Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/joyVHpi7wMxjJ0s6ltsRCFgcXYU.roa
File: joyVHpi7wMxjJ0s6ltsRCFgcXYU.roa (raw, json)
Hash identifier: OCQinmVLB46q3fla3T34H+fTxVsr8er+6b+WYrx3pLU=
Subject key identifier: 8E:8C:95:1E:98:BB:C0:CC:63:27:4B:3A:96:DB:11:08:58:1C:5D:85
Certificate issuer: /CN=af46fb8d41a47242ae3ee8ce1f0fa8ef811698b5
Certificate serial: 0199A3C8FF51A3A50753B876669497533067
Authority key identifier: AF:46:FB:8D:41:A4:72:42:AE:3E:E8:CE:1F:0F:A8:EF:81:16:98:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r0b7jUGkckKuPujOHw-o74EWmLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/joyVHpi7wMxjJ0s6ltsRCFgcXYU.roa
Signing time: Thu 02 Oct 2025 07:18:02 +0000
ROA not before: Thu 02 Oct 2025 07:18:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209535
IP address blocks: 45.92.24.0/22 maxlen: 24
147.78.24.0/22 maxlen: 24
193.33.6.0/23 maxlen: 23
193.33.6.0/24 maxlen: 24
193.33.7.0/24 maxlen: 24
193.33.40.0/23 maxlen: 23
193.33.40.0/24 maxlen: 24
193.33.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/r0b7jUGkckKuPujOHw-o74EWmLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/r0b7jUGkckKuPujOHw-o74EWmLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/r0b7jUGkckKuPujOHw-o74EWmLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:a3:c8:ff:51:a3:a5:07:53:b8:76:66:94:97:53:30:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af46fb8d41a47242ae3ee8ce1f0fa8ef811698b5
Validity
Not Before: Oct 2 07:18:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8e8c951e98bbc0cc63274b3a96db1108581c5d85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:13:91:3e:f4:86:e1:0d:76:24:d8:98:91:7c:
35:c2:fe:9d:78:4d:96:84:10:da:35:24:c6:18:f4:
73:7b:85:50:27:fe:8a:67:82:e2:de:e8:3b:c5:d1:
5f:4c:09:8a:cd:99:6a:68:d5:d9:cd:31:e9:3c:98:
78:28:3a:45:99:bb:d2:fe:16:a2:c9:6c:99:9e:3a:
36:1f:04:a9:08:f9:ee:5e:52:08:9e:82:45:1c:e7:
88:8c:0d:4c:f5:f0:42:5e:ab:0f:1d:c6:d9:90:ff:
07:98:5e:31:93:f5:9f:b1:18:48:a1:53:94:13:22:
15:87:97:8c:89:1d:5a:46:a6:e1:a3:38:1e:ed:6f:
b1:1c:7b:94:4d:00:27:24:a0:46:0d:92:75:74:27:
b8:ba:c7:3e:b9:9b:b2:c6:d5:9c:db:3e:9a:f8:72:
d5:83:9b:73:0a:74:aa:07:86:5a:d1:32:6d:0c:70:
ed:d9:c4:8d:36:90:0c:b3:2e:5b:6a:43:4f:c8:09:
b6:50:e9:6c:e9:82:86:e9:be:1b:0d:d1:fa:bc:a6:
a2:29:8b:fd:73:b2:2c:08:d4:c9:5d:77:14:c4:ea:
91:22:fc:36:11:77:a7:c5:fe:e1:50:55:04:6a:df:
db:68:c4:79:93:db:d7:f0:21:cd:68:03:cc:3d:7a:
50:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:8C:95:1E:98:BB:C0:CC:63:27:4B:3A:96:DB:11:08:58:1C:5D:85
X509v3 Authority Key Identifier:
keyid:AF:46:FB:8D:41:A4:72:42:AE:3E:E8:CE:1F:0F:A8:EF:81:16:98:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r0b7jUGkckKuPujOHw-o74EWmLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/joyVHpi7wMxjJ0s6ltsRCFgcXYU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/r0b7jUGkckKuPujOHw-o74EWmLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.24.0/22
147.78.24.0/22
193.33.6.0/23
193.33.40.0/23
Signature Algorithm: sha256WithRSAEncryption
72:d2:77:da:02:fd:0e:ba:81:c4:37:61:e0:20:20:8f:34:5a:
5b:d5:d1:67:d8:d5:1a:8c:b5:44:9a:45:a0:c1:fc:fa:42:bc:
5f:a4:e8:3b:64:d9:42:90:58:32:5d:fa:4a:7a:40:37:cb:cd:
bd:9c:d3:17:ef:9a:6b:14:54:c0:79:c9:5c:4c:ea:23:26:bb:
08:a1:75:10:b0:32:0c:1d:64:d5:ce:23:99:c2:01:79:1e:74:
1a:06:aa:d3:2a:db:47:fc:0a:e7:83:5c:7a:47:2b:a8:dc:9b:
aa:ab:89:87:9f:0a:d4:dd:81:8e:d3:96:cf:3b:18:03:25:d4:
18:de:34:c5:d9:c8:e4:07:c4:ee:c7:ce:34:76:ec:20:88:0a:
1f:94:13:11:5b:e3:11:46:bc:d6:4c:d0:41:13:cd:71:ca:ff:
f8:98:2c:c4:aa:c1:d5:bc:cd:e8:66:3f:48:8c:67:14:05:39:
0e:bc:55:55:af:43:43:0a:54:30:03:eb:eb:44:73:79:03:81:
dd:21:9e:4a:07:4c:5e:64:80:45:43:94:f8:99:90:4b:a3:b9:
5d:f5:9a:e3:77:d6:a1:a4:25:49:8d:a3:f7:3a:90:a2:82:5a:
fb:a9:9c:81:aa:81:ed:b4:ed:40:82:0f:d7:1c:55:ca:17:2f:
e1:df:cb:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:40:09 2025 by rpki-client