Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/2733ce-e9b9-4ab9-950c-c28bda230cb4/1/yHDz_dgw2HNuVtS7NpKaJLAB8-Y.roa
File: yHDz_dgw2HNuVtS7NpKaJLAB8-Y.roa (raw, json)
Hash identifier: +cBZOUimuRqIk7jDWcn04PYJ9cM7ifN5PFGvV7TP168=
Subject key identifier: C8:70:F3:FD:D8:30:D8:73:6E:56:D4:BB:36:92:9A:24:B0:01:F3:E6
Certificate issuer: /CN=3d555102998184fda7c3012e861900948fcf2773
Certificate serial: 01999F19A8027DC16D7A8412606E063832AC
Authority key identifier: 3D:55:51:02:99:81:84:FD:A7:C3:01:2E:86:19:00:94:8F:CF:27:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PVVRApmBhP2nwwEuhhkAlI_PJ3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/2733ce-e9b9-4ab9-950c-c28bda230cb4/1/yHDz_dgw2HNuVtS7NpKaJLAB8-Y.roa
Signing time: Wed 01 Oct 2025 09:28:02 +0000
ROA not before: Wed 01 Oct 2025 09:28:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211717
IP address blocks: 45.144.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/2733ce-e9b9-4ab9-950c-c28bda230cb4/1/PVVRApmBhP2nwwEuhhkAlI_PJ3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/2733ce-e9b9-4ab9-950c-c28bda230cb4/1/PVVRApmBhP2nwwEuhhkAlI_PJ3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/PVVRApmBhP2nwwEuhhkAlI_PJ3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:9f:19:a8:02:7d:c1:6d:7a:84:12:60:6e:06:38:32:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d555102998184fda7c3012e861900948fcf2773
Validity
Not Before: Oct 1 09:28:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c870f3fdd830d8736e56d4bb36929a24b001f3e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:77:65:33:ff:be:3c:ff:4e:57:a6:8c:29:3b:
81:a5:03:98:90:bf:e1:a5:19:20:d0:ff:e9:5b:b1:
17:5c:39:a2:8c:f1:ee:62:16:2b:83:6a:32:7d:92:
20:3f:f7:45:bd:94:a3:9e:f3:16:08:84:2b:3e:50:
1b:46:4e:d2:b7:e4:7d:87:51:68:78:02:01:b3:74:
46:4c:51:f8:5c:b0:c6:4e:ac:d5:f7:f8:91:50:39:
65:97:06:23:5c:bb:8a:6b:7e:8e:bf:18:1f:2f:96:
d8:a1:1d:10:7d:dd:88:06:e0:64:91:1f:9c:a5:80:
70:e2:f8:09:3f:f2:21:b6:2c:9a:c7:33:77:f0:26:
80:04:77:0b:68:93:b5:41:cd:5b:6d:e3:40:a6:5f:
3d:9d:d4:b5:2c:2b:61:0c:78:74:a6:14:e3:75:8d:
37:1c:94:13:0b:77:23:49:14:49:bc:c1:3b:9b:54:
ed:04:53:ff:55:01:d1:7b:df:e7:d6:dc:cc:70:3d:
3a:de:ae:e7:8a:41:f8:e4:04:60:16:da:32:01:45:
8e:18:8e:83:6c:36:bb:3f:95:fe:b1:c2:02:e2:1e:
a3:26:a2:8f:9b:1f:36:0d:f3:02:78:11:90:1e:54:
bb:bd:ca:be:ef:e1:54:41:d3:31:19:a0:44:30:1b:
9d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:70:F3:FD:D8:30:D8:73:6E:56:D4:BB:36:92:9A:24:B0:01:F3:E6
X509v3 Authority Key Identifier:
keyid:3D:55:51:02:99:81:84:FD:A7:C3:01:2E:86:19:00:94:8F:CF:27:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PVVRApmBhP2nwwEuhhkAlI_PJ3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/2733ce-e9b9-4ab9-950c-c28bda230cb4/1/yHDz_dgw2HNuVtS7NpKaJLAB8-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/2733ce-e9b9-4ab9-950c-c28bda230cb4/1/PVVRApmBhP2nwwEuhhkAlI_PJ3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.231.0/24
