Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/1fw2pVgI6wnNaFBqVacI_TrykzU.roa
File: 1fw2pVgI6wnNaFBqVacI_TrykzU.roa (raw, json)
Hash identifier: /ntv8t45uwqzQDi6yJlt9SxK4r/nI3MeZTq+MfQEdA0=
Subject key identifier: D5:FC:36:A5:58:08:EB:09:CD:68:50:6A:55:A7:08:FD:3A:F2:93:35
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 01989E8DB8EFED11852649B32169F2C0916F
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/1fw2pVgI6wnNaFBqVacI_TrykzU.roa
Signing time: Tue 12 Aug 2025 13:52:24 +0000
ROA not before: Tue 12 Aug 2025 13:52:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 54103
IP address blocks: 46.244.116.0/22 maxlen: 22
185.51.48.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 07:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9e:8d:b8:ef:ed:11:85:26:49:b3:21:69:f2:c0:91:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Aug 12 13:52:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d5fc36a55808eb09cd68506a55a708fd3af29335
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:54:c3:fa:f5:52:2d:42:04:3e:21:3c:ac:e0:
ae:c0:75:a0:bb:cd:54:db:d5:a1:98:9b:53:63:95:
0f:a1:2e:22:a4:6d:74:0f:6a:3b:08:a3:48:73:39:
4c:aa:51:00:0d:7c:b5:f9:28:5e:71:f2:d2:3e:ed:
89:c1:9c:88:31:9b:be:01:c8:ea:7d:ad:22:2d:8c:
a8:cf:88:7e:fb:e7:c6:58:aa:80:58:64:c1:4f:d0:
b6:46:86:a3:5a:bf:fc:87:4e:a1:e3:af:c5:6d:b7:
6a:df:a2:0c:39:b3:91:0a:dc:11:18:0c:2a:58:16:
2a:51:d3:b8:80:87:9c:39:94:1f:99:d0:2f:b3:3b:
2f:f7:b8:b0:46:4b:11:a8:77:7c:d4:6b:1f:7f:86:
7f:47:9c:6a:ee:03:1c:0f:09:77:9b:cb:fa:5b:b7:
1e:23:6a:bd:db:34:27:cc:6f:9f:68:31:90:b7:88:
42:fb:41:28:72:a3:fe:84:29:7d:2f:5a:56:6f:8c:
f0:55:5e:70:36:53:aa:fc:2b:16:02:96:1f:68:ce:
56:8f:55:0a:03:6c:95:9c:42:12:c3:25:ec:89:5b:
6a:79:3a:4f:d4:95:3b:87:35:47:06:2c:fb:d3:24:
67:e4:de:06:57:13:1e:bc:6d:20:ee:ab:9e:3f:76:
da:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:FC:36:A5:58:08:EB:09:CD:68:50:6A:55:A7:08:FD:3A:F2:93:35
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/1fw2pVgI6wnNaFBqVacI_TrykzU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.244.116.0/22
185.51.48.0/22
Signature Algorithm: sha256WithRSAEncryption
b8:05:db:93:74:8a:f8:1d:fa:17:20:fc:bc:0d:ca:1c:85:b7:
e7:71:40:17:a9:5c:26:46:85:44:ec:d2:41:57:6d:24:85:de:
e0:9e:2a:af:1b:44:e8:c8:ef:29:1b:1b:b2:b1:0a:8b:4a:c9:
6f:95:58:08:83:32:b5:43:62:bc:40:92:fc:83:d7:e7:8d:1a:
17:13:58:74:e5:23:e1:ea:34:8f:11:1b:67:85:1a:49:ae:c3:
38:c4:e0:b0:0d:59:61:1e:08:cf:62:69:20:f2:f4:c3:74:0d:
29:dc:67:b6:65:fe:7b:2d:73:75:ca:33:1e:78:8b:36:d6:32:
76:f6:de:97:b7:3e:0d:e4:63:a2:a2:93:22:0d:ab:24:27:52:
ef:5c:1b:db:f4:e4:c4:d2:6b:8c:6a:c1:34:4a:bd:1c:ce:00:
72:f9:d8:d3:cd:df:cd:5b:7d:d4:9d:6d:94:67:1e:16:38:c9:
dd:25:f7:48:b3:0e:1f:f2:34:0f:2b:48:5a:84:c5:14:e9:ce:
6c:8a:72:a4:75:11:79:f6:0b:8e:26:f5:21:fe:0a:57:75:f7:
2f:e2:6e:b3:f5:2f:bc:26:ec:9d:4d:84:04:b9:c2:d0:c6:a0:
1a:4d:45:20:d5:5c:74:d7:39:df:d0:0b:14:d6:39:b1:d2:58:
2b:37:d9:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:09:43 2025 by rpki-client