Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/yhkS5lsjYYscgr4foRJtRjpwYWM.roa
File: yhkS5lsjYYscgr4foRJtRjpwYWM.roa (raw, json)
Hash identifier: iY9LNop7X5Mq1+wEqI5l+HA0vGg7zxCKH5e1YxqKboA=
Subject key identifier: CA:19:12:E6:5B:23:61:8B:1C:82:BE:1F:A1:12:6D:46:3A:70:61:63
Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial: 0199E218C5283D047D5C0E99220F5D8DD862
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/yhkS5lsjYYscgr4foRJtRjpwYWM.roa
Signing time: Tue 14 Oct 2025 09:41:38 +0000
ROA not before: Tue 14 Oct 2025 09:41:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 401838
IP address blocks: 45.147.156.0/24 maxlen: 24
45.147.157.0/24 maxlen: 24
45.147.158.0/24 maxlen: 24
77.111.116.0/24 maxlen: 24
77.111.117.0/24 maxlen: 24
77.111.121.0/24 maxlen: 24
77.111.123.0/24 maxlen: 24
92.61.102.0/24 maxlen: 24
92.61.103.0/24 maxlen: 24
92.61.106.0/24 maxlen: 24
92.61.109.0/24 maxlen: 24
185.112.240.0/24 maxlen: 24
185.112.241.0/24 maxlen: 24
185.112.242.0/24 maxlen: 24
185.112.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e2:18:c5:28:3d:04:7d:5c:0e:99:22:0f:5d:8d:d8:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Validity
Not Before: Oct 14 09:41:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ca1912e65b23618b1c82be1fa1126d463a706163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:2f:1c:fb:39:9b:d8:81:d9:34:4a:a2:66:2e:
b9:5a:6f:a3:91:c4:ee:ee:1e:aa:d6:ca:3b:f7:48:
9d:15:48:52:14:6f:9e:4c:8e:09:5e:82:ef:c8:52:
a3:43:21:2d:c4:60:5d:0a:ec:88:7b:c2:2c:46:ae:
8e:16:66:0c:15:9a:ed:fb:b8:cf:81:3c:e8:5d:df:
ed:21:7a:20:6b:48:13:99:f4:8b:1f:4d:34:57:28:
f9:51:35:34:23:cf:ef:5c:0e:ce:e1:1e:96:48:b9:
62:64:69:e0:e8:79:ca:bb:36:14:a5:8c:f6:ee:ee:
cd:bb:90:8b:8e:f9:00:d2:63:94:b8:58:bc:67:ae:
95:c8:0a:cf:fa:ce:da:f4:7b:2a:da:f4:ed:2d:fc:
7f:9c:37:a4:28:8d:23:c1:dc:2f:91:ca:85:bb:07:
40:88:05:26:e4:53:0c:ac:ca:f3:13:4e:54:bf:81:
16:e0:b0:1a:e2:12:60:c4:49:57:24:2b:b5:37:8c:
05:89:8c:ce:57:60:b5:68:82:67:2a:e2:89:f9:06:
db:61:1b:ab:c2:38:90:cd:78:2f:2e:11:4f:0a:ab:
5e:34:d1:af:ad:aa:79:9f:f6:5a:dd:67:35:5c:0c:
6f:2c:09:75:45:50:13:28:fd:77:b4:1b:48:00:05:
14:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:19:12:E6:5B:23:61:8B:1C:82:BE:1F:A1:12:6D:46:3A:70:61:63
X509v3 Authority Key Identifier:
keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/yhkS5lsjYYscgr4foRJtRjpwYWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.156.0-45.147.158.255
77.111.116.0/23
77.111.121.0/24
77.111.123.0/24
92.61.102.0/23
92.61.106.0/24
92.61.109.0/24
185.112.240.0/22
Signature Algorithm: sha256WithRSAEncryption
