb:16:06:e7:a2:bf:0f:
b7:f5:24:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:55:44 2025 by rpki-client