Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/g1y2t6ScHgUV5n1ybihT2I7pzSE.roa
File: g1y2t6ScHgUV5n1ybihT2I7pzSE.roa (raw, json)
Hash identifier: LRDFWbnwBzQggL/6hZU/Et8Uxn7dc1LTIGqCHJ8arCA=
Subject key identifier: 83:5C:B6:B7:A4:9C:1E:05:15:E6:7D:72:6E:28:53:D8:8E:E9:CD:21
Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial: 0198AAA4CED4805DA4CA582577D1BD996981
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/g1y2t6ScHgUV5n1ybihT2I7pzSE.roa
Signing time: Thu 14 Aug 2025 22:13:04 +0000
ROA not before: Thu 14 Aug 2025 22:13:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 46450
IP address blocks: 45.67.145.0/24 maxlen: 24
94.154.183.0/24 maxlen: 24
162.218.95.0/24 maxlen: 24
212.60.16.0/23 maxlen: 23
217.197.168.0/24 maxlen: 24
217.197.171.0/24 maxlen: 24
2a07:c6c0:9::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:aa:a4:ce:d4:80:5d:a4:ca:58:25:77:d1:bd:99:69:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Validity
Not Before: Aug 14 22:13:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=835cb6b7a49c1e0515e67d726e2853d88ee9cd21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:af:27:9a:41:16:c0:0f:a9:b1:a4:df:54:ed:
24:00:28:73:da:4c:24:b8:8d:05:48:57:77:d4:f8:
92:74:de:d0:19:d8:18:f0:1e:43:f3:27:4d:26:c2:
b6:d8:6a:d5:98:7d:84:bc:7d:99:ae:81:2f:d0:57:
1f:7e:d0:0a:fb:24:ab:50:de:e9:e5:7b:b2:ed:55:
ac:df:b0:61:e9:05:fa:b5:21:f6:8b:2c:3a:4c:7d:
f9:31:ee:d6:cb:5b:44:69:3e:39:0f:5f:27:90:ef:
a3:31:e0:d2:38:c0:a1:a3:3e:ec:e2:3f:22:b1:ec:
e0:41:0a:0b:2e:79:f4:12:83:8b:10:60:08:98:5b:
11:64:dd:3a:36:f2:f4:9a:14:4b:d1:a4:85:3f:4c:
36:f6:db:5d:93:71:29:0f:3b:fe:ca:cc:55:73:99:
25:d1:d8:c4:80:68:a9:33:20:00:27:20:25:94:06:
ce:d3:4b:21:06:ba:f2:12:ae:d7:17:95:19:29:bf:
4f:2b:80:f3:a9:15:d2:75:a4:41:7d:56:83:66:9f:
45:4b:df:d8:1f:da:64:78:4e:1a:60:17:72:0c:c7:
e0:7b:45:6d:c3:72:4c:1f:fb:16:04:73:9f:57:17:
fb:3f:34:c4:0d:c2:e0:1a:21:39:8c:65:4b:b0:2b:
dd:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:5C:B6:B7:A4:9C:1E:05:15:E6:7D:72:6E:28:53:D8:8E:E9:CD:21
X509v3 Authority Key Identifier:
keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/g1y2t6ScHgUV5n1ybihT2I7pzSE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.145.0/24
94.154.183.0/24
162.218.95.0/24
212.60.16.0/23
217.197.168.0/24
217.197.171.0/24
IPv6:
2a07:c6c0:9::/48
Signature Algorithm: sha256WithRSAEncryption
62:a9:0d:ba:a9:4f:9f:1b:1d:30:dd:34:7e:7f:35:bc:e3:4b:
e2:15:f1:fe:b8:40:ec:d7:dc:1e:8b:b0:b6:44:0e:1c:c1:67:
dd:22:8d:9b:34:25:9a:6e:d2:cf:21:84:76:18:c1:57:b8:00:
59:3a:2b:31:10:78:3f:56:63:d6:e8:ae:fb:9d:4c:57:b1:2b:
63:5f:78:0a:27:75:10:eb:99:42:c1:6c:0b:0e:99:db:ed:fd:
4c:d3:84:d6:ab:2d:55:82:29:40:11:67:4c:4c:d7:22:f9:0a:
92:ba:a8:4b:ee:2a:15:c6:3d:be:4f:1c:e9:f1:13:61:b7:5e:
52:a7:4f:e6:64:f2:7d:ca:fb:de:ae:68:6c:9f:43:1c:d4:60:
14:f3:e9:39:7e:58:33:ae:a4:d7:58:76:a9:0b:07:7d:0f:2d:
bf:9f:2f:1b:a3:da:de:7d:6e:02:ab:ec:79:52:22:ed:3e:d9:
e8:03:ef:5f:aa:dc:de:26:41:e3:05:cd:3c:18:2b:34:a1:45:
f4:16:9a:bf:f8:84:67:08:f6:4c:d3:f2:1e:54:cf:98:27:89:
1f:97:48:67:b2:f5:b8:53:0b:f4:09:70:33:85:a7:9a:a1:6d:
b2:85:ab:5b:03:bb:dc:29:b5:10:90:54:7e:be:58:10:de:47:
88:0e:56:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:07:59 2025 by rpki-client