6a:72:bb:23:b1:3d:9c:81:7d:77:44:a2:b3:01:55:d7:f8:77:
f0:3a:76:5e:5c:62:0f:36:7d:7a:06:1e:4d:02:f4:55:14:75:
1c:3b:f7:ea:4f:d9:37:2e:cc:54:80:09:7a:bd:a9:70:f2:64:
0a:54:ed:f3:7c:03:e3:69:8b:4f:d1:5f:91:1e:06:13:af:87:
b0:68:23:e0:66:ac:e3:58:32:5a:a8:e8:55:e1:4b:f6:8b:86:
70:f2:b0:5b:70:01:9a:aa:02:2d:58:c7:2f:55:32:d5:f6:9e:
dd:9c:95:94:60:cf:ae:8b:a1:f0:c2:96:a7:8f:61:1f:5a:38:
98:71:81:10:72:b9:6f:9e:cc:6f:79:97:54:a2:d1:2f:d3:6c:
6c:f5:e7:2a:50:a3:5b:da:b1:1e:dd:d3:50:fd:32:e3:32:46:
cd:37:14:83:1f:e6:14:23:f6:c4:9b:18:7e:36:72:8f:99:84:
41:66:73:2f:f2:45:02:20:da:05:bf:e4:1d:ed:48:0e:4e:cc:
3e:50:39:cd:44:a2:05:77:9d:43:50:8b:f8:8d:95:d3:94:17:
d3:dc:70:30:88:4d:bc:6c:20:ec:fb:84:cf:ea:e6:ea:ec:50:
92:37:c0:c6:3b:ef:81:eb:0b:ed:15:ef:a0:c0:07:01:fd:4b:
4d:c4:b1:3c
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgISAZniGMUoPQR9XA6ZIg9djdhiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0MTk3NTU4M2IyNTAzNjJjODE1MGY2M2FkYjMwYTBmNmEw
YzZmYzMwHhcNMjUxMDE0MDk0MTM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYTE5MTJlNjViMjM2MThiMWM4MmJlMWZhMTEyNmQ0NjNhNzA2MTYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0i8c+zmb2IHZNEqiZi65Wm+jkcTu
7h6q1so790idFUhSFG+eTI4JXoLvyFKjQyEtxGBdCuyIe8IsRq6OFmYMFZrt+7jP
gTzoXd/tIXoga0gTmfSLH000Vyj5UTU0I8/vXA7O4R6WSLliZGng6HnKuzYUpYz2
7u7Nu5CLjvkA0mOUuFi8Z66VyArP+s7a9Hsq2vTtLfx/nDekKI0jwdwvkcqFuwdA
iAUm5FMMrMrzE05Uv4EW4LAa4hJgxElXJCu1N4wFiYzOV2C1aIJnKuKJ+QbbYRur
wjiQzXgvLhFPCqteNNGvrap5n/Za3Wc1XAxvLAl1RVATKP13tBtIAAUUbwIDAQAB
o4ICOzCCAjcwHQYDVR0OBBYEFMoZEuZbI2GLHIK+H6ESbUY6cGFjMB8GA1UdIwQY
MBaAFGQZdVg7JQNiyBUPY62zCg9qDG/DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkJsMVdEc2xBMkxJRlE5anJiTUtEMm9NYjhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85OGE1ZWQtOTA1ZS00YmZhLTkxNTQt
ZjFjMzNhYTJmZDUwLzEveWhrUzVsc2pZWXNjZ3I0Zm9SSnRSanB3WVdNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC85OGE1ZWQtOTA1ZS00YmZhLTkxNTQtZjFjMzNhYTJmZDUw
LzEvWkJsMVdEc2xBMkxJRlE5anJiTUtEMm9NYjhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFEGCCsGAQUFBwEHAQH/BEIwQDA+BAIAATA4MAwDBAItk5wD
BAAtk54DBAFNb3QDBABNb3kDBABNb3sDBAFcPWYDBABcPWoDBABcPW0DBAK5cPAw
DQYJKoZIhvcNAQELBQADggEBAGpyuyOxPZyBfXdEorMBVdf4d/A6dl5cYg82fXoG
Hk0C9FUUdRw79+pP2TcuzFSACXq9qXDyZApU7fN8A+Npi0/RX5EeBhOvh7BoI+Bm
rONYMlqo6FXhS/aLhnDysFtwAZqqAi1Yxy9VMtX2nt2clZRgz66LofDClqePYR9a
OJhxgRByuW+ezG95l1Si0S/TbGz15ypQo1vasR7d01D9MuMyRs03FIMf5hQj9sSb
GH42co+ZhEFmcy/yRQIg2gW/5B3tSA5OzD5QOc1EogV3nUNQi/iNldOUF9PccDCI
TbxsIOz7hM/q5ursUJI3wMY774HrC+0V76DABwH9S03EsTw=
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:09:41 2025 by rpki-client