
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/Rhy7zTj1EkXhElbIMETGgJpRjqs.roa
File: Rhy7zTj1EkXhElbIMETGgJpRjqs.roa (raw, json)
Hash identifier: ykkvIUtAn8lmI1ZdNTc/3RSxnBdbB/KGggwB/jZhXVs=
Subject key identifier: 46:1C:BB:CD:38:F5:12:45:E1:12:56:C8:30:44:C6:80:9A:51:8E:AB
Certificate issuer: /CN=51f4b0b0469eb0d071994cd8238f34bef00c6fbe
Certificate serial: 01997FA7BEF75850386C41829DDD5D5259CD
Authority key identifier: 51:F4:B0:B0:46:9E:B0:D0:71:99:4C:D8:23:8F:34:BE:F0:0C:6F:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UfSwsEaesNBxmUzYI480vvAMb74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/Rhy7zTj1EkXhElbIMETGgJpRjqs.roa
Signing time: Thu 25 Sep 2025 06:55:23 +0000
ROA not before: Thu 25 Sep 2025 06:55:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200217
IP address blocks: 193.142.60.0/24 maxlen: 24
194.153.72.0/23 maxlen: 24
217.71.192.0/23 maxlen: 24
217.71.194.0/23 maxlen: 24
217.71.196.0/23 maxlen: 24
217.71.198.0/23 maxlen: 24
2a13:7bc0::/48 maxlen: 48
2a13:7bc0:1::/48 maxlen: 48
2a13:7bc0:2::/48 maxlen: 48
2a13:7bc0:3::/48 maxlen: 48
2a13:7bc0:4::/48 maxlen: 48
2a13:7bc0:5::/48 maxlen: 48
2a13:7bc0:6::/48 maxlen: 48
2a13:7bc0:7::/48 maxlen: 48
2a13:7bc0:8::/48 maxlen: 48
2a13:7bc0:9::/48 maxlen: 48
2a13:7bc0:a::/48 maxlen: 48
2a13:7bc0:b::/48 maxlen: 48
2a13:7bc0:c::/48 maxlen: 48
2a13:7bc0:d::/48 maxlen: 48
2a13:7bc0:e::/48 maxlen: 48
2a13:7bc0:f::/48 maxlen: 48
2a13:7bc0:10::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/UfSwsEaesNBxmUzYI480vvAMb74.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/UfSwsEaesNBxmUzYI480vvAMb74.mft
rsync://rpki.ripe.net/repository/DEFAULT/UfSwsEaesNBxmUzYI480vvAMb74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:7f:a7:be:f7:58:50:38:6c:41:82:9d:dd:5d:52:59:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51f4b0b0469eb0d071994cd8238f34bef00c6fbe
Validity
Not Before: Sep 25 06:55:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=461cbbcd38f51245e11256c83044c6809a518eab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:aa:22:8f:d4:85:f2:43:7f:42:f2:5d:63:53:
22:dd:d2:bc:56:f1:65:06:0c:89:17:d5:44:a2:59:
43:a9:ed:b2:6e:57:e9:e4:36:2b:e6:17:fd:34:d2:
17:0b:21:5c:84:16:25:3e:1c:97:0a:98:88:fe:8f:
69:b5:1a:60:37:72:12:af:00:d3:60:0f:0a:6b:7e:
f1:84:66:b7:0a:04:3a:d2:68:f9:3a:90:1e:22:a8:
e2:a7:b6:be:c4:7b:95:6b:32:f7:ce:c5:5f:27:7a:
f2:41:b0:79:eb:22:93:f5:4c:7a:43:8f:d3:fc:89:
23:7e:17:d1:63:7e:ac:b6:58:b0:d5:5c:38:61:65:
a8:35:ff:aa:3e:56:f1:0d:dc:91:16:7f:25:b8:e3:
87:66:8c:c9:ee:19:cf:96:95:42:11:5d:db:4b:13:
84:88:0d:05:74:f4:36:36:30:df:22:26:c0:8c:da:
63:88:66:ab:12:46:7c:9b:1f:07:d8:e7:47:4c:19:
ec:d8:bf:13:aa:ed:27:30:8c:6f:67:cd:3d:a1:0f:
df:c0:d8:6f:42:b2:31:30:d8:9f:27:18:ec:42:89:
f8:c3:06:84:06:20:4a:44:87:2c:b4:f2:43:11:ed:
d8:1c:6e:53:0c:b1:ac:9c:64:7e:42:73:e5:14:74:
e2:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:1C:BB:CD:38:F5:12:45:E1:12:56:C8:30:44:C6:80:9A:51:8E:AB
X509v3 Authority Key Identifier:
keyid:51:F4:B0:B0:46:9E:B0:D0:71:99:4C:D8:23:8F:34:BE:F0:0C:6F:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UfSwsEaesNBxmUzYI480vvAMb74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/Rhy7zTj1EkXhElbIMETGgJpRjqs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/UfSwsEaesNBxmUzYI480vvAMb74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.142.60.0/24
194.153.72.0/23
217.71.192.0/21
IPv6:
2a13:7bc0::-2a13:7bc0:10:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
53:5a:f1:4d:4a:bb:95:88:40:64:29:e5:7a:da:6f:72:33:e6:
f3:e9:33:02:5d:f7:9e:6b:a6:f3:b3:cf:49:5c:4b:08:68:df:
af:24:38:c3:2e:e3:72:34:6b:1c:cc:53:21:85:b8:69:76:a4:
c5:6a:98:64:a0:d4:2e:3e:91:a9:9b:79:27:1d:39:04:e9:93:
6c:1b:9c:3a:56:09:58:ed:a6:e5:07:49:17:f1:b0:6e:0c:d1:
91:7c:3d:ef:cc:fd:14:54:fe:9f:58:89:5e:79:89:be:c5:1d:
0d:77:48:8f:69:2b:cd:96:2c:96:fb:5d:62:3f:48:00:f7:bb:
b8:10:b7:6e:e3:f7:f4:42:80:d1:6b:8c:a1:25:74:64:80:02:
83:55:ef:d0:34:1f:7f:1d:4b:06:ac:8f:22:31:17:11:50:99:
0e:c2:93:4e:f3:e5:cf:34:88:79:64:8d:53:05:da:b1:74:56:
b4:6f:26:32:10:75:e1:2f:71:81:31:76:30:66:aa:1e:ac:2c:
2a:00:16:9b:54:af:f5:fe:75:a2:61:14:92:6a:f2:43:4b:9a:
07:11:66:40:79:cf:fc:44:2c:c6:4b:59:ce:02:80:30:40:7c:
ce:ec:b3:38:e6:22:d4:09:b9:a5:52:9d:12:e4:5f:38:96:c9:
dc:42:78:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:44:56 2025 by rpki-client