Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Py-Yrm_oLsR1wQo7NUn9YdSPqsE.roa
File: Py-Yrm_oLsR1wQo7NUn9YdSPqsE.roa (raw, json)
Hash identifier: mZz1qfizjGBeSbmjqvi1+htwmp616JZLYra6Aguy/+k=
Subject key identifier: 3F:2F:98:AE:6F:E8:2E:C4:75:C1:0A:3B:35:49:FD:61:D4:8F:AA:C1
Certificate issuer: /CN=3718b734349bf327d9453b96501e44b192e55142
Certificate serial: 0199717085B8DC21C9C77FFC02FF18DDD321
Authority key identifier: 37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Py-Yrm_oLsR1wQo7NUn9YdSPqsE.roa
Signing time: Mon 22 Sep 2025 12:40:23 +0000
ROA not before: Mon 22 Sep 2025 12:40:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.14.38.0/23 maxlen: 23
45.132.25.0/24 maxlen: 24
185.155.54.0/23 maxlen: 24
185.155.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:71:70:85:b8:dc:21:c9:c7:7f:fc:02:ff:18:dd:d3:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3718b734349bf327d9453b96501e44b192e55142
Validity
Not Before: Sep 22 12:40:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3f2f98ae6fe82ec475c10a3b3549fd61d48faac1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:51:3d:ea:d3:83:7e:2a:3c:e6:bd:dd:5f:57:
58:8b:a2:36:3d:3c:ce:bd:ac:4b:ee:81:f8:dc:ab:
d3:d8:ec:9b:45:5b:1b:d6:0f:a7:79:c4:48:02:d9:
a2:14:86:d9:78:d5:a9:c6:52:45:1e:8d:97:6f:60:
0c:c1:6f:a1:95:c6:6f:d0:ef:9d:e5:c5:5e:b7:ca:
1b:76:6e:a0:b1:7f:1b:d5:ad:6d:63:2a:04:17:11:
27:d3:a0:a4:87:06:d1:42:26:0c:77:65:01:64:53:
f9:4b:96:4c:2b:3c:92:83:d6:db:23:80:3a:3d:82:
50:9b:68:ba:77:35:e5:04:50:d9:41:4f:d3:98:79:
3e:21:18:15:16:77:73:34:1a:b5:1a:33:59:4c:7f:
46:26:5f:1f:78:57:0d:0c:d6:06:bd:e5:34:5d:9e:
66:5a:dd:e5:d9:89:26:96:e2:a5:e3:46:c1:de:63:
92:cd:81:80:09:98:9d:3b:ee:ba:4c:a4:c4:4f:c3:
95:bc:62:18:e0:99:54:5b:c6:ca:db:39:66:b7:93:
95:3e:30:59:b4:7c:11:f6:28:2d:a5:7c:48:a2:ed:
64:45:77:2d:0c:af:cf:f1:f9:95:f6:a9:bc:b6:ce:
e0:f2:67:8f:69:99:ed:f6:6e:be:03:e4:99:5e:ff:
e6:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:2F:98:AE:6F:E8:2E:C4:75:C1:0A:3B:35:49:FD:61:D4:8F:AA:C1
X509v3 Authority Key Identifier:
keyid:37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Py-Yrm_oLsR1wQo7NUn9YdSPqsE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.38.0/23
45.132.25.0/24
185.155.54.0/23
Signature Algorithm: sha256WithRSAEncryption
2f:48:67:0e:cf:7d:12:2f:ec:04:7a:a1:41:da:ea:44:94:59:
4d:47:4e:93:21:d5:6e:08:62:e5:cf:15:b9:7e:90:19:bc:82:
13:b2:ea:69:a7:6a:ce:a1:09:0f:83:71:94:58:d7:b9:e4:30:
8f:4a:d2:cd:e4:99:28:ef:cc:51:a7:a3:bb:a5:df:e6:6c:13:
7a:7d:7f:53:18:b4:58:3d:7b:66:3a:e7:06:57:08:77:0d:c9:
c3:8e:3e:82:d7:e0:be:2d:c2:51:7b:c3:c5:73:90:cb:9f:07:
ea:50:52:d9:74:90:a6:a0:0b:8c:79:f0:5c:3b:8b:6b:ec:72:
51:6d:22:7e:af:d3:bc:34:7e:92:c0:49:6e:c1:51:75:47:e7:
e4:9c:bc:49:ef:a4:67:b1:51:1a:3d:62:44:2a:8d:a9:2e:8c:
e3:c8:a0:3b:ea:90:22:47:55:67:87:16:12:c1:2c:09:de:51:
f2:1a:ee:13:6e:45:d4:a5:1c:06:ac:d5:2e:be:cb:0b:1c:45:
4c:87:43:7c:ad:79:52:9d:eb:67:59:47:0d:71:0c:8f:4f:70:
05:e5:6b:b2:b7:2e:ce:24:e5:3b:fd:31:81:05:57:ef:03:56:
ae:9a:7c:96:6d:86:9f:89:2a:ad:8a:35:d0:7c:84:c6:21:78:
64:6e:87:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 14:41:23 2025 by rpki-client