Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/dy-p251zL98DN5HbKp4vPRlxutc.roa
File: dy-p251zL98DN5HbKp4vPRlxutc.roa (raw, json)
Hash identifier: 4pwGuhrYIr/OJxEBN4t0YB3KYavBF0QhnyAv6oyh4DA=
Subject key identifier: 77:2F:A9:DB:9D:73:2F:DF:03:37:91:DB:2A:9E:2F:3D:19:71:BA:D7
Certificate issuer: /CN=36f1d5676bdd704334b2db34ca904d77cdd2baca
Certificate serial: 01997C896769695F1BEE96F951EE74A5E088
Authority key identifier: 36:F1:D5:67:6B:DD:70:43:34:B2:DB:34:CA:90:4D:77:CD:D2:BA:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NvHVZ2vdcEM0sts0ypBNd83Suso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/dy-p251zL98DN5HbKp4vPRlxutc.roa
Signing time: Wed 24 Sep 2025 16:23:23 +0000
ROA not before: Wed 24 Sep 2025 16:23:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50599
IP address blocks: 89.40.144.0/22 maxlen: 22
91.204.160.0/23 maxlen: 23
91.204.162.0/24 maxlen: 24
91.236.52.0/24 maxlen: 24
91.236.54.0/23 maxlen: 23
128.0.54.0/24 maxlen: 24
185.11.128.0/22 maxlen: 22
185.72.196.0/22 maxlen: 22
185.170.104.0/22 maxlen: 22
188.210.220.0/22 maxlen: 22
193.105.125.0/24 maxlen: 24
195.177.216.0/24 maxlen: 24
195.177.217.0/24 maxlen: 24
2a02:e7c0::/29 maxlen: 29
2a0b:5480::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.mft
rsync://rpki.ripe.net/repository/DEFAULT/NvHVZ2vdcEM0sts0ypBNd83Suso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:7c:89:67:69:69:5f:1b:ee:96:f9:51:ee:74:a5:e0:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36f1d5676bdd704334b2db34ca904d77cdd2baca
Validity
Not Before: Sep 24 16:23:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=772fa9db9d732fdf033791db2a9e2f3d1971bad7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:af:e6:f3:64:14:79:d4:88:78:ea:d3:48:07:
e0:b6:12:46:82:bf:81:d5:bb:d2:bb:40:9e:4a:c3:
a6:a8:26:3c:bd:44:86:76:e8:50:94:dd:a4:b3:4d:
e4:70:bf:c8:0d:ad:85:ac:7a:90:3c:0d:9d:a6:68:
b2:9e:cc:c9:f9:1b:93:84:46:40:60:4c:e0:83:b3:
4e:7b:a6:00:85:60:5e:f5:46:79:a3:da:88:62:75:
ae:40:94:a1:94:4f:b1:8b:2a:4c:13:2d:94:ee:ba:
4c:d9:08:59:56:cb:73:cc:2a:ed:f6:ce:6e:5d:c2:
22:8b:29:e6:e3:9c:42:a8:82:29:dd:cd:2f:fd:a2:
25:a0:4c:f9:21:8b:9b:71:44:81:6e:13:7f:b8:9c:
08:1d:69:d2:c4:18:7e:16:80:97:aa:45:e7:b5:08:
18:c5:c7:71:4f:d4:80:68:83:b3:8e:11:0f:b3:3f:
5b:47:1d:e8:75:e8:c6:7e:60:ae:4e:2f:2f:ac:de:
9d:df:96:e0:7b:e9:a5:da:25:d6:0e:e9:23:6c:c7:
f8:97:1e:f9:5d:9c:e1:e1:d0:5d:98:84:b7:3e:40:
4f:09:c0:aa:2d:9a:a1:66:31:e6:d5:78:70:5f:97:
8a:10:1a:cd:ed:fd:b8:5e:5d:4c:f9:3e:6e:89:10:
68:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:2F:A9:DB:9D:73:2F:DF:03:37:91:DB:2A:9E:2F:3D:19:71:BA:D7
X509v3 Authority Key Identifier:
keyid:36:F1:D5:67:6B:DD:70:43:34:B2:DB:34:CA:90:4D:77:CD:D2:BA:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NvHVZ2vdcEM0sts0ypBNd83Suso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/dy-p251zL98DN5HbKp4vPRlxutc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.40.144.0/22
91.204.160.0-91.204.162.255
91.236.52.0/24
91.236.54.0/23
128.0.54.0/24
185.11.128.0/22
185.72.196.0/22
185.170.104.0/22
188.210.220.0/22
193.105.125.0/24
195.177.216.0/23
IPv6:
2a02:e7c0::/29
2a0b:5480::/29
Signature Algorithm: sha256WithRSAEncryption
33:68:e4:5a:35:6c:65:12:23:2e:eb:f2:ff:bc:7f:63:28:86:
70:a4:ed:7b:3d:02:f3:51:5a:3c:0c:91:8d:21:ec:a0:6f:f3:
84:9f:08:59:f2:10:65:84:33:03:18:0f:ff:08:c8:ec:80:5b:
be:b4:44:97:61:ae:4a:3b:13:38:5e:e7:7c:ed:ed:7b:2f:f0:
98:04:55:72:80:39:b3:8a:51:70:38:10:bc:7b:75:fa:46:15:
4c:a3:49:6b:26:31:ca:7b:a4:78:7e:a5:2e:fe:78:1e:97:bc:
5d:1e:48:d2:d7:91:a8:69:ad:dc:6a:5b:b0:7f:50:f1:ca:d5:
71:89:74:2a:59:9d:e8:de:98:d7:3f:45:92:66:82:8c:54:58:
76:b4:b8:05:06:79:40:d7:bd:84:a2:40:d4:2d:cc:9f:09:ce:
b3:e9:60:82:e6:37:76:6e:d4:b8:55:1f:81:3a:42:1b:0b:9b:
da:63:3e:f0:c5:84:a6:94:eb:99:b4:c3:a5:eb:98:8f:e7:fe:
01:85:8d:9f:c4:a9:06:9f:ee:1d:6b:40:5e:8f:bb:2c:18:65:
fe:d3:31:9c:17:6b:b4:e0:fb:b6:27:5c:11:e2:53:ef:e5:e7:
ae:28:ec:eb:16:ae:c9:c0:3d:62:9d:69:f4:59:99:f7:a9:12:
7a:39:44:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:03:50 2025 by rpki-client