Signature Algorithm: sha256WithRSAEncryption
06:0b:d5:be:3a:63:1b:51:cc:15:45:90:25:c4:b6:fd:2c:8a:
b1:ca:0e:44:1b:03:73:b8:4d:e4:18:6c:af:d0:8e:fd:e1:fe:
b0:cc:45:41:0d:67:9f:83:10:52:c7:49:a9:08:b4:37:3a:97:
cc:80:2f:fe:3a:de:f7:c5:b2:19:62:a2:6a:07:d1:7f:5a:4c:
7a:84:1b:c0:41:7c:a0:20:b0:a3:4c:54:98:dd:2f:14:65:6f:
42:92:d8:dc:cf:fa:33:a8:1e:66:0b:4a:82:d1:22:ec:f5:34:
d0:62:28:f3:43:39:5f:22:f2:23:ed:93:4f:6d:eb:73:57:64:
aa:bc:28:56:31:94:54:d2:18:c0:98:13:7b:1e:fc:64:3f:14:
ea:8d:4e:e0:03:a0:40:9e:c2:84:7c:dd:ba:95:d4:54:93:15:
e3:35:d1:70:11:6d:d1:95:18:d0:df:b8:33:f7:fc:9b:fd:b9:
e5:12:5a:d8:67:70:8a:d1:89:a1:a4:55:89:03:1f:3e:d3:c2:
4e:2a:ba:4c:ee:a6:9b:cb:d5:64:0b:fa:df:a2:97:ea:8e:24:
fa:1b:82:11:b4:1f:cb:1e:b5:29:6b:19:ad:f3:20:97:75:e1:
5c:f5:2d:0b:24:0d:c3:19:0f:79:d5:90:c0:ca:81:61:39:d7:
65:e5:52:7e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZmfGagCfcFteoQSYG4GODKsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkNTU1MTAyOTk4MTg0ZmRhN2MzMDEyZTg2MTkwMDk0OGZj
ZjI3NzMwHhcNMjUxMDAxMDkyODAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjODcwZjNmZGQ4MzBkODczNmU1NmQ0YmIzNjkyOWEyNGIwMDFmM2U2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ndlM/++PP9OV6aMKTuBpQOYkL/h
pRkg0P/pW7EXXDmijPHuYhYrg2oyfZIgP/dFvZSjnvMWCIQrPlAbRk7St+R9h1Fo
eAIBs3RGTFH4XLDGTqzV9/iRUDlllwYjXLuKa36OvxgfL5bYoR0Qfd2IBuBkkR+c
pYBw4vgJP/IhtiyaxzN38CaABHcLaJO1Qc1bbeNApl89ndS1LCthDHh0phTjdY03
HJQTC3cjSRRJvME7m1TtBFP/VQHRe9/n1tzMcD063q7nikH45ARgFtoyAUWOGI6D
bDa7P5X+scIC4h6jJqKPmx82DfMCeBGQHlS7vcq+7+FUQdMxGaBEMBudNwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMhw8/3YMNhzblbUuzaSmiSwAfPmMB8GA1UdIwQY
MBaAFD1VUQKZgYT9p8MBLoYZAJSPzydzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFZWUkFwbUJoUDJud3dFdWhoa0FsSV9QSjNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8yNzMzY2UtZTliOS00YWI5LTk1MGMt
YzI4YmRhMjMwY2I0LzEveUhEel9kZ3cySE51VnRTN05wS2FKTEFCOC1ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC8yNzMzY2UtZTliOS00YWI5LTk1MGMtYzI4YmRhMjMwY2I0
LzEvUFZWUkFwbUJoUDJud3dFdWhoa0FsSV9QSjNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZDnMA0G
CSqGSIb3DQEBCwUAA4IBAQAGC9W+OmMbUcwVRZAlxLb9LIqxyg5EGwNzuE3kGGyv
0I794f6wzEVBDWefgxBSx0mpCLQ3OpfMgC/+Ot73xbIZYqJqB9F/Wkx6hBvAQXyg
ILCjTFSY3S8UZW9Cktjcz/ozqB5mC0qC0SLs9TTQYijzQzlfIvIj7ZNPbetzV2Sq
vChWMZRU0hjAmBN7HvxkPxTqjU7gA6BAnsKEfN26ldRUkxXjNdFwEW3RlRjQ37gz
9/yb/bnlElrYZ3CK0YmhpFWJAx8+08JOKrpM7qaby9VkC/rfopfqjiT6G4IRtB/L
HrUpaxmt8yCXdeFc9S0LJA3DGQ951ZDAyoFhOddl5VJ+
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:24:51 2025 by rpki